INFINITY MIND Privacy Policy

Article 1 (General Provisions)

INFINITY MIND (the "Company") values users' personal information and complies with the Personal Information Protection Act and other applicable laws and regulations.

This Privacy Policy is intended to explain the standards governing the processing of personal information collected in connection with all games and related services provided by the Company (the "Services"), as well as users' rights and how those rights may be exercised.

This Privacy Policy applies to all Services provided by the Company. Where additional processing of personal information is required for a particular Service, users will be informed through a separate notice or supplemental privacy policy for that Service.

The Company makes this Privacy Policy available through the Services, the Company's website, or other appropriate channels so that users may review it at any time.

Article 2 (Purposes of Processing Personal Information)

The Company processes personal information for the purposes set forth below and does not use it for any purpose other than those stated. If the purposes of processing change, the Company will take the measures required under applicable laws and regulations.

Purpose of ProcessingProcessing Activities
Provision and Operation of the ServicesUser identification, account creation and management, provision of game services, management of Service usage records, and provision of content
Customer SupportReceipt and handling of inquiries, response to complaints, delivery of notices, and dispute resolution
Payments and RefundsProvision of paid Services, payment processing, refund processing, and verification of transaction history
Events and PromotionsOperation of events, delivery of prizes, verification of winners, and event notices (only for users who have consented to marketing communications)
Compliance with Legal ObligationsCompliance with obligations under applicable laws and regulations, prevention of improper or unauthorized use, and ensuring Service stability

Article 3 (Categories of Personal Information Processed)

The Company may process the following personal information in order to provide the Services.

① Registration and Use of the Services

The Company provides registration and login services using Google, Apple, and Facebook accounts and may collect or generate the following information during registration and use of the Services.

② Information Automatically Generated and Collected During Use of the Services

The following information may be automatically generated and collected while the Services are being used.

③ Customer Support

The Company may collect the following information to provide customer support and respond to inquiries.

④ Events and Promotions

The Company may collect the following information to operate events, verify winners, and deliver prizes.

※ The categories of personal information collected may vary depending on the event. Where required, the Company will provide a separate notice and obtain the user's consent.

⑤ Payment

When paid Services are used, information required for payment, depending on the payment method (such as credit card, mobile payment, bank transfer, or gift certificate), is collected and processed directly by the payment gateway provider (PG provider).

The Company may receive or process the minimum payment-related information necessary to provide the Services, verify payment history, and settle transactions, and may exchange necessary information with the payment gateway provider for settlement and transaction verification.

⑥ Refunds

Where a refund is required, the Company may collect the following information to process the refund.

Article 4 (Processing of Automatically Generated Information)

In the course of providing and operating the Services, the information described in Article 3, Paragraph 2 may be automatically generated, collected, and processed.

Automatically generated information is processed for the following purposes.

The Company may use cookies, advertising identifiers (ADID/IDFA), and similar technologies to provide the Services.

Article 5 (Processing and Retention Period of Personal Information)

The Company destroys personal information without undue delay once the purpose of processing has been fulfilled or the applicable retention period has expired.

However, where any of the following applies, the Company retains personal information for the period prescribed by applicable laws and regulations.

Applicable LawRecords RetainedRetention Period
Act on the Consumer Protection in Electronic Commerce, Etc.Records relating to contracts or withdrawal of offers5 years
Act on the Consumer Protection in Electronic Commerce, Etc.Records relating to payment and the supply of goods or services5 years
Act on the Consumer Protection in Electronic Commerce, Etc.Records relating to consumer complaints or dispute resolution3 years
Protection of Communications Secrets ActService usage records, including access logs3 months

The Company destroys personal information without undue delay upon account withdrawal or when the purpose of processing has been fulfilled. However, where retention is required by applicable laws and regulations, the information will be securely retained for the prescribed period.

Where personal information is retained pursuant to applicable laws and regulations, the Company does not use it for any purpose other than the purpose of retention.

Article 6 (Destruction of Personal Information)

The Company destroys personal information without undue delay when the retention period has expired or the purpose of processing has been fulfilled and the information is no longer necessary.

