# Privacy Policy

---

## Consent to the Collection and Use of Personal Information by Didanonia Co., Ltd.

Didanonia Co., Ltd. (“Company”) collects and uses personal information to provide its game services.

### ■ Purpose of Collection and Use of Personal Information

- User management and provision of services

### ■ Required Information Collected

- **Member Information:** Public profile information provided by the platform (name)
- **Service Usage Information:** Nickname, game usage records, access records, records of improper use, payment records, IP address information, and device information (device language)

### ■ Retention and Use Period

- Until 30 days after membership withdrawal or until the termination of the service

Users may refuse to consent to the collection and use of personal information. However, if consent is refused, the Company may be unable to provide the game service.

---

# Didanonia Co., Ltd. Privacy Policy

Didanonia Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea to provide users with information regarding the procedures and standards for the processing of personal information so that users can safely use the Company’s website and mobile game services, and to ensure that related complaints are handled promptly and smoothly.

This Privacy Policy may be amended due to changes in applicable laws and guidelines or changes in the Company’s internal policies.

## Article 1 [Categories of Personal Information Collected and Used]

① The Company may collect the following personal information for the purpose of identifying users.

- **[Required] Member Information:** External platform ID (Google, Apple, Facebook), domestic/foreign user status

② The Company may automatically collect or generate the following information when users access or use its games and portal services for purposes including compliance with applicable laws, protection of accounts and items, prevention of improper use, and provision of stable services.

- **[Required] When installing or using the game:** Nickname, download history, service usage records, access logs (including IP address), records of improper use, game version, payment records, device information (model name, OS information, device language and country information), device identifier, location information, advertising ID

③ When users contact Customer Support to ensure smooth use of the service, the Company may collect the following additional information.

- **[Required] Customer inquiries and complaint handling:** Email address, game title, Game ID, nickname, UID
- **[Optional] Customer inquiries and complaint handling:** Information necessary to verify and respond to inquiries, device information (operating system, OS version, device ID, device model name), payment details

④ At the user’s request, the Company may request the following personal information to process refunds. The information collected may vary depending on the payment information, and separate consent may be obtained when necessary. If the user is a minor, additional information may be requested to verify the user’s identity and the relationship with the legal representative when processing a refund.

- **[Required] Payment/Refund Information:** Email address, game title, Game ID, nickname
- **[Optional] Payment/Refund Information:** In cases such as cancellation of a payment made by a minor, documents verifying the payment and family relationship (Resident Registration Certificate / Family Relationship Certificate), documents required to verify the name of the payment method holder (for example, SKT – Certificate of Subscription Contract Registration Details / KT – Certificate of Subscription Registration / LG – Subscription Confirmation), documents verifying the payment method (card payment statement / cardholder verification document), and device information (operating system, OS version, device ID, device model name)

⑤ If users wish to participate in the Company’s events or marketing activities, the Company may collect and use the user’s personal information. In such cases, separate consent will be obtained from the user.

- **[Optional] Consent to Receive Promotional Information:** Email address, mobile phone number

---

## Article 2 [Methods of Collecting Personal Information]

① The Company may collect users’ personal information through the following methods:

- Information provided by users during customer inquiries
- Collection through network communication information or access history

---

## Article 3 [Purposes of Collection and Use of Personal Information]

① The Company may use the collected personal information for the following purposes.

### User Management

- Identification of individuals for the provision of content, prevention of duplicate registrations, management of users engaging in improper activities, detection of abnormal users and restriction of service use, fulfillment of contracts, and dispute resolution

### Service Provision

- Handling complaints and providing other customer services, delivering notices, providing paid payment services and notifying users of payment details, and supporting in-game cooperative play and community services

### New Service Development, Marketing, and Advertising

- Providing information about new services and events, improving service quality, and processing statistical information

---

## Article 4 [Retention and Use Period of Personal Information]

① Collected personal information is retained and used while the user maintains their membership status. When membership status is terminated, or when the purpose for using the relevant information has been fully achieved even while membership status is maintained, the information will be destroyed without delay. However, the Company may retain user information for a certain period in accordance with the “retention period” notified to the user when consent to the collection and use of personal information was obtained.

