Privacy Policy

1. Personal data we collect

The Company may collect the following information to support account registration, identity verification, trading services, customer support, and legal compliance.

• Account information: user ID, password (hashed), name, nickname, contact details, email, signup IP, access country/region, device information
• Identity verification/KYC information: identity document images, verification results, review status, rejection reasons, review and change history
• Trading and wallet information: deposit and withdrawal requests, trading history, balance changes, bonus/reward history, wallet addresses, transaction identifiers
• Automatically generated information: access logs, session information, cookies, browser/device information, security events, errors, and usage records
• Customer support information: inquiry details, chat history, attachments, and information provided by users to resolve issues

2. Purposes of collection and use

The Company uses collected personal data within the scope of the following purposes.

• Member identification, login, account management, identity verification, and age confirmation
• Provision of trading, events, rewards, deposits/withdrawals, wallet, and customer support services
• Prevention of fraudulent use, multiple-account abuse, account takeover, bonus abuse, money laundering, and sanctions evasion
• Transaction monitoring, dispute response, system stability, incident analysis, and security threat detection
• Compliance with lawful requests from laws, investigative authorities or regulators, internal audits, and recordkeeping obligations

3. Processing for KYC/AML and security purposes

The Company may process personal data and transaction information to the extent necessary for identity verification, limit management, deposit/withdrawal review, suspicious activity detection, anti-money laundering, and sanctions compliance.

If a user does not provide required information or the authenticity of information cannot be verified, the Company may restrict relevant functions, deposits/withdrawals, bonus payments, or account access.

4. Retention and use period

The Company retains personal data until the purpose of collection and use is achieved and then deletes it without delay. However, the following information may be retained for the period necessary for legal compliance, dispute response, fraud prevention, and audit purposes.

• Account and verification information: for the period required by law or needed for dispute response after account closure
• Trading, deposit/withdrawal, settlement, and bonus records: for periods required for legal, accounting, and audit purposes
• Access logs, security events, and fraud response records: for security incident investigation and recurrence prevention
• Customer support records: for inquiry handling, dispute response, and service quality improvement

5. Third-party disclosure and legal requests

The Company generally does not provide personal data to third parties without user consent.

However, where permitted by applicable law, information may be provided for legally grounded requests, lawful demands from investigative authorities or regulators, dispute resolution, rights protection, fraud prevention, or anti-money laundering purposes.

6. Processing delegation and cross-border processing

To operate the service, the Company may entrust work to domestic or overseas providers for infrastructure, payment/virtual asset processing, market data, game aggregation, identity verification, customer support, and security monitoring.

Examples include infrastructure (AWS), payment/virtual asset processing (Uniwire), market data (Bithumb), and game aggregation (Detrade). Actual providers and processing scopes may change with the service configuration, and the Company takes necessary management measures so processors do not process information for other purposes.

7. Measures to protect personal data

The Company implements reasonable technical and administrative measures, such as password hashing, access restrictions, log recording and monitoring, transport protection, internal permission management, and security event review. However, due to the nature of internet and digital asset services, all security risks cannot be completely eliminated.

8. Cookies and automatic collection tools

The Company may use cookies or similar technologies for login persistence, language and display currency storage, security session management, usage analysis, and user experience improvement. Users may restrict cookies through browser settings, but some features may not operate normally.

9. User rights

Users may request access, correction, deletion, suspension of processing, withdrawal of consent, and account closure. However, information required for legal retention, fraud investigations, dispute response, or transaction record retention may not be deleted immediately. Requests are received through the in-service customer support channel.

10. Personal data of minors

The service is intended for users aged 18 or older. The Company does not knowingly collect personal data from users under 18 or provide services to them. If minor use or information submission is confirmed, the Company may restrict the relevant account and processing of information.

11. Privacy inquiries

For privacy processing inquiries, rights requests, or complaints, please contact us through the in-service customer support channel. The Company will review submitted requests and respond within a reasonable period.