NEXON KOREA
Last Updated: April 21, 2025
This Nexon Korea Open API Developer Privacy Policy (this “Privacy Policy”) describes how NEXON Korea Corporation (“Nexon”) handles and protects the information that we collect through our websites, games, mobile apps, and other interactive software products and services that we operate and that link to this Privacy Policy (collectively, our “Services”). If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact the publisher for the particular Nexon Service, which is the independent data controller responsible for your privacy information. For our contact details, please see Section XI. (Contact Us).
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us as described in Section XI (Contact Us).
California Residents: Click HERE for the California Notice at Collection contained in this Privacy Policy.
I. INFORMATION WE COLLECT
II. HOW WE USE INFORMATION
III. WHEN INFORMATION IS SHARED
IV. COOKIES AND SIMILAR TECHNOLOGIES
V. YOUR CHOICES
VI. DATA SUBJECT RIGHTS AND WITHDRAWAL OF CONSENT
VII. MINORS
VIII. HOW WE SECURE INFORMATION AND HOW LONG WE STORE INFORMATION
IX. INTERNATIONAL DATA TRANSFERS
X. CHANGES TO THIS PRIVACY POLICY
XI. CONTACT US
XII. ADDENDUM
o ADDENDUM I: RESIDENTS OF THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM: DATA PROCESSING AND PRIVACY INFORMATION
o ADDENDUM II: U.S. RESIDENTS: ADDITIONAL STATE (INCLUDING FOR CALIFORNIA RESIDENTS) PRIVACY INFORMATION AND DISCLOSURES
I. INFORMATION WE COLLECT
We collect information when you provide it to us, when you communicate with others using the Services, and when you otherwise use the Services. We also may collect information about you from other sources.
Information you provide to us.
When you register, contact us directly, or otherwise use the Services, you may choose to provide information to us, including:
· Payment information, including phone number, billing address, credit or debit card information and other payment information;
· Correspondence you send to us, including when seeking help from us or concerning security, including, contents of in-game and related messaging.
Communications with others.
When you communicate or share information with others through the Services (e.g., such as when you play our games, play certain multiplayer modes, use chat features, or participate in competitive game modes or live events), including through or by text, messages, chats, content (e.g., photos, videos, etc.), voice or otherwise communicating orally or in writing, we may access and store the contents of these communications and related information, unless such access and storage is prohibited by law. Where consent is required by applicable law, you consent to our recording, storage and disclosure of such communications and information that you send or receive consistent with this Privacy Policy and the NEXON OPEN API TERMS OF SERVICE.
Use of the Services.
We collect information related to or when you use the Services, including your Internet protocol (“IP”) address and other identifiers that are assigned to your device and application when you access the Internet or use the Services, including browser type, browser version, browser language setting, operating system, device name and type, MAC address and other device identifiers, information from your device (including information from and about your hard drive and other storage devices, central processing unit, random access memory, video card, and peripheral hardware, software and applications installed on your device), Internet service and mobile service provider, pages that you visit before and after using the Services, the date and time of your visit, download information, the links you click and areas you view within the Services, game metrics and usage data, and other standard server log information.
We may record gameplay and related personal info (such as your in-game name, build order, and in-game actions), and replay or otherwise make it available to other players without further notice to you. For example, players can watch each other play Games in various modes, and we may use gameplay footage to help promote or improve the Services. If you disclose any personal information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the personal info in accordance with this Privacy Policy.
We also collect additional information when the Services crash or otherwise encounter a problem, including system and driver data. Consistent with your device permissions, we may collect or derive location information from your device’s GPS signal, Bluetooth connections, nearby WiFi networks, and similar device information. We also may derive location from your IP address.
We may use third-party services, such as the YouTube API and related services for purposes of provision of the Services, including to collect store and otherwise use API data relating to users including YouTube channel, video information, and any other information necessary to provide the Services that incorporates the YouTube API Services (“API Client”). By using those API Clients, users are agreeing to be bound by the YouTube Terms of Services. Please see the following links for the YouTube Terms of Services and Google Privacy Policy:
• YouTube Terms of Services: https://www.youtube.com/t/terms; and
• Google Privacy Policy: http://www.google.com/policies/privacy.
Please note that you can revoke access to the YouTube API through the Google Security Settings page.
Information we obtain from other sources.
