隐私政策（生效日期：2025 年 11 月 13 日）

1.概览

2.我们收集的信息

3.我们如何使用您的信息

4.我们如何共享您的信息

5.Cookie 和相关技术

6.个人信息的国际传输

7.保留与删除个人信息

8.我们的未成年人政策

9.链接和第三方服务

10.您的信息安全

11.您的隐私权

12.修改

13.联系我们

Appendix.SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC

1.概览

KRAFTON Inc.（以下简称“我司”、“我们”、“我们的”或“我方”）在向您（以下简称“您”或“用户”）提供所有服务（以下简称“服务”）期间将处理您的个人信息，包括但不限于在网站和应用程序上处理的个人信息。我们遵守业务运营地所在国家和地区的适用法律和法规，并制定和公布以下隐私政策（以下简称“政策”），以便及时保护用户的个人信息并顺利地处理相关投诉。

1) 隐私政策的适用范围

我们提供和运营各种服务，会有针对性地为每项服务制定隐私政策。

本政策适用于与“服务”相关的“Palworld 移动版”（以下简称“服务”），并阐明了您在个人信息处理方面所拥有的权利，以及您如何与我们沟通。但不适用于在与服务相关的其他公司的网站或应用程序上所处理的个人信息。

本政策已翻译成其他语言，方便您使用。一般情况下，我们会提供英文版，但会为日本的用户提供日文版，为韩国的用户提供韩文版。

2.我们收集的信息

我们将收集和使用下类信息，旨在直接或间接地提供和运营服务。

我们可能会使用非个人信息，包括在用户使用服务期间生成的数据（例如服务信息、帐户激活状态、访问记录、IP 地址、反作弊记录、促销参与历史、语言、国家/地区等），用于分析服务使用环境、改进服务以及提升服务质量等。并且当您使用社交功能（例如：文字或语音聊天）时，您披露的信息为公开信息。我们可能会存储及访问该信息，并且其他用户可能会在未经通知的情况下，处理或使用该信息。

1) 您直接提供的个人信息

- 提供或运营服务所需的昵称、社交平台信息（例如平台名称、平台帐户名等）

- 使用客户支持中心时提供的电子邮件地址和咨询详细信息

在参与促销活动（如活动或调查）时提供的电子邮件地址、昵称、邮政地址、电话号码、国家/地区；获得赠品和/或纳税时需提供的信息（如姓名、地址、电话号码，（如适用）税号等）。

2) 我们自动收集的个人信息

我们将自动收集您的以下个人信息。

- 用户身份标识

- 同意历史记录（即法律文件，如服务条款、隐私政策等）（如用户身份标识、法律文件的类型和版本、同意日期和时间）

- 付款信息（如购买日期、项目等。）

- 设备（如操作系统版本、浏览器类型、语言设置、MAC 地址、设备 ID、广告 ID（ADID、IDFA）等）

3) 我们从其他来源收集的个人信息

根据本服务的服务条款，必须提供 KRAFTON ID 才能使用本服务。我们收集您的以下个人信息。

- 当您使用 KRAFTON ID 登录来使用服务时，我们将根据 KRAFTON ID 服务条款和隐私政策 [https://accounts.krafton.com/privacy-policy] 使用收集到的您的帐户信息（如电子邮件地址、出生日期、外部帐户关联信息（如适用）、服务使用历史记录、国籍等）。

