隱私權政策 (生效日期：2025 年 11 月 13 日)

1.概覽

2.我們蒐集哪些資訊

3.我們如何使用您的資訊

4.我們如何共享您的資訊

5.Cookie 與類似技術

6.個人資訊的國際傳輸

7.保存及刪除個人資訊

8.我們的兒少政策

9.連結與第三方服務

10.您的資訊安全

11.您的隱私權

12.修訂

13.聯絡我們

Appendix.SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC

1.概覽

KRAFTON Inc. (以下稱「本公司」或「我們」) 向您提供各項服務 (以下稱「本服務」，包括但不限於網站及應用程式) 時，將處理您 (以下稱「您」或「使用者」) 的個人資訊。本公司於經營所在的國家與地區，遵守當地與個人資訊相關的所有適用法律，為了保護使用者的個人資訊以及便於儘速順暢處理與此相關的投訴，我們亦訂立和揭露下述隱私權政策 (以下稱「本政策」)。

1) 隱私權政策的範圍

我們提供和營運多項服務，各項服務可能適用不同的隱私權政策。

本政策適用於《幻獸帕魯手機版》(以下稱「本服務」)，其中說明您對個人資訊擁有的權利，以及聯絡本公司的方式。但本政策並不適用於本服務連結至其他公司網站或應用程式所處理的個人資訊。

本政策已翻譯成多種語言版本，以便參考。大部分地區應以英文版本為準，但日本居民和韓國居民應分別適用日文及韓文版本。

2.我們蒐集哪些資訊

我們提供或執行本服務時，可能直接或間接蒐集和使用以下個人資訊類別。

為分析服務使用環境、改良服務以及增進服務品質，我們可使用非個人資訊，包含從使用者的服務使用記錄所產生的資料 (例如服務資訊、帳戶啟用狀態、存取記錄、IP 位址、反制作弊記錄、促銷參與記錄、語言、國家等)。且您若使用社群功能 (例訊息或語音聊天)，您所揭露的資訊即屬於公開資訊。我們可儲存並存取此類資訊，且其他使用者可逕行處理或使用該資訊，恕不另行通知。

1) 您直接提供的個人資訊。

- 為提供或執行本服務而提供暱稱、社群平台資訊 (例如平台名稱、平台帳戶名稱等)

- 使用客戶支援中心時所提供的電子郵件地址和詢問內容

- 電子郵件地址、暱稱、郵寄地址、電話號碼、參與促銷時所在的國家 (例如活動或問卷調查，視情況而定)、參加抽獎及/或基於稅捐的必要資訊 (例如姓名、地址、電話號碼、(若適用) 稅籍編號等)。

2) 自動蒐集的個人資訊

我們自動蒐集的個人資訊如下。

- 使用者識別碼

- 同意記錄 (即服務條款、隱私權政策等法律文件之同意)，此類資訊例如使用者識別碼、法律文件的類型及版本、同意日期與時間

- 付款資訊 (例如購買日期、品項等)

- 裝置資訊 (例如作業系統、瀏覽器類型、語言設定、MAC 位址、裝置 ID、廣告 ID (ADID、IDFA) 等)

3) 從其他來源蒐集的個人資訊

根據服務條款，使用本服務必須註冊 KRAFTON ID，為此，我們會蒐集如下的個人資訊。

- 您以 KRAFTON ID 登入並使用本服務時，我們將使用根據 KRAFTON ID 服務條款與隱私權政策 [https://accounts.krafton.com/privacy-policy] 蒐集而來的帳戶資訊 (例如電子郵件地址、出生日期、(如適用) 外部帳戶連結資訊以及服務使用記錄、國籍等)。

3.我們如何使用您的資訊

我們為以下目的處理您的個人資訊。

- 識別使用者以及確認其使用本服務的意圖

- 分析服務使用環境以及改良使用體驗

- 改善本服務的品質以及開發新服務

- 管理詢問與請求

- 支援本服務的故障情形和維持穩定度

- 防範違法或未經授權之使用

- 維護和保障您的帳戶

- 限制違法以及違反本公司服務條款之行為

- 通知促銷資訊，例如有關本公司所提供之所有服務的宣傳、遊戲測試、預約登錄、更新和活動參與

- 提供和管理促銷 (即聯絡和辨別贏家、贈品或釐定稅捐)