**Purpose of Retention:** 
To handle consumer complaints and disputes following withdrawal from the game service

**Retention Period:** 
30 days

**Information Retained:** 
Access records (date/time of access and access location information), records of improper use, download records, external platform ID, and device information

**Purpose of Retention:** 
To provide information regarding marketing activities and events and to select event winners

**Retention Period:** 
Immediately deleted after notifying the winners

**Information Retained:** 
Nickname and UID

② Where personal information must be retained pursuant to applicable laws, including the Act on the Consumer Protection in Electronic Commerce, Etc. (the “Electronic Commerce Act”) and the Protection of Communications Secrets Act, the Company will retain user information for the period prescribed by the relevant laws. In such cases, the Company will use the retained information only for the purpose of retention, and the retention periods are as follows:

- **Records relating to labeling and advertising:** 6 months (Electronic Commerce Act)
- **Records relating to contracts or withdrawal of subscription:** 5 years (Electronic Commerce Act)
- **Records relating to payment and supply of goods, etc.:** 5 years (Electronic Commerce Act)
- **Records relating to consumer complaints or dispute resolution:** 3 years (Electronic Commerce Act)
- **Access logs, access IP information, and other service usage records:** 1 year (Protection of Communications Secrets Act)

---

## Article 5 [Procedures and Methods for Destruction of Personal Information]

① The Company will promptly destroy personal information when it is no longer necessary due to the expiration of the retention period, achievement of the processing purpose, or other reasons.

**Destruction Procedure** 
Personal information for which the retention period has expired will be destroyed using methods that prevent its restoration.

※ Even if a user deletes the mobile game application (hereinafter referred to as the “App”), personal information collected by the Company will not be destroyed immediately.

**Destruction Method**

- Personal information stored in electronic file format will be deleted using technical methods that prevent the records from being restored.
- Personal information printed on paper will be shredded using a shredder.

---

## Article 6 [Provision of Personal Information to Third Parties]

① The Company processes users’ personal information only within the scope specified in **Article 3 [Purposes of Collection and Use of Personal Information]** and, in principle, does not provide users’ personal information to third parties. However, the following cases are exceptions:

- When the user has provided prior consent
- When required by special provisions of law, a court judgment or order, a binding order from an administrative authority, or a request from an investigative agency made in accordance with the procedures and methods prescribed by law for investigative purposes

② In accordance with the “Guidelines for the Processing and Protection of Personal Information in Emergency Situations” jointly announced by relevant government ministries and agencies, the Company may provide personal information to relevant authorities without the consent of the data subject in emergency situations, such as disasters, infectious diseases, incidents or accidents involving an imminent risk to life or physical safety, or an imminent risk of property loss.

For more information, please click **here**.

---

## Article 7 [Entrustment of Personal Information Processing and Cross-Border Transfer]

The following entrusted processing activities involve the processing of personal information outside Korea.

### Recipient Company

**Firebase Service (Google LLC and its affiliates)**

**Recipient / Contact Information of the Person Responsible for Information Management:** 
[Firebase Support](https://firebase.google.com/support?utm_source=chatgpt.com) 
(Contact through the Google Cloud Support Center)

**Country of Transfer:** 
United States

**Time and Method of Transfer:** 
Transferred over the network when the information required for use of the service is entered

**Information Transferred:** 
Nickname, service usage information, browser information, and device information

**Purpose of Use:** 
Data storage and system operation for the provision of services

**Retention and Use Period:** 
Until membership withdrawal, termination of the service, or achievement of the purpose for which the personal information is retained and used

### Recipient Company

**Backend Service**

**Recipient / Contact Information of the Person Responsible for Information Management:** 
Privacy ([backend.com](http://backend.com?utm_source=chatgpt.com)) 
(Contact through the Backend Support Center)

**Country of Transfer:** 
Republic of Korea

**Time and Method of Transfer:** 
Transferred over the network when the information required for use of the service is entered

**Information Transferred:** 
Nickname, device information, and service usage information

**Purpose of Use:** 
Data storage and system operation for the provision of services

**Retention and Use Period:** 
Until membership withdrawal, termination of the service, or achievement of the purpose for which the personal information is retained and used

---

## Article 8 [Rights of Users and Legal Representatives and How to Exercise Them]

① Users and legal representatives of children under the age of 14 (hereinafter referred to as “Children”) may request access to, correction of, or deletion of their own personal information or the personal information of the relevant Child at any time.

② Users and legal representatives of Children may exercise the rights specified in Paragraph 1 by contacting the Company by telephone, email, or other means. They may also contact the Personal Information Protection Officer at **didanonia@lexio.co.kr**. When a request to exercise these rights is received from a user or a Child’s legal representative, the Company will take the necessary measures without delay.

③ Requests for access to personal information or suspension of processing may be subject to restrictions pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.

④ Requests for correction or deletion of personal information may be refused where such correction or deletion is prohibited or restricted by other applicable laws.

---

## Article 9 [Installation, Operation, and Rejection of Automatic Collection Devices for Personal Information]

① The Company does not use “cookies,” which store users’ usage information and retrieve it periodically.

② The Company allows online behavioral advertising providers to collect behavioral information.