We may receive information about you from publicly and commercially available sources (as permitted by law), which we may, among other things, combine with other information we receive from or about you. In some cases, we may also receive information about you from service providers and third parties in connection with your use of the Services or your interactions with us on other platforms, which we may, among other things, combine with other information we receive from or about you. We also obtain personal info that developers and other players provide to us.
For example, we and other developers may allow you to use your Nexon account to log in to their service or platform. And if you choose to link your Nexon account with your account on a third-party social media and interactive platforms (e.g., Facebook, Google, Instagram, Apple, etc.), gaming (e.g., Steam, Epic, Discord, Twitch, etc.), or other similar website, service or platform, or if you interact with an ad or other media for or related to one of the Services on an external website or service, the company that operates that website or service may share some information with Nexon in accordance with their own privacy practices.
Your privacy settings on the other company’s website, service or platform typically control the specific types of information they can share with Nexon, so please be sure to review and update them regularly. Common examples for linked accounts might include your third-party account display name and user ID, as well as associated device information, name, email address and other profile information and activities.
You can also buy, download, or access some Services on or through services operated by third parties. If you do, they may provide us with information to facilitate your access to and use of the Services. This typically includes information like your display name, user ID, and device and region information. For example, you can choose to download, access and play the applicable Game and other games on gaming consoles and platforms (e.g., PlayStation®, Microsoft Xbox, Nintendo Switch, etc.) through your gaming console or platform account. When you do, the company operating that platform or service may share some information with us, which helps us do things like facilitate your gameplay and track your progression and entitlements, and other conduct, platform behavior and related activities. We will also process game telemetry data from your game sessions indicating, for example, how your avatar/player has moved and interacted in the applicable game or offering, which we do not consider to be personal data.
II. HOW WE USE INFORMATION
We may use, record, systematize, store, update or modify, retrieve, delete, or otherwise process your information for the following purposes, using manual or automated means:
Our payment processors use payment information as necessary to complete transactions or as otherwise required by law. We also may use the information we collect to:
Nexon’s legal basis to process information for these purposes include that the processing is necessary for:
For more information on how you can provide, withdraw or modify your consent, see Section V (Your Choices).
If you are located in the European Union, European Economic Area, UK or another country (e.g., Switzerland) that requires a legal basis for processing personal information, please see the Addendum I below for additional details about the purposes for which we process your information.
We limit when we share the information we collect to the following circumstances:
Within Nexon. We share information across the Nexon companies.
Business Partners. We share information with third-party partners and service providers, including payment processing and gateway companies, platform services, game developers, application developers, game publishers, game console providers, customer support services, cloud storage and hosting providers, social media companies (who may collect information when you use the Services or when you connect the Services to your gaming, application, social media, interactive entertainment or other technology accounts) and analytics and advertising companies, to help us provide and improve the Services and operate our business.
Without limiting the generality of the foregoing, or any other terms set forth herein, some of our sharing includes sharing some of our players’ game data with our community of developers who create applications and websites that benefit our player community and help us provide and improve the Services. You may opt-out of having your game data included in this program by opting out of game-data sharing in the relevant account management preference section (if applicable) or by otherwise contacting us as described in Section XI (Contact Us).
For more information about these business partners, please contact us at the contact details provided in Section XI (Contact Us).
Other Users. Your profile information and activity data, including your username and the content (e.g., pictures, videos, etc.) that you may provide, and information about your activities on or in connection with the Services may be visible to other users of the Services and third-party sites, applications, websites and services. For example, your game player data, including results, scores, platform activity and profile information may be viewed by other users of the Services and, for example, if you choose to link to third party platforms (e.g., social media sites), viewed by users of such platforms, sites and other applications. As noted above, when you use the Services (e.g., play the Games, etc.) note that some personal info will be publicly displayed and accessible to others, such as your handle, game statistics, performance and other game data. We may record gameplay and related personal info (such as your in-game name, build order, and in-game actions), and replay or otherwise make it available to other players without further notice to you. For example, players can watch each other play Games in various modes, and we may use gameplay footage to help promote or improve the Services.
Legal Purposes. We may provide your information to third parties when we believe that doing so is required by law or to cooperate with regulators or law enforcement authorities. We may disclose your information in order to protect the rights or property of Nexon, including enforcing the Terms of Service and End User License Agreement, and others, or when we believe that there is an emergency that poses a threat to the health or safety of you, another person, or the public.
