Privacy Policy
MoraeGames (hereinafter referred to as "the Company") makes every effort to protect the
valuable personal information of data subjects (hereinafter referred to as “Users”) and
complies with the relevant personal information protection regulations required for
information and communication service providers, such as the Act on Promotion of
Information and Communications Network Utilization and Information Protection, the
Protection of Communications Secrets Act, and the Telecommunications Business Act.
Through this Privacy Policy, the Company informs Users of the purposes for which their
personal information is collected and used, as well as the measures taken by the Company to
protect that information. This Privacy Policy is disclosed on the main page of the Company’s
website so that Users can access it at any time. Users are encouraged to check the content
frequently when visiting the website. The Company’s Privacy Policy includes the following
content:
1. Consent to the Collection and Use of Personal Information
The Company obtains consent for the collection and use of personal information from Users
who use the Company’s website or mobile game services, as specified in '2. Items and
Methods of Personal Information Collection.' The collected information may be provided to
external companies for limited periods for purposes such as processing delegation.
2. Items and Methods of Personal Information Collection
The Company only collects essential personal information required to provide game services.
However, to provide better game services, the Company may collect some optional
information after obtaining separate consent from Users.
A. Items of Personal Information Collected
1) When Users use mobile game services, the following information is collected:
- When using a Google account: public profile (name), email address
- When using an Apple account: public profile (name), email address
* No other personal information is stored when signing up through external platform
authentication.
2) When Users participate in the Company’s events, the following additional personal
information may be collected:
- (When participating in events) Member ID, nickname, email address
- (When winning an event) Phone number and address for prize delivery
- (When levying taxes and public charges) Name, address, resident registration number,
postal code, etc.
In these cases, separate consent will be obtained from Users.
3) The following information may be automatically generated and collected during theservice use or business process:
- Game usage records, access records, cookie information, IP information, authentication
records, payment records, suspension records, mobile device information (telecom company
information, device information, country information (MCC)), advertising identifier information
(ADID, IDFA)
4) When Users use paid services, the following information may be additionally collected:
- When paying through the open market: Open market ID, open market nickname, payment
approval number
- When paying through ARS: Telecom company information, phone number, payment
approval number
5) When consulting through 1:1 inquiries via the customer center, the following information
may be additionally collected:
- Email address, nickname, member ID, mobile device information (device name, OS version)
B. Methods of Collecting Personal Information
1) The Company may collect personal information through the following methods:
A) 1:1 inquiry consultation via the customer center, participation in prize events, cash
purchases
B) Mobile game authentication or commercial event participation
3. Purpose of Using Personal Information
The purposes for which the Company uses the collected personal information are as follows:
A. Purpose of Using Information Collected During Mobile Game Use
- Fulfillment of the game service provision contract and payment settlement, customer
management and fraud prevention, preparation of statistical data for the development of
new services, use in marketing or advertising
B. Purpose of Using Automatically Generated and Collected Information
- Development or specialization of new services, provision of services according to
demographic characteristics, advertisement placement, service usage statistics, handling
complaints related to disputes or user dissatisfaction, restrictions on the use of malicious
users
C. Purpose of Using Information Collected During the Use of Paid Services
- Identity verification and payment information confirmation
D. Purpose of Using Legal Guardian Information
- Confirmation of legal guardian consent for the collection of personal information of
children under the age of 14
4. Provision or Sharing of Personal Information with Third PartiesThe Company does not share or provide Users' personal information to institutions,
organizations, or business partners (hereinafter referred to as "Third Parties") without prior
consent. However, if Users give prior consent or if the submission obligation arises in
accordance with relevant laws such as the "Act on Promotion of Information and
Communications Network Utilization and Information Protection," exceptions are made for
national institutions or investigative agencies. If the Company deems it necessary to provide
Users' personal information to third parties for better service provision, the Company will
inform Users of the third party, the required personal information, the reason for providing it,
and the period during which it will be provided and managed. Consent will be obtained from
Users following a separate consent procedure.
5. Entrustment of Personal Information Processing
The Company directly manages the collected personal information to securely protect Users'
personal information. However, for better convenience in providing game services, some
personal information processing may be outsourced.
1) When entering into an outsourcing contract, the Company takes necessary measures to
ensure the personal information is protected securely in accordance with Korean law and the
internal policy of MoraeGames.
2) If the details of the outsourcing work or the entrusted party change, the Company will
notify Users of the changes through this Privacy Policy and obtain separate consent.