- 針對本服務的使用模式和趨勢進行分析和統計

我們會就處理個人資訊的相關事項向您發送通知並取得您的知情同意，但若特定國家或地區的適用法律規章允許，將按下述合法依據逕行處理您的個人資訊。

- 有必要與使用者簽約，或於簽約期間依使用者要求採取特定措施

- 法律訂有特殊條例或有遵守法律義務之必要

- 基於使用者或第三方的重大利益而有處理必要

- 基於調查或為防範詐欺註冊與使用、資安、隱私權和限制違法以及違反本公司服務條款之行為，而有處理必要

- 當處理個人資訊是為了追求本公司或第三方的合法權益，且不侵犯您的隱私權、權益和自由

- 為達成本公司的合法權益而有處理之必要，且此類權益明顯凌駕於使用者的權利。此情況下，處理個人資訊應限於該合法權益實質有關的部分，不應超出合理範疇。

4.我們如何共享您的資訊

我們根據「3.我們如何使用您的資訊」載明的範疇使用個人資訊。原則上，未經您同意，我們不會超出該範疇擅自使用或共享任何個人資訊。但以下情況為例外。

1) 根據相關法律規章，本公司有義務共享個人資訊

- 我們可能根據法定程序提供個人資訊，例如當行政機關或調查機構以搜索令或加蓋機構主管戳章之正式文件，要求按相關法律規章提供個人資訊。

2) 將特定任務委外第三方辦理

- 我們可以委託第三方提供和營運雲端運算服務、客戶支援服務等任務，並對相關受託夥伴訂立個人資訊安全管理規則，其中部分委外任務在海外地區處理。

3) 其他事項

- 我們可能為遵守法律義務或基於合法資料存取請求，在事業合併或收購中根據本政策所述目的，與子公司 (清單請見：https://krafton.com/en/studios/) 共享您的資訊，或依您另同意或指示者共享此類資訊。

5.Cookie 與類似技術

我們可自動蒐集和使用您的個人資訊，進而分析本服務的使用環境以及改良使用體驗。我們努力為所有玩家提供安全且公平的遊戲環境。您使用本服務時，我們或第三方可使用 Cookie 與類似技術，或藉由蒐集您的機器或裝置之相關資料，以供防範詐欺、資安與身分驗證之用。

我們使用 Cookie 及其他技術來辨識您的瀏覽器或裝置，進一步瞭解您的興趣，並且為您提供基本功能與服務及供其他目的之用。經核准第三方也可能在您使用我們的遊戲與服務時，設定 Cookie 與類似技術。

Cookie 是下載至您裝置的小型檔案 (若您的瀏覽器設定同意使用 Cookie)，可用以追蹤網站上的行動軌跡，並為您提供網站的個人化體驗。大多數網際網路瀏覽器允許您清除裝置硬碟中的 Cookie、拒絕接受 Cookie 或在儲存 Cookie 之前發出警告。您應參考瀏覽器的說明資訊或「說明」畫面，進一步瞭解如何管理 Cookie。但請注意，若您封鎖 Cookie，可能導致本公司網站的某些部分無法正常運作。

我們將使用第三方分析服務改善本服務與您的體驗。使用我方遊戲及/或服務過程中，分析服務供應商可以蒐集您的活動資料。但本公司不允許蒐集或存取可直接識別您身分的資訊，例如您的姓名、電子郵件地址等。您可在下方找到管理您的資料蒐集所需的資訊。

- Google Analytics：https://tools.google.com/dlpage/gaoptout

我們也努力為所有玩家提供安全且公平的遊戲環境。您玩本遊戲時，我們或第三方可能使用 Cookie 與類似技術，或蒐集您的機器或裝置之相關資料，以供防範詐欺、安全與身分驗證之用。

6.個人資訊的國際傳輸

我們在全球各地提供和營運本服務，因此可能將您的資料直接傳輸至您所在的其他地區 (美國及韓國)。若在海外傳輸、儲存或處理您的個人資訊，我們將採取合理措施保障您個人資訊的隱私，包括 (若適用) 與供應商簽訂保密協議和標準契約。為便於本服務之提供和營運，將個人資訊傳輸至海外為必要；如不同意傳輸，將無法順利提供本服務。

7.保存及刪除個人資訊

原則上，達成個人資訊蒐集和使用之目的後，將移除或另行儲存您的個人資訊。以下舉例蒐集和使用個人資訊之目的：

- 使用者要求撤銷會員或刪除個人資訊

- 本公司終止服務提供

- 詢問或投訴已處理完畢

- 提供促銷 (例如頒發活動獎項、受理稅捐繳納) 的必要程序已結束

若為實體個人資訊，將以切碎或焚化方式處理；若為電子個人資訊，則利用技術措施以無法複製資訊之方式刪除。然而，即使您已撤銷於本公司的帳戶或我們已停止向您提供本服務，本公司仍可能在合理必要之範圍內保存您的個人資訊，以遵守法律義務、符合法規要求、解決爭議、防止詐欺、作弊或濫用行為，或強制執行本政策或我們與您訂立之其他協議。

