Privacy Policy

This Privacy Policy is established jointly by NavyMoon and SuperPlanet (hereinafter collectively referred to as the "Company"), who act as joint controllers of personal information processed in connection with the games and related services described below. NavyMoon participates primarily in the development of the Services, while SuperPlanet co-develops, publishes, and operates the Services, including customer support, and serves as the primary point of contact for privacy-related matters. The Company complies with applicable data protection laws, including the Personal Information Protection Act of the Republic of Korea, and has established this Privacy Policy to protect users' rights.

The Company provides a procedure for users to select "Agree" to the Terms of Service and the Personal Information Collection and Use Notice upon signing up or using the service, and collects and uses personal information only when consent is granted.

This Policy applies exclusively to information collected in the course of using games (hereinafter referred to as the "Services") provided on mobile platforms (such as iOS and Android) as services of the Company.

Services provided by the Company may include links to third-party (individual or legal entity) websites or services. As the Company has no control over products, services, or content provided by third parties, it assumes no responsibility for them, and external links do not imply sponsorship or affiliation with such third parties. When navigating to an external website, the privacy policy of that website shall apply.

This Privacy Policy may be modified due to changes in relevant laws and guidelines or internal policies of the Company. In the event of any modification, the Company will notify users in advance via announcements, specifying the effective date and the reasons for the change.

Our partners:Google/Apple/Zendesk/Singular

By clicking or tapping the button indicating acceptance of these Terms, or by using the Game Services, you agree to the processing of your data (including personal information) in accordance with this Privacy Policy.

This Privacy Policy describes the ways we collect, store, use, and disclose information, including personal information, that our users provide or that we collect in connection with any Company games provided on a mobile platform. It also describes your rights and choices concerning your information. Please note that this Privacy Policy may be modified or updated from time to time; when it is, we will announce the effective date and the reason for the change in advance through our notices.

This Privacy Policy is supplemented by platform-specific disclosures, such as Apple's App Privacy ("Nutrition") Label and Google Play's Data Safety section, which describe the data practices of the specific app version you installed.

1. Information and Data We Collect from You

We collect information you choose to provide or give us in any manner. You don't have to share information when we ask you for it, but if you decline, you might not be able to access certain the Company services, or take advantage of their full functionality.

1) Information collected to provide game service

• Player's name (nickname)
• Type of OS (Android, iOS, etc.)
• ID used on different platforms (Google Play Games, Apple Game Center)
• Language of the user
• Game history
• Device model and manufacturer (e.g. smartphone model)

2) Information collected to provide a more accurate and prompt service

• Game version (e.g. v1.0.3)
• Version of OS (Android, iOS)
• Internal device/account identifier (used to help you recover your account and to prevent fraud — separate from the advertising identifier described in "Automatic Collection of Information" below)
• Email address and inquiry details (when you contact customer support), payment records, access logs, and advertising identifier (ADID/IDFA)

3) Information we collect from third parties

We may obtain information from third parties to use along with the information we collect. We can receive information from third-party platforms (e.g. Google Play, App Store) if you download the Company games or link your game account to a platform of your choice.

We may partner with third parties such as payment gateway companies, platform service companies, and analytics companies to gather advertising and analytics information, in order to support our marketing initiatives, improve the Company services, and better manage our ad campaigns. We may share your personal information with these third-party service providers so that they can provide their services to us.

If you don't want to take advantage of the services that third-party analytics and advertising companies provide on the Company services, you may be able to opt out of some of them by visiting http://www.aboutads.info, http://www.networkadvertising.org/choices/, or https://www.youronlinechoices.com/.

Please note that opting out of interest-based advertising won't necessarily entirely prevent information from being collected automatically on the Company services, and it doesn't mean you will receive fewer ads or stop them from being displayed. Instead, the ads you receive will no longer be interest-based and may therefore be less relevant to your interests.

4) Information relating to children (Age Limits)

Our games are general-audience products intended to be enjoyed by players of a wide range of ages, from children to adults; a small number of titles may carry an adult content rating as indicated on the applicable app store listing. Our games and services are not directed to children under the age of 13 in the United States, or under 16 in the European Economic Area or the UK. We do not knowingly collect personal information from children under the applicable age limit. If we become aware that a user is under the applicable age limit, we will require the verifiable consent of the child's legal guardian before continuing to process that user's personal information. If the legal guardian does not consent, we will delete the collected information without undue delay. Information about a legal guardian is used only to confirm consent and is not provided to third parties for any other purpose.