Corporate Transaction. If Nexon is involved in a corporate transaction, such as a merger, acquisition by another company, asset sale, or in the unlikely event of bankruptcy, we may transfer your information to the successor organization in such transaction in accordance with applicable law.
With Your Consent. We may share information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent.
If you access the Services through third-party devices (e.g., consoles, etc.), websites, applications or platforms, these third parties may be able to collect and process information about you, including information about your activity on the Services, and they may, among other things, public display, notify others, including your connections on third-party services, and make other use of your information in accordance with their own privacy policies.
When you use the Services or interact with emails from us, we and our third-party business partners may collect and store information about your use of the Services using cookies, pixel tags, local storage, and similar technologies (collectively, “cookies”).
Cookies are small files that are automatically generated when you visit a website and are stored on your device. Pixel tags are very small images or small pieces of data embedded in images, also known as “web beacons” or “clear GIFs,” that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your device. Local storage is similar to a cookie except that it can store larger amounts of information and can be stored elsewhere on your device.
We allow third parties, including our analytics providers, advertising networks, and other advertising service providers, to collect information about your use of the Services across your applications and your different devices using cookies and similar technologies. These third parties may use this information to display advertisements on the Services and elsewhere online across different sites and services tailored to your interests, preferences, and characteristics. You can control the use and disclosure of the information for such purposes through Section V (Your Choices).
TO THE EXTENT PERMISSIBLE UNDER APPLICABLE LAW, YOU CONSENT TO THE USE OF NON-ESSENTIAL COOKIES AND OTHER TECHNOLOGICAL MEANS AS IDENTIFIED IN THIS PRIVACY POLICY WITHOUT PREJUDICE TO ANY RIGHTS YOU MAY HAVE UNDER APPLICABLE LAW TO LATER REFUSE OUR USE.
For certain jurisdictions, we will seek your consent the first time you access the Services. For information on how to refuse cookies, withdraw your consent or disable cookies through your web browser, please see Section V (Your Choices).
Nexon provides you with a variety of choices to control the use and sharing of your information, including:
Email Communications. You may opt out of receiving commercial email messages from us by following the unsubscribe instructions provided in our emails. Please note that even if you have opted out of receiving commercial email messages, you may continue to receive messages related to your account, your transactions, and similar service-related messages.
Geolocation Information. We may derive your approximate location from your IP address and other information we may collect for the purpose of determining your logical login history patterns, control your access to the Services, and to help us answer data protection requests. For more information, please review your device settings.
Cookies and Similar Technologies. You may be able to refuse or disable cookies by adjusting your web browser settings or changing the settings in your cookie banner. Because each web browser is different, please consult the instructions provided by your web browser (typically in the “help” section). Please note that you may need to take additional steps to refuse or disable local storage and similar technologies. For example, Adobe Local Shared Objects can be controlled through the instructions on Adobe’s Setting Manager page. Deleting the cookies in your browser may in some cases cancel your choices for interest-based advertising. If you choose to refuse, disable, or delete cookies and similar technologies, some of the functionality of the Services may no longer be available to you.
Do Not Track Signals and Similar Mechanisms. Some web browsers may transmit “do-not-track” signals to the websites with which the user communicates. Nexon currently does not take action in response to these signals.
Interest-Based Advertising. While it is not possible to turn off all advertising, you do have the ability to control whether you receive interest-based ads based on information collected or received about your online activities and interests over time and across unaffiliated sites and services and your different devices. You can opt out of receiving interest-based ads from companies that participate in self-regulatory programs such as the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), EDAA (EU), and DAAC (Canada) by following the instructions provided on their websites. If you are using a mobile app, you also may need to opt out of interest-based advertising on your mobile device or through the mobile application. For more information, check your device and mobile app settings. Please note that your opt-out choice will apply only to the browser and device you are using when you opt out.
Other Game and Device Permissions. You may be able to adjust your privacy settings for push notifications, address book sharing, and other information or features within the Services or your account management, device permissions or similar preference options. Please review the settings for the Services and your device for more information. To stop the collection of information by a Nexon game, you can uninstall the game using the standard uninstall process available on your device or the app marketplace or network from which you installed the game.
The laws in your country or specific territory may provide you rights to request access to, correct, restrict, port, copy, or delete your information, request that we delete your account, or withdraw or change the scope of your consent. You may also have the right to request that we stop processing your information.
