Privacy Notice
This privacy notice is a summary of our Privacy Policy. These summaries are intended solely to simplify things and the full contents should be read as they take priority in the event of any ambiguity or conflicts. So be sure to read the whole privacy policy carefully.
The Data Controller for Personal Information
The Data Controller for personal information is KRAFTON, Inc.
KRAFTON, Inc. will collect, store, use, and share the data to provide Services. We will be acting under a legitimate interest to legally process the data for the management of the data subject and to fulfill the contractual requirement.
The Collection and Use of Personal Information
We collect your information in two ways:
1) Information collected directly from you (e.g. nickname, email address, mobile phone number)
2) Information collected automatically (e.g. device info such as model, OS version, device ID)
For details, see "2. What Information Do We Collect" of Privacy Policy.
The Purposes of The Processing for Personal Information
We use your information to operate our Services and to improve the quality of the Services. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations, and given our legitimate interest in being able to provide and improve the functionalities of Services.
For details, see "3. How We Use Your Information" of Privacy Policy.
Sales and Sharing of Personal Information
We share your information to provide you with the best service environment, for example, with cloud service providers. However, we do not sell personal information to third parties and do not share personal information with third parties for the purpose of cross-context behavioral advertising.
For details, see "4. How We Share Your Information" of Privacy Policy.
Data Protection and Transfer to Third Countries
We have put in place appropriate security measures, including encryption and de-identification to protect your information. When we transfer your information to countries and other regions outside of your location, we will take reasonable steps to safeguard the privacy of your information.
For details, see "6. International Data Transfers" and "10. Security of Your Information" of Privacy Policy.
Contact Details
If you have any questions about this notice or our Privacy Policy, please contact us at your convenience. We endeavored to fully answer your request in good faith.
The contact details of KRAFTON are:
- Contact Information: privacy@krafton.com
- Address: 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea 06142
Privacy Policy (Effective Date: 10.14.2026)
anchor : #en1
2. What Information Do We Collect
3. How We Use Your Information
4. How We Share Your Information
5. Cookies and Related Technologies
6. International Transfer of Personal Information
7. Retaining and Deleting Personal Information
8. Our Policy Concerning Children
9. Links and Third-Party Services
10. Security of Your Information
Appendix. SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC
anchor : #en2
1. Overview
KRAFTON, Inc. ("Company", "we", "our", or "us") processes your ("you", or "user(s)") personal information in the course of providing all services ("Services"), including but not limited to websites and applications. We comply with applicable laws and regulations in the countries and regions where it conducts business, and establish and disclose the following Privacy Policy ("Policy") in order to protect users' personal information promptly and smoothly deal with the complaints related thereto.
1) Scope of the Privacy Policy
We provide and operate various Services, and each Service may have a separate privacy policy.
This Policy applies to KRAFTON Player Account (i.e. membership, game, website, event, survey, or customer service) ("Services"), and explains your rights regarding the processing of personal information, as well as how to communicate with us. This does not apply to personal information processed on other companies’ websites or applications linked to the Service.
2. What Information Do We Collect
We will collect and use the following categories that may directly or indirectly provide or operate our Services.
1) Personal information that you provide directly
- Email address, mobile phone number, password, date of birth, nickname, survey response data, country of residence, (including preferences and demographic information), (if applicable) platform information, and (for users with the Parental Control System applied) nickname, email address of the child, and service usage records, to provide or operate membership Services.
- Email address, inquiry details, and (if applicable) primary language used, when using customer support Services
- Email address, mobile phone number, nickname, when participating in promotions, such as events or survey (if applicable) information required for giveaway and/or tax(e.g. name, address, (if applicable) tax id, etc.)
2) Personal information we collect automatically
- User identifier
- Consent history (i.e. legal document such as Terms of Service and Privacy Policy, etc.) (such as user identifier, consent date and time, IP address)
- Service usage records (such as user identifier, visit date and time (access records), IP address, records of unauthorized use (sanction information))
- Device information (such as OS information, browser information, language used, etc.)
- Cookies (more details in Cookie Policy)
anchor : #en3
3) Personal information we collect from other sources
If you use our Services by linking an external platform account, we use your social platform information to operate our Services. You may link or unlink your account at any time via "Settings - Link" and depending on the account creation method you choose, we may support simplified linking of external accounts. Please check the names of the platform providers that support account linking and the personal information items provided to us by each platform below.
