Privacy Policy

1 Introduction

1.1 Rainbow Rabbit INC. (hereinafter referred to as “Company”) collects members’ personal information as follows in order to provide various services to users (hereinafter referred to as “members”) and does its best to protect their valuable personal information. Accordingly, the Company takes measures to protect the personal information of its members by thoroughly complying with the Act on Promotion of Information and Communications Network Utilization and Information Protection, Privacy Act, Protection of Communications Secrets Act, Telecommunications Business Act. and other relevant laws and regulations that information and communication service providers must comply with.

1.2 The company does not collect sensitive personal information that may violate basic human rights, and it always makes it easy for members to see this privacy policy through the official homepage of the service provided by the company (https://rainbowrabbit.co.kr/privacy-policy/, hereinafter referred to as the ‘official homepage’).

1.3 Within the scope of the agreement of its collection and use, a Member’s personal information(device information, etc.) shall be accessed and collected only after his or her awareness and approval, and shall never be provided to a third party without separate consent.

2 Definition of Personal Information 

2.1 Information about an identifiable individual that may include his or her name, address, email address, phone number, race, nationality, ethnicity, origin, or age, sex, identifying number, code, symbol, finger prints, blood type, inherited characteristics, including information on others’ opinion about the individual, and personal views except those about other individuals. However, we do not collect social security numbers according to the law.

3 Agreement to Collect and Use Personal Information

3.1 The Company shall provide services that require you to sign up for an Account. When you do, we’ll ask for personal information, like your name, email address, telephone number. If you choose ‘I agree’, you consent to the collection of personal information

3.2 If you check the ‘Receive’ in relation to the reception of for-profit advertisement through e-mail or SMS in the procedure such as signing up, you consent to receive commercial information for commercial purpose.

4 Information to be collected and method of collection

4.1 The company collects the following personal information to provide better services for membership registration, consultation and application, data statistics, etc. This information includes:

 (1)  Rainbow Rabbit Platform (Common Game Service): ID, email, ADID, nickname, password, name, mobile phone number, profile picture, game service access history, access log and authentication date, payment history, game version, Number, etc.), mobile phone address book (mobile phone number, general phone number, name, nickname), game invitation ID

(2)  Kakao Platform Interconnection Service: Kakao mobile phone number, ADID, profile picture, game service access history, access log, payment history, game version, carrier information, device information (such as model name, OS version, serial numbers, etc) friends list.

(3) Band Platform Interconnection Service: Band membership number, nickname, profile picture, affiliated band lists, member information, exclusive band game.

(4) Facebook Login Interconnection Service: Facebook identifier information, Android ID, ADID, mobile phone number, profile picture, game service access history, access log, authentication date, a payment record, a game version, carrier information, and device information (model name, OS version, serial numbers, etc) and friends list.

(5) Google+ Login Interconnection Service: Google project membership numbers, Android ID, ADID, mobile phone numbers, profile picture, game service access history, access log, authentication date, a payment record, game version, carrier information, device information (model name, OS version, serial numbers, etc)

(6) Location-Based Service: GPS location information, base station location information, WIFI-AP information.

(7) Personal Authentication Service: encrypted personal identification information, duplicate registration confirmation information, date of birth, gender, internal / foreign information, (information for foreigners)

(8) Use of Charged Services: Transaction related information such as bank account information, credit card information, mobile phone number, email address, gift certificate number, etc.

(9) Participation in Events and Promotions or Optional Services: Name, address, phone number, mobile phone number, email address, identification card copy, bank account information

4.2 How We Collect Information About You

1.     Collection Method of Personal Information: Collect personal information through collecting tool by cooperative companies including homepage, written form, fax, telephone, Q&A board, and payment service, mobile game authentication, e-mail, event application, delivery request,

5 How We Use the Information We Collect

5.1  We may use the information we collect in the following ways

1.     To provide the products and services you purchase, respond to your questions, and carry out the transactions you have requested;

–       Billing for cash and paid service, delivery, payment for other purchases, shipping of goods or invoices, and self-certification