3.我们如何使用您的信息

我们出于以下目的处理您的个人信息。

- 识别用户并确认其使用服务的意图

- 分析服务使用环境，改善使用体验

- 提高服务质量，开发新服务

- 管理咨询和请求

- 解决服务故障，提高稳定性

- 防止非法或未经授权的使用

- 确保您的帐户安全

- 限制违反法律和我们的服务条款的行为

- 告知促销信息，如我方针对所有服务提供的活动、游戏测试、预注册、更新和促销活动参与

- 提供和管理促销信息（即联系和确定获胜者、赠品或税款）

- 分析和统计服务使用模式及趋势

我们将告知您相关事宜并在征得您同意后合法处理您的个人信息，但在以下情况下，我们将在业务运营地所在国家或地区的适用法律和法规允许的范围内合法处理您的个人信息。

- 当必须履行与用户签订的合同或者在签订合同期间应用户要求采取措施时

- 法律有特殊规定或者必须履行法律义务

- 当满足用户或第三方重大利益而必需时

- 当需要进行调查并采取措施以防止欺诈性注册和使用，确保安全、保护隐私以及限制违反法律和我们的服务条款的行为时

- 当为追求我方或第三方的合法利益而在不侵犯您的隐私权、利益和自由的范围内处理个人信息时

- 当需要使我方的合法利益明显优于用户权利时。在此类情况下，仅在数据处理与我们的合法利益密切相关且不超出合理范围时才得到允许。

4.我们如何共享您的信息

我们在“3.我们如何使用您的信息”中所述的范围内使用个人信息。原则上，未经您的事先同意，我们不会在该范围外使用或共享任何个人信息。但存在以下例外情况。

1) 根据相关法律和法规，有义务共享个人信息时

- 我们可能会根据合法程序提供个人信息，例如当行政机构或调查机构根据相关法律法规，以授权令或盖有机构负责人印章的书面文件形式要求提供个人信息时。

2) 将某些任务外包给第三方时

- 我们可能会将云计算服务和客户支持服务等任务委托给第三方来运营。我们规定了相关受托方的个人信息安全管理事项，并且部分外包任务将在海外完成。

3) 其他

- 我们可能会在为了遵守法定义务或满足合法数据访问要求而有必要进行披露的情况下，根据并购或收购情况，出于本政策所述之目的，与我们的子公司（名单：https://krafton.com/en/studios/）共享您的个人信息，或者在您以其他方式表示同意或提出请求的情况下共享您的个人信息。

5.Cookie 和相关技术

我们可能会自动收集和使用您的个人信息，以便分析服务使用环境并改善使用体验。我们努力为所有玩家提供安全、公平的游戏环境。当您使用我们的服务时，我们或第三方可能会使用 Cookie 和类似技术，或者会收集您的计算机或设备数据，用于防欺诈、安全和身份验证目的。

我们利用 Cookie 等技术来识别您的浏览器或设备，了解更多关于您的兴趣的信息，为您提供基本功能和服务以及用于其他用途。当您使用我们的游戏和服务时，经批准的第三方也有可能会设置 Cookie 和相关技术。

Cookie 是下载到您的设备中的小文件（如果您的浏览器允许接受 Cookie），用于跟踪网站范围内的活动以及对您在网站范围内的体验进行定制。大多数互联网浏览器都会允许您从设备硬盘驱动器中删除 Cookie、阻止接受 Cookie 或者在存储 Cookie 之前收到警示信息。您可参阅浏览器说明或“帮助”页面，了解更多有关如何管理 Cookie 的信息。但请注意，如果您阻止 Cookie，我们的网站的某些部分可能无法正常运行。

我们使用第三方分析服务来改善服务和您的体验。分析服务提供商可能会在您使用我们的游戏和/或服务期间收集您的活动数据。但是，我们不允许收集或访问能够直接识别您身份的信息，例如您的姓名、电子邮件地址等。您可以在下面找到对收集您的数据进行管理所需的信息。

- Google Analytics：https://tools.google.com/dlpage/gaoptout

此外，我们也努力为所有玩家提供安全、公平的游戏环境。当您玩游戏时，我们或第三方可能会使用 Cookie 和类似技术，或者会收集您的计算机或设备数据，用于防欺诈、安全和身份验证目的。

6.个人信息的国际传输

我们在全球范围内提供和运营服务，因此我们可能会将您的数据直接传输到您所在的其他地区（如美国和韩国）。在海外传输、存储或处理您的个人信息时，我们会采取合理措施来保障个人信息的私密性，包括（在适当情况下）与供应商签订保密和标准合同条款。将个人信息传输到海外对于服务的运营和提供是必要的。如若拒绝，本服务将无法提供。

7.保留与删除个人信息

原则上，收集和使用个人信息的目的达成后，我们会销毁或单独存储个人信息。达成收集和使用个人信息目的的示例如下所示：

- 当用户请求取消会员或删除其个人信息时

- 当我们停止提供服务时

- 但完成咨询或投诉处理时

- 在完成提供促销信息的必要程序（如促销活动奖品发放、缴税处理等）时

如以实物形式存储个人信息，我们将粉碎或烧毁这些实物；如以电子形式存储个人信息，我们将采用技术措施以无法复制的方式删除个人信息。但是，如果出于遵守我们的法定义务，满足监管要求，解决纠纷，防止欺诈、作弊或滥用行为，或者履行本政策或我们可能与您签订的其他协议的目的，我们可能会保留您的个人信息，即使您撤销您的帐户或者我们已经停止为您提供服务也是如此。

