<Mammossix Privacy Policy>

Mammossix Co., Ltd. complies to this Privacy Policy and international standards to protect your valuable personal information.

This Privacy Policy outlines the type of personal information Mammossix collects and uses, who it is disclosed to, and when and how it is destroyed. This policy applies to all games and services provided by the company.

Table of Contents:

1. Collection of Personal Information

2. Use of Personal Information

3. Provision of Personal Information

4. Destruction of Personal Information

5. Handling of Pseudonymized Information

6. Handling of Personal Location Information

7. Rights of Users and Legal Guardians and Exercise of Rights

8. Installation, Management, and Opting Out of Automated Data Collection Tool

9. Efforts for Privacy

10. Notice of Change

11. For International Users (Europe and California)

 

  1.        Collection of Personal Information

Mammossix only collects the personal information necessary for providing its services. The company informs users and obtains their consent prior to processing their personal information.

What are required information?

The information needed to be collected by the company to provide services

What are optional information?

The information collected by the company to provide optional and additional services.

The company collects the following personal information through various services, such as its app, website, email, and phone.

1.1 Account Information

Required: Platform used

Optional: Email address, photo information of linked accounts, GPS information used for login, audio

1.2 Payment Information

Required: Transaction history, accounts used to purchase

Since transactions are processed through payment agents (e.g., Google and Apple), Mammossix collects only a minimal amount of personal information.

1.3 Refund Information

Required: Account information (bank name, account holder name, account number), payment information, email address

1.4 Response to Inquiries

Required: Nickname, email address

Optional: UID, payment information, identity verification information

  1.    Usage Information

Text chat, voice chat, and user interactions that occur while using the company services

 

  1.        Use of Personal Information

Mammossix uses your personal information only for the following purposes, and in the event of any changes, it notifies its users and obtains consent before processing such information.

  1.    User identification: To manage the members of the company including identifying and authenticating users.
  2.    Service provision: To provide users with all the services of the company including online games (including mobile games, VR games, and PC client).

Customization: To analyze service usage environment through service usage history and provide services in consideration of individual user characteristics.

  1.    Service analysis and improvement: To provide users with a safe and good service environment.
  2.    Response to inquiries: To improve user services including payments, refunds, inquires, and complaints.
  3.    Fraud prevention: To prevent fraudulent registration and usage.
  4.    Other: The company notifies and asks consent from users when it needs personal information for any other purposes.

 

  1.          Provision of Personal Information

Mammossix manages its contractors to ensure the safe processing of users' personal information and prevents them from subcontracting to other companies without prior permission.

The company entrusts the processing of personal information and stores it overseas to deliver reliable gaming services.

  1.    Cloud server: The company safely store information by transferring information via network when users begin to use its service.
  2.    Disclosure between users: Users may intentionally disclose their personal information when they are engaged in a chat, conversation, or interaction with others.
  3.    Compliance with law: The company should cooperate with the government when it is asked to provide personal information as part of legal procession or investigation for adherence to relevant laws.

 

  1.          Destruction of Personal Information

Mammossix immediately destroys personal information once its purpose has been fulfilled or the service requiring it has ended. However, there are exceptions where the company obtains consent from its users or when related laws dictate otherwise.

When a user withdraws his membership from the service, the personal information collected from the user is retained for 30 days from the date of withdrawal for the purposes of resolving customer complaints and disputes. The personal information is destroyed after this period.

The history of fraudulent usage is retained for 5 years from the date of membership withdrawal to prevent fraudulent registration and usage in the future.

The company separately stores the personal information of users who have not used its services for 5 years, with their consent.

Personal information stored in digital file format is deleted using technical methods. Personal information printed on paper is shredded.

 

  1.          Handling of Pseudonymized Information

Pseudonymized information refers to data where part or all of the information has been deleted or replaced to prevent identification of particular individuals.

Mammossix pseudonymizes the information it collects to prevent personal identification, processing it for statistical or scientific purposes, or archiving it for public interest. Pseudonymized information is stored separately to prevent its use in reidentifying individuals and is recorded and stored using any necessary technical/managerial/physical methods.