However, where personal information must continue to be retained pursuant to applicable laws and regulations, the Company stores such information separately from other personal information and protects it securely.

The procedures and methods for destroying personal information are as follows.

① Destruction Procedure

The Company identifies personal information for which a reason for destruction has arisen and destroys it in accordance with applicable laws, regulations, and internal procedures.

② Destruction Methods

Article 7 (Users' Rights and How to Exercise Them)

Users may exercise the following rights with respect to their personal information at any time.

  1. Request access to the status of personal information processing
  2. Request correction or deletion of personal information
  3. Request suspension of personal information processing
  4. Withdraw consent
  5. Exercise any other rights guaranteed under applicable laws and regulations

Users may exercise their rights through functions available within the Services or through customer support, and the Company will take the necessary measures without undue delay in accordance with applicable laws and regulations.

Where access, correction, deletion, or suspension of processing is restricted by law, the exercise of the relevant right may be limited.

Article 8 (Rights of Legal Representatives and How to Exercise Them)

Where consent from a legal representative is required by law, the Company processes personal information in compliance with applicable laws and regulations.

A legal representative may exercise rights guaranteed under applicable laws and regulations with respect to a minor's personal information, including access, correction, deletion, suspension of processing, and withdrawal of consent.

When a legal representative requests to exercise such rights, the Company will process the request after completing the verification procedures required under applicable laws and regulations.

Article 9 (Provision of Personal Information to Third Parties)

The Company processes users' personal information only within the scope of the purposes specified in Article 2 and does not provide users' personal information to third parties unless the user has consented or applicable laws and regulations specifically permit or require such provision.

If the Company provides a user's personal information to a third party, the Company will inform the user, in accordance with applicable laws and regulations, of the recipient, purpose of provision, categories of information provided, and retention and use period, and will obtain separate consent where required.

Article 10 (Outsourcing of Personal Information Processing)

The Company does not currently outsource the processing of users' personal information to any external service provider.

If the Company outsources personal information processing in the future, it will disclose the arrangement and provide the necessary information to users in accordance with applicable laws and regulations.

Article 11 (Measures to Ensure the Security of Personal Information)

The Company implements administrative, technical, and physical measures required under applicable laws and regulations to ensure the security of personal information.

To process personal information securely, the Company implements necessary safeguards, including management of access privileges, access control, secure storage and transmission of personal information, and retention and review of access logs.

Article 12 (Use of Cookies and Similar Technologies and How to Refuse Them)

The Company may use cookies or similar technologies to provide the Services and improve the user environment.

Users may refuse or delete cookies through their web browser settings.

However, refusing cookies may limit the availability of certain features of the Services.

Article 13 (Chief Privacy Officer)

The Company has designated a Chief Privacy Officer to protect users' personal information and promptly handle privacy-related inquiries and complaints.

Users may contact the Chief Privacy Officer listed below regarding any privacy-related inquiries, complaints, or requests for relief arising from use of the Services.

NameSung Minho
DepartmentService Division
EmailCS@infinitymind.co.kr

The Company will respond to users' inquiries promptly and in good faith in accordance with applicable laws and regulations.

Article 14 (Remedies for Infringement of Rights)

Users who require consultation or remedies in connection with a personal information infringement may contact the following organizations.

OrganizationWebsiteContact
Personal Information Infringement Report Centerprivacy.kisa.or.kr118 (without area code)
Personal Information Dispute Mediation Committeewww.kopico.go.kr1833-6972 (without area code)
Supreme Prosecutors' Officewww.spo.go.kr1301 (without area code)
National Police Agencyecrm.police.go.kr182 (without area code)

The organizations listed above are independent of the Company and may provide assistance if a complaint or request for relief concerning the Company's processing of personal information is not satisfactorily resolved.

Article 15 (Changes to this Privacy Policy)

The Company may amend this Privacy Policy if applicable laws or regulations, the Services, or the manner in which personal information is processed changes.

If this Privacy Policy is amended, the Company will specify the effective date and make the amended policy available through the Services, the Company's website, or other appropriate channels.

Addendum

This Privacy Policy is effective as of August 1, 2026.