Legal Notice
Privacy Policy
This Privacy Policy is effective as of March 20, 2026.
Collection and Use of Personal Information
The Company collects personal information through legitimate collection forms and ensures users can review all required disclosures under applicable laws, obtaining explicit consent before collecting and using personal information.
The Company may collect and use personal information without consent when necessary to fulfill a contract with the user or to take action at the user's request during the contract process.
Where legal obligations take precedence over the user's right to decide on personal information processing, the Company may collect, use, or provide personal information to third parties without prior notice or consent.
During service communications, the Company may automatically collect information that alone may not constitute personal information, but when combined with other stored data, could identify an individual.
The Company may pseudonymize collected personal information for purposes such as statistical analysis, scientific research, or public record preservation.
Purpose, Items Collected, and Retention Period
The Company collects and uses personal information in the course of fulfilling contracts or providing services. Users have the right to refuse the Company's collection and use of personal information for any of the stated purposes at any time.
| Items Collected | Purpose |
|---|---|
| IP/MAC address, OS type & version, browser info, mobile device info (UUID, UDID, model), Ad ID, language & country, SNS auth, consultation records | Compatibility verification, service log creation, malicious app detection, app push notifications |
Provision of Personal Information to Third Parties
If personal information needs to be provided to a third party, the Company will notify the user and obtain consent. Currently, the Company does not provide personal information to any third parties. If this changes, users will be notified through the service homepage.
Restrictions on Use Beyond Original Purpose
The Company may use or provide personal information for purposes other than those stated in this policy. In principle, the Company will notify users in advance and seek consent, but the consent process may be omitted in the following situations.
- When mandatory measures are needed to protect users from harm
- When external experts need access for critical system error recovery
- When legally obligated to submit personal information
- Emergency situations involving threats to life, physical safety, or property
Entrustment and Overseas Transfer of Personal Information
The Company may entrust part of its operations to third parties for smooth service delivery. For contracts involving personal information processing, the Company will execute agreements for safe management and conduct regular training and oversight.
| Category | Details |
|---|---|
| Target Service | Customer support for WK Company games |
| Transfer Country (Region) | Tokyo, Osaka, Sydney (AWS Asia Pacific Region) |
| Recipient (Trustee) | Zendesk (biz.wk@webzen.com) |
| Transfer Timing and Method | Transmitted via network upon accessing customer support page |
| Purpose | Receiving and processing customer inquiries |
| Personal Information Transferred | ID or nickname, email address, UID, UUID |
| Retention Period | Until service termination |
| Legal Basis for Transfer | Article 28-8(1) of the Personal Information Protection Act (consent, contract performance) |
Storage and Destruction of Personal Information
The Company retains personal information for the period disclosed at the time of collection. Once the purpose is fulfilled or the retention period expires, personal information is promptly destroyed.
- Electronic data on servers is immediately deleted
- Files on PCs are deleted using irreversible methods (overwriting, low-level formatting)
- Printed personal information is shredded or incinerated beyond recognition
- Physical storage devices (HDD, CD, DVD) are destroyed beyond reassembly
User Rights and How to Exercise Them
Users have the right to decide on the Company's processing of their personal information at any time, and the Company will respond promptly to requests for access, correction, deletion, objection, or suspension.
Browser and Mobile App Access Rights
The Company may identify users accessing the web environment based on browser recognition values and send alerts or pop-up messages for additional features. Consent will be obtained through the browser before providing such features.
Installation, Operation, and Refusal of Automatic Data Collection Devices
The Company may automatically collect information from users' devices and browsers accessing system servers for user recognition and smooth service delivery.
- Preference analysis based on traffic source analysis
- Engagement analysis based on time spent
- Popularity analysis based on visit frequency
- Personalized services within the service and marketing purposes
Technical, Administrative, and Physical Safeguards
- Firewall and IPS operation
- Minimization and separation of access rights
- Encryption of personal information in transit and at rest
- Antivirus programs and security patches
- Strong password policy and periodic changes
- Differentiated access rights by role and regular audits
- Regular employee privacy training
- Annual self-assessment of personal information processing
- Systems installed in access-controlled areas
- Entry control procedures established and operated
Privacy Officer and Complaint Handling
Obligation to Notify
When the Company adds, modifies, or deletes content in this Privacy Policy, it will, in principle, notify users at least 7 days before the revised policy takes effect through the website or other channels.
Effectiveness and Disclaimer
Regarding the protection of personal information of WK Company mobile game users, the content of this document takes precedence over any other company regulations or terms. Any content not specifically mentioned herein shall be governed by the Terms of Service and operational policies.