PartyBrix Privacy Policy

한국어

This English text is provided for reference only. The Korean version is the official document, and it prevails in the event of any discrepancy in interpretation.

Nimblebites Inc. (the “Company”) values users’ personal information and, in order to protect users’ rights, processes personal information lawfully and manages it securely in compliance with the Personal Information Protection Act and other applicable laws of the Republic of Korea.

Through this Privacy Policy, the Company explains how personal information is handled — including its collection, use, provision and destruction — as well as the measures taken to protect users’ personal information and how users may exercise their rights. This Privacy Policy applies to the PartyBrix game service and systems provided by the Company.

Article 1. Collection of Personal Information

The Company collects the following items of personal information.

① Minimum information collected in order to use the game service

[Category] Game service use (members linked via an external platform)

• Items processed: [Required] user identifiers provided by each external platform (Google/Apple), game information
• Legal basis: performance of a contract for the provision of the service (Personal Information Protection Act, Article 15 (1) 4)

[Category] Game service use (guest play)

• Items processed: [Required] identifiers assigned to the device, such as a device identifier
• Legal basis: performance of a contract for the provision of the service (Personal Information Protection Act, Article 15 (1) 4)

When you sign up by linking an external platform such as Google or Apple, the Company collects and stores nothing beyond the member number and user identifier provided by that platform.

② Information additionally collected as necessary while using the service

[Category] Payment and withdrawal of subscription

• Items processed: information required for payment is collected directly by the payment gateway or the open market, so the Company does not separately collect or store it.

[Category] Customer support (one-to-one enquiries)

• Items processed: [Required] nickname, device name, OS version
• Legal basis: performance of a contract for the provision of the service (Article 15 (1) 4) and the user’s consent to the collection of additional information (Article 17 (1) 1)

[Category] Events and promotions

• Items processed: [Required] game information (nickname, etc.); for mobile prizes [Required] name and mobile phone number; for physical prize delivery [Required] name, address and mobile phone number; for withholding tax processing [Required] a copy of identification (resident registration card, driver’s licence, etc.) and a transfer confirmation
• Legal basis: the user’s consent to the collection of additional information (Article 17 (1) 1); withholding tax processing (Income Tax Act, Article 145)

The items collected may differ depending on the type of enquiry or event; the items stated in each service take precedence.

③ Information that may be collected in the course of using the service

• Information generated automatically while using the service: service usage records, records of improper use, access logs, IP address, cookies
• Identifying information of PCs and mobile devices: unique device identifiers (UUID, etc.), model name, carrier information, OS information, language and country settings

Article 2. Use of Personal Information

The Company processes personal information for the purposes below. Personal information being processed is not used for any purpose other than these, and where the purpose of use changes, the Company will take the necessary measures, such as obtaining separate consent.

① User management / use of the service
Identifying individuals, confirming intent to sign up, verifying age, verifying identity, preventing improper sign-up and use, providing content, retaining records for dispute mediation, handling complaints and other grievances, and delivering notices.

② Performance of the service contract and settlement of charges
Providing content, purchase and payment, refunds, delivery of goods, identity verification, and collection of charges.

③ Development of new services, marketing and statistical analysis
Developing new services, delivering promotional information such as events and providing opportunities to participate, providing services according to demographic characteristics, measuring access frequency or analysing users’ use of the service statistically, and providing event and promotion services.

Article 3. Provision and Entrustment of Personal Information

1. Provision to third parties

The Company processes users’ personal information only within the scope specified in the purposes of collection and use, and provides personal information to third parties only where the user has consented in advance or where there is a special provision under law. Otherwise, the Company does not provide users’ personal information to third parties.

2. Entrustment of personal information

① In order to process personal information smoothly, the Company entrusts personal information processing as set out below. Where the content of the entrusted work or the trustee changes, the Company will disclose this through this Privacy Policy without delay.

• Trustee: Amazon Web Services (Seoul) / Entrusted work: provision of the game service management platform (server infrastructure)

② When concluding an entrustment contract, the Company specifies in the contract or other documents — in accordance with the legal requirements of applicable law — matters such as the prohibition on processing personal information for purposes other than performing the entrusted work, technical and administrative protective measures, restrictions on re-entrustment, supervision of the trustee, and liability for damages, and supervises whether the trustee processes personal information securely.

Article 4. Destruction of Personal Information

1. The Company processes and retains personal information only for the period consented to at the time of collection, and destroys it without delay once it is no longer needed.