Mammossix processed pseudonymized information as below:

Purpose: To use in scientific research (analysis of user characteristics)

Collection: Game service usage information

When Mammossix entrusts or provides pseudonymized information to a third party, it ensures safety measures are in place to prevent disclosure or re-identification of this information.

When pseudonymized information is entrusted or provided to a third party, Mammossix informs users about the recipient of the information and the purpose according to relevant laws.

 

  1.          Handling of Personal Location Information

Mammossix processes its users’ personal information according to the Act on the Protection and Use of Location Information (hereinafter "Location Information Act").

6.1 Processing Purposes and Retention Period of Personal Location Information

Mammossix requests users' personal location information to provide the following services, and promptly deletes the information once its collection purpose is fulfilled or the retention period expires.

Providing useful information based on the current user location: Mammossix offers information useful for game services based on users' current locations.

The grounds for the collection/usage/provision of personal location information and retention period

According to Location Information Act, the company must retain users' data for confirmation of location information collection/usage/provision on its location information system for at least 6 months.

 

6.2 The Process and Method of Personal Location Information Destruction

The company destroys the collected information immediately when the purposes of collected information are met or the retention period of personal location information expires. However, exceptions may occur when there is a reason to retain such information based on other laws. Personal information in digital file format is deleted with technical methods. Personal information printed on paper is shredded.

 

6.3 Providing Personal Location Information to a Third Party and Notifications

Mammossix does not share users' personal location data with third parties without prior consent. Every time disclosure to third parties specified by users occurs, Mammossix promptly informs users about the parties involved, date and time, and purpose of such disclosure.

 

  1.          Rights of Users and Legal Guardians and Exercise of Rights

Users hold rights to access, modify, delete, stop processing of, and withdraw consent for their personal data. Mammossix is obligated to take measures to protect users' rights.

Mammossix does not provide its services to minors whose age is under 13 and does not knowingly collect personal information from minors. With their legal guardian’s direction, a minor may request their personal information to be accessed, modified, deleted, stopped being processed, or have their consent withdrawn.

Withdrawal: Users who want to withdraw may do so in ‘Options > Account > Delete Account.’

Or users can ask membership withdrawal by contacting the Chief Privacy Officer via phone, email, or visit to have their personal information accessed, modified, deleted, stopped being processed of or have their consent withdrawn.

 

  1.          Installation, Management, and Opting Out of Automated Data Collection Tool

Mammossix uses cookies that stores users’ information and retrieves it any time the system wants to provide its users with customization features and convenience.

Use of Cookies

-          Authentication cookie (Auth): The authentication cookie is used to help manage user sessions and is created when a user logs into their account. This cookie links user account information to a cookie identifier string to have the right user information delivered to the user session.

 

  1.          Efforts for Privacy

Mammossix takes the following technical/managerial measures to safely store and prevent users’ personal information from being lost, stolen, disclosed, tampered with, or damaged. However, despite all the safety measures implemented, the personal information held by the company cannot be guaranteed to be entirely immune to potential harm.

  1.    Encryption of users' personal information: Key personal information is encrypted and stored. The personal information encrypted this way is transferred via encrypted communication.
  2.    Measures to protect personal information: Mammossix frequently backs up personal information to protect it from being damaged and uses the latest antivirus software to prevent personal information from being compromised or damaged. Encrypted communication ensures safe network transfer of personal data over the network. Mammossix employs a firewall system to prevent unauthorized access and employs all possible technical measures for system information security.
  3.    Minimal number of the privacy officers and their training: Mammossix employs a minimal number of its privacy officers and prevents their computers from using outside Internet when they are processing personal information. By minimizing the possibilities of personal information being disclosed to the public, the company reduces the potential danger of personal information leakage.
  4.    Training and campaign: The company emphasizes the importance of personal information with a regular training and campaign.
  5.    The company appoints a Chief Privacy Officer who is in charge of handling any complaints or disputes regarding personal information. Please contact support@mammo6.com for assistance.

9.6 Users may seek remedy or consultation from the following agencies regarding any other infringements of personal information rights.