8.我們的兒少政策

本公司無意鎖定您所在轄區的未成年人為服務對象，亦不會在知情下蒐集未滿法定年齡之個人的資訊。部分遊戲可在父母同意下有限度地開放給未成年玩家。若您是父母或監護人，且確信子女曾向我們提供資訊，您可以聯絡我們，並要求從本公司系統中刪除此類資訊。提供給未成年使用者的部分服務，將取得父母或監護人之同意。

9.連結與第三方服務

若您點選導向第三方網站的連結 (包括但不限於廣告)，您將離開本公司網站並連結至所點選的網站。由於我們無法控制第三方的活動，因此我們不保證其將遵循與本公司相同的隱私權及資訊安全實務。您造訪在本服務設有連結的第三方網站時，請先查看該網站的隱私權政策，再提供個人資訊。

10.您的資訊安全

我們設立並採用以下最佳的管理性、技術性與實體保護措施，以保障個人資訊免於遺失、遭竊、外洩、偽造、篡改或毀損。

1) 管理性保護措施

- 訂立並實施內部管理計畫，定期員工教育訓練、監督協力廠商的資安遵規情形等

2) 技術性保護措施

- 管理個人資訊處理系統之存取、安裝及執行存取控管系統、加密個人資訊、安裝及執行安全性程式等

3) 實體保護措施

- 伺服器機房、資料檔案室的進出權限管理等

4) 本政策之實施與遵循

- 我們會確認本政策是否確實落實，且控管人是否遵循規定，若發現問題，將立即實施矯正。

然而，若因您的過失或網路問題導致個人資訊外洩，我們對此概不負責。

11.您的隱私權

關於您的個人資訊，您可隨時行使以下權利。欲行使此等權利，請發送電子郵件至 privacy@krafton.com 或造訪本公司的支援網頁，以請求行使您的權利。請注意，提交請求時，至少需要提供您的電子郵件地址，以及讓我們驗證您身分所需的其他資訊。如果透過電子郵件行使權利，您必須指明欲行使的權利。我們將根據適用的資料保護法律，向有意行使資料保護權利之個人回覆其所提出的各項請求。但若超出適用法律明確規定的範圍，我們可拒絕處理此等請求。

1) 知悉權與存取權

您有權利在 12 個月期間內，就以下資訊向本公司提出最多兩次要求，您可以前往「設定」以檢視您的個人資訊，並隨時要求存取您的個人資訊，或以電子郵件向我們提出要求。

a. 我們在過去 12 個月或自啟動本服務以來，向您蒐集的個人資訊類別，以及我們向您蒐集的特定個人資訊；

b. 蒐集個人資訊的來源類別；

c. 蒐集個人資訊的業務或商業目的；

d. 過去 12 個月內或自啟動本服務以來，我們出於業務目的已揭露或出售的個人資訊類別；

e. (若適用) 該資訊揭露或出售對象的第三方類別。

2) 刪除權

您有權請求刪除我們向您蒐集的個人資訊。但為了向您提供本服務，將依最低標準蒐集您的性個人資訊。如果您要求我們刪除必要資訊，可能導致無法再存取或使用本服務。欲提交要求，請發送電子郵件至 privacy@krafton.com 或造訪本公司的支援網頁。根據法律規定，部分個人資訊不適用上述要求。我們可能仍需保留您的個人資訊，以遵守法律義務、符合法規要求、解決爭議、防止詐欺、作弊或濫用行為，或強制執行本政策或我們與您訂立之其他協議。

3) 更正權

您有權更正您的個人資訊。您可以透過「設定」選單或寄送電子郵件至 privacy@krafton.com 以編輯您的個人資訊。

4) 禁止歧視權利

您有權不因行使此等隱私權利而受到歧視。若您要求行使此等隱私權利，我們亦不會拒絕或因此向您提供不同商品或服務。

12.修訂

您隨時可以在本網站最下方的「隱私權政策」選項查看最新版本的政策內容。本公司有權修訂本政策，如有重大變更，將以簡易明確的方式通知您。若使用者不同意變更內容，也無意再使用本服務，您可以撤銷您的帳戶。若您在變更已通知或發布於本服務後，仍繼續使用本服務，即視同您同意本政策的變更。若相關法律有規定，我們將就變更另行取得您的同意。

您可以在本頁最上方，透過「生效日期」查看先前版本的隱私權政策。

13.聯絡我們

若您對本政策或我們對您個人資訊的處理有任何疑問，請隨時聯絡我們。我們會本於誠信盡力充分回應您的請求。

隱私長 (CPO)姓名：Sukbum Hong

- 隸屬於：安全部門

- 電子郵件：privacy@krafton.com

- 地址：Yeoksam Center Field 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea

Appendix.SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC

This portion of our Policy applies to residents of the jurisdictions indicated below.In the event of a conflict between the Policy and this section, this section supersedes and controls.

