Privacy | PEPPERCON INC

[Privacy Policy]

Peppercon Inc. (hereinafter referred to as the “Company”) values the personal information of its users and takes measures to protect their personal information by complying with the Personal Information Protection Act of the Republic of Korea and other relevant laws and regulations.

The Company discloses its Privacy Policy on the first screen of its website so that users can easily view it at any time. Through this Privacy Policy, the Company informs users of how their personal information is processed, for what purposes, and what measures the Company takes to protect their personal information as follows.

1. Items of Personal Information Processed

The Company processes the minimum personal information necessary to provide services.

1) Items of Personal Information Collected

Membership Registration: Identifiers for Google and Apple account linkage
Customer Inquiries: [Required] Email address, [Optional] Specifications of mobile phone and mobile device
Account Transfer: Identifiers for Google and Apple account linkage (when converting a guest account to a regular account)
Game Service Provision (During Gameplay): Information collected from Google Play Games and Apple Game Center, access records, service usage records, payment records, device information, consultation information, and other information generated during service usage

2) Methods of Personal Information Collection

Collection through official communities, written forms, fax, telephone, email, event participation, delivery requests, service usage, provision according to service alliances and affiliations, collection through generated information collection tools, and collection through survey tools.

2. Purposes of Personal Information Processing

The Company uses personal information for the purposes of member management, service provision and improvement, etc., as described below.

1) Member and Guest Management

Identity verification based on service usage, confirmation of membership intention, personal identification, age verification, handling of complaints and delivery of notices, record retention for dispute resolution, prevention of fraudulent use by bad members and unauthorized use, and confirmation of duplicate membership registration.

2) Service Provision

Fulfillment of contracts related to service provision, provision of various services of the Company and fee settlement according to service provision, provision of content, delivery of goods or invoices, personal authentication, purchase and payment of fees, and fee collection.

3) Use for Service Improvement and Marketing, etc.

Problem solving for optimized service provision, research, analysis and service development, development and specialization of new services (products), delivery of promotional information such as events, identification of access frequency or statistics on service usage, and provision of customized services and advertisement placement based on demographic characteristics.

3. Processing and Retention Period of Personal Information

In principle, the Company destroys personal information without delay after the purpose of processing personal information is achieved. However, if there is a need to preserve it for a period prescribed by relevant laws or with the user's consent, it will be preserved for that period.

1) In principle, user's personal information is destroyed without delay when the purpose of collection or provision of personal information is achieved. However, the company keeps personal information for a maximum of 30 days after the membership withdrawal request for the purpose of resolving consumer complaints and disputes such as unwanted membership withdrawal due to personal information theft, etc., and then destroys it by an irrecoverable method.

2) If it is necessary to preserve it in accordance with the provisions of relevant laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, etc., the Company retains user information for a certain period prescribed by relevant laws. In this case, the Company uses the retained information only for the purpose of its retention, and the retention period is as follows:

Records on contracts or withdrawal of offers: 5 years (Act on Electronic Commerce)
Records on payment of fees and supply of goods, etc.: 5 years (Act on Electronic Commerce)
Records on handling consumer complaints or disputes: 3 years (Act on Electronic Commerce)
Records on labeling or advertising: 6 months (Act on Electronic Commerce)
Website visit records: 3 months (Protection of Communications Secrets Act)

3) If the retention period is notified to the user in advance or the user's consent is obtained individually, it will be retained for the notified or individually consented period.

4. Provision of Personal Information to Third Parties

The Company does not provide users' personal information to external parties except when users consent in advance or when prescribed by law.

1) The Company uses users' personal information within the scope notified in this Privacy Policy and does not provide it to external parties. However, exceptions are made in the following cases:

When the user consents in advance
When there is a request from an investigative agency in accordance with the provisions of relevant laws or for investigative purposes in accordance with the procedures and methods prescribed by law
When it is necessary for statistical compilation, academic research, or market research, and it is provided in a form that does not identify a specific individual

2) If personal information is provided after the user's consent, the Company will notify you of the current status through this Privacy Policy.

5. Destruction of Personal Information

When personal information becomes unnecessary, such as when the personal information retention period expires or the purpose of processing is achieved, the Company destroys the personal information without delay by an irrecoverable method. The procedure and method for destroying personal information are as follows:

Destruction Procedure

When the purpose of processing the information entered by the user for service registration, etc., is achieved, the Company stores it for a certain period according to the information protection reasons under this Privacy Policy and related laws and then destroys it without delay.

Destruction Method

Personal information printed on paper is destroyed by shredding or incineration.
Personal information stored in electronic file format is deleted using a technical method that does not allow records to be reproduced.

6. Rights and Obligations of Users and Legal Representatives and How to Exercise Them

The Company protects the rights of users and legal representatives.

1) Users can check, view, or modify their registered personal information at any time, and can also request to terminate their membership or delete their personal information if they do not agree to the Company's processing of personal information. However, if personal information essential for service provision is deleted, you may not be able to receive all or part of the relevant services.

2) In accordance with item 1) above, users can directly request to view and modify their personal information to the Company, and can terminate the service contract at any time through [Membership Withdrawal] in the game. When terminated, all personal information of the user is deleted, but if the relevant laws stipulate a retention period in accordance with Article 3 of this Privacy Policy, it will be retained for that period. In addition, users can request this through 1:1 inquiries in the service or through the contact information in Article 9 of this Privacy Policy.

3) If a user requests correction or deletion of their personal information, the Company takes necessary measures without delay after verifying their identity.

