Redlab Games Privacy Policy

Effective Date: May 28, 2026

Redlab Games Inc. is based in the Republic of Korea. As a Korean-headquartered company, Redlab Games Inc. is required to comply with applicable Korean privacy and data protection laws, regulations and guidelines. We are also committed to comply with applicable privacy laws in those jurisdictions in which we operate.

1. Scope of "Redlab Games" Privacy Policy

This Privacy Policy covers the personal information used by Redlab Games Inc. ("Redlab Games," "we," or "us") across our apps, websites, game Services, and offline events. As the data controller, we handle personal data in cooperation with third parties, including data processors.

2. Personal Data Management

We collect only the data necessary for our services, with certain information collected with user consent. As noted below and depending upon your particular use of the Services, we collect information from you, from third parties, and automatically through your use of our Services, some of which is required and some of which is optional.

To use the Services, we require you to register, by providing your email address or contact information, by creating an account directly with Redlab Games, or by logging in through a third party account (Third Party Account); when you do so, Redlab Games collects the following required personal information:

Registration & Profile Information:

Google: Account ID, Member identifier value, profile name

Apple: Account ID, The value of the member identifier

Third party account data:

The personal information we collect when you login via a Third Party Account may depend on your privacy settings for that Third Party Account. We don’t control how such third parties collect, use and share your personal information. You should review the relevant third party privacy policy for more information.

The following information may be collected while you use the Services:

Game Character Names: We collect the character names users create in the games.

Age: For age verification purposes, we may collect date of birth from users before we permit them to use the Services.

Purchases: If you make a purchase within the Services through the relevant store, we may collect and maintain your purchase history and details however, we do not receive your credit card number.

Customer Service: We may collect emails, chat records, attachments and customer opinions for customer consultation, handling complaints and other business, delivering announcements, and performing customer support tasks.

Other Automatically Collected Info:

Device Identifiers. We may collect IP information, unique device identifier, device ID, advertising ID, application ID or other identifiers

Security Authentication: We may collect country/region and contact details for authentication purposes.

Activity and usage records, game scores, credits, access logs, improper usage record and fraud detection information, device information (model, service provider information, OS information, language and country information,), nickname, charactername

Domain name, browser type and operating system device type and other statistical or technical information related to your device or the version of our Services that you are using.

3. Use of Personal Information and Legal Grounds

We use your personal information based on the following legal grounds, and you may withdraw consent at any time where applicable. Your personal information is used for the following purposes under these legal grounds:

3.1 To fulfill our agreement with you:

For account registration

To provide and manage our Services

To process and verify purchases

To address your inquiries

3.2 For legitimate business interests:

To respond to requests, complaints, and communications, verify identity, process transactions, provide technical support, troubleshooting, and for other customer service purposes

To develop new products and Services

For member identification, fraud prevention, and detecting abuse

To notify friends of user activities, enable user search, and sign-up

To analyze user behavior, respond to needs and preferences

To organize and oversee contests

3.3 conduct research

To safeguard the rights, health, and safety of others

To assert, defend, or exercise our legal rights

To send event information, marketing messages, and advertisements

3.4 To comply with our legal obligations:

As required by law or legal process

To comply with binding requests

To adhere to child privacy laws

3.5 With your consent:

To track geo-location while using our Services

To send marketing newsletters (if you have not registered for the use of the Services

To send event information, marketing messages, and advertisements

To customize the content and information we send or display, offer personalized experiences, and support our advertising efforts

4. Disclosure of Personal Information

We do not sell or rent your personal information. We may share or disclose your personal information to third parties under the following circumstances while ensuring that all data sharing is conducted in a manner that guarantees a legal basis and protects user rights.

4.1. With User Consent

Personal information is shared with third parties only when the user has explicitly provided consent. Consent may be withdrawn at any time.

4.2. Compliance with Legal Obligations

Personal information will be provided in compliance with applicable laws when required by legal obligations, court orders, or regulatory requests.

4.3. Business Transfers and Mergers

In the event of a business transfer such as a merger, acquisition, or asset sale, personal information may be transferred to the new entity. In such cases, We will notify users after the transfer is completed.

4.4. Prevent and Protect Against Illegal Activities

Personal information may be disclosed to relevant authorities when necessary to prevent fraud, illegal activities, safety threats, or similar concerns.

4.5. Aggregated or De-Identified Information

We may share aggregated or de-identified information that does not individually identify users with third parties for purposes such as marketing, research, or analysis.

4.6. Sharing with Service Providers

We may share personal information with trusted third-party service providers for purposes such as operating our Services, processing payments, and providing customer support. These service providers process data on our behalf, with data security and confidentiality ensured through contractual agreements.

5. The service providers we may share your information with include:

6. Cookie Policy

6.1 Cookie Information

Cookies are small text files stored on your device that are transmitted by a website server to your browser.