• Information for use of the game service: destroyed immediately after a 30-day grace period from the date of the withdrawal request (in order to address consumer complaints, resolve disputes, and handle unintended withdrawals caused by identity theft).
• Information and records of improper users: destroyed one year after the date of withdrawal, in order to prevent improper sign-up and use.
• Information collected for events and promotions: destroyed one month after the event or promotion ends.
  Note: the period may differ depending on the event or promotion; the period stated on the individual page takes precedence.

2. Where personal information must continue to be retained under other laws, it is moved to a separate database or stored in a different location.

• Act on the Consumer Protection in Electronic Commerce
  · Records on labelling and advertising: 6 months
  · Records on contracts or withdrawal of subscription: 5 years
  · Records on payment and the supply of goods: 5 years
  · Records on consumer complaints or dispute handling: 3 years
• Protection of Communications Secrets Act
  · Records on website visits (access logs, etc.): 3 months
• Framework Act on National Taxes
  · Books and supporting documents on all transactions prescribed by tax law: 5 years

3. Personal information recorded and stored in electronic files is destroyed so that the records cannot be reproduced; personal information recorded and stored on paper is destroyed by shredding or incineration.

Article 5. Rights of Users and Legal Representatives, and How to Exercise Them

1. Where the Company collects the personal information of a child under the age of 14, it obtains the consent of a legal representative, and does not collect such personal information without that consent.

2. Users may at any time exercise rights against the Company, such as requesting access to, correction of, deletion of, or suspension of the processing of their personal information.

• Users and legal representatives may withdraw consent to the provision of personal information (i.e. withdraw membership) at any time. To do so, use “Withdraw Membership” within the service. (Note that where personal information is destroyed as a result of withdrawal, related information created and accumulated while using the Company’s services may be destroyed together with it.)
• To exercise your rights, contact the Data Protection Officer in writing or by email (contact@nimblebites.io), and the Company will act without delay. However, where there are legitimate grounds, the Company may refuse a request for access to or correction of all or part of a user’s personal information; in that case it notifies the user of the refusal and explains the reason.
• Where other laws expressly specify that certain personal information is to be collected, its deletion cannot be requested.

Article 6. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information.

• Administrative measures: establishing and implementing an internal management plan; minimising and training personnel who handle personal information
• Technical measures: managing access rights to personal information processing systems, installing access control systems, encrypting personal information, and installing and updating security programs
• Physical measures: access control for systems and storage locations holding personal information

Article 7. Automatic Collection Devices and How to Refuse Them

1. The Company may use “cookies”, which store and retrieve usage information from time to time, in order to provide individually tailored services to users.

2. A cookie is a small text file sent by the server operating a website to the user’s browser, and it may be stored on the user’s device.

① Purpose of cookies: used to maintain login sessions and analyse visits in order to provide a more convenient service.

② How to install, operate and refuse cookies: users may refuse the storage of cookies through their web browser settings. However, refusing cookies may make it difficult to use tailored services.

• Microsoft Edge: [ ••• ] > [Settings] > [Cookies and site permissions] > [Manage and delete cookies and site data]
• Chrome: [ ⋮ ] > [Settings] > [Privacy and security] > [Third-party cookies]

Article 8. Data Protection Officer and Grievance Handling Department

1. The Company designates a Data Protection Officer and operates a responsible department in order to handle users’ complaints and provide remedies in relation to the processing of personal information. Users may direct any enquiry, complaint or request for remedy relating to personal information protection arising from use of the Company’s services to the Data Protection Officer or the responsible department. The Company will respond to and handle enquiries within 10 days.

• Data Protection Officer
  · Name: Lee Juyong, Team Lead
  · Telephone: 02-516-8283
  · Email: contact@nimblebites.io
• Department receiving and handling requests for access: Information Security Team

2. To obtain remedy for infringement of personal information, users may apply for dispute resolution or counselling to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Privacy Infringement Report Centre, and similar bodies. For other reports of and counselling on personal information infringement, please contact the organisations below.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Centre: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
• National Police Agency: 182 (ecrm.police.go.kr)

Article 9. Changes to This Privacy Policy

1. The English and Chinese translations of this Privacy Policy are provided for reference only. In the event of any conflict between the Korean original and a translation, the Korean original prevails.

2. This Privacy Policy takes effect on 1 September 2026.