- Valve Corporation, Qingfeng (Beijing) Technology Co., Ltd: Platform ID, platform nickname, profile image
- Microsoft Corporation, Google LLC, Reddit, Inc., TIKTOK PTE. LTD., Shenzhen Tencent Computer Systems Company Limited: Platform ID, platform nickname
- Sony Interactive Entertainment Inc.: Platform ID, platform nickname, email address, age, date of birth, Parental Control setting status, country of residence
- Epic Games, Inc., Amazon.com, Inc., Apple, Inc., Twitch Interactive Inc., Discord, Inc., Meta Platforms, Inc., X Corp., V Kontakte: Platform ID, platform nickname, email address
3. How We Use Your Information
We process your personal information for the following purposes.
- To identify users and confirm their intent to use the Service;
- To analyze the Service usage environment and improve usage experience;
- To improve the quality of the Service and develop new services;
- To manage inquiries and requests;
- To support Service failures and secure stability;
- To prevent illegal (fraudulent registration) or unauthorized use;
- To secure and protect your account;
- To restrict violations of laws and our Terms of Service;
- To analyze your interests and Service usage patterns based on service usage records and survey response data;
- To provide advertising information on promotions, such as playtests, pre-registrations, launches, updates, and events, provided by us and our affiliates (see list), and other information on Service-related cross-marketing;
- To provide personalized content and benefits related information based on the analysis of your interests and Service usage patterns;
- To select and contact winners, verify winner information, provide giveaways, and process tax payments; and
- To notify you of the usage status of, and other changes related to, services linked through your KRAFTON Player Account.
anchor : #en4
We will notify you of relevant matters and obtain your consent in order to legally process your personal information, but if permitted by applicable laws and regulations in the country or region where we operate its business, your personal information will be processed based on one of the following legal grounds.
- When necessary to perform a contract with a user or take measures at the user's request in the course of the process of concluding a contract
- When there are special regulations in the law or it is inevitable to comply with legal obligations
- When it is deemed necessary for the significant interests of the user or a third party
- When it is necessary to investigate and take measures to prevent fraudulent registration and use, security, privacy, and restrict violations of laws and our Terms of Service
- When personal information processing is necessary to pursue legitimate interests of us or a third party within the scope that does not infringe on your privacy rights, interests, and freedom
- When it is necessary to achieve the legitimate interests of us manifestly superior to the rights of the user. In such cases, processing shall be allowed only to the extent the processing is substantially related to our legitimate interests and does not go beyond a reasonable scope.
anchor : #en5
4. How We Share Your Information
We use personal information within the scope notified in "3. How We Use Your Information". In principle, we do not use or share any personal information beyond the scope without your prior consent. However, exceptions are made in the following cases.
1) When there is an obligation to share personal information in accordance with relevant laws and regulations
- We may provide personal information in accordance with lawful procedures, such as when an administrative agency or investigative agency requests the provision of personal information in accordance with relevant laws and regulations, in the form of a warrant or a written document stamped with the seal of the head of the agency.
2) When outsourcing certain tasks to third parties
- We may provide and operate tasks such as cloud computing services, customer support services to third parties for service operation, etc. We have stipulated matters for the safe management of personal information for the relevant trustee, and some of the outsourcing tasks are processed overseas.
3) Joint use with an affiliated company
You may use services provided by our affiliates by logging in with your KRAFTON Player Account, in which case your personal information processed in connection with your use of such services may be jointly used with the affiliated company. In this process, cross-border data transfers may occur. For more details, please refer to the following document (Learn more).
4) Other
We may share your personal information where such disclosure is essential to comply with a legal obligation or a lawful data access request related to the provision of Services, pursuant to a merger or acquisition, with our subsidiary companies (LIST: https://krafton.com/en/studios/) for the purposes described in this Policy, or where you have otherwise provided your consent or at your request.
anchor : #en6
5. Cookies and Related Technologies
We may automatically collect and use your personal information to analyze the Service usage environment and improve usage experience. We strive to provide a safe and fair gaming environment for all players. When you use our Services, we or third parties may use cookies and similar technologies, or collect data about your machine or device, for fraud prevention, security and authentication purposes. For more information about this section, please refer to the Cookie Policy.
