RHAON Entertainment Game Service Privacy Policy
RHAON Entertainment Co., Ltd. (hereinafter referred to as the “Company”) values the protection of users’ personal information and complies with applicable laws and regulations, including the Personal Information Protection Act. The Company establishes and discloses this Privacy Policy to inform users of how their personal information is used and managed, what measures are taken to protect such information, and to ensure that related complaints can be handled promptly and smoothly.
This Privacy Policy applies commonly to the mobile game services provided by the Company and all ancillary services directly or indirectly related thereto.
The Company collects only the minimum amount of personal information necessary for the use of its services, and through this Privacy Policy, informs users of the types of personal information collected, the purposes of use, the parties to whom such information is provided, and the methods of destruction. The Company also provides information regarding the purposes, legal basis, and retention period for collecting and using personal information. If the purpose of use changes, the Company shall take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
1. Items of Personal Information Collected
The Company supports various social login methods (e.g., Facebook, Google, Apple, Naver, etc., which refer to login integration features provided by platform operators that allow users to log in to the Company’s services), and collects the minimum personal information necessary at the time of initial service use through such social logins.
■ Required Information: Personal information collected to provide basic services
■ Optional Information: Personal information collected to provide additional services
Even if optional information is not provided, there are no restrictions on the use of basic game services; however, certain additional services that require such information (e.g., participation in events, provision of customized benefits, etc.) may be restricted.
The Company collects the following personal information through web pages, applications, email, written forms, and other methods.
Among the above personal information, some may be directly collected and processed by the Company; however, for the efficient operation of game services, such information may also be collected and processed through entrusted service providers, such as the GAMEPOT solution provided by NAVER Cloud Corp. and electronic payment service providers. In such cases, the Company enters into entrustment agreements in accordance with the Personal Information Protection Act and supervises and manages such entrusted parties.
Category | Purpose of Collection and Use | Required/ Optional | Items Collected | Retention Period |
Platform (Common) | User identification, | Required | Game service usage and access records, authentication records, payment records, records of improper use, game version, cookies, mobile phone and PC device information (model name, OS type and version, Android ID) | Until membership withdrawal (however, where a retention period is prescribed by applicable laws, such information shall be retained for such period) |
Membership registration/login linked with SNS account | Required | Public profile (name), email address, unique user ID, profile image, friends list (when friend invitation feature is provided) | ||
Apple | ||||
Events | Event participation | Optional | Email address, mobile phone number, email, SNS ID | Up to 1 year after the event ends and settlement is completed; may be retained longer in accordance with applicable laws |
Prize delivery | Required | Name, mobile phone number, address | ||
Tax processing (imposition of taxes and public charges) | Required | Name, resident registration number, address, bank account number, bank name, account holder name | Retained for 5 years from the date of completion of tax reporting and payment in accordance with relevant laws such as the Income Tax Act | |
Customer Support | User identification and contact | Required | Email address, account UID | Retained for 3 years from the date of completion of consultation (in accordance with applicable laws such as the Electronic Commerce Act) |
Payment/Refund | Required | Email address, purchase verification details, and in cases such as cancellation of payments made by minors or persons with disabilities, real name/family relationship verification and supporting documents | Retained for 5 years as records related to payment and supply of goods pursuant to the Act on Consumer Protection in Electronic Commerce | |
Customer inquiry consultation | Optional | Account ID, name, OS information, and other information necessary for consultation | Retained for 3 years from the date of completion of consultation (in accordance with the Act on Consumer Protection in Electronic Commerce) | |
Advertising and Marketing Use | Events and promotions | Required | Mobile phone number | Until withdrawal of consent or membership withdrawal (however, where a retention period is prescribed by applicable laws, such information shall be retained for such period) |
Verification of legal guardian consent | Required | Legal guardian information (mobile phone number) | Retained for 3 years after confirmation of consent (minimum period for dispute prevention); if separate retention is required by law, retained for such period | |
Information Automatically Collected During Internet Service Use | Optional | IP address, cookies, service usage records, visit records, records of improper use | Retained for up to 3 years from the date of collection and then promptly destroyed (however, if a longer retention period is required by law, retained for such period) | |
For the purposes of securing service stability, preventing fraudulent users, protecting accounts and items, and restricting acts that violate applicable laws and RHAON Entertainment’s Terms of Service, information automatically generated during the use of the Service (such as IP address, access records, service usage records, records of improper use, download records, payment records, cookies, etc.) and information capable of identifying devices (such as OS information, hardware information, MAC address, advertising identifiers, etc.) may be collected.
