Privacy Policy

[March 25, 2025]

GGQ Company (hereinafter referred to as “the Company”) abides by the Personal Information Protection Act and related laws to protect the freedom and rights of users. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, the Company establishes and publicly discloses the following Privacy Policy to inform users about the procedures and standards for handling personal information and to promptly and smoothly address any grievances.

This policy is effective as of [March 25, 2025].

Article 1 (Services Provided by the Company)

The Company provides users with the following services:

1. Maintenance and operation of the information networks such as 「https://ggq.gg」 and its subdomains
2. Online content registration, search, access, usage, and provision services
3. Services accessed via mobile/PC applications or web browsers
4. Other services developed by the Company or provided through partnership agreements

Article 2 (Purpose of Processing Personal Information)

The Company processes personal information for the following purposes. It is not used beyond these purposes without separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. User identification, confirmation of sign-up intent, age verification, prevention of misuse, membership management
2. Verification of legal guardian's consent for users under 14 and identity verification during rights exercise
3. Identification and communication for complaint handling, investigation, and result notification
4. Delivery of content, services, contracts, or invoices during service use
5. Payment, billing, debt collection, tax processing
6. Response to inquiries, notices, and service delivery
7. Analysis and service personalization based on demographics
8. Service validation, access statistics, usage records
9. Development of new services/products, personalized services, marketing, and advertising
10. Event and promotional participation and confirmation
11. Prevention and sanction of misuse, notifications, and record retention for dispute resolution
12. Data analysis for enhancement of provided services and content

Article 3 (Collected Personal Information)

Purpose	Details & Related Tasks	Collected Items
Membership Registration & Management	1. Confirmation of sign-up 2. Membership maintenance 3. Misuse prevention 4. Prevention of disruptive behavior 5. Notifications 6. Record retention for disputes	(Required) 1. Email address 2. Password 3. Date of birth (Optional) 1. Gender
Complaint Handling	1. Identification of complainant 2. Issue confirmation 3. Communication 4. Result notification	(Required) 1. Email address
Service Provision	1. Service/content delivery 2. AI performance improvement	(Required) 1. Email 2. Riot Games Korea account linkage ID 3. Game stats (e.g., win/loss) 4. Data generated by combining 2 & 3 5. Duplicate verification info (DI) 6. Nickname, AI interaction data (including media), behavioral usage data
Device Identification	IP address automatically collected upon network access	(Auto-generated) 1. IP address
Service Usage Record	1. Access logs, activity history, policy violations 2. Demographic analytics 3. Access frequency and statistics	(Auto-generated) 1. Website/app access logs 2. Usage history 3. Restriction logs
Social Login	Easy login via third-party platforms	(Required) Platform-specific ID and email (NAVER, Kakao, Google)
Marketing and Advertising	1. Product promotion 2. Event participation 3. Targeted service and ads 4. Personalized content via cookies	(Optional) 1. Email 2. Auto-collected info 3. Cookies

• Additional personal information may be collected during events or giveaways with separate notice and consent.

Article 4 (Retention and Use Period)

Purpose	Collected Information	Retention Period
Membership Registration & Management	1. Email 2. Password	30 days after account withdrawal; longer if under legal investigation
Complaint Handling	1. Email	Until resolution; longer if legal proceedings are ongoing
Service Provision	1. Email 2. Riot ID 3. Game stats 4. Combined data 5. DI	Until service completion or until required by law
Marketing and Advertising	1. Email 2. Cookies 3. DOB & gender (optional)	30 days after withdrawal; longer if in litigation
With User Consent	1. Email 2. Name 3. DOB & gender 4. Phone number 5. Game data	Until purpose is fulfilled
Other	N/A	May be retained as required by applicable laws

Additional retention as per law:

• Ad records: 6 months
• Contracts and withdrawals: 5 years
• Payment and delivery records: 5 years
• Complaints/disputes: 3 years

Article 5 (Processing of Pseudonymized Information)

Purpose	Pseudonymized Items	Retention Period
AI Chat Enhancement	Nickname, AI conversation logs (including media), behavioral data	5 years

Third-Party Provision of Pseudonymized Data

Recipient	Purpose	Data Items	Retention Period
Oracle Corporation	AI Chat Enhancement	Conversation logs (text/media)	5 years
Google LLC	AI Chat Enhancement	Conversation logs (text/media)	5 years

Note: Data is not transferred outside Korea due to use of local servers.

Article 6 (User Rights)

1. Users may request access, correction, deletion, or processing suspension at any time.
2. Requests may be submitted through the website or to the Company directly.
3. Legal representatives may act on behalf of users with proper authorization.
4. During correction/deletion, personal data will not be used or shared.
5. Certain requests may be restricted by law.
6. The Company confirms identity before processing requests.

Article 7 (Destruction of Personal Information)

1. Personal data is destroyed without delay after retention period or when no longer needed.
2. Destruction occurs within 5 days of expiration or obsolescence.
3. Electronic data is wiped (low-level format); paper records are shredded or incinerated.

Article 8 (Cookies)

1. The Company uses cookies for personalized service.
2. Purposes: Frequency analysis, preference tracking, targeted marketing
3. Users can disable cookies in browser settings.

Browser-specific cookie settings:

• Chrome: Settings > Privacy > Third-party cookies
• Edge: Settings > Cookies and site permissions
• Whale: Settings > Privacy > Third-party cookies

Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Article 9 (Outsourcing of Personal Data Processing)

Vendor	Service	Data Provided	Retention Period
Amazon Web Services	Data storage & server mgmt	Usage logs and stats	Until withdrawal or contract end
Oracle Corporation	Data storage & server mgmt	Usage logs and stats	Until withdrawal or contract end

Note: Local servers used—no overseas transfer occurs.

Article 10 (Pseudonymized Data Processing Delegation)

Vendor	Country	Method & Timing	Data Transferred	Purpose	Retention
Google LLC	USA	Online during AI training	Pseudonymized conversations, metadata	Infrastructure, R&D	Until fulfilled

Article 11 (Data Security Measures)

Technical Measures

• Encrypted databases and passwords
• Encrypted transmission of sensitive data
• Monitoring and defense against intrusion
• 24/7 threat detection and antivirus software

Administrative Measures

• Limited personnel access
• Regular staff training
• Internal data management plans
• Internet use restricted on data-handling PCs

Physical Measures

• Restricted access to storage rooms and systems

Article 12 (Pseudonymized Data Security)

• Pseudonymized data and keys stored separately
• Access rights strictly controlled
• Usage strictly for non-identifiable purposes
• Immediate deletion of re-identifiable data

Article 13 (Privacy Officer)

Chief Privacy Officer

Name	Position	Contact
Dooho Lee	Dev Team Lead	privacy@ggq.gg

Users may contact the CPO for any issues or complaints.

Article 14 (Access Request Department)

Access Request Department

Name	Position	Contact
Byungwook Park	Ops Team Lead	privacy@ggq.gg

Article 15 (Remedies for Infringement)

Users may contact the following for legal relief or complaints:

• Personal Information Dispute Mediation Committee: 1833-6972
• Privacy Infringement Center: 118
• Supreme Prosecutors' Office: 1301
• Cyber Police: 182
• Central Administrative Appeals Commission: 110

Customer Privacy Complaints Contact

Name	Position	Contact
Byungwook Park	Ops Team Lead	privacy@ggq.gg

Article 16 (Policy Changes)

1. Any changes will be notified via the website at least 7 days in advance (30 days for significant changes).
2. This policy is effective from March 25, 2025. Previous policies can be accessed via the link below.

Previous Privacy Policy (2024.12.18)