We do not use information from a user we know to be under the applicable age limit for targeted or behavioral advertising without separate verifiable consent from their legal guardian.

2. Method of Collection

We can collect information in the following ways:

• Homepage, Mobile, Written form
• Membership, Membership information modification
• Community, E-mail
• Event and promotion event application
• In-game collection, etc.

3. How We Use and Share Collected Information

We use and share your information to provide the services under the Terms with your consent, to help us provide, operate, improve, understand, customize, support, and market the Company services.

1. Create game accounts and allow users to play our games.
2. Identify and suggest connections with other users for better communication purposes.
3. Improve our services and how they're operated.
4. Enhance your experience regarding our services.
5. Respond to your comments and questions and provide customer service.
6. Improve and provide updates about the Company services and to deliver products and services that you have requested.
7. Deliver and tailor our communications with you — for example, by sending advertisements, important announcements, or promotional communications that we believe may interest you.
8. Monitor, analyze, protect, test, and improve our services and operations (e.g. fixing bugs or errors).
9. Send you related information, including confirmations, invoices, technical notices, updates, security alerts, support, and administrative messages.
10. Operate and upgrade our services and business.
11. Facilitate the use of, or integration with, the Company services, social connection, and related functionality such as chat features and community.
12. Provide the Company services to you, respond to inquiries, fulfill requests, and process transactions (creating accounts, finding a match for tournaments, resolving player support issues, etc.).
13. Manage our contractual relationship with you and, where relevant, to comply with a legal obligation (ex. related to payment transactions) or based upon our legitimate interest in doing so (such as to provide the Company services to children below the age of legal capacity to enter a contract).

4. Outsourcing and Cross-Border Transfer of Personal Information

To provide and analyze our services, support customers, and carry out marketing, we entrust the processing of some personal information to specialized external companies. Because their systems are located overseas, this involves the transfer of personal information outside of your country.

For users in the European Economic Area (EEA), the UK, and Switzerland: when we transfer your personal information outside of these regions, we ensure appropriate safeguards are in place, such as relying on adequacy decisions or Standard Contractual Clauses (SCCs) approved by the European Commission.

The companies we work with, and the purposes of the transfer, are as follows:

• Zendesk, Inc. (United States): email address, nickname, platform identifier, and inquiry details, for customer support.
• Google LLC (United States and others): device identifier (ADID/IDFA), service usage records, access logs, and OS version, for analytics and push notifications via Google Analytics and Firebase.
• Singular Labs, Inc. (United States, Israel, and others): device identifier (ADID/IDFA), device information, and payment records, for marketing performance tracking.

Information is transferred over the network using encrypted transmission, and is destroyed without delay when you withdraw your membership or when the relevant outsourcing contract ends.

5. Disclose & Share Your Information

The Company does not share your personal information except when you agree in advance, or as set forth in this Policy. We may use, disclose, and preserve information as necessary or appropriate in the following circumstances:

1. Consent: When you have consented in advance to the provision of your information to a third party.
2. Policy Enforcement & Operational Safety: When you violate our policies (such as Terms of Service or Operational Policy), or when we disclose non-personally identifiable information in service notices as a disciplinary measure to maintain a healthy game environment and prevent harm to other users.
3. Legal Obligations & Government Requests: When required by law, subpoena, or when an investigative agency or court requests information in accordance with statutory procedures for investigation purposes.
4. Protection of Rights & Defense: When there are sufficient grounds to believe disclosure is necessary to take legal action or defend against legal claims regarding someone who has caused mental or material harm to others.
5. Research & Statistics: When information is processed into an anonymous form that cannot identify a specific individual for statistical, academic, or market research purposes.
6. Business Transfers: In connection with any merger, sale of our assets, or a financing or acquisition of all or a portion of our business by another company. You will be notified via email and/or a notice on our site of any change in ownership or use of your personal information.