anchor : #en7
6. International Transfer of Personal Information
We provide and operate the Services globally so we may transfer your data directly to other regions (i.e. United States, Japan, and South Korea) where you are located in. When your personal information is transferred, stored, or processed overseas, we take reasonable measures to protect the privacy of your personal information, including, where appropriate, entering into confidentiality and standard contractual provisions with suppliers. The transfer of personal information overseas is essential for the operation and provision of Services. If refused, the Services cannot be provided.
anchor : #en8
7. Retaining and Deleting Personal Information
In principle, the personal information is destroyed when the purpose of collecting and using personal information is achieved. Examples of achieving the purpose of collecting and using personal information are as follows:
- When the user requests withdrawal of membership or deletion of their personal information
- When we terminate the provision of services
- When the processing of the inquiries or complaints is completed
- When the necessary procedures for providing promotions (such as events prize issuance, tax payment processing, etc.) are completed
When personal information is stored in physical form we will shred or incinerate the forms, or it is stored electronically we will delete using technical measures in a way that the information cannot be copied. However, we may retain your personal information even after you withdraw your account or we have ceased providing Services to you, if it is reasonably necessary to comply with our legal obligations, meet regulatory requirements, resolve disputes, prevent fraud, cheating or abuse, or enforce this Policy or other agreements we may have with you.
anchor : #en9
8. Our Policy Concerning Children
When we process information of users below the digital age of consent (referred to as "Children"), we obtain consent from parents or guardians for the collection of personal information from their Children before they use our Services. If you are a parent or guardian and you believe your Child has provided us with information without such a process, you can contact us to request the deletion of your Child's information.
anchor : #en10
9. Links and Third-Party services
If you click on a link to a third-party website, including but not limited to advertisements, you will leave our website and go to the website you selected. Since we cannot control the activities of third parties, so we cannot guarantee that they will adhere to the same privacy and security practices as we do. If you visit a third-party website linked to the Service, please check their Privacy Policies of the site before providing personal information.
anchor : #en11
10. Security of Your Information
We establish and apply the following optimal management, technical, and physical protection measures to prevent the loss, theft, leakage, forgery, alteration or damage of personal information.
1) Managerial Protection Measures
- Establishment and implementation of internal management plans, regular employee training, supervision of security compliance of contracted companies, etc.
- Obtained ISMS-P certification (Information Security and Privacy Management System) (Certification No.: ISMS-P-KISA-2025-010)
- International standard Information Security Management System (ISO/IEC 27001) certification obtained (Certification No.: IS 839564)
- International standard Privacy Information Management System (ISO/IEC 27701) certification obtained (Certification No.: PM 839565)
2) Technical Protection Measures
- Management of access to personal information processing systems, installation and operation of access control systems, encryption of personal information, installation and operation of security programs, etc.
3) Physical Protection Measures
- Access control of server room, data storage rooms, etc.
4) Implementation of and compliance with the Policy
- We check the implementation of the Policy and the compliance of the controller, and if any problem is found, we immediately correct and rectify.
- However, we are not responsible for any problems caused by the leakage of personal information, such as passwords due to your own negligence or problems on the Internet.
anchor : #en12
11. Your Privacy Rights
You may exercise the following rights at any point in time in connection with your personal information. To exercise such rights, please email us at privacy@krafton.com or visit our support page(support.accounts.krafton.com) to request your rights. Please note that at least your email address will be required to submit a request, and additional information may be required so we can verify you. If you exercise your rights via email, you must specify the right(s) you wish to exercise. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. However, we may decline to process requests which are not otherwise required by applicable law.
1) Right to Know & Right to Access
You can go to "Setting" to view your personal information and request access to your personal information at any time or you can request us by email.
2) Right to Delete
You have the right to request that the personal information collected from you be deleted. However, we collect minimum personal information from you to provide you a Service. If you ask us to delete required items, you may no longer be able to access or use our Services. To submit your request, please email to us privacy@krafton.com or visit our support page. Some personal information may be exempt from such requests under law. We may still retain your personal information to comply with our legal obligations, meet regulatory requirements, resolve disputes, prevent fraud, cheating or abuse, or enforce this Policy or other agreements we may have with you.
3) Right to Correct
You have the right to correct your personal information. You can edit your personal information via the "Setting" menu or email to privacy@krafton.com.
anchor : #en13
12. Amendments
We always post the latest privacy policy through "Privacy Policy" at the bottom of the website. We can change the Policy, and if there is a significant change we will notify you in a way that is easy to understand. If the user does not agree to the changes and does not wish to use the Services anymore, you may withdraw your account. If you continue to use the Services after the changes are notified or posted on the Services, it will be considered as consent to the changed policy. In addition, we will separately request your consent if required by relevant laws.