2. Use of Collected Personal Information
The Company uses personal information for the purposes described below, including member management, service development, provision, and improvement, and does not use it for any other purposes.
If the purpose of use changes, the Company shall take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
The Company processes personal information based on the following legal grounds:
Processing for service registration, login, provision of game services, payment and refund processing, and handling of service failures corresponds to processing necessary for the conclusion and performance of a service use contract (Article 15(1)(2) of the Personal Information Protection Act).
Retention of records in accordance with applicable laws, such as the Act on Consumer Protection in Electronic Commerce, the Protection of Communications Secrets Act, and the Framework Act on National Taxes and the Income Tax Act, corresponds to processing necessary for compliance with legal obligations (Article 15(1)(3) of the same Act).
Events and promotions, receipt of advertising information, and provision of optional services are processed based on the user’s separate consent (Article 15(1)(1) and Article 22 of the same Act).
The Company uses personal information for the following purposes:
To identify users and verify their identity, and for user management
For users under the age of 14, to verify the identity of the legal guardian and confirm the guardian’s consent
To provide mobile game services and other related ancillary services
To process payments and refunds
To notify users who participated in pre-registration of mobile game downloads, releases, and updates
To notify users of events and other promotional information
To confirm participation in events and to deliver prizes and process taxes and public charges for participants
To deliver notices necessary for service operation, such as changes to Terms, service disruptions, game usage history, and personal information usage history
To respond to inquiries, handle complaints, and improve user services
To create a safe service environment
To prevent fraudulent registration and use
To analyze service usage environments through usage records and to improve services and provide services tailored to user characteristics
3. Provision and Entrustment of Personal Information
The Company entrusts certain tasks to other companies in order to provide users with more convenient and efficient services.
The Company processes users’ personal information only within the scope notified under the “Purpose of Collection and Use of Personal Information,” and provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the user’s consent or as required by special provisions of law, and does not provide such information to third parties otherwise.
Entrusted Party | Description of Entrusted Tasks |
NAVER Cloud Corp. | Infrastructure management for the provision of cloud services |
GAMEPOT solution provided by NAVER Cloud Corp. | Authentication for game service operation, payment processing, management of payment records, and support for statistics and service operation |
However, in cases where there are special provisions in applicable laws or where investigative agencies request information in accordance with procedures and methods prescribed by law, personal information may be provided without the user’s consent.
Where provision to a third party is required, the Company shall notify the user in advance of the recipient, purpose of provision, items provided, and retention and usage period, and obtain consent.
If there are changes to the details of entrusted tasks related to the provision of personal information or to the entrusted parties, the Company shall notify users of such changes without delay through this Privacy Policy.
4. Destruction of Personal Information
The Company shall, in principle, destroy users’ personal information without delay upon membership withdrawal.
However, where applicable laws impose an obligation to retain information for a certain period, or where separate consent for retention has been obtained from the user, such personal information shall be safely stored for the applicable period and then destroyed.
Where laws prescribe retention periods, they are as follows:
Act on Consumer Protection in Electronic Commerce, etc.
Records regarding contracts or withdrawal of subscription: 5 years
Records regarding payment and supply of goods: 5 years
Records regarding consumer complaints or dispute resolution: 3 years
Protection of Communications Secrets Act
Records regarding login: 3 months
Framework Act on National Taxes and Income Tax Act
Records related to processing as prescribed by tax laws: 5 years
In the event of withdrawal from the game, information collected for service provision shall be retained for 30 days from the date of withdrawal for the purpose of resolving consumer complaints and disputes, and then deleted.
Records of improper use shall be retained for up to 1 year from the date of withdrawal for the purpose of preventing fraudulent registration and use, and then deleted.
Information collected for events shall be retained for the period agreed upon at the time of collection.
In the case of electronic files, personal information shall be securely deleted using technical methods that prevent recovery or reproduction, and printed materials shall be destroyed by shredding or incineration.
5. Rights of Users and Legal Representatives and Methods of Exercise
The Company shall take necessary measures to respond to requests for access, provision, and correction of users’ personal information.