- Personal information infringement report center

Phone number: 118 (without country/area code)

Website: https://privacy.kisa.or.kr

- Personal information mediation committee

  Phone number: 1833-6972 (without country/area code)

Website: https://www.kopico.go.kr

- Cyber Investigation Division, Public Prosecutors’ Office

  Phone number: 1301 (without country/area code)

Website: https://www.spo.go.kr

- Cyber Investigation Division, National Police Agency

  Phone number: 182 (without country/area code)

Website: https://ecrm.cyber.go.kr

 

  1.      Notice of Change

When there are changes to Privacy Policy, the company should notify them at least 7 days prior to the date of such change by posting it on top of this web page. However, for any significant changes, the company shall notify them at least 30 days prior to the date of such a change.

 

  1.      For International Users (Europe and California)

11.1For users residing in Europe, Mammossix processes users’ personal information including the following only when there is a legal basis to do so.

11.1.1 Consent: Consent to use personal information including notifications and cookies

11.1.2 Contract: Consent to the provision of personal information required to provide services

11.1.3 Compliance with a Legal Obligation: The company require users’ personal information to comply with tax and accounting regulations.

11.1.4 Legitimate Interests: The company has a legitimate interest in utilizing users' personal information to enhance the services it provides. The company processes users’ personal information for these interests, but does not infringe upon the rights and interests of its users.

 

11.2 For users residing in California, California Consumer Privacy Act of 2018 (CCPA) is applied. According to the Act, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the California Consumer Privacy Act of 2018.

The following is not considered personal information.

-          Lawfully made available from government records.

-          Deidentified or aggregated.

-          Otherwise excluded from the scope of the CCPA.

11.2.1 Categories of Personal Information Collected or Disclosed for a Business Purpose.

1. Identifiers: email address only [Collect: Y / Disclose: N / Sell: N]

2. Categories of Personal Information in Cal. Civ. Code Section 1798.80(e): Name, telephone number, financial information [Collect: N / Disclose: N / Sell: N/A]

3. Characteristics of Protected Classifications under California or Federal Law [Collect: N / Disclose: N / Sell: N/A]

4. Commercial Information: Records of services purchased, obtained, or other purchasing or consuming histories [Collect: Y / Disclose: N / Sell: N]

5. Biometric Information [Collect: N / Disclose: N / Sell: N/A]

6. Internet or Other Electronic Network Activity Information [Collect: N / Disclose: N / Sell: N/A]

7. Geolocation Data [Collect: Y / Disclose: N / Sell: N]

8. Sensory Information [Collect: N / Disclose: N / Sell: N/A]

9. Professional or employment-related information [Collect: N / Disclose: N / Sell: N/A]

10. Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99) [Collect: N / Disclose: N / Sell: N/A]

11. Inferences Drawn from Personal Information [Collect: N / Disclose: N / Sell: N/A]

11.2.2 Your California Privacy Rights

 

11.2.2 Your California Privacy Rights

If you are a California resident, you may exercise the following rights.

-          Right to Know and Access: The specific pieces of your personal information collected by Mammossix in the 12 months preceding this Disclosure; The categories of personal information we collected or disclosed for a business purpose about you within the 12 months preceding this Disclosure; The categories of sources from which the personal information was collected; The business or commercial purpose for which the information was collected or sold; The categories of third parties to whom the information was  disclosed for a business purpose, or otherwise shared;

-          Right to Delete: Subject to certain exceptions, you may submit a verifiable request that we delete Personal Information about you that we have collected from you.

-          Verification: Requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. We may seek to verify your identity by asking you to log in to your password-protected account. If we are unable to verify your identity in this way, we may ask for additional information.

-          Right to Equal Service and Price: You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations.

-          Shine the Light: Shine the Light. We do not rent, sell, or share Personal Information with nonaffiliated companies for their direct marketing uses as contemplated by California’s “Shine the Light '' law (Civil Code § 1798.83), unless we have your permission.

-          Submit Requests: To exercise your rights under the CCPA, please send an email to support@mammo6.com.