Qgames (hereinafter referred to as the 'Company') values the privacy of its users and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection. The Company informs you of the purpose and manner in which the personal information you provide is used and what measures are being taken to protect your personal information through the Privacy Policy.

The order of this Privacy Policy is as follows:

1. Items of personal information to be collected and collection methods

2. Purpose of collecting and using personal information

3. Sharing and providing personal information

4. Consignment of personal information

5. Retention and use period of personal information

6. Procedures and methods for destroying personal information

7. Rights of users and legal representatives and how to exercise them

8. Matters concerning the installation/operation and rejection of automatic personal information collection devices

9. Technical and administrative protection measures for personal information

10. Civil service regarding personal information

11. Duty of notice

12. Items of Personal Information Collected and Collection Methods

(1) Items of Personal Information Collected ① The Company collects the following personal information when you first register for membership or use the service to provide smooth customer consultation and various services:

• Required items: e-mail address mobile phone number

• Optional items: date of birth gender ② Services that do not have a separate consent procedure for paragraph 1 do not collect the required optional items. ③ The following information may be generated and collected in the course of service use or business processing.

• Mobile phone device information (model name OS version mobile firmware version device license number, etc.) IP Address Cookies Last access location

• Records when using location-based services

• Access date and time Service usage records Bad usage records, etc. ④ When unavoidably necessary for payment, etc. in the process of using free/paid services

• Credit card information Telecommunications company information Purchase history and voucher number Collection of other payment-related information

⑤ When a user requests recovery or refund of paid content

• Email address Purchase history confirmation Additional personal information such as real name and proof of family relationship to verify payment by someone other than the user

(2) Methods of collecting personal information: The Company collects personal information in the following ways.

• Collected through the provision of consent procedures when subscribing to the Company's services

• Collected through a separate consent procedure for promotions and events

• Automatically collected through platforms with which the Company has a partnership related to service provision

• Collected after voluntary provision by the user or request by necessity when responding to customers during service subscription and use

1. Purpose of collecting and using personal information

(1) The Company uses the collected information of users for the following purposes:

1. Securing smooth communication channels for delivering notices and handling complaints

2. Providing customer services such as handling inquiries about the use of paid information, handling contract fulfillment disputes, and payment refunds

3. Providing information on new services and new product events

4. Providing other content and authentication services (such as finding ID/PW)

5. Sharing and Provision of Personal Information

(1) Except with the consent of the user or in accordance with the provisions of relevant laws and regulations, the Company shall not use the user's personal information beyond the scope disclosed in the "Purpose of Collection and Use of Personal Information" or provide it to other companies or organizations. (2) In the case of providing or sharing users' personal information, such as when it is necessary to provide users' information within a limited scope in partnership with business partners or business operators for the purpose of providing various services, we will notify the user at least 10 days before the effective date through an announcement or message in the application about who is providing or sharing the personal information, what is the main business, what are the personal information items provided or shared, and what is the purpose of providing or sharing the personal information, and will implement it after obtaining the user's consent in advance. (3)In the following cases, it is possible to provide personal information without the user's consent in accordance with the provisions of relevant laws and regulations.

1. If it is necessary for the settlement of charges for the provision of services

2. If it is necessary for statistical compilation, academic research, or market research and is processed and provided in a form that does not recognize a specific individual

3. If there is a request from a related organization for investigative purposes in accordance with relevant laws

4. If there are special provisions in laws such as the Act on Real Name Transactions and Confidentiality in Finance, the Act on the Use and Protection of Credit Information, the Telecommunications Basic Act, the Telecommunications Business Act, the Local Tax Act, the Consumer Protection Act, the Bank of Korea Act, and the Criminal Procedure Act

5. Consignment of personal information

The Company may consign personal information for the purpose of fulfilling the service, and stipulates the necessary matters to ensure that personal information is safely managed in the consignment contract in accordance with relevant laws and regulations.

1. Retention and use period of personal information

(1) In principle, the Company retains the user's personal information from the user's membership until withdrawal, and destroys the information without delay after the user withdraws from membership or the purpose of collecting and using personal information is achieved. However, in accordance with the Terms and Conditions and internal policies, the Company retains personal information for three months after withdrawal from membership to prevent unauthorized use, and after this period, the user's personal information is completely deleted. (2) Even if the purpose of collection or the purpose provided is achieved, if there is a need to preserve it in accordance with the provisions of laws and regulations such as the Commercial Act, and if there is a reason for information protection in accordance with the internal policy and other related laws and regulations, the Company retains member information for a certain period of time set by relevant laws and regulations. In this case, the Company shall use the stored information only for the purpose of storage, and the retention period is as follows.

• Records on contract or subscription withdrawal (Retention period: 5 years)

• Records on payment and supply of goods (Retention period: 5 years)

• Records on consumer complaints or dispute handling (Retention period: Act on Consumer Protection in Electronic Commerce, etc: 3 years)

• Records on identification (Retention reason: Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. retention period: 6 months)

• Records on visits: access log service usage records, etc. (Retention reason: Telecommunications Secrets Protection Act retention period: 3 months) (3) If the user requests to view the personal information held in accordance with paragraph (2) above, the company will take measures to ensure that the contents can be viewed without delay.