6. Your Information Retention

We retain your information for as long as your account is active or as needed to provide you with our services. We will also retain and use your information as necessary to comply with our legal obligations (such as mandatory retention periods under applicable consumer protection or communications laws), resolve disputes, and enforce our agreements. Once the purpose of collection is achieved or the legal retention period expires, your information will be destroyed without delay.

7. User Rights & Deletion Procedures

Accessing, Correcting, and Deleting Your Information

You have the right to access, correct, delete, or suspend the processing of your personal information.

To request the deletion of your account and associated personal data, you may use the "Request Account Deletion" option within the in-game settings menu, which will submit a deletion request to our support team on your behalf, or you may contact our privacy officer directly at cs@superplanetcs.zendesk.com. Upon verification of your identity, we will process the request and complete deletion within a reasonable time, except where retention is required by law.

If a legal representative requests access or corrections on your behalf, we will verify whether they are your genuine representative and may ask for documentation confirming the relationship. If changing required fields provided at sign-up causes errors in the services, we may ask you to follow a separate verification procedure.

A legal guardian may exercise the rights described above on behalf of a child.

For Users in the EEA, the UK, and Switzerland

If you are located in these regions, you also have the right to request data portability, object to certain processing, and lodge a complaint with your local data protection supervisory authority.

For California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you specific rights regarding your personal information, including:

• The right to know what personal information we have collected about you.
• The right to request correction or deletion of your personal information.
• The right to opt out of the "sale" or "sharing" of your personal information. Because we share device and advertising identifiers with advertising partners (such as Google and Singular) for ad personalization and measurement, this may be considered a "sale" or "sharing" of personal information under California law, even where no money changes hands. You can opt out by limiting ad tracking in your device settings (see "Automatic Collection of Information" below) or by contacting us at cs@superplanetcs.zendesk.com.
• The right not to be discriminated against for exercising your CCPA rights.

To exercise any of these rights, please contact us at cs@superplanetcs.zendesk.com.

8. Automatic Collection of Information

To provide personalized and customized services, we may automatically collect a device identifier (an advertising identifier such as ADID/IDFA) when you use the services. If you refuse this automatic collection, some services, such as personalized advertising, may be limited.

You can refuse (block) this automatic collection through your smartphone settings:

• Android: Settings > Google > Ads > opt out of "Ads Personalization"
• iOS: Settings > Privacy & Security > Tracking (to control this app's tracking permission), and Settings > Privacy & Security > Apple Advertising > Personalized Ads (to limit Apple's own ad personalization)

9. Security of Your Information

When handling personal information of users, the Company takes the following technical and administrative measures to ensure the safety of personal information so that it will not be lost, stolen, leaked, altered or damaged.

Password Encryption

The password of the member ID is encrypted, stored and managed. The Company will not be able to view or modify the password. Confirmation or changes of personal information are also only available to the user who knows the password.

Measures against Hacking

The Company is doing its best to prevent leakage or damage of personal information of members from hacking or computer virus. In order to prevent personal information from being used unlawfully, we are backing up the data from time to time. We use the latest software to prevent users' personal information or data from being leaked or used unlawfully. The Company is also using encrypted communication to secure the transmission of personal information on the network. We are also using intrusion prevention systems to control unauthorized access from the outside and try our best to ensure security in other systems.

Minimization and training of the handling staff

In the Company, only the person in charge will be given the authority to handle personal information. Separate passwords for personal information are also being regularly updated. We also constantly emphasize the importance of compliance with the privacy policy through regular training of the person in charge. Also, we are working to ensure that problems will be corrected immediately as soon as possible.

Security Safeguards

The Company takes measures to protect your information from unauthorized access or against loss, misuse or alteration by third parties. Although we strive to store the information collected in a secure operating environment that is not available to the public, we cannot guarantee the absolute security of that information during its transmission or its storage in our systems. No method of transmission over the Internet or of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

10. Contact Us

If you have any questions or concerns about our data privacy policy or if you have any requests regarding issues concerning your personal information, please contact us at:

Contact: SuperPlanet CX Team

E-MAIL: cs@superplanetcs.zendesk.com

Addendum

• Effective Date: December 7, 2026