6.2 Purpose of Use of Cookies

We analyze the access history and duration of visits for both members and non-members who visit our official website in order to identify and track user interest with user consent, and to provide personalized services by tracking website visits and other related information. We, along with third-party analytics service providers, may use tracking technologies such as cookies, web beacons, tags, and scripts to collect statistical data.

In addition to website management, we may receive aggregated data from third-party analytics providers utilizing these technologies to better understand how users access and use our website.

You have the right to prevent cookies from being stored on your hard drive.

You may configure your browser settings to allow all cookies, request permission before storing cookies, or block all cookies. However, please note that denying cookies may limit the availability of certain services.

[Method of Allowing or Denying Cookies]

Chrome

(PC) Click Settings in the upper-right corner of the browser > select Privacy and Security > move to Third-party Cookies to choose whether to accept or block cookies.

(Mobile) Tap Settings in the upper-right side of the app > tap Site Settings under Advanced Settings > navigate to Cookies to toggle the option to allow or block cookies.

Edge

Click on the Options menu in the right corner of the browser (e.g., Settings) > select Settings > click Cookies and Site Permissions from the left menu > select Manage and Delete Cookies and Site Data > toggle the Allow Sites to Save and Read Cookie Data (Recommended) option to enable or disable cookies.

Safari

(MacOS) Click Settings under Safari in the upper-left corner of the menu bar > in the Settings window, go to Privacy and toggle the Block All Cookies option to enable or disable cookies.

(iOS) Go to Settings > select Safari from the app list > under Privacy & Security, toggle the Block All Cookies option to enable or disable cookies.

Internet Explorer

Go to the Tools menu > select Internet Options > navigate to Privacy > click Advanced Settings.

We use Google’s external web log analysis tools (e.g., Google Analytics) to allow advertisers to place web ads and collect behavioral data.

Change Google Web Log Analysis Settings: https://tools.google.com/dlpage/gaoptout/

Please block cookies in accordance with the applicable method for other web log analysis tools.

Setting to Reject Targeted Ads

Online advertisers placing targeted ads: Google, Facebook, Apple, X

Method of collecting behavioral data: Automatically collected when visiting the official website or launching an app.

Behavioral Targeting Ads: Marketing technology that analyzes user online behavior and search history to provide personalized services.

Android: Tap Privacy Settings and select Block Ads.

iOS: Tap Privacy Settings and enable Limit Ad Tracking.

To change your cookie settings, please use the Cookie Settings menu at the bottom of the website.

7. Age Limit

We comply with the laws on age limits for the provision of services and the collection of personal information.

7.1 Prohibition on Collecting Personal Information of Children

We do not knowingly collect personal information from children, nor do we provide services to children. If it is determined that we have collected personal information from a child, we will immediately delete that data. If you believe that we have stored a child’s personal information, please either withdraw from the Services the child is using or contact our data security department immediately.

7.2. Application of Age Limits in Certain Countries

We comply with the age limit laws of each country.

EU: Under the GDPR, users under the age of 16 must have the consent of a parent or legal guardian.

US: Under COPPA, we do not collect personal information from children under the age of 13.

Japan: Under APPI, we do not collect personal information from children under the age of 16.

Taiwan: Under PDPA, we do not collect personal information from children under the age of 18.

Other Countries: We adhere to the relevant laws and regulations regarding age limits in each country. Age restrictions are implemented based on legal requirements in certain regions.

Additional verification may be required based on the laws of the country where the Services are being accessed. These measures are implemented in compliance with each country’s legal requirements.

7.3 Interest-Based Ads and Targeting Restrictions

We do not display or target interest-based ads to children.

7.4 Data Deletion Process

If we determine that we have collected personal information from a child, we will delete that data as quickly as possible.

Inquiries regarding the deletion process can be made through the customer service channel below.

7.5 Notice for Parents and Guardians

We recommend that parents or guardians monitor and guide their children’s online activities.

If a guardian discovers that their child is using our Services, please immediately withdraw from the Services in question. For assistance, please contact us promptly.

This policy applies to all our Services, and we are committed to continuously improving our privacy measures to securely protect children’s personal information.

If we provide Services specifically for children, their personal information may be collected and used.

7.6 Age Verification Process

When signing up for Services intended for children, we may require the user to undergo an age verification process.

The age verification process may request information such as the user’s date of birth, age, age group, and age verification documents (if necessary).

The information collected during the age verification process will comply with legal requirements and will only be used for the purpose of confirming eligibility for the services.

Once the user’s age is verified, the information used for verification will be immediately deleted or securely stored.

8. Data Retention Period

We adhere to the following standards regarding the retention period of personal data.

8.1. Data Retained During the Provision of Services

While users hold an account, personal information will be retained for the minimum period necessary to provide the Services. During this period, the user’s personal information will be used for the operation of the Services and will be deleted immediately upon account deletion or termination of the Services.