1.EEA and UK

If you are located in the European Economic Area (EEA) or the UK, you may lodge a complaint with an applicable data protection authority for your country or region where an alleged infringement of applicable data protection law occurs.You may also submit a request to exercise your rights with our representative.This representative is only for EEA or the UK residents.If a user residing in another country submits a request, the response time may vary depending on the data protection laws of that country.

Our representative in the EU is VeraSafe Netherlands BV, located at Keizersgracht 555, 1017 DR Amsterdam, Netherlands.To contact, please use the form available here:https://verasafe.com/public-resources/contact-data-protection-representative.

Our representative in the UK is VeraSafe United Kingdom Ltd., located at 37 Albert Embankment, London SE1 7TL, United Kingdom.To contact, please use the form available here:https://verasafe.com/public-resources/contact-data-protection-representative.

If we transfer your data outside of the EEA to a country that is not recognized by the European Commission as ensuring an adequate level of data protection, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws.These safeguards may include data transfer agreements implementing the most recent standard contractual clauses (a form of data transfer agreement pre-approved by the European Commission as providing adequate safeguards for personal data).You may ask for a copy of such appropriate measures by contacting us as set out in this Policy.We otherwise transfer personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

2.Japan

If you are a resident in Japan, for any questions or issues in relation to the collection and handling of your personal information, you may reach out to our Chief Privacy Officer by sending an email to Chief Privacy Officer.We will respond to your concerns and queries at the earliest and in compliance with Japanese Act on the Protection of Personal Information, and Japanese Telecommunications Business Act, etc.

1) Joint Use of Your Personal Data

We may use your personal data jointly with our affiliates as follows.

a. Personal data used jointly

Any and all of your personal data that we collected in accordance with this Policy, whether directly, automatically or through third parties, including but not limited to;

- Identifiers, such as nickname, name, IP address, email address, postal address, phone number, social media information (such as your platform profile/account), date of birth, gender, country of residence, language, nationality, etc.,

- Internet or other electronic network activity information, such as browsing behavior while using our Services (i.e. device model, OS version, MAC address, device ID, advertisement ID(ADID, IDFA), etc.), etc.

- Transaction information, such as purchase date, items, etc.

b. Scope of joint users & Intention of the joint use

We can use your information jointly where such disclosure is essential to comply with a legal obligation or a lawful data access request, pursuant to a merger or acquisition, with our affiliates (LIST:https://krafton.com/ja/studios/) for the purpose described in this Policy, or where you have otherwise provided your consent or at your direction.

c. Purpose of use by the joint users

For the purposes described specified in “3.How We Use Your Information” in this Policy.

d. Party responsible for management of the personal data

We have designated the following persons as the Chief Privacy Officer to remain responsible for responding to user inquiries regarding personal information and resolving any related complaints.

- Name of Chief Privacy&Data Protection Officer:Sukbum Hong

- Affiliation:Security Dept.

- Email:privacy@krafton.com (Chief Privacy Officer)

- Address:Yeoksam Center Field 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea

2) International Data Transfer

If we transfer your data outside of Japan to a country that is not recognized by Personal Information Protection Commission as establishing a personal information protection system recognized to have equivalent standards the same in Japan, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws.These safeguards may include data transfer agreements implementing the reasonable standard measures following the requirements of Section 1 of Chapter 4 in Japanese APPI.You may ask for a copy of such appropriate measures by contacting us by contacting to Chief Privacy Officer.We otherwise transfer personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.

3) Your Privacy Rights

You have a right to request disclosure of your personal data retained by us (“Retained Personal Data”) and purpose of use thereof, disclosure of records of third parties transfer, correction, addition, deletion and discontinuance of the use and third parties transfer of the Retained Personal Data.To make a request concerning your rights above, please contact us by sending an email to Chief Privacy Officer(privacy@krafton.com).In special cases (i.e., request your rights through mailbox, etc.), we may demand a fee when you request your rights.

4) Cookies and Related Technologies

We may use cookies and related technologies when you use our Services to analyze user’s interests and provide you with essential features, etc. Here is additional information about cookies and related technologies that we use in our Services.

a. Adjust

- Items to be sent after conversion:device information (advertisement ID (ADID, IDFA), device model, OS, IP address, etc.), browser information(date and time, user agent, language, activity, etc.)