8.我们的未成年人政策

我们无意针对性地或故意地收集您管辖下未成年人的信息。某些游戏在获得父母同意的情况下可能会有有限的例外。如果您是家长或监护人，并且认为您的孩子向我们提供了信息，则您可以联系我们，要求从我们的系统中删除您孩子的信息。对于向未成年用户提供的某些服务，我们将获得父母或监护人的同意。

9.链接和第三方服务

如果您点击第三方网站链接（包括但不限于广告），则会离开我们的网站，跳转至您选择的网站。由于我们无法控制第三方活动，因此无法保证他们会遵循与我们相同的隐私与安全惯例。如果您访问与服务相链接的第三方网站，请在提供个人信息之前参阅该网站的隐私政策。

10.您的信息安全

我们制定并实施以下最合理的管理、技术和实物性保护措施，防止个人信息丢失、被盗、泄露、伪造、篡改或损坏。

1) 管理性保护措施

- 制定和实施内部管理计划，定期培训员工，监督承包公司的安全合规情况等。

2) 技术性保护措施

- 个人信息处理系统的访问管理、访问控制系统的安装和运行、个人信息的加密、安全程序的安装和运行等。

3) 实物性保护措施

- 服务器机房、数据存储室等的访问控制。

4) 政策的实施和遵守

- 我们会检查政策的实施情况和管理者的遵守情况，一旦发现任何问题，我们就会立即予以纠正和解决。

- 但对于因您自己的疏忽或互联网问题导致的个人信息（如密码）泄露而引发的任何问题，我们概不负责。

11.您的隐私权

您可以随时行使与您的个人信息有关的以下权利。要行使此类权利，请发送电子邮件至 privacy@krafton.com 联系我们，或访问我们的支持页面要求行使权利。请注意，要提交请求，至少需要提供您的电子邮件地址，可能会需要额外信息，以便我们验证您的身份。如果您通过电子邮件行使自己的权利，您必须指明您希望行使的权利。个人根据适用的数据保护法，行使数据保护权，由此提出的所有申请，我们均会做出回应。然而，对于根据适用法律不要求处理的请求，我们可能会拒绝处理。

1) 知情权和访问权

您有权在 12 个月内最多两次向我们请求以下信息，您可以随时进入“设置”查看您的个人信息并请求访问您的个人信息，或者通过电子邮件向我们提出请求。

a. 我们在过去 12 个月内或自启动此服务以来从您那里收集的个人信息类别，以及我们从您那里收集的具体的个人信息；

b. 个人信息的收集来源类别；

c. 收集个人信息的业务或商业目的；

d. 在过去 12 个月里或自启动此服务以来，我们出售或出于业务目披露的个人信息类别；以及

e.（如适用）向其披露或出售此类信息的第三方的类别。

2) 删除权

您有权请求删除从您那里收集的个人信息。然而，我们收集的个人信息仅限于为您提供服务所需的最少信息。如果您要求我们删除必要的信息，可能将无法继续访问或使用我们的服务。要提交请求，请发送电子邮件至 privacy@krafton.com 或访问我们的支持页面。根据法律规定，某些个人信息可能不受此类请求的约束。我们为满足以下目的，可能仍需保留您的个人信息：履行我们的法律义务；满足监管要求；解决争议；防止欺诈、作弊或滥用；执行本政策或我们与您可能签订的其他协议。

3) 更正权

您有权更正您的个人信息。您可以通过“设置”菜单编辑个人信息，或发送电子邮件至 privacy@krafton.com 请求更改您的个人信息。

4) 非歧视权

您有权行使隐私权而不会受到歧视。我们不会因您请求行使隐私权而拒绝提供或向您提供不同的产品或服务。

12.修改

我们始终会通过网站底部的“隐私政策”发布最新的隐私政策。我们可能会对政策做出更改，并在做出重大更改时以易于理解的方式告知您。如果用户不同意此更改并且不再想使用服务，您可以撤销您的帐户。如果您在收到更改通知或者在服务上发布更改后继续使用服务，则会被视为同意更改后的政策。此外，如果相关法律有所要求，我们将单独征得您的同意。

您可以通过本页面顶部的“生效日期”来查看上一隐私政策。

13.联系我们

如果您对本政策或我们对个人信息的处理有任何疑问，请随时联系我们。我们会竭诚处理您的请求。

- 首席隐私官姓名：Sukbum Hong

- 所属部门：安全部门

- 电子邮箱：privacy@krafton.com

- 地址：Yeoksam Center Field 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea

Appendix.SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC

This portion of our Policy applies to residents of the jurisdictions indicated below.In the event of a conflict between the Policy and this section, this section supersedes and controls.