2.     Member management and identification

–       To detect and deter unauthorized or fraudulent use of or abuse of the Service

3.     Use of information with prior consent of the users (for example, utilization of marketing advertisement)

–       To make statistics on member’s service usage, to provide services and place advertisements based on statistical characteristics

–       To provide information on promotional events as well as opportunity to participate

–       Improvement of existing services and development of new services

5.2 We may engage third party companies and individuals to perform services on our behalf (e.g., without limitation, software maintenance services, advertising serving technologies, e-mail service providers, delivery services, database management, web analytics and other services). These third parties may have access to your Personal Information. If they do, this access is provided so that they may perform these tasks on our behalf and they are not authorized by us to otherwise use or disclose your Personal Information, except to the extent required by law. In addition, if you choose to participate in certain of our programs or to receive certain content we make available, we may share your Personal Information with participating sponsors, content providers, and related vendors in connection with such programs and content. As described in this Privacy Policy, we will not share your Personal Information with other companies or individuals unless we have received your consent.

6 Agreement to Disclose Personal Information to Third-Party

6.1 In principle, the Company does not use it beyond this scope or disclose the member’s personal information to the outside without the member’s prior consent. However, if a member agrees to disclose personal information in advance, or if there is a request from the investigative agency according to the provisions of the law or the procedures and methods prescribed by the law for investigation purposes, it will be disclosed to the outside.

6.2 The Company may share anonymized user evaluations and app reviews and anonymized information statistics with third parties for purposes including, but not limited to, statistics, machine learning, advertising, or marketing purposes.

6.3 The Company may disclose or transfer personal information as its operating asset in the course of an asset transfer, financing, or acquisition of the Company. However, under no circumstances will these transactions result in your information being used for any purpose other than what you agree with us.

7 Use of Period and Retention of Personal Information

7.1 In principle, the Company keeps the personal information of the member until the member leaves the membership, and after the member withdraws the membership or the purpose of collecting and using the personal information is achieved, the information is deleted without delay.

7.2 In accordance with the terms and internal policies, the Company holds personal information in accordance with Article 4 of this Agreement for the purpose of prevention of fraudulent use and consumer complaints and settlement of disputes for 30 days after the withdrawal of membership, your personal information will then be permanently deleted. However, if there is a dispute between the company and the member or the member and the dispute related to the dispute arises, a copy of the identification card of the related member and a copy of the identification card of the legal representative and the consent form shall be kept for three years.

7.3 The Company keeps personal information that needs to be preserved in accordance with relevant laws and regulations such as the Commercial Act and the Consumer Protection Act in Electronic Commerce etc. The items, reasons and duration of the personal information in the related laws are as follows

1.     Service Visit Record

(1)   Reason for Preservation: Communications Privacy Act

(2)   Retention Period: 3 months

2.     Record of Contract or Withdrawal

(1)   Reason for Preservation: Consumer Protection Act in Electronic Commerce etc.

(2)   Retention Period: 5 Years

3.     Record of identity verification

(1)   Reason for Preservation: Act on Information Network Promotion and Information Protection, etc.

(2)   Retention Period: 6 months

4.     Record of Payment and Goods Supply

(1)   Reason for Preservation: Consumer Protection Act in Electronic Commerce etc.

(2)   Retention Period: 5 Years

5.     Records of Consumer Complaints or Disputes

(1)   Reason for Preservation: Consumer Protection Act in Electronic Commerce etc.

(2)   Retention Period: 3 Years

8 Procedures and Methods of Destroying Personal Information

8.1 In principle, after the purpose of collection and use of personal information is accomplished, the Company will destroy the information without delay.

8.2 If the member does not use the service for a certain period of time or applies for membership withdrawal, the Company will keep the personal information for 30 days for the purpose of complaints and settlement of disputes. Then the personal information will be destroyed in a way that cannot be recycled.

8.3 When a member submits a membership withdrawal, the company keeps the personal information for 30 days for the purpose of complaints and dispute settlement of the consumer, and discards the collected personal information.

