Article 1 (Items of Personal Information Collected and Method of Collection)

  The company collects the minimum personal information necessary to provide services as follows.

  ① Personal information collection items

1. When registering as a member

Required: mobile phone number, email address

2. In the case of service use and processing

Required: service use record, access log, cookie, access IP information, MAC address, operating system type and version information, device information, member account information (bank name, account number, name of account holder), user location information, identity verification value (CI) , DI), address (for card collection), mobile phone number, name, date of birth, gender, Korean/foreigner

3. In the process of charging, payment, and refund

Required: Merchant name, terminal information, card information (card number, CVC number, expiration date, recent transaction history, holding balance), account information (bank name, account number, name of account holder)

  ② How to collect personal information

1. Presented by the user through the application, website, written form, e-mail, fax, telephone, etc.

2. Collection through the automatic collection device of mobile devices such as computers or mobile phones

3. Provision from subcontractors

The company may receive online user activity information (behavioral information) that cannot be identified by a partner or collect it directly through a generated information collection tool, etc. The purpose of use and retention period set forth in these terms and conditions of agreement shall be followed.

In addition, the company may collect additional personal information while using the service, and in this case, separate personal information collection and use consent is obtained.

Article 2 (Purpose of Collection and Use of Personal Information)

  The company uses the collected personal information for the following purposes.

  ① Service user management and service provision

1. Identification of users for the conclusion, performance and termination of contracts for service provision

2.  Issuance, recharge, payment, and refund of your own card

3. Counseling related to service use, handling of civil complaints, and preservation of records for dispute resolution

4. Delivery of notices such as service changes

5. Prevention of unauthorized or unauthorized use of services by users

6. Records Retention for Dispute Settlement

7.  Online mall product delivery

8. Outbound calls for card receipt confirmation, card registration and instructions on how to use

9. Apply for income deduction

  ② Use for new service development and marketing/advertising

1. Development of new services and provision of customized services by collecting statistics on service use

2. Providing advertising information such as events and participation opportunities

Article 3 (Consignment of third party handling of personal information)

The company entrusts the handling of the user's personal information and part of the work necessary for the provision of the service to an external partner (hereinafter referred to as the "trustee"), and the details of personal information currently entrusted by the company to the trustee are displayed on the application screen or website, etc. This can be found in the published privacy policy.

Article 4 (Period of Retention and Use of Personal Information)

In principle, the company destroys the information without delay after the purpose of collection and use of personal information agreed by the user is achieved. However, if it is necessary to preserve it according to the internal policy or the provisions of related laws, the company keeps the user's personal information for a certain period as follows.

  ① Reason for information retention according to internal policy

1. Records of fraudulent use

- Reason for retention: Prevention of unfair or expedient receipt of economic benefits through repeated voluntary termination and prevention of illegal use through re-registration of blocked accounts
- Retention period: 1 year

2. E-mail address, ID, phone number

- Reason for retention: To prepare for other necessary cases, such as handling complaints from deleted members and settlement of transactions with affiliated organizations
- Retention period: 1 year

  ② Reasons for retaining information according to relevant laws

1. Records on contract or subscription withdrawal

- Basis for retention: Act on Consumer Protection in Electronic Commerce, Etc.
- Shelf life: 5 years

2. Records on payment and supply of goods

- Basis for retention: Act on Consumer Protection in Electronic Commerce, Etc.
- Shelf life: 5 years

3. Records on handling consumer complaints or disputes

- Basis for retention: Act on Consumer Protection in Electronic Commerce, Etc.
- Shelf life: 3 years

4. Records of electronic financial transactions in which the transaction amount per case exceeds 10,000 won;

- Basis for preservation: Enforcement Decree of the Electronic Financial Transactions Act
- Shelf life: 5 years

5. Records of electronic financial transactions in which the transaction amount per transaction is not more than 10,000 won

- Basis for preservation: Enforcement Decree of the Electronic Financial Transactions Act
- Retention period: 1 year

6. Website visit history

- Preservation Basis: Communication Secret Protection Act
- Retention period: 3 months

7. Records about identity verification

- Basis for preservation: Act on Promotion of Information and Communications Network Utilization and Information Protection
- Retention period: 6 months

Article 5 (User's right to refuse collection and use of personal information and disadvantages due to refusal)

  ① Users may not agree to the above collection and use of personal information. However, the above personal information is essential for the provision of my own card service.

  ② The company collects and uses personal information that is not essential for providing your own card service, such as marketing and event events, with the user's separate consent.

  ③ Users can check other information related to personal information in the company's privacy policy posted on the application screen or website.

addendum

Article 1  (Effective Date)

These terms and conditions are effective from July 22, 2021.