You can view the previous Policy by clicking the link under "Privacy Policy change history" at the bottom of this page.
anchor : #en14
13. Contact Us
If you have any questions about this policy or our processing of your personal information, please contact us at your convenience. We endeavor to fully answer your request in good faith.
- Name of Chief Privacy Officer: Sukbum Hong
- Affiliation: Security Dept.
- Email: privacy@krafton.com
- Address: Yeoksam Center Field 231, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea
Appendix. SUPPLEMENTAL TERMS – JURISDICTION SPECIFIC
This portion of our Policy applies to residents of the jurisdictions indicated below. In the event of a conflict between the Policy and this section, this section supersedes and controls.
1. EEA and UK
If you are located in the European Economic Area (EEA) or the UK, you may lodge a complaint with an applicable data protection authority for your country or region where an alleged infringement of applicable data protection law occurs. You may also submit a request to exercise your rights with our representative. This representative is only for EEA and the UK residents. If a user residing in another country submits a request, the response time may vary depending on the data protection laws of that country.
Our representative in the EU is VeraSafe Netherlands BV, located at Keizersgracht 555, 1017 DR Amsterdam, Netherlands. To contact, please use the form available here: https://verasafe.com/public-resources/contact-data-protection-representative.
Our representative in the UK is VeraSafe United Kingdom Ltd., located at 37 Albert Embankment, London SE1 7TL, United Kingdom. To contact, please use the form available here: https://verasafe.com/public-resources/contact-data-protection-representative.
If we transfer your data outside of the EEA to a country that is not recognized by the European Commission as ensuring an adequate level of data protection, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws. These safeguards may include data transfer agreements implementing the most recent standard contractual clauses (a form of data transfer agreement pre-approved by the European Commission as providing adequate safeguards for personal data). You may ask for a copy of such appropriate measures by contacting us as set out in this Policy. We otherwise transfer personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest in a manner that does not outweigh your rights and freedoms.
2. United States
1) Privacy Rights for United States Users
Several U.S. states provide their residents with rights to:
a. Confirm whether we process their personal information;
b. Access and delete certain personal information;
c. Take their data from one location to another (data portability);
d. Opt-out of personal data processing for targeted advertising and sales;
e. Correct inaccuracies in their personal information, taking into account the information’s nature and processing purpose; and
f. Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise any of these rights submit a request form on our support page(support.accounts.krafton.com). To appeal a decision regarding a consumer rights request, follow the instructions in the written notice we will provide to you.
Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out right may submit a request to this designated address: (e-mail: privacy@krafton.com, Support center(support.accounts.krafton.com). However, please know we do not currently sell data triggering that statute’s opt-out requirements.
2) California
If you are a California resident, you may have additional rights as detailed below. Within the preceding 12 months, we have collected or disclosed the following categories of personal information about you:
a. Identifiers, such as ID, email address, mobile phone number, password, nickname, name, IP address, postal address, date of birth, (if applicable) platform information (platform ID, platform nickname), etc.
- How collected: When you access or use our Services, we collect this directly or indirectly from you.
- How disclosed: With our affiliates and service providers (e.g., platform service provider, cloud storage service provider, parent verification service provider, marketing platform service provider, online survey service provider, user communication and promotion operations platform provider, customer service provider, and deliver service providers)
b. Characteristics of protected classifications such as date of birth, language, nationality, demographic information provided through surveys (e.g., gender), etc.
- How collected: When you access or use our Services, we collect this directly or automatically from you.
- How disclosed: With our affiliates, subsidiaries, and service providers (e.g., cloud storage service provider, user communication and promotion operations platform provider, customer service provider)
c. Internet or other network activity, such as browsing behavior while using our Services (e.g., device model, OS version, MAC address, device ID, etc.), identifiers such as IP address.
- How collected: When you access or use our Services, we collect this automatically.
- How disclosed: With our affiliates, subsidiaries, and service providers (e.g., platform service provider, cloud storage service provider, marketing platform service provider, customer service provider)
d. Geolocation information obtained by IP address.
- How collected: When you access or use our Services, we collect this automatically.