If you withdraw your consent, we will stop processing your information for such purposes, but it will not affect the processing of information previously covered by your consent. Where technologically feasible and required by applicable law, we will port your information pursuant to your reasonable request. A request to withdraw consent, restrict or stop processing your information, or delete your account or information may result in your inability to access the Services or some of its features.
To exercise your rights consistent with applicable law, please contact us at the contact details provided in Section XI (Contact Us).
Before you are able to use the Services, we may ask you to provide age-related information to help us comply with applicable laws.
Where permitted by law, we collect information from minors (as defined under applicable law) when they provide it to us and when they use the Services. For example, when a minor registers, contacts us directly, or otherwise uses the Services, they may choose to provide information to us, such as their contact information (name, phone number, mailing and email address), user account information (such as username, nickname, password, profile picture, and language settings), demographic information (such as age, gender, and country), and any correspondence they send to us. We also collect information when a minor uses the Services, including their Internet protocol (“IP”) address and other identifiers; information about their browser, device or Internet or mobile service provider; and information about their use of the Services (such as the date and time of their visit, download information, the links they click and areas they view within the Services, game metrics and usage data, and other standard server log information). We collect additional information when the Services crash or otherwise encounter a problem, including system and driver data.
We collect, use, and disclose a minor’s information to:
Nexon’s legal basis to process information for these purposes include:
We limit when we share the information we collect from minors, under the following circumstances:
Business Partners. We share information with third-party partners and service providers, including platform services, game developers, application developers, game publishers, game console providers, customer support services, and cloud storage and hosting providers, to help us provide and improve the Services and operate our business. For more information about these business partners, please contact us as described in Section XI (Contact Us).
Within Nexon. We may share a minor’s information among Nexon companies for legal purposes, in connection with a corporate transaction, or with consent of the minor or a parent (subject to applicable law). If a minor accesses the Services through third-party devices or platforms, these third parties may be able to collect and process information about the minor, including information about their activity on the Services, and they may notify the minor’s connections on the third-party services, in accordance with their own privacy policies.
A minor’s profile, including their username and the picture that they may provide, and information about their activities on the Services may be visible to other users of the Services. For example, their game results, scores, and profile information may be viewed by other users of the Services.
For users in the United States, we do not knowingly collect or sell personal information from minors who are under the age of 13 without parental consent or unless permitted by applicable law. In such circumstances, parents have the right to review or delete personal information we collect from their minor children under the age of 13 and to withdraw parental consent that they have provided. To exercise these rights, contact us by emailing us as described in Section XI (Contact Us). We may request additional personal information to verify your identity as the parent of your child before responding to your request.
For users in the rest of the world (including, for example, the European Union, European Economic Area and United Kingdom): Where required under applicable law, parents or guardians may exercise the rights that their child may have in relation to their personal information (see Section V (Your Choices)). For example, subject to applicable law, parents may have the right to review their child’s personal information, direct us to delete such child’s personal information, and may refuse to allow any further collection or use of such child’s personal information (in all cases, subject to the requirements and restrictions set out in applicable law). Please keep in mind that a request to delete records may lead to a termination of Services. In some jurisdictions, minors may also exercise their data protection rights directly.
We maintain reasonable and appropriate physical, electronic, organizational, and procedural safeguards to protect your information. While we take reasonable precautions against possible loss, misuse, or unauthorized access, no storage system or transmission of data over the Internet can be guaranteed to be secure. Data we collect will be retained only for so long as reasonably necessary for the purposes set out above, unless applicable law requires otherwise. Please note that information collected by third parties may not have the same security protections as information you submit to us, and we are not responsible for protecting the security of such information, unless we are considered a responsible controller in relation to the processing of such information.
Information we collect may be transferred to countries outside your home country such as Korea, Japan, countries in Europe and the United States for the purposes set out in this Privacy Policy. You understand that some of these countries, including the United States, may not provide the same level of data privacy protection as in the European Union/European Economic Area or your home country. We will transfer your personal information where necessary to provide or otherwise enable the Services and perform the contract you entered into with us. If we need to transfer your personal data to another country that may not provide the same level of privacy protection as in your home country, we will apply necessary safeguards and security measures regarding transfers, as required by applicable law. Where applicable data protection law provides for the use of EU-approved Standard Contractual Clauses or other transfer agreements to lawfully transfer data abroad, we generally rely on such clauses for our transfers unless other transfer grounds are more appropriate. Depending on applicable law, you may ask for a copy or information about these transfer mechanisms by contacting us as described in Section XI (Contact Us).