8.2. Retention of Data for Legal Obligations and Performance of Contracts

We may retain personal information when necessary to fulfill legal obligations or perform contractual duties. For example, if retention is required to comply with legal requirements or resolve disputes, the data in question will be retained for the minimum period required.

8.3. Data Deletion Process

If a user requests to delete their account via Game app > Settings > Information, their data will be securely deleted within a maximum of 7 days.

Additionally, when a request for personal information deletion is made, the data will be securely deleted within a maximum of 14 days, ensuring it is rendered irretrievable. Furthermore, the necessity of retaining data will be periodically reviewed, and any unnecessary data will be deleted or anonymized.

8.4. Retention of Data for Business and Research Purposes

Besides legal obligations, some data may be retained for a set period for research and business analysis. In such cases, the data will be anonymized or de-identified to prevent identification of individuals.

9. Security of Personal Information

In order to ensure the secure protection of your personal information, we have implemented the following security measures:

9.1. Technological Security Measures

Personal information is protected through encryption technologies (e.g., TLS, AES, SHA) during processing. Access to personal information is strictly limited to authorized personnel, with access rights kept to a minimum.

9.2. Physical Security Measures

The facilities that house our servers and databases are located in areas with strict security measures, and are protected using security cameras and entry/exit control systems.

9.3. Managerial Security Measures

Employees undergo regular training on personal information protection and security, and the Data Protection Officer supervises personal information protection and security tasks. In addition, when personal information processing tasks are entrusted to a third party, a strict agreement is executed that mandates compliance with security measures.

9.4. Response Plan for Personal Information Breaches and Intrusions

In the event of a personal information breach or intrusion, we will promptly notify the affected data subjects and take necessary measures to minimize any potential harm. We will swiftly implement recovery and replacement procedures for breached personal information and report the incident to the relevant authorities without delay.

9.5. Security Reviews and Audits

We conduct regular security audits to evaluate our security system and address any vulnerabilities. This process ensures that our personal information protection measures are being implemented effectively.

10. User Rights

You are entitled to exercise the rights set forth in this Privacy Policy at any time. The following outlines your rights regarding your personal information:

10.1. Right of Access and Data Portability

You have the right to request access to the personal information we have collected, including details regarding its usage. Additionally, you may request a copy of your personal information in a structured, commonly used format, and you may transfer such data to another service provider.

10.2. Right of Rectification and Erasure

You have the right to rectify any inaccurate or incomplete personal information. Under certain conditions, you may also request the deletion of your personal information that we hold. This right applies where your personal information is no longer required for the purposes for which it was collected, or if retention is necessary to fulfill a legal obligation.

10.3. Right to Restrict Processing

You have the right to request the restriction of the processing of your personal information. For instance, if there is a dispute regarding the accuracy of your personal information or if you object to its processing, you may request a restriction on processing.

10.4. Right to Object

You have the right to object to the processing of your personal information for certain purposes. In particular, you have the right to object to the processing of your personal information and the right to object to the use of your personal information for direct marketing purposes.

- Process for Withdrawing Marketing Consent

To withdraw consent for push notifications related to marketing messages in the game app: Navigate to Game > Settings > Notifications > disable push notifications.

10.5. Rights Regarding Automated Decisions

You have the right to object to decisions made about you that have legal consequences and are based on automated processing. You also have the right to request human intervention regarding the decision in question.

10.6. Withdrawal of Consent for the Use of Personal Information

You have the right to withdraw your consent for the use of your personal information at any time. However, please note that withdrawing consent may impact your ability to use certain Services.

10.7. Right to Non-Discrimination

You have the right to exercise your personal information protection rights without facing discrimination or adverse treatment.

10.8. Adjustments to the Provision of Data to Third Parties

If your personal information has already been shared with a third party, and you request the correction or deletion of your personal information, we will promptly notify the relevant third parties to ensure that the necessary updates or deletions are made

11. International Data Transfers

Your personal information will be processed in your country for the purposes set forth in this Privacy Policy. However, your personal information may be processed in countries outside of your home country in exceptional cases in order to provide the services.

When your personal information is transferred internationally, we take appropriate security measures in compliance with the laws of the country in question. For example, personal information is protected by using legal mechanisms such as standard contractual provisions or decisions on the adequacy of personal information protections.

You hereby expressly consent to the transfer of your personal information to such countries. In addition, you have the right to object to such transfers of your personal information at any time in the manner set forth in this Privacy Policy.

We may transfer your personal information to the following countries:

Republic of Korea

Japan

Other countries where we operate

12. Inquiries and Complaints

For any inquiries, complaints, feedback, or other matters related to personal information protection which arise while you use the Services, please contact the Data Protection Officer or the responsible department.

Data Protection Officer and Responsible Department

Department: Business Team

Contact: Customer Service

You also have the right to file a complaint with your local data protection authority, if you are not satisfied with the way we are processing your personal data.

If you do not consent to these changes, you may suspend the use of our services and request the deletion of your personal information at any time.