Privacy Policy

BPMG Co., Ltd. (hereinafter referred to as the "Company") collects and uses personal information from users who access the Company's website or mobile game services. Users are requested to consent to the collection and use of personal information specified in Section 2. The collected information may be provided to external service providers for processing or service operation purposes for a limited period of time.

The Company collects only the minimum personal information necessary to provide game services.

A. Personal Information Collected

When using the game service through platforms such as Google, Facebook, or Apple:

• Required: Email address, Nickname, User identification information provided by the platform

Information collected when participating in events:

• Member ID, Nickname, Email address
• (Prize winners) Phone number, Delivery address
• (Tax reporting) Name, Address, Resident registration number, Postal code

Automatically collected information:

• Game usage records, Login records, Cookie data, IP address, Authentication logs, Payment records, Account suspension history, Mobile device information, Advertising identifiers (ADID, IDFA)

When using paid services:

• Open Market account ID, Nickname, Payment approval number
• ARS payments: Mobile carrier information, Phone number, Payment approval number

B. Methods of Collection

• Customer support inquiries, Participation in events or promotional campaigns
• Purchase of game currency or paid services, Authentication when using mobile game services

• Execution of service agreements and payment processing, Customer management and prevention of fraudulent use
• Statistical analysis for new service development, Marketing and advertising
• Service provision based on demographic characteristics, Analysis of service usage frequency
• Handling disputes or complaints, Restriction of abusive users
• Paid services: Identity verification and payment confirmation
• Verification of parental consent for children under 14

The Company does not share or provide personal information to external organizations or business partners without prior user consent. Exceptions apply when the user has provided prior consent or when disclosure is required by law.

The Company directly manages collected personal information. As of the effective date of this Privacy Policy, the Company does not outsource personal information processing to external service providers. If outsourcing becomes necessary, the Company will disclose details in accordance with applicable laws.

The Company stores personal information on overseas cloud servers to provide a stable game environment and protect data from physical threats.

• Destination Country: United States
• Transfer Method: Encrypted network transmission
• Recipient: Amazon Web Services, Inc.
• Purpose: Cloud server operation and management
• Retention Period: Until the purpose of personal data processing is achieved

The Company retains personal information only for the period necessary to achieve the purposes for which it was collected. When the purpose has been fulfilled, personal information will be promptly destroyed.

Retention periods required by law:

• Records related to advertising and labeling: 6 months
• Records related to contracts or withdrawals: 5 years
• Records of payments and supply of goods: 5 years
• Records of consumer complaints or dispute resolution: 3 years
• Service usage logs: 3 months

• Destruction Procedure: Information retained per internal policies and laws, then destroyed
• Destruction Methods: Printed documents shredded or incinerated; electronic files permanently deleted using technical methods that prevent recovery

Users and legal guardians of children under 14 may access personal information, request correction, or withdraw consent for data collection. Requests may be made through account deletion in game settings or customer support inquiries.

The Company may use cookies to provide customized services. Users may allow or block cookies through browser settings. However, blocking cookies may limit certain service features.

The Company distinguishes between required and optional permissions. Users may withdraw permission at any time through smartphone settings. Deleting the app does not automatically delete the account.

The Company uses advertising identifiers such as ADID and IDFA and analytics tools to improve services. Users may disable interest-based advertising in Android or iOS device settings.

The Company protects user information through data encryption, encrypted network communication, intrusion prevention systems, access log monitoring, regular backups, access control policies, and employee privacy protection training.

Privacy complaints: Personal Information Infringement Report Center (118), Personal Information Dispute Mediation Committee (+82-1833-6972), Supreme Prosecutors' Office (+82-1301), National Police Agency (+82-182)

If changes are made to this Privacy Policy, users will be notified through service announcements at least 7 days in advance (30 days for significant changes).

The Company may provide links to external websites. The Company is not responsible for the privacy policies of external websites.