6. Overseas Transfer of Personal Information
To provide an improved gaming environment and protect Users' personal information from
physical and environmental threats such as earthquakes, floods, or fires, the collected
personal information is transferred overseas for storage. The transferred information is used
solely for the purpose of providing game services and is managed securely.
7. Retention and Use Period of Personal Information
The Company retains and uses Users' personal information for the period consented to by
Users. In principle, personal information is destroyed without delay when the purpose of
collection and use is achieved or when the retention period expires. However, in cases where
consent for collection and use is withdrawn due to membership withdrawal or other reasons,
or when protection of victims is necessary due to identity theft, the information may be
retained for up to 14 days for internal settlement processing or damage recovery. If linked
with other services, it may be retained for up to 30 days before being completely destroyed
in a non-recoverable manner. Additionally, for long-term inactive users (those with no login
history for one year since the last login), personal information will be securely stored or
destroyed. In such cases, Users will be notified 30 days in advance about the expiration of
the personal information retention period and the specific personal information items to behandled. Users wishing to continue using the game services should log in again within one
year of the last login. If retention of personal information is required for other reasons, Users'
consent will be obtained.
If retention is required by law, the following personal information retention periods will be
observed:
A. Retention Necessary by Relevant Laws
1) Records on display and advertisement:
- Legal Basis: Act on Consumer Protection in Electronic Commerce
- Retention Period: 6 months
2) Records on contracts or withdrawal of subscriptions:
- Legal Basis: Act on Consumer Protection in Electronic Commerce
- Retention Period: 5 years
3) Records on payment and supply of goods:
- Legal Basis: Act on Consumer Protection in Electronic Commerce
- Retention Period: 5 years
4) Records on consumer complaints or dispute resolution:
- Legal Basis: Act on Consumer Protection in Electronic Commerce
- Retention Period: 3 years
5) Records on login and service use:
- Legal Basis: Protection of Communications Secrets Act
- Retention Period: 3 months
B. Retention for Judicial or Other User Protection Needs (Unfair Service Use or Users Causing
Issues)
- Retention Period: 1 year
C. Retention for Event and Marketing Purposes
- Retention Purpose: Selection of event winners and event progress
- Retention Period: Up to 3 months (period may vary by event, as specified on individual
event pages)
D. Retention of ID Copy for Membership Proof
- Retention Period: None (destroyed immediately after verification)
If the personal information needs to be retained beyond these periods, User consent will be
obtained.
8. Procedures and Methods of Destroying Personal Information
The Company destroys personal information without delay once the purpose of collection
and use has been achieved. The procedures and methods for destruction are as follows:
A. Destruction Procedure
- After the purpose is achieved, personal information is retained for a certain periodaccording to internal policies and relevant laws (refer to 7. Retention and Use Period of
Personal Information) before being destroyed.
B. Destruction Methods
- In the case of printed documents: shredding or incineration
- In the case of electronic files: complete deletion using technical methods that prevent
restoration
9. Rights and Exercise Methods of Users and Legal Guardians
Users and legal guardians of children under the age of 14 (hereinafter referred to as
“Children”) have the right to access, correct, or withdraw consent for the collection and use
of their personal information at any time. Consent withdrawal can be done by selecting
membership withdrawal or account deletion in the game settings or through the customer
center (1:1 inquiry). However, if personal information is destroyed due to membership
withdrawal, information generated or accumulated while using the Company's game services
may also be destroyed.
If the company collects personal information from children, it will obtain consent from the
legal guardian. The collected guardian information is used solely to verify actual consent or
to process requests for access, correction, or deletion of the child’s personal information.
When a guardian directly visits the company to request access or correction of personal
information, the company may require proof of the guardianship.
If the company has justifiable reasons to refuse the user’s request for access or correction of
all or part of their personal information, it will notify the user and explain the reason.
10. Information on the Installation, Operation, and Rejection of Automatic Personal
Information Collection Devices
The company may use 'cookies' to store and retrieve user information to provide
personalized services or improve convenience.
A. What are cookies?
1) Cookies are small text files sent by the server used to operate the website to the user's
browser and stored on the user’s hard disk. When a user visits the company's website, the
website server reads the content of the cookies stored on the user's hard disk to maintain
the user’s settings and provide personalized services.
B. Installation and operation of cookies
1) Users can choose to allow all cookies, go through confirmation each time a cookie is
stored, or refuse all cookies by changing options in their web browser. However, if cookie
storage is refused, some services provided by the company may be restricted.