1. **Online Behavioral Advertising:** A marketing technique that analyzes users’ online usage patterns, access records, and other information to provide services tailored to users’ characteristics.
2. **Online Behavioral Advertising Providers:** Google, Facebook, AdMob
3. **Method of Collecting Behavioral Information:** Automatically collected when users visit a website or launch the App
4. **Types of Behavioral Information Collected:** Users’ website visit history, App usage history, and search history

5. **How to Refuse Collection of Advertising Identifiers**

Users may choose whether to receive personalized advertising and may voluntarily disable the collection of advertising identifiers through the following device settings:

- **AOS (Android):** Device Settings → Google → Ads, or Device Settings → Privacy → Ads
- **iOS (Apple):** Device Settings → Privacy → Apple Advertising

※ The specific settings path may vary depending on the OS version.

---

## Article 10 [Measures to Ensure the Security of Personal Information]

① When processing users’ personal information, the Company takes the following measures to ensure security and prevent personal information from being lost, stolen, leaked, altered, or damaged.

**Administrative Measures:** 
Establishment and implementation of internal management plans and training for employees and personnel handling personal information

**Technical Measures:** 
Management of access rights to personal information processing systems and installation and updating of security programs on company-wide PCs and servers

**Physical Measures:** 
Access control for computer rooms

---

## Article 11 [Criteria for Additional Use or Provision of Personal Information Without Consent]

① The Company may additionally use or provide personal information without the consent of the data subject pursuant to Article 15(3) and Article 17(4) of the Personal Information Protection Act and Article 14-2(1) of the Enforcement Decree of the Personal Information Protection Act.

In determining whether additional use or provision may be made without the consent of the data subject, the Company has considered the following:

- Whether the purpose of the additional use or provision of personal information is related to the original purpose for which the information was collected
- Whether the possibility of such additional use or provision could reasonably be anticipated based on the circumstances under which the personal information was collected or the established practices of processing
- Whether the additional use or provision of personal information unfairly infringes upon the interests of the data subject
- Whether measures necessary to ensure security, such as pseudonymization or encryption, have been taken

---

## Article 12 [Personal Information Protection Officer]

① The Company designates a Personal Information Protection Officer and a person responsible for personal information as follows. They are responsible for overseeing matters relating to the processing of personal information and handling complaints and providing remedies for damages relating to the processing of personal information.

### Personal Information Protection Officer

**Name:** Lee Kwang-hee 
**Position:** CEO 
**Contact:** didanonia@lexio.co.kr

### Person Responsible for Personal Information

**Name:** Jang Won-jae 
**Contact:** smilejwj@lexio.co.kr

---

## Article 13 [Requests for Access to, Correction of, and Deletion of Personal Information]

① Users may submit requests for access to, correction of, or deletion of personal information pursuant to Article 35 of the Personal Information Protection Act through the contact information below.

The Company will make reasonable efforts to process requests for access to, correction of, or deletion of personal information promptly.

**Contact:** 

---

## Article 14 [Remedies for Infringement of Users’ Rights and Interests]

① Users may contact the following organizations for consultation and remedies concerning personal information infringements.

### Personal Information Infringement Report Center

**Operated by:** Korea Internet & Security Agency (KISA)

**Responsible for:** 
Reporting and consultation regarding personal information infringements

**Website:** [Privacy.kisa.or.kr](http://Privacy.kisa.or.kr?utm_source=chatgpt.com)

**Telephone:** 118 (without area code)

**Address:** 
Personal Information Infringement Report Center, 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do 58324, Republic of Korea

### Personal Information Dispute Mediation Committee

**Responsible for:** 
Personal information dispute mediation applications and collective dispute mediation (civil resolution)

**Website:** [www.kopico.go.kr](http://www.kopico.go.kr?utm_source=chatgpt.com)

**Telephone:** 1833-6972 (without area code)

**Address:** 
4th Floor, Government Complex-Seoul, 209 Sejong-daero, Jongno-gu, Seoul 03171, Republic of Korea

### Supreme Prosecutors’ Office

**Cyber Investigation Division**

**Website:** [Supreme Prosecutors’ Office](http://www.spo.go.kr?utm_source=chatgpt.com)

**Telephone:** 1301 (without area code)

### Korean National Police Agency

**Cyber Bureau**

**Website:** [Cyber Crime Report System](https://ecrm.cyber.go.kr/?utm_source=chatgpt.com)

**Telephone:** 182 (without area code)

---

## Article 15 [Changes to the Privacy Policy]

① The Company’s Privacy Policy may be changed due to amendments to applicable laws or changes in the Company’s internal policies. In such cases, the Company will notify users of the changes through a method that allows users to check the changes on the Company’s website or within the service at least seven days before the changes take effect. However, if the changes are unfavorable to members or involve significant matters, the Company will provide notice at least 30 days before the effective date.

② The Company provides previous versions of the Privacy Policy so that users can easily review the changes. Previous versions of the Privacy Policy can be viewed by clicking the date in the upper-right corner.

This Privacy Policy is effective as of **September 5, 2025**.

- **Privacy Policy Announcement Date:** September 4, 2026
- **Privacy Policy Effective Date:** September 5, 2026