Supplemental Korean Privacy Statement
We, Dream Games Teknoloji A.Ş. (as of November 1, 2025, we will become Dream Games Dijital Teknolojiler A.Ş.), address this Supplemental Korean Privacy Statement only to residents of the Republic of Korea. This document supplements our Dream Games Privacy Policy (“Core Privacy Policy”).
Personal Data Destruction Procedures and Methods: When personal data becomes unnecessary due to the expiration of the retention period or the achievement of the processing purpose, we follow strict procedures to destroy the relevant personal data promptly and securely.
Even if the personal data retention period has expired or the processing purpose has been achieved, if there is a need to continue to retain personal data in order to fulfill legal obligations under other relevant laws, we will carefully assess the relevance between the processing purpose and the personal data items and continue to retain only the necessary personal data.
There are cases where we are required to retain personal data for a specific period of time in accordance with relevant laws and regulations:
| Law | Personal data | Retention period |
|---|---|---|
| Protection of Communications Secrets Act | Records of logins and IP addresses used | 3 months |
| Act on the Consumer Protection in Electronic Commerce | Records of labeling and advertisement | 6 months |
| Records of contract or subscription cancelations, etc. | 5 years | |
| Records of payment of prices and supply of goods, etc. | 5 years | |
| Records of consumer complaints or dispute settlement | 3 years | |
| Framework Act on National Taxes, Value-Added Tax Act, Corporate Tax Act | Accounting books and documentation relating to transactions, tax invoices and receipts | 5 years |
The procedure and method of destruction of personal data are as follows.
Destruction Procedures: When a reason for disposal arises, we identify the personal data to be destroyed. After obtaining the approval of our Data Protection Officer, we will proceed with the secure destruction of the identified personal data.
Destruction Methods: We store your personal data primarily in an electronic environment. To ensure comprehensive data protection, we use methods that guarantee the irreversible destruction of electronic records.
Overseas Collection of Personal Data: We collect and process your personal data overseas. Your personal data is collected and processed in countries including Türkiye, the United Kingdom, the United States, Belgium, Ireland and Israel.
Overseas Outsourcing and Storage of Personal Data
Legal Basis: Personal Information Protection Act Article 28-8(1)(iii) (Outsourcing and storage of processing for the performance of contracts)
| Recipient of personal data | Personal data transferred | Country of transfer | Time/method of transfer | Purpose of use of personal data by recipient | Retention/use period of personal data by recipient |
|---|---|---|---|---|---|
| Google Cloud EMEA Limited (Contact: googlekrsupport@google.com) | All user data collected | United States | Continuously over the Internet network | Storage of user data using the cloud | Within the retention period specified in this Privacy Statement, until the contract with us is terminated |
| Amazon Web Services, Inc. (Contact: aws-korea-privacy@amazon.com) | All user data collected | United States | Continuously over the Internet network | Storage of user data using the cloud | Within the retention period specified in this Privacy Statement, until the contract with us is terminated |
| AppsFlyer Ltd. (Contact: privacy@appsflyer.com) | Device ID and IDFV/IDFA | Belgium and Ireland | Continuously over the Internet network | Finding similar users (This transfer will only take place if you give your consent via your operating system settings) | Until you change the settings in your operating system |
Overseas Disclosure of Personal Data to Third Parties
Legal Basis: Personal Information Protection Act Articles 17(1)(i) and 28-8(1)(i) (Consent of data subjects)
| Recipient of personal data | Personal data transferred | Country of transfer | Time/method of transfer | Purpose of use of personal data by recipient | Retention/use period of personal data by recipient |
|---|---|---|---|---|---|
| Meta Platforms, Inc. (Contact: korealocalagent@support.facebook.com) | • Identifier For Advertisers (IDFA) • IP address • What Services of ours they have used • Date and time of when they used our Services • Inferred interests |
USA | Continuously over the Internet network | Delivering interest-based targeted advertising to data subjects | Until you toggle your cookie settings in-game. For more information, please see our Cookie Policy. |
| Google Ireland Limited (Contact: googlekrsupport@google.com) | Ireland | ||||
| AppsFlyer UK Ltd. (Contact: privacy@appsflyer.com) | UK | ||||
| Pecan AI Ltd. (Contact: info@pecan.ai) | Israel | ||||
| Unity Technologies (Contact: DPO@unity3d.com) | USA |
If you do not want your personal data to be transferred overseas, you can opt out by refusing to allow the transfer of your personal data or by asking us to stop the transfer overseas. However, if you refuse, you may not be able to use our services.
Withdrawing Consent to the Collection and Use of Personal Data: You have the right to withdraw your consent to the collection and use of personal data at any time. To do so, you may contact us using any of the methods described in the "Contact Us" section of our Core Privacy Policy.
Legal Grounds for Use of Cookies: The personal data collected through essential cookies and tracking technologies is processed based on the following legal grounds: (i) It is necessary for us to perform a contract with you or take steps at your request prior to entering into a contract per Article 15(1)(iv) of the Personal Information Protection Act; or (ii) It is necessary for us to realize a legitimate interest, where such interest clearly takes precedence over your rights, provided that the processing is substantially relevant to our legitimate interest and does not exceed a reasonable scope, per Article 15(1)(vi) of the Personal Information Protection Act. Your consent is relied upon to process your personal data through optional tracking technologies (i.e., performance and marketing technologies).
Designation of Domestic Agent: Our agent in the Republic of Korea for the purposes of (i) Article 31-2 of the Personal Information Protection Act, (ii) Article 32-5 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, and (iii) Article 31-2 of the Game Industry Promotion Act is as follows:
- KL Partners
Managing Partner Beomsu Kim
- 8/F, 88 Yulgok-ro, Jongno-gu, Seoul
- Phone: 02-6226-7700
- Email: klp@klpartners.com