Privacy policy

Article 1. General Provisions

1. "Personal information" means information relating to a living individual that makes it possible to identify the individual by his/her name, resident registration number, or other codes, letters, voice, sound, or image included in the information.
2. Hello Apolo Co., Ltd. (hereinafter referred to as the "Company" or "PLAYINTHEBOX") places great importance on the protection of users' personal information and complies with personal information protection-related laws and subordinate statutes.
3. Through its Privacy Policy, the Company informs you of the purposes and methods for which the personal information you provide is used and what measures are taken to protect your personal information.
4. The Company has established procedures necessary for revising the Privacy Policy to continuously improve it.
5. This Privacy Policy applies to the use of services (including mobile web/app) provided by PLAYINTHEBOX.

Article 2. Items of Personal Information Collected and Method of Collection

1. Items of Personal Information Collected and Purpose of Use
① The Company collects the following items of personal information for the purposes listed below when a user registers as a member or orders products. Only the minimum necessary information is collected.

[Sign-up]
- Essential: (Items) Email: ID, Password, Mobile phone number / SNS Linked Sign-up: ID, Mobile phone number, SNS link info | (Purpose) Member identification, notices, and handling complaints | (Retention) Until withdrawal of membership
- Optional: (Items) Name, Email, Date of birth, Gender | (Purpose) Benefit notifications and marketing | (Retention) Until withdrawal of membership

[Product Purchase]
- Essential: (Items) Name, Email address, Mobile phone number, Address, Payment info, Customs code, Account info | (Purpose) Order delivery, handling complaints, payment, customs declaration | (Retention) Kept for 5 years after the order date

[Non-member Order]
- Essential: (Items) Name, Email address, Mobile phone number, Address, Payment info, Customs code, Account info | (Purpose) Order delivery, handling complaints, payment, customs declaration | (Retention) Records on contract: 5 years / Records on payment: 5 years / Records on complaints: 3 years

[Refund (Bank Transfer)]
- Optional: (Items) Refund bank account information | (Purpose) Processing refunds | (Retention) Kept for 5 years

[Marketing & Analysis (Including surveys and events)]
- Optional: (Items) Name, Email, Phone number, Address, Gender, Date of birth, Marital status, Wedding anniversary | (Purpose) Marketing and event notifications | (Retention) Upon conclusion of the event

[Information generated during service use]
- (Items) IP address, Service usage records, Access time, Logs, Cookies, Device info | (Purpose) Service usage statistics | (Retention) Kept for 6 months

[Partnership / Product Inquiries]
- (Items) Name, Email, Contact info | (Purpose) Consultation and reply | (Retention) Partnership: 1 year / Products: Until withdrawal

② Sensitive personal information is not collected unless separate consent is obtained or required by law.
③ If customer information is indirectly collected from an affiliate, the customer will be notified.
④ When seeking consent for promotional purposes, it will be clearly informed.
⑤ Mobile App Access Rights:

[Required] Device and app history rights - Purpose: Error checking and usability improvement
[Optional] Photo/Camera/Media rights - Purpose: Product reviews, QR code scan, image save & share

⑥ Necessary measures may be taken to prevent illegal card transactions.

2. Method of Personal Information Collection
Information is collected via Homepage, forms, fax, phone, bulletin boards, email, event entries, and log analysis programs.

3. Consent to Personal Information Collection
Clicking "Agree" during registration implies consent. Choosing "Disagree" restricts basic services.

4. Protection of Personal Information of Children under 14
Registrations from children under 14 are not accepted.

5. Protection of Personal Information of Non-members
Only essential information is collected for non-member orders, and it is protected at the same level as members.

Article 3. Sharing and Provision of Personal Information

1. The Company does not use information beyond the notified scope or provide it to third parties.
2. Exceptions apply for legal investigations or when prior consent is given.
4. Third-party provision upon consent:

- Sellers [View All]: (Items Provided) ID, Name, Phone number, Address, Customs code | (Purpose) Delivery, CS, customs declaration | (Retention) 6 months after service ends
- KG Inicis Co., Ltd.: (Purpose) INIrental service | (Retention) Until contract ends

Article 4. Entrustment of Personal Information Processing

The Company entrusts certain processing tasks to external companies under strict security supervision:

- Payment processing: KG Inicis, NHN Payco, Naver Financial, Toss Payments
- Messaging & Verification: Infobank, NICE Information Service, Korea Mobile Certification
- Logistics & CS: Lotte Global Logistics, Plus A Company, EICN, Salesmap, Amazon Web Services

Article 5. Retention and Use Period of Personal Information

1. Information is retained only during the service period and destroyed upon withdrawal or purpose achievement.
2. Legal retention periods:
- Contract/Payment records: 5 years (Act on the Consumer Protection)
- Consumer complaint records: 3 years
- Log records: 3 months (Protection of Communications Secrets Act)

Article 6. Procedure and Method of Destroying Personal Information

Information is destroyed without delay after the retention period. Paper is shredded; electronic files are permanently deleted.

Article 7. Measures to Ensure Safety of Personal Information

1. Technical Measures: Fire Wall, SSL encryption, password protection, and anti-virus programs.
2. Managerial Measures: Minimal access rights, employee security training, access control to data rooms. Users must also protect their own passwords securely.

Article 8 & 9. Linked Sites & Posts

The Company is not responsible for external linked sites. The Company protects your posts but may delete spam, defamatory, or copyright-infringing content without notice.

Article 10 & 11. Rights and Obligations of Users

Users must provide accurate information and protect their passwords. Users can view, modify, or withdraw their personal information at any time via the "MY Personal Information" menu.

Article 12. Cookies

The Company uses cookies for personalized services. Users can refuse cookies via browser settings, but it may restrict some services.

Article 13 & 14. Contact Information & Protection Officer

[Customer Happiness Center] Email: customer@10x10.co.kr | Phone: 1644-6030
[Personal Information Protection Officer] Name: Ha Dong-hyun | Dept: DEVOPS Cell / CISO | Email: security@10x10.co.kr

Article 15 & 16. Advertising & Notifications

Ad emails will include "(Ad)" in the subject. This policy applies from March 03, 2026, with a 7-day prior notice for any changes.

Youth Protection Policy

PLAYINTHEBOX implements policies to protect youths under 19 from harmful media and products.

[Youth Civil Complaint Handling Department] Email: customer@10x10.co.kr | Phone: 1644-6030
[Youth Protection Officer] Name: Kim Dong-chul | Dept: CISO | Email: blenzkim@10x10.co.kr
[Person in Charge] Name: Ha So-ra | Dept: CS Team | Email: hasora@10x10.co.kr