8.4 If the personal information is stored in the form of an electronic file, the collected personal information is deleted using a technical method that cannot reproduce the record. Personal information printed on paper is shredded or burned.

9 Protection of Personal Information of Children

9.1 The Company shall take the following measures regarding the protection of personal information of children under the age of 13

1. We do not knowingly collect personally identifiable information from children under 13 via our Service, and do not target our Service to children under 13. We encourage parents and guardians to take an active role in their children’s online activities and interests.

2. However, if the Company collects any personal information from children under 13 or equivalent minimum age as prescribed in the laws in relevant jurisdiction for the services for unavoidable reason, the Company will go through the additional procedure of the followings for protecting that personal information of children

– Obtain consent from the parents or guardian of children so as to collect personal information of children or directly send the information of products and services of the Company

– Give the parents or guardian of children a notice of Company’s policy of privacy protection for children including the items, purpose and sharing of personal information collected

– Grant to legal representatives of children a right to access to personal information of that children/correction or deletion of personal information/temporary suspension of treatment of personal information/ and request for withdrawal of their consent provided before

– Limit the amount of personal information exceeding those necessary for participation in online activities

9.2 The Company shall take the following measures regarding the management of personal information of members.

1. Members may withdraw their consent to the collection of personal information by writing, telephone, e-mail, etc. to the person in charge of personal information management. In such cases, except for the case where the company confirms the identity of the person, the Company takes necessary measures such as destruction of personal information concerned. However, if personal information is destroyed due to membership withdrawal, relevant information generated and accumulated by the member using the company’s services may be destroyed together.

2. Members may request to view and correct their personal information, and if so, the Company shall take necessary measures.

3. The Company shall confirm whether the Member’s agent is a true Representative of the Member when the Member’s visit is made and requests to be read or corrected. In this case, the Company may require the Company to present a certificate showing the proxy relationship.

4. The Company shall notify the member without delay and explain the reasons to refuse the request to read or correct the whole or part of the personal information of the member.

5. In order to provide a smooth and stable service, the Company shall notify the member concerned about the change of the essential input items of the member, because the change of the essential input items provided by the member at the time of membership is a matter that may cause errors in the service provided by the company. You can request the procedure separately.

10 Regarding the Installation and Operation of the Automatic Collection Device of Personal Information and its Rejection

10.1 In order to provide customized services to the members, the company operates a ‘cookie’ (cookie connection information file), which stores and retrieves information of members from time to time. Cookies are small text files that a server running a website sends to a member’s browser or app on a member’s computer or device. The Company identifies members’ computers and mobile phones in connection with the operation of cookies but does not personally identify members.

10.2 Members have the option of ‘cookies’. Members can accept all cookies by selecting [Tools]> [Internet Options]> [Security]> [User-defined level] in the web browser, or by setting them in the mobile device settings or options. Or, you can refuse to save all cookies. However, if you refuse to store all cookies, you will not be able to use the services provided by the company through cookies.

11 Technical and Administrative Protection Measures for Personal Information Protection

11.1 In dealing with the personal information of the member, the Company takes the following technical and managerial protection measures in order to ensure the safety so that personal information is not lost, stolen, leaked, altered or damaged.

1. The Company grants access to the personal information processing system only to the personal information manager or personal information handler required to provide the service.

2. The password of the member is encrypted so that the operator cannot know the password of each member.

3. The company is doing its best to prevent intruders from hacking or computer viruses and to prevent the leakage of personal information of members by using a device that prevents intruders from outside.

4. The company backs up the data from time to time in preparation for the compromise of personal information and uses the latest vaccine program to prevent personal information or data of members from being leaked or damaged and to securely transmit personal information on the network through encrypted communication etc. And other systematic security measures to ensure that all the technical equipment is trying to have.

11.2 The Company limits the person handling personal information to the person in charge of personal information management and the minimum number of persons.