Users (including legal representatives of children under the age of 14) may exercise rights prescribed by applicable laws at any time, including access, correction or deletion of personal information, suspension of processing, and withdrawal of consent.
Users may check the information provided to the Company through the settings menu of the service application or account management functions provided by platform operators, and may withdraw consent to the collection and use of personal information (including information collected by the Company) through the “withdrawal” function.
The exercise of rights under Paragraph 2 may be requested through the in-game customer center, inquiry menu on the Company’s website, email, or other procedures designated by the Company, and where necessary, application forms provided by the Company may be used. The Company shall take action without delay in accordance with applicable laws after verifying the identity of the requester.
Correction (modification) of personal information shall be made through the member information correction function provided by the platform operator. Where correction is requested due to errors, such personal information shall not be used or provided to third parties until the correction is completed.
The exercise of rights under Paragraph 2 may be carried out through a legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed by applicable regulations shall be submitted.
6. Installation, Operation, and Refusal of Automatic Collection Devices
The Company uses “cookies,” which store and retrieve user information from time to time.
Cookies are small amounts of information sent by the server used to operate the website to the user’s browser and may be stored on the user’s PC hard disk.
Users may refuse the collection of cookies by setting options in their browser.
Chrome: Settings > Privacy and Security > Third-party cookies
Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
NAVER Whale: Settings > Privacy > Security > Cookies and other site data
Other browsers follow their respective settings methods.
The Company uses Google Analytics, a web analytics tool provided by Google, to provide better services. In this case, the Company uses anonymized information that does not identify individual users. Users may refuse the use of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by refusing cookie settings.
Information on how Google uses data can be found at the following link:
[Go to Google Data Usage Information]
The Company collects and uses behavioral information to provide optimized customized services, benefits, and advertisements during service use.
Users have the right to refuse customized game events, benefits, or advertisements, and may exercise such rights as follows (methods may vary depending on OS version):
Android
Settings > Google > Manage your Google Account
Data & Privacy
My Ad Center
Disable “Personalized Ads”
iOS
Settings > Privacy & Security > Apple Advertising
Disable “Personalized Ads”
The Company may collect and use the following behavioral information during service use:
Items collected: Advertising identifiers (ADID, IDFA, etc.), game usage records, access history, purchase history, event participation history, etc.
Purpose of use: Provision of customized content and advertisements, service usage statistics and analysis, prevention of fraudulent use
Retention period: Retained for up to 3 years from the date of collection, then destroyed without delay (however, if a longer retention period is required by law, retained for such period)
Users may refuse personalized advertisements through device (OS) settings or procedures provided by the Company
7. Measures to Ensure the Security of Personal Information
The Company takes the following measures to ensure the safe management of users’ personal information:
Administrative measures: Establishment and implementation of internal management plans, employee and personnel training, operation of dedicated personal information protection organization
Technical measures: Access control for personal information processing systems, installation of security programs, installation of access control systems, encryption of unique identification information
Physical measures: Access control to data centers and storage rooms, establishment of entry control procedures
8. Personal Information Protection Officer and Contact Information
The Company designates the following person in charge of personal information protection to handle inquiries and complaints:
[Personal Information Protection Officer and Department]
Name: Kang Jehu
Position: Director
Tel: +82-53-655-3274
Email: privacy@rhaon.co.kr
For reporting or consultation regarding personal information infringement, users may contact the following institutions:
Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 without area code)
Supreme Prosecutors’ Office Cyber Investigation Division (www.spo.go.kr / 1301 without area code)
National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182 without area code)
9. Responsibility for Linked Sites
The Company may provide links to websites or materials of other companies. In such cases, the Company has no control over external sites or materials, and therefore this Privacy Policy does not apply, nor can the Company guarantee the usefulness or safety of services or materials provided therefrom.
If users move to another site by clicking a link provided by the Company, the Privacy Policy of the new site shall apply, and users are advised to review it.
10. Duty of Notification
If there are any additions, deletions, or modifications to this Privacy Policy, the Company shall notify users of such changes through notices on the website and in-game announcements at least 7 days prior to the effective date of the revision.
If there are significant changes affecting user rights, such as the collection and use of personal information or provision to third parties, notice shall be given at least 30 days prior.
However, if prior notice is difficult due to unavoidable reasons, the Company shall notify users without delay along with the reasons.
Announcement Date: September 30, 2025
Effective Date: October 10, 2025