We may make changes to this Privacy Policy, in which case we will notify you before such changes take effect by posting the updated policy through the Services or otherwise in accordance with applicable law. Any changes to this Privacy Policy will take effect after a reasonable time period as specified in the notice of such changes.
XI. CONTACT US
The privacy and security of your information is a top priority. If you have any questions or concerns about this Privacy Policy or our information practices, please contact us at:
Nexon Korea Corporation
7 Pangyo-ro 256 beon-gil
Bundang-gu, Seongnam-si
Gyeonggi-do, Korea
Email: m-support@nexon.com
European Union
VeraSafe has been appointed as Nexon's representative in the European Union/European Economic Area for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are located in the European Union/European Economic Area and your inquiry relates to the processing of personal data, please contact VeraSafe at:
VeraSafe Czech Republic s.r.o
Klimentská 46
Prague 1, 11002
Czech Republic
Contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative
You have the right to lodge a complaint with a data protection authority if you believe that our processing of your personal data violates applicable data protection laws. This right applies, for example, if you are located in the European Union/European Economic Area or in the United Kingdom.
A list of European Union/European Economic Area Union data protection authorities and their contact details can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
United Kingdom
VeraSafe has been appointed as Nexon's representative in the United Kingdom for data protection matters, pursuant to Article 27 of the United Kingdom General Data Protection Regulation. If you are located within the United Kingdom and your inquiry relates to the processing of personal data, please contact VeraSafe at:
VeraSafe United Kingdom Ltd.
37 Albert Embankment
London SE1 7TL
United Kingdom
Contact Form: https://verasafe.com/public-resources/contact-data-protection-representative
You can also bring any issues or concerns you have regarding your personal data to the attention of the Information Commissioner’s Office, which is the relevant supervisory authority in the United Kingdom.
ADDENDUM I: RESIDENTS OF THE EUROPEAN ECONOMIC AREA AND THE UNITED KINGDOM: DATA PROCESSING AND PRIVACY INFORMATION AND DISCLOSERS
Data Processing
Legal Basis Matrix
| Data Processing Purposes | Categories of Personal Data | Legal Basis |
| Operate and provide the Services and deliver requested products and information, including: · Providing technical support and maintenance; · completing transactions; and · responding to your questions or comments | · Nexon Account/Game Services · Country · Date of Birth · Email address/Username · Password · First/Last Name · Nickname · Profile Picture · CS Ticket/Chat Communication · Email Address · First/Last Name · Birth Month/Year · IP Address · Game Platform played · Nickname · Payment information · Browser Type · Browser Version · Browser Language Setting · Operating System · Device Name and Type · Windows Device ID for Nexon Launcher (hashed value) · Device Information (for reports of game issues during CS ticket submission): machine name, machine ID, OS, system manufacturer, system model, BIOS, and hardware information · Date and Time of Each Visit · Download History of Nexon Launcher and Games | Performance of a contract (Article 6(1)(b) GDPR), namely Nexon’s Terms of Service and End User Agreement (If you do not provide us this information, we may not be able to provide the Services to you.) |
| Deliver emails, push notifications, text messages, alerts, and other marketing communications about the Services and the products of our third-party partners | · Email Addresses (hashed when using 3rd party platforms/services) · Mobile Phone Numbers (hashed when using 3rdparty platforms/services) · Game Platform played (PS4, XB1, Steam, NxL, GFN, Mobile) · Country | Our legitimate interest in marketing our services and products to you – for sending advertising relating to our products and/or services that are similar to those you purchased or used (Article 6(1)(f) GDPR); Consent – for sending advertising relating to our products and services that are not similar to those you purchased or used or about products and/or services of our partners (Article 6(1)(a) GDPR) |
| Customize and deliver the content and advertising you see when using the Services or third-party websites and services | · Email Addresses (hashed when using 3rd party platforms/services) · Mobile Phone Numbers (hashed when using 3rdparty platforms/services) · Game Platform played (PS4, XB1, Steam, NxL, GFN, Mobile) · Country · Browser Language Setting · Links Clicked and Areas Viewed · Pages Visited Before and After Using the Services · Date and time of each visit | Consent (Article 6(1)(a) GDPR) |
| Link the different devices that you might use and combination of data across devices to analyze your use of the Services in order to: · customize advertising; and · provide and improve the Services | · Email Addresses (hashed when using 3rd party platforms/services) · Mobile Phone Numbers (hashed when using 3rdparty platforms/services) · Game Platform played (PS4, XB1, Steam, NxL, GFN, Mobile) · Country · IP Address · Browser Type for Trusted Device Function | Consent (Article 6(1)(a) GDPR) |