- How disclosed: With our affiliates, subsidiaries, and service providers (e.g. platform service provider, cloud storage service provider, marketing platform service provider, customer service provider)
e. Commercial information, such as payout details, etc.
- How collected: When you purchase items in Services, we collect this automatically.
- How disclosed: With our affiliates, subsidiaries, and service providers (e.g., cloud storage service provider, customer service provider)
f. Audio, electronic, visual, thermal, olfactory, or similar information such as profile image (when you link in with a social media account), etc.
- How collected: When you access or use our Services, we collect this automatically.
- How disclosed: With our affiliates, subsidiaries, and service providers (e.g., cloud storage service provider, customer service provider)
We determine the retention duration for each of the categories of personal information listed above based on our business or commercial purposes for obtaining the information, our legal or regulatory requirements applicable to such information, and in relation to litigation or to protect our rights.
- Your California Privacy Rights
You may exercise the following rights at any point in time in connection with your personal information. To exercise such rights, please email us at privacy@krafton.com or visit our support page to request your rights.
Please note that at least your email address will be required to submit a request, and additional information may be required so we can verify you. If you exercise your rights via email, you must specify the right(s) you wish to exercise.
We will verify your identity and respond to your request within 45 calendar days. If necessary, we may take up to an additional 45 days to respond, for a maximum total of 90 days from the day the request is received, in which case we will notify you to explain the reason for the delay.
a. Right to Know & Right to Access
You have the right to request the following information from us up to two times within a 12-month period:
- the categories of personal information that we have collected from you over the past 12 months, and the specific pieces of personal information we have collected from you;
- the categories of sources from which personal information was collected;
- the business or commercial purposes for which personal information is collected;
- the categories of personal information that we have disclosed for a business purpose or sold during the past 12 months; and
- the categories of third parties to whom the information was disclosed or sold (if applicable).
b. Right to Delete
You have the right to request that the personal information collected from you be deleted.
c. Right to Correct
You have the right to correct your personal information. You can edit your personal information via email to privacy@krafton.com.
d. Right to Non-Discrimination
You have the right not to be discriminated against for exercising these privacy rights.
e. Right to opt-out of Selling and Sharing
You have the right to opt-out of the selling and sharing of your personal information as defined by California law by requesting that your personal information not be sold or shared in any form. With respect to targeted advertising, you can control the sharing of your personal information for targeted advertising purposes through our website by opting out from advertising cookies through the cookie banner.
HOWEVER, WE HAVE NOT "SOLD" PERSONAL INFORMATION TO THIRD PARTIES AS THAT TERM IS DEFINED BY THE CCPA WITHIN THE PAST 12 MONTHS. ALSO, WE HAVE NOT "SHARED" PERSONAL INFORMATION WITH THIRD PARTIES FOR THE PURPOSE OF CROSS-CONTEXT BEHAVIORAL ADVERTISING.
f. Rights for California Minors
Minors under the age of 16 have the right to request the deletion, correction, or copies of information publicly posted by you, such as on forums or bulletin boards.
g. Shine the Light
You have the right to request the categories of the personal information that we disclosed to third parties for their direct marketing purposes during the past 12 months and information on the relevant third parties. Furthermore, you may also request that your personal information not be disclosed to third parties for their direct marketing purposes.
h. Limit Use and/or Disclosure of Sensitive Personal Information
You have the right to limit our use of your sensitive personal information. However, WE DO NOT USE YOUR SENSITIVE PERSONAL INFORMATION for purposes that require us to offer this limitation option. If we collect your sensitive personal information, we will get your consent.
- Authorized Agent
You may designate another person or entity ("authorized agent") to act on your behalf in connection with your request for rights that are guaranteed by the CCPA. An authorized agent is a natural person or business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf to make a request to know or to delete.
To use an authorized agent for your request, we require that you provide signed permission to your agent. Your authorized agent can submit a request to know or delete by sending an email to privacy@krafton.com. If you contact us, we can offer you an authorized form for your agent to submit.
The above requirement does not apply should your agent have power of attorney pursuant to Probate Code sections 4000 to 4465. Please note that we may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf. Under the CCPA, your agent is responsible for implementing and maintaining reasonable security procedures and practices to protect your information and use your personal information only for the purpose of fulfilling your request.
If you have any questions about this Policy, or about exercising your rights described above, you can contact us by email at privacy@krafton.com.