1.EEA and UK

If you are located in the European Economic Area (EEA) or the UK, you may lodge a complaint with an applicable data protection authority for your country or region where an alleged infringement of applicable data protection law occurs.You may also submit a request to exercise your rights with our representative.This representative is only for EEA or the UK residents.If a user residing in another country submits a request, the response time may vary depending on the data protection laws of that country.

Our representative in the EU is VeraSafe Netherlands BV, located at Keizersgracht 555, 1017 DR Amsterdam, Netherlands.To contact, please use the form available here:https://verasafe.com/public-resources/contact-data-protection-representative.

Our representative in the UK is VeraSafe United Kingdom Ltd., located at 37 Albert Embankment, London SE1 7TL, United Kingdom.To contact, please use the form available here:https://verasafe.com/public-resources/contact-data-protection-representative.

If we transfer your data outside of the EEA to a country that is not recognized by the European Commission as ensuring an adequate level of data protection, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws.These safeguards may include data transfer agreements implementing the most recent standard contractual clauses (a form of data transfer agreement pre-approved by the European Commission as providing adequate safeguards for personal data).You may ask for a copy of such appropriate measures by contacting us as set out in this Policy.We otherwise transfer personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

2.Japan

If you are a resident in Japan, for any questions or issues in relation to the collection and handling of your personal information, you may reach out to our Chief Privacy Officer by sending an email to Chief Privacy Officer.We will respond to your concerns and queries at the earliest and in compliance with Japanese Act on the Protection of Personal Information, and Japanese Telecommunications Business Act, etc.

1) Joint Use of Your Personal Data

We may use your personal data jointly with our affiliates as follows.

a. Personal data used jointly

Any and all of your personal data that we collected in accordance with this Policy, whether directly, automatically or through third parties, including but not limited to;

- Identifiers, such as nickname, name, IP address, email address, postal address, phone number, social media information (such as your platform profile/account), date of birth, gender, country of residence, language, nationality, etc.,

- Internet or other electronic network activity information, such as browsing behavior while using our Services (i.e. device model, OS version, MAC address, device ID, advertisement ID(ADID, IDFA), etc.), etc.

- Transaction information, such as purchase date, items, etc.

b. Scope of joint users & Intention of the joint use

We can use your information jointly where such disclosure is essential to comply with a legal obligation or a lawful data access request, pursuant to a merger or acquisition, with our affiliates (LIST:https://krafton.com/ja/studios/) for the purpose described in this Policy, or where you have otherwise provided your consent or at your direction.

c. Purpose of use by the joint users

For the purposes described specified in “3.How We Use Your Information” in this Policy.

d. Party responsible for management of the personal data

We have designated the following persons as the Chief Privacy Officer to remain responsible for responding to user inquiries regarding personal information and resolving any related complaints.

- Name of Chief Privacy&Data Protection Officer:Sukbum Hong

- Affiliation:Security Dept.

- Email:privacy@krafton.com (Chief Privacy Officer)

- Address:Yeoksam Center Field 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea

2) International Data Transfer

If we transfer your data outside of Japan to a country that is not recognized by Personal Information Protection Commission as establishing a personal information protection system recognized to have equivalent standards the same in Japan, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws.These safeguards may include data transfer agreements implementing the reasonable standard measures following the requirements of Section 1 of Chapter 4 in Japanese APPI.You may ask for a copy of such appropriate measures by contacting us by contacting to Chief Privacy Officer.We otherwise transfer personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

3) Your Privacy Rights

You have a right to request disclosure of your personal data retained by us (“Retained Personal Data”) and purpose of use thereof, disclosure of records of third parties transfer, correction, addition, deletion and discontinuance of the use and third parties transfer of the Retained Personal Data.To make a request concerning your rights above, please contact us by sending an email to Chief Privacy Officer(privacy@krafton.com).In special cases (i.e., request your rights through mailbox, etc.), we may demand a fee when you request your rights.

4) Cookies and Related Technologies

We may use cookies and related technologies when you use our Services to analyze user’s interests and provide you with essential features, etc. Here is additional information about cookies and related technologies that we use in our Services.

a. Adjust

- Items to be sent after conversion:device information (advertisement ID (ADID, IDFA), device model, OS, IP address, etc.), browser information(date and time, user agent, language, activity, etc.)

