Privacy Policy

PLK Corporation (hereinafter “Company” or “PlayLottoKorea”) complies with relevant privacy laws and strives to protect the rights and interests of our members. This Policy may be amended in accordance with changes in laws or guidelines, and in such cases we will notify you via announcements (or individual notice).

01. Purpose of this Privacy Policy

The purpose of this Privacy Policy is to set out the technical and administrative principles that PlayLottoKorea applies when collecting, using and protecting personal data in connection with the registration and use of services (including marketing promotions), user identification and authentication, service provision and prevention of fraudulent use.

02. Items Collected & Purposes of Use

• Required information: ID (username), password, name, mobile phone number
• Optional information: e-mail address, real name, payment history, address
• Identity / adult verification: name, date of birth, CI (connecting information), DI (duplicate subscription information)
• Automatically collected information: IP address, date and time of visit, log records, payment records, cookies
• When requesting withdrawal/payout: name, bank account information (bank name, account holder, account number)
• Age restriction: PlayLottoKorea services are only available to users aged 19 or older.

For foreign users, optional information may be submitted via e-mail, customer center or fax.

03. Delegation of Personal Data Processing

When the Company entrusts the processing of personal data to a third party, it specifies in the contract that the entrusted party must comply with the Personal Information Protection Act and supervises the entrusted party to ensure safe processing.

04. Provision of Personal Data to Third Parties

As a general rule, the Company does not provide members’ personal data to third parties. However, data may be provided if the member has given prior consent or where there is a legal basis under applicable laws.

05. Retention & Destruction of Personal Data

Personal data is retained for the duration of service use and is destroyed without delay once the purpose of processing has been achieved. Where retention is required by law, the data will be stored for the period specified below and will not be used for purposes other than those required by law.

• Records on contracts or withdrawal of subscription (Act on Consumer Protection in Electronic Commerce): 5 years
• Records on payment and supply of goods/services (same Act): 5 years
• Records on consumer complaints or dispute resolution (same Act): 3 years
• Records on visits (Protection of Communications Secrets Act): 3 months
• Withdrawal/payout records (Income Tax Act, Basic National Tax Act): 5 years

Your ID (username) may be retained after account closure to prevent confusion in service operation. Account information deleted for violation of the Terms of Use may be stored for 1 year to prevent fraudulent re-registration. If you do not log in for 1 year or more, your account may be converted to a dormant account and stored separately.

06. Management of Personal Data (Access, Correction, Deletion)

• Members may access, correct or request deletion of their personal data and cancel membership via the “My Account” page.
• Until corrections or deletions are completed, the relevant personal data will not be used or provided.
• A legal representative or an authorized agent may exercise rights on behalf of the member; in such case, documents such as a power of attorney must be submitted.
• Members must not infringe on the privacy or personal data of others in violation of laws or this Policy.

07. Use of Cookies

The Company uses cookies to identify users and store minimal information necessary for service use. If you refuse to allow cookies, some features or services may not function properly.

08. Measures to Protect Personal Data

• Passwords are stored and managed in encrypted form, and identity verification is required when changing or confirming passwords.
• The Company operates security measures against hacking and computer viruses and performs data backups as needed.
• Access to personal data is limited to authorized personnel only, and compliance is regularly monitored and improved.
• When using services in public or shared environments, we recommend that you avoid using “auto-login” or “remember ID” functions and that you log out and close your browser after use.

08-1. Criteria for Additional Use or Provision

In accordance with Articles 15(3) and 17(4) of the Personal Information Protection Act, the Company may use or provide personal data without additional consent after considering the following:

• The degree of relevance to the original purpose of collection
• Whether the additional use or provision may unfairly infringe upon the member’s interests
• Whether appropriate security measures such as pseudonymization or encryption are in place

09. Privacy Officer & Contact

• Privacy Officer: 정성일
• FAX: 02-6008-2239

10. Duty to Notify

In the event of any additions, modifications, or deletions to this Policy, we will notify you at least 7 days in advance via our website announcements. You can review the details of any changes through the revision history.
Notice date: 2023-05-31 · Effective date: 2023-05-31

11. Related Authorities

• Personal Information Dispute Mediation Committee: 02-2100-2499 · kopico.go.kr
• Personal Information Infringement Report Center: 118 (toll-free) · privacy.kisa.or.kr
• Supreme Prosecutors’ Office Cyber Investigation Department: 1301 · spo.go.kr