1. Procedures and methods for destroying personal information

In principle, the company destroys the information without delay after the purpose of collecting and using personal information is achieved. The procedure and method of destruction are as follows: (1) Destruction procedure

• The information entered for membership registration, etc. is stored for a certain period of time after the purpose is achieved and destroyed according to the information protection reasons under the internal policy and other related laws (see the retention and use period of personal information).

• Personal information is not used for any other purpose other than retention unless required by law. (2) Destruction method

• Personal information stored in the form of electronic files is deleted using a technical method that does not allow the record to be reproduced

• Personal information printed on paper is destroyed by shredding or incineration.

1. Rights of users and legal representatives and how to exercise them

(1) This method can be processed when a request is received through a platform that has a partnership with the company in providing services, or when a request is made directly through the company's website. (2) Users and their legal representatives may view or modify their registered personal information or the personal information of children under the age of 14 at any time, and may also request to cancel their subscription. (3) To modify the viewing of personal information of users or children under the age of 14, click 'Change Personal Information' (or 'Modify Member Information', etc.), and to cancel the subscription (withdraw consent), you can directly correct the viewing or withdraw membership after going through the identification procedure through the ToneWalker customer center. (4) Alternatively, if you contact the person in charge of personal information management in writing by phone or email, we will take action without delay. (5) If you request correction of errors in your personal information, we will not use or provide the personal information until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the results of the correction process without delay so that the correction can be made. (6) The Company handles personal information that has been terminated or deleted at the request of the user or legal representative as specified in the "Retention and Use Period of Personal Information" and does not allow it to be viewed or used for any other purpose.

1. Technical and administrative protection measures for personal information

When handling users' personal information, the Company takes the following technical and administrative measures to ensure safety so that personal information is not lost, stolen, leaked, altered, or damaged:

Cookies are used to support faster and more convenient website use and to provide customized services to users.

(1) Encryption of passwords The company does not collect passwords of platform members with whom it has an affiliation related to the provision of services. (2) Countermeasures against hacking In order to prevent the leakage of users' personal information due to hacking, the company has installed and operated a device to block intrusion from the outside, and in particular, the server that holds users' personal information is managed separately without direct connection to external Internet lines, maintaining the highest level of security. We also have a system to back up systems and data in case of contingencies and take measures to prevent damage caused by computer viruses by using antivirus programs. The antivirus program is updated periodically, and if a virus suddenly appears, we provide a vaccine as soon as it is available to prevent personal information from being compromised. (3) Restriction and training of handling staff The number of staff handling personal information is limited to a minimum, and compliance with this policy is emphasized through frequent training for staff in charge. (4) Operation of a dedicated personal information protection organization We check the implementation of this policy and the compliance of the staff in charge through the dedicated personal information protection organization in the company, and take immediate corrective measures if problems are found.

But the company is not responsible for any problems caused by the leakage of personal information such as account (ID) and password nickname email of platforms affiliated with the service provision due to the user's own carelessness or problems on the Internet.

1. Complaint service on personal information infringement

If you have any questions about your personal information, please contact the ToneWalker customer center (toneworker23@gmail.com), or if you want to consult a public institution other than the company for personal information infringement, please seek help from the following organizations:

• Personal Information Infringement Report Center within the Korea Information Security Agency (KISA) (http://www.118..or.kr Telephone 118)

• Information Protection Mark Certification Committee (http://www.privacy.or.kr Telephone 02-580-0533~4)

• High-tech Crime Investigation Division of the Supreme Prosecutors' Office (http://www.spo.go.kr Telephone 02-3480-2000)

• Cyber Terrorism Response Center of the National Police Agency (http://www.ctrc.go.kr Telephone 02-392-0330)

1. Other

(1) The Company may provide you with links to other companies' websites or materials. In this case, the Company has no control over the external sites and materials, so it is not responsible for and cannot guarantee the usefulness of the services or materials provided by them. (2) If you click a link to a service provided by the Company to move to a page on another site, please check the policy of the newly visited site, as the privacy policy and terms and conditions of that site are not related to the Company. (3) Users are requested to prevent unreasonable accidents by entering the personal information provided accurately and up to date. You are responsible for any accidents caused by inaccurate information you enter, and if you enter false information, such as stealing other people's information, your account may be restricted or deleted. (4) You have the right to privacy, but you also have the obligation to protect your own information and not infringe on the information of others. Please be careful not to disclose your personal information, including passwords, and not to damage the personal information of others, including posts. If you fail to fulfill these responsibilities and damage the information and dignity of others, you may be punished by relevant laws and regulations. (5) You are solely responsible for any disadvantages and material damages in the use of the service caused by entering inaccurate or incorrect information when entering personal information.

1. Obligation of notice When the privacy policy is further deleted or modified due to changes in legal policies or security technology, we will notify the reason and content of the change through the in-app notice at least 10 days before the revision.