- Destination company:Adjust GmbH

- Purpose of use of sender:To analyze users’ trend and how the service has been used

- Purpose of use of destination:To provide services suitable for users, to measure the effectiveness of advertising and to improve products, to analyze and research how the service have been used, to notify users about the services of providers and its partners

b. 아래의 기관은 회사와는 별개의 기관으로서, 회사의 자체적인 개인정보 불만처리, 피해구제 결과에 만족하지 못하시거나 보다 자세한 도움이 필요하신 경우에 문의하여 주시기 바랍니다.

- 개인정보침해신고센터 (privacy.kisa.or.kr / (국번없이) 118 )

- 개인정보 분쟁조정위원회 (www.kopico.go.kr / (국번없이) 1833-6972 )

- 대검찰청 (www.spo.go.kr / (국번없이) 1301 )

- 경찰청 (ecrm.cyber.go.kr / (국번없이) 182)

4.United States

1) Privacy Rights for United States Users

Several U.S. states provide their residents with rights to:

a.Confirm whether we process their personal information;

b. Access and delete certain personal information;

c. Take their data from one location to another (data portability);

d. Opt-out of personal data processing for targeted advertising and sales;

e. Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose; and

f. Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights submit a request form in our support page (URL:support.krafton.com).To appeal a decision regarding a consumer rights request, follow the instructions in the written notice we will provide to you.

Nevada provides its residents with a limited right to opt-out of certain personal information sales.Residents who wish to exercise this sale opt-out right may submit a request to this designated address:(e-mail:privacy@krafton.com, Support center:support.krafton.com).However, please know we do not currently sell data triggering that statute’s opt-out requirements.

2) California

If you are a California resident, you may have additional rights as detailed below.We will collect and use the following categories of personal information about you:

a. Identifiers, such as name, nickname, social platform information (platform name, platform account), language settings, etc.

- How collected:When you access or use our Services, we collect this directly or indirectly from you.

- How disclosed:With affiliates and service providers (e.g., cloud storage service provider, customer service provider)

b. Characteristics of protected classifications such as language settings, etc.

- How collected:When you access or use our Services, we collect this directly or automatically from you.

- How disclosed:With affiliates and service providers (e.g., cloud storage service provider, customer service provider)

c. Internet or other network activity, such as browsing behavior while using our Services (e.g., browser type, OS version, etc.), identifiers such as IP address.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates, subsidiaries, and service providers (e.g., cloud storage service provider, customer service provider)

d. Geolocation information obtained by IP address.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g. cloud storage service provider, customer service provider).

e. Commercial information, such as payout details, etc.

- How collected:When you purchase items in Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g., cloud storage service provider, customer service provider)

f. Audio, electronic, visual, thermal, olfactory, or similar information such as profile image etc.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g., cloud storage service provider, customer service provider)

We determine the retention duration for each of the categories of personal information listed above based on our business or commercial purposes for obtaining the information, our legal or regulatory requirements applicable to such information, and in relation to litigation or to protect our rights.

- Your California Privacy Rights

You may exercise the following rights some rights are described in “11.Your Privacy Rights” at any point in time in connection with your personal information.To exercise such rights, please email us at ka_privacy@krafton.com or visit our support page to request your rights.

Please note that at least your email address will be required to submit a request, and additional information may be required so we can verify you.If you exercise your rights via email, you must specify the right(s) you wish to exercise.

We will verify your identity and respond to your request within 45 calendar days.If necessary, we may take up to an additional 45 days to respond, for a maximum total of 90 days from the day the request is received, in which case we will notify you to explain the reason for the delay.

a. Right to opt-out of Selling and Sharing

You have the right to opt-out of the selling and sharing of your personal information as defined by California law by requesting that your personal information not be sold or shared in any form.With respect to targeted advertising, you can control the sharing of your personal information for targeted advertising purposes through our website by opting out from advertising cookies through the cookie banner.

HOWEVER, WE HAVE NOT “SOLD” PERSONAL INFORMATION TO THIRD PARTIES AS THAT TERMS IS DEFINED BY THE CCPA WITHIN THE PAST 12 MONTHS.ALSO, WE HAVE NOT “SHARED” PERSONAL INFORMATION WITH THIRD PARTIES FOR THE PURPOSE OF CROSS-CONTEXT BEHAVIORAL ADVERTISING.

b. Rights for California Minors

Minors under the age of 16 have the right to request the deletion, correction, or copies of information publicly posted by you, such as on forums or bulletin boards.

媒体