| Analyze and address prohibited activities, including by assisting our efforts in policing users who may develop or use hacks or cheats to gain advantage over other users of the Services, and to otherwise enforce the Terms of Service and End User License Agreement | · IP address · MAC address · Geolocation converted from IP address via third party IP database · Email address · Payment info · Browser Version · Browser Language Setting · Operating System · Internet and Mobile Service Providers (ISP and VPN) · Date and Time of Each Visit | Our legitimate interests in (Article 6(1)(f) GDPR): · ensuring the Services are safe for the users; · protecting our and third party rights, including property; and · establishing, exercising and defending legal claims |
| Analyze, develop, and improve the Services and new products and services, including by conducting and delivering surveys, polls, and research | · Do not store IP / Email addresses so any demographic / psychographic information isn’t attributable to the respondents · Browser Type · Browser Version · Browser Language Setting · Operating System · Device Name and Type · Device Information · Date and Time of Each Visit · Download Information · Links Clicked and Areas Viewed · Pages Visited Before and After Using the Services | Our legitimate interest of further growing our business and user acquisition (Article 6(1)(f) GDPR) |
| Keep a record of purchases and process it to comply with tax law requirements | · Payment information · Zip Code, State, City (for tax requirements) · Country · Language Preference (for payment receipt) | Comply with tax law requirements (Article 6(1)(c) GDPR) (If you do not provide us this information, we may not be able to provide the Services to you.) |
| Determine logical login history patterns for account security and to determine the country where you are located when using the Services | · IP Address | Our legitimate interest of ensuring the security of the Services (Article 6(1)(f) GDPR) |
| Distinguish between GDPR/CCPA deletion requests and other non-GDPR/CCPA requests (We use the information to determine the country where you are located when making the request) | · IP Address | Our legitimate interest in ensuring an appropriate response to requests (Article 6(1)(f) GDPR) |
| Access control: · Account Signup/Login · Whether to allow game access, marvel machine, specific item trade based on the user’s country · Whether to allow website access · Whether to redirect users to the appropriate regional website | · IP Address · Username (Email address) · Password | Our legitimate interests in ensuring the security of our services and enforcing geographic access restrictions (Article 6(1)(f) GDPR) |
ADDENDUM II: U.S. RESIDENTS: ADDITIONAL STATE (INCLUDING FOR CALIFORNIA RESIDENTS) PRIVACY INFORMATION AND DISCLOSURES
In addition to the information provided throughout this Privacy Policy, state privacy laws in the United States (e.g., if you are, for example, a resident of California, Arizona, Colorado, Connecticut, Montana, Oregon, Texas, Utah, Virginia, etc.) may provide certain additional rights and require certain regarding your personal information, as described below. The rights available to you will depend on the laws in the state where you live and these laws require that we disclose to residents of those states additional information about the processing of their personal information.
For individuals who are California residents, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”) requires, among other things, certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it. Below we include a notice of collection, describe the purposes for which we use and disclose personal information and for each purpose, the categories of personal information we use and disclose and the categories of third parties to whom we disclose the personal information, and other related rights, information and disclosures.
1. Notice of Collection for California Residents.
Details on the information we may have collected about you during the 12-month period prior to the last modified date of the Privacy Policy, and the sources of that information, are located in Section I (Information We Collect) of this Privacy Policy, and as described in Section 2 immediately below.
2. Categories of Personal Information Collected or Disclosed for a Business Purpose.
In the 12 months preceding the date of this Privacy Policy, we may have collected and/or disclosed for a business purpose the following categories of personal information as enumerated under the CCPA and other applicable state laws:
· Identifiers, including real name, user name, account name, postal address, email address, online identifiers, device identifiers, IP address, or mobile device identifiers;
· Account login data, including credentials enabling access to your Nexon account; for any third-party connected accounts, information from that third party specific to your account with them;
· Purchase information and user records, including phone number, billing address, credit or debit card information and other payment information;
· Characteristics of protected classifications under California or federal law, such as age or gender;
· Commercial or transactions information, including interactions with and records of products or services purchased, obtained, or considered;
· Internet and electronic network/platform activity, including browsing history, search history, and interactions with games, websites, email, communication features, applications, or advertisements;
· Geolocation data, such as location data derived from IP address or device settings;
· Audio or electronic information; such as when you play our games, play certain multiplayer modes, use chat features, or participate in competitive game modes or live events;
· Contents of players' in-game and related messaging; and
· Inferences drawn from the above information about your predicted characteristics and preferences.