4) Viewing and modifying personal information is possible after verifying the identity of the person or the legal representative of a child under the age of 14.

5) If you request correction of an error in your personal information, the Company will not use or provide the personal information until the correction is completed. Also, if incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction processing results without delay so that the correction can be made.

6) The Company processes personal information that has been terminated or deleted at the user's request in accordance with Article 3 “Processing and Retention Period of Personal Information” of this Privacy Policy, and processes it so that it cannot be viewed or used for other purposes.

7. Matters Concerning the Installation and Operation of Automatic Personal Information Collection Devices and Their Refusal

1) The Company operates cookies (connection information files), which store and retrieve users' personal information from time to time, to provide users with specialized, personalized, and customized services. Cookies are small amounts of information (text files) sent by a website server to a user's browser or app and stored on the user's computer or other device. In connection with cookie operation, the Company identifies the user's computer and mobile phone, but does not personally identify the user.

2) Users have the right to choose whether to install cookies. Members can allow all cookies, be asked for confirmation each time a cookie is stored, or refuse to store all cookies by selecting options in their web browser or by setting options in their mobile device settings or options. However, if you refuse to store all cookies, you cannot use the services provided by the Company through cookies.

[Browser Setting Method]

Internet Explorer: Select Tools menu > Select Internet Options > Click Privacy tab > Determine privacy level
Edge: Settings menu on the right side of the web browser > Cookies and site permissions > Manage and delete cookies and site data
Chrome: Settings menu on the right side of the web browser > Show advanced settings at the bottom of the screen > Privacy and security > Cookies and other site data
Firefox: Select Options menu > Select Privacy > Custom settings for browsing history > Set cookie level
Safari: Select Preferences menu > Select Privacy tab > Set cookie and website data level

3) The Company collects and uses users' advertising identifiers to provide more useful services by considering user characteristics.

Advertising identifiers are semi-permanent and non-personal identifiers, such as Android Advertising ID and Apple's ID for Advertising, and are not used to identify individuals.
Advertising identifiers can be analyzed based on the results of users' online usage behavior and access records, etc., and provided as online customized advertisements that consider user characteristics.
You can refuse use by changing the device settings, and you can reset it at any time.
① For Android, [Settings->Google>Ads] or [Settings->General->Accounts and sync-> Google->Privacy & Privacy->Ad settings]
② For iOS, [Settings->Privacy->Ads]

8. Measures to Ensure the Safety of Personal Information

The Company takes the following technical and administrative measures to ensure safety so that users' personal information is not lost, stolen, leaked, forged, altered, or damaged during the processing of users' personal information.

1) Technical Measures

Users' personal information is encrypted and cannot be known to anyone other than the user, and personal information verification and modification are only possible through the user's request or directly through the website.
In preparation for hacking and other external intrusions, the Company is currently using a device that blocks external intrusions to prevent users' personal information from being leaked, and controls attacks, hacking, and unauthorized access from the outside. In particular, the Company strives to equip all possible technical devices to secure system security, such as managing the server containing users' personal information separately without directly connecting it to the external Internet line.
The Company has a system to back up systems and data in case of an emergency.
The Company takes measures to prevent damage from computer viruses by using periodically updated antivirus programs.

2) Administrative Measures

The Company restricts access to users' personal information to a minimum number of people. The minimum number of people is as follows:
- ① Those who perform marketing work directly to users
- ② Personal information complaint processing department and personnel, etc., who perform personal information management work
- ③ Others who inevitably process personal information for business purposes
The Company conducts regular training on the acquisition of new security technologies and personal information protection obligations, etc., for employees who process personal information, and strives to immediately correct and rectify any problems found by checking the implementation of the Company's personal information protection policy and the compliance of personnel through the Company's internal personal information protection organization, etc.
The transfer of work between Company's personal information-related processors is carried out thoroughly in a secure state, and responsibility for personal information accidents after joining and leaving the company is clarified.
Company's personal information-related processing employees are limited to the person in charge, and a separate password is given for this purpose and renewed regularly, and compliance with the Company's personal information protection policy is always emphasized through frequent training for the person in charge.
The Company is not responsible for personal information leakage caused by user's own mistakes or inherent risks of the Internet. Users must properly manage their accounts and passwords to protect their personal information and are responsible for them.

9. Personal Information Protection Officer and Reception/Processing Department for Personal Information Access Requests, and Relief Methods for Infringement of Rights

The Company has a personal information protection officer to protect users' personal information and handle matters related to personal information. If you have any inquiries regarding personal information, please contact the personal information manager below.

Attn: [Operation Team]
501-2, B-dong, Pangyo InnoValley, 253 Pangyo-ro, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea
Email: [peppercon@peppercon.co.kr]

10. Link Sites

The Company may provide users with links to other companies' websites or materials. In this case, the Company has no control over external sites and materials, so this Privacy Policy does not apply, and the Company cannot be held responsible for or guarantee the usefulness of services or materials provided therefrom. If you click a link included by the Company and move to a page of another site, the privacy policy of that site is irrelevant to the Company, so please check the policy of the newly visited site.

11. Changes to the Privacy Policy

If there are additions, deletions, or modifications to the contents of this Privacy Policy, they will be notified through in-game notices or official communities at least 7 days before the revision, and important changes to user rights, such as collection and use of personal information and provision to third parties, will be notified at least 30 days in advance. However, if it is difficult to notify within the scheduled date for prior notification, it will be notified without delay.

This Privacy Policy is effective from March 27, 2025.