C. How to reject cookie settings
1) For Internet Explorer:- Select “Tools” from the web browser’s menu -> “Internet Options” -> “Privacy” tab ->
Change the cookie settings.
2) For Chrome:
- Select “Customize and control Chrome” on the top right -> “Settings” -> “Advanced” at the
bottom -> “Content settings” in the “Privacy and security” section -> Set cookie blocking in
“Cookies”.
11. Consent and Withdrawal of Game App Access Permissions
When providing game services, if the company needs access permissions for information and
functions on the user’s smartphone, it will clearly inform the user of the required access
items and reasons, and obtain the user’s consent by distinguishing between mandatory and
optional access permissions. Users can use the game service without agreeing to optional
access permissions, and this will be notified during game app installation.
Users can withdraw or reset previously agreed access permissions at any time through the
consent withdrawal feature provided by the smartphone operating system. Deleting the app
for the purpose of withdrawing access permissions does not delete the user’s account; to
terminate the game service, please withdraw through customer support.
12. Analysis of Service Usage Records
The company uses advertising identifiers and analysis software to provide more useful and
relevant services to users. Advertising identifiers, such as Android Ad ID and Apple
Advertising ID, are values that cannot directly identify individuals. Users can change their
device settings to refuse the use of advertising identifiers based on interests, and these
identifiers are not used to identify individuals. Analysis software is used solely to analyze
information automatically generated when users visit the website or use mobile game
services, and users can refuse this.
A. How to refuse the collection of advertising identifiers
- Android: [Settings -> Google -> Ads] or [Settings -> General -> Accounts & sync ->
Google -> Privacy -> Ads settings]
- iOS: [Settings -> Privacy -> Ads]
13. Technical, Managerial, and Physical Protection Measures for Personal Information
The company takes the following technical, managerial, and physical measures to prevent
loss, theft, leakage, alteration, or damage of personal information.
A. Technical protection measures
1) The company stores passwords and unique identifiers entered by users during
membership registration in an encrypted format. Only the user can know and change their
encrypted password and unique identifier.2) The company encrypts communication sections inside and outside the company to safely
transmit personal information over the network.
3) Unauthorized external access is controlled through an intrusion prevention system, and
internal personal information leakage is monitored through an internal information leakage
prevention system.
4) The company checks the abnormality of access logs to the personal information
processing system monthly and takes necessary actions.
5) The company regularly backs up personal information to prepare for emergencies and
makes every effort to prevent unauthorized leakage or alteration of personal information due
to hacking or viruses.
B. Managerial protection measures
1) The company minimizes the personnel and access rights to personal information and limits
access to the personal information processing system to personal information processors
only.
2) The company regularly conducts personal information protection training for employees
and subcontractors to emphasize the importance of personal information protection and
compliance with the personal information processing policy.
3) The company strives to immediately correct and rectify any issues found by verifying the
implementation of the personal information processing policy and the compliance of the
person in charge through an internal personal information protection dedicated organization.
C. Physical protection measures
1) When documents containing personal information need to be printed and stored for a
certain period, they are kept in a secure place with a lock.
2) The company has transferred the personal information processing system to a cloud
environment to fundamentally block unauthorized physical access.
However, the company is not responsible for problems caused by the user’s negligence, such
as device loss, despite fulfilling its personal information protection obligations.
14. Personal Information Protection Officer or Department
The company has designated the following personal information protection officer to handle
complaints or difficulties related to the user’s personal information.
Name: Myeongjin Song
Email: moraedeveloper@gmail.com
Users can report all personal information-related complaints arising from using the
company’s services to the personal information protection officer or department. The
company will promptly and sufficiently respond to the reported matters.
For further reporting or consultation on personal information infringement, please contact
the following institutions:- Personal Information Infringement Report Center (http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Division (http://www.spo.go.kr)
- Cyber Safety Bureau of the National Police Agency (http://cyberbureau.police.go.kr)
15. Obligation to Notify
If there are any changes to relevant laws or company internal policies, we will notify users of
the changes and reasons through the game blog and game website at least 7 days before
the change. If there are significant changes to user rights, we will notify at least 30 days in
advance.
16. Miscellaneous
The company may provide links to other companies’ websites or materials to users. In such
cases, the company has no control over the external sites and materials and cannot be
responsible or guarantee the usefulness, truthfulness, or legality of the services or materials
provided by them. If users click the links to move to other sites, the privacy policy of the
newly visited site is unrelated to the company, so please check the policy of the new site.
Supplementary Provisions
This policy is effective from August 3, 2024.