1. Those who perform marketing, customer support, game operation, and delivery service directly to the members.

2. Person who performs personal information management duties such as personal information manager

3. Those who are inevitably required to handle personal information for business purposes

11.3 The Company conducts regular in-house training on the acquisition of new security technologies and personal information protection duties for personal information handlers.

11.4 The personal information handler’s takeover of the business is carried out thoroughly with security maintained and the responsibility for personal information accidents is clarified when entering / leaving.

11.5 The Company shall not be held responsible for any problems caused by leakage of personal information such as ID, password, resident registration number and e-mail address due to member’s negligence or PC / Internet problem.

12 Customer Service on Personal Information

12.1 In order to protect the personal information of the member and to handle complaints related to the personal information, the Company appoints the personal information protection appointee and personal information protection manager as follows.

1.     Personal Information Protection Appointee & Manager

(1)   Name: Jimin, Kim

(2)   Department / Position: Digital Contests Biz Team

(3)   E-mail: help@rainbowrabbit.co.kr

(4)   Tel: 82316230221

12.2 If you need to report or consult about other privacy infringements, please contact the following organizations.

1.     Personal Information Infringement Notification Center (http://privacy.kisa.or.kr / 118)

2.     Electronic Transaction Dispute Resolution Committee (http://www.ecmc.or.kr / 1661-5714)

3.     Cyber Security Bureau, National Police Agency (www.ctrc.go.kr / 02-392-0330)

4.     Cyber Safety Division, Supreme Prosecutors’ Office (http://www.spo.go.kr / 02-3480-3571)

13 Obligation to Notify

13.1 This Privacy Policy will notify you through the website or other means at least 7 days prior to enforcement of the Privacy Policy, which will be updated as additions, deletions and modifications are made.

13.2 We will notify you at least 30 days in advance of any significant changes in your rights, such as collection and use of personal information, and provision of third parties.

14 Conforming to GDPR 

14.1 The Company shall process Members’ personal data based on the GDPR. We process your personal data for the purposes stipulated in the preceding paragraph based on the following legal grounds.

14.2 The Company processes Members’ personal data for the following purposes.

1. To deliver content such as games, video, and music, and provide related services

2. To contact and communicate with Members to respond to their inquiries and complaints

3. To complete a transaction or service requested by Members

4. To notify Members about a change to this Privacy Policy or the Terms of Service, if necessary

5. To allow Members access to limited-entry areas of the Services

6. To resolve disputes with Members

14.3 The Company processes Members’ personal data to pursue the interests below.

1. To develop services, compile statistics, analysis, questionnaires, and other marketing activities intended to improve services

2. To fulfill marketing or promotional purposes

3. To ensure that the Services are relevant to Members’ needs

4. To create and publish content that is the most relevant to Members

5. To process strictly necessary cookies

14.4 The Company requires the Members’ consent while processing personal information for the following purposes.

1. To process cookies (excluding crucial ones) as well as Members’ personal data obtained through such cookies

2. To provide Members with special offers, updated information and other new services from the Company or other affiliated third parties, or to forward promotional materials if Members have requested this information or provided their consent for the Company to do so

3. To deliver newsletters or other information that Members request

15 Conforming to California Consumer Privacy Act (CCPA)

15.1 The Company may have collected the following categories of information from and about you in the preceding 12 months:

1. Identifiers, which may include name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers

2. Personal Information categories contained in customer records, which may include name, signature, address, telephone number, bank account number

3. Commercial information, which may include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

4. Internet or other similar network activity, which may include browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement

5. Geolocation data; which may include physical location

6. Inferences drawn from other personal information, which may include a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

16 Others

16.1 The Company may provide members with links to other companies’ websites or materials. In this case, the Company has no control over external sites and materials and cannot be held responsible for the usefulness, truthfulness, or legality of the services or materials provided.

16.2 If you click on a link that contains a company and move it to a page of another site, the privacy policy of the site is irrelevant to the company, so please check the policy of the new site.

Addendum :  01 AUG, 2023.

This Agreement will be effective on 01 AUG, 2023.