Please note that we may collect and disclose other categories of personal information to the extent that you provide them through in-game chat, forums, or through our player support channels
3. Your Rights Regarding Your Personal Information.
If you are a California resident or a resident of another state providing certain rights (as applicable), you may have the right under applicable law to request Nexon to:
· Disclose what personal information the business has collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties with whom we disclose personal information, and the specific pieces of personal information we have collected about you (“Request to Know”) (Please note that, except as provided by applicable law, you can only make two Requests to Know in a 12-month period);
· Delete the personal information we have collected from you, subject to certain exceptions (“Request to Delete”);
· Correct inaccurate personal information that we maintain about you (“Request to Correct”);
· Opt you out of the sharing of your personal information for purposes of cross-context behavioral advertising or allow you to object to processing of your data based on our legitimate interests, where applicable law provides for such rights. To opt-out of or object to the sharing of your personal information, please contact us as described in Section 4 below or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.
· Take such actions as described in Section 8.
We do not offer a right to limit the use or disclosure of sensitive personal information because, within the meaning of the CCPA and certain other applicable state laws, we do not use sensitive personal information for inferring characteristics.
We do not offer a right to opt-out of the sale of personal information because, within the meaning of the CCPA and certain other applicable state laws, we do not sell personal information. We disclose personal information for the business purposes set forth in this Privacy Policy (please refer to Section II (How We Use Information) and Section III (When Information Is Shared)).
4. How to Exercise Your Rights.
To exercise any of these rights, please email us as described in in Section XI (Contact Us). In the request, please specify (a) which right you wish to exercise and (b) the scope of your request. We will confirm receipt of your request within 10 business days after receipt thereof.
In order to submit a request, we will need to verify your identity and may require specific information from you, which may include personal information about you or information about your past purchases or use of our products or services, in order to help us verify your identity and process your request. Your request may be denied if we are unable to verify your identity. If you have an account with us through the Services that is password-protected, we may verify your identity through our existing authentication practices for your account.
If you do not have an account with us, and your request concerns “categories” of personal information collected, we can request from you two data points of personal information to verify your identity. If you do not have an account with us, and your request concerns specific personal information or sensitive personal information, we can request from you at least three data points of personal information as well as a signed declaration with penalty of perjury to verify your identity.
We will process and respond to your Request to Know, Request to Delete or Request to Correct within 45 calendar days after it is received (in some cases, as is allowed under applicable law, this process may be extended by an additional 45 calendar days).
5. Deletion Requests.
If you request deletion of your personal information, we may retain personal information necessary to: (a) protect our business, systems and users from fraudulent activity, (b) to address technical issues that impair existing functionality, (c) allow us or others to exercise their free speech or other rights, (d) comply with law enforcement requests pursuant to lawful process, (e) support our own internal purposes reasonably related to your relationship with us, (f) to comply with legal obligations, or (g) otherwise as permitted by law and disclosed to you when we respond to your request.
6. Authorized Agent.
You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights and choices on your behalf, please provide written proof of your agent’s permission to do so. A request from an agent may be denied if such agent does not submit proof that the agent was authorized by the user to act on the user’s behalf, and/or the agent’s identity could not be verified.
7. No Discrimination.
Nexon will not discriminate against any user for exercising their rights under the CCPA, although some of the functionality and features available on the Services may change or no longer be available. Any differences in the Services are related to the value provided.
8. Appeals.
Some state laws allow residents who are not satisfied with our response to their requests to appeal our decision by contacting us as described in the written notice we will provide to you.
9. Other State-specific Rights.
Without limited the generality of the requirements and terms set forth in Section 4 above, or any other applicable provision in this Privacy Policy, to the extent you are a resident of any state which provides rights in addition to those set forth in this Privacy Policy, and you wish to lawfully exercise such rights, please email us at described in in Section XI (Contact Us) specifying (a) your state of residence, (b) which right you wish to exercise and (c) the scope of your request. We will confirm receipt of any valid request within 10 business days after receipt thereof.