- Destination company:Adjust GmbH

- Purpose of use of sender:To analyze users’ trend and how the service has been used

- Purpose of use of destination:To provide services suitable for users, to measure the effectiveness of advertising and to improve products, to analyze and research how the service have been used, to notify users about the services of providers and its partners

b. 아래의 기관은 회사와는 별개의 기관으로서, 회사의 자체적인 개인정보 불만처리, 피해구제 결과에 만족하지 못하시거나 보다 자세한 도움이 필요하신 경우에 문의하여 주시기 바랍니다.

- 개인정보침해신고센터 (privacy.kisa.or.kr / (국번없이) 118 )

- 개인정보 분쟁조정위원회 (www.kopico.go.kr / (국번없이) 1833-6972 )

- 대검찰청 (www.spo.go.kr / (국번없이) 1301 )

- 경찰청 (ecrm.cyber.go.kr / (국번없이) 182)

4.United States

1) Privacy Rights for United States Users

Several U.S. states provide their residents with rights to:

a.Confirm whether we process their personal information;

b. Access and delete certain personal information;

c. Take their data from one location to another (data portability);

d. Opt-out of personal data processing for targeted advertising and sales;

e. Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose; and

f. Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights submit a request form in our support page (URL:support.krafton.com).To appeal a decision regarding a consumer rights request, follow the instructions in the written notice we will provide to you.

Nevada provides its residents with a limited right to opt-out of certain personal information sales.Residents who wish to exercise this sale opt-out right may submit a request to this designated address:(e-mail:privacy@krafton.com, Support center:support.krafton.com).However, please know we do not currently sell data triggering that statute’s opt-out requirements.

2) California

If you are a California resident, you may have additional rights as detailed below.We will collect and use the following categories of personal information about you:

a. Identifiers, such as name, nickname, social platform information (platform name, platform account), language settings, etc.

- How collected:When you access or use our Services, we collect this directly or indirectly from you.

- How disclosed:With affiliates and service providers (e.g., cloud storage service provider, customer service provider)

b. Characteristics of protected classifications such as language settings, etc.

- How collected:When you access or use our Services, we collect this directly or automatically from you.

- How disclosed:With affiliates and service providers (e.g., cloud storage service provider, customer service provider)

c. Internet or other network activity, such as browsing behavior while using our Services (e.g., browser type, OS version, etc.), identifiers such as IP address.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates, subsidiaries, and service providers (e.g., cloud storage service provider, customer service provider)

d. Geolocation information obtained by IP address.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g. cloud storage service provider, customer service provider).

e. Commercial information, such as payout details, etc.

- How collected:When you purchase items in Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g., cloud storage service provider, customer service provider)

f. Audio, electronic, visual, thermal, olfactory, or similar information such as profile image etc.

- How collected:When you access or use our Services, we collect this automatically.

- How disclosed:With our affiliates and service providers (e.g., cloud storage service provider, customer service provider)

We determine the retention duration for each of the categories of personal information listed above based on our business or commercial purposes for obtaining the information, our legal or regulatory requirements applicable to such information, and in relation to litigation or to protect our rights.

- Your California Privacy Rights

You may exercise the following rights some rights are described in “11.Your Privacy Rights” at any point in time in connection with your personal information.To exercise such rights, please email us at ka_privacy@krafton.com or visit our support page to request your rights.

Please note that at least your email address will be required to submit a request, and additional information may be required so we can verify you.If you exercise your rights via email, you must specify the right(s) you wish to exercise.

We will verify your identity and respond to your request within 45 calendar days.If necessary, we may take up to an additional 45 days to respond, for a maximum total of 90 days from the day the request is received, in which case we will notify you to explain the reason for the delay.

a. Right to opt-out of Selling and Sharing

You have the right to opt-out of the selling and sharing of your personal information as defined by California law by requesting that your personal information not be sold or shared in any form.With respect to targeted advertising, you can control the sharing of your personal information for targeted advertising purposes through our website by opting out from advertising cookies through the cookie banner.

HOWEVER, WE HAVE NOT “SOLD” PERSONAL INFORMATION TO THIRD PARTIES AS THAT TERMS IS DEFINED BY THE CCPA WITHIN THE PAST 12 MONTHS.ALSO, WE HAVE NOT “SHARED” PERSONAL INFORMATION WITH THIRD PARTIES FOR THE PURPOSE OF CROSS-CONTEXT BEHAVIORAL ADVERTISING.

b. Rights for California Minors

Minors under the age of 16 have the right to request the deletion, correction, or copies of information publicly posted by you, such as on forums or bulletin boards.