SIGMA STUDIO GAME PRIVACY POLICY

Effective Date: September 1, 2026
Last Updated: September 1, 2026

Sigma Studio Co., Ltd. ("Sigma Studio," "we," "us," or "our") respects your privacy. This Game Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use games, mobile applications, web-based games, websites, customer support, and related online services that we publish or operate (collectively, the "Services").

This Policy applies to all Sigma Studio games unless a game-specific privacy notice states otherwise. A game-specific or just-in-time notice may supplement this Policy where a particular feature or platform involves different data practices.


1. WHO IS RESPONSIBLE FOR YOUR INFORMATION

The data controller responsible for the Services is:

Sigma Studio Co., Ltd.
Room 910, Industry-Academic Cooperation Hall
50 Gamasil-gil, Hayang-eup, Gyeongsan-si
Gyeongsangbuk-do, Republic of Korea
Email: sigmastudio@sigmastudio.co.kr


2. INFORMATION WE MAY COLLECT

The information we process depends on the game, platform, features you use, and choices you make. We may collect the following categories.

A. Account and Profile Information
- Internal player or account ID, guest account ID, nickname, profile image, language, region, and account settings.
- Email address or limited social-platform account information if you choose to create, link, or recover an account.
- Authentication tokens or platform identifiers used to sign you in. We do not receive your third-party account password.

B. Game and Service Information
- Game progress, character and inventory data, levels, scores, achievements, match or battle history, virtual currency, items, rewards, settings, and other interactions with the Services.
- Session dates and times, feature use, gameplay events, tutorial progress, and in-game choices.
- Content or information you choose to submit, such as a nickname, support attachment, survey response, or other user-generated content offered by a particular game.

C. Device, Network, Log, and Diagnostic Information
- IP address; approximate country or region derived from IP address; device type; operating system; browser; app or game version; language; time zone; screen resolution; network type; and server request information.
- Device, installation, session, or advertising identifiers where enabled by the platform and permitted by law and your settings.
- Login and access records, timestamps, crash logs, error reports, stack traces, loading time, latency, frame rate, memory use, and similar performance or diagnostic information.
- Security and anti-fraud signals, including unusual login activity, invalid requests, suspected cheating, abuse, or unauthorized software interactions.

D. Transaction Information
- Product purchased, purchase date, price, currency, order or transaction ID, purchase token, and payment status.
- Payments are generally processed by an app store or payment provider. We do not receive or store your full payment card number.

E. Customer Support and Communications
- Your email address, game and player ID, device or account details needed to investigate your request, and the content of communications you send to us.
- Information reasonably necessary to verify identity when you request access, correction, account recovery, or deletion.

F. Cookies and Similar Technologies
- Our websites and web games may use cookies, local storage, session storage, or similar technologies to maintain sessions, remember settings, save permitted local progress, prevent abuse, measure performance, and operate the Services.
- You may control some of these technologies through your browser or device settings. Blocking essential storage may prevent parts of a Service from working correctly.

G. Age or Parental Consent Information
- We may request age range, date of birth, country, or a parent's contact and consent information only where reasonably necessary to comply with children's privacy or age-related laws.

We do not intentionally collect precise geolocation, contact lists, health information, biometric information, microphone recordings, camera content, or personal photos unless an optional feature clearly explains why the information is needed and obtains any consent required by law.


3. HOW WE COLLECT INFORMATION

We collect information:
- Directly from you when you create or link an account, play a game, make a purchase, contact support, participate in a survey, or otherwise submit information.
- Automatically from your device, browser, game client, and our servers when you access or use the Services.
- From platform operators and service providers, such as app stores, payment processors, authentication providers, analytics providers, crash-reporting tools, hosting providers, content delivery networks, and anti-fraud or security providers.
- From another player only when a Service feature permits an interaction involving you, such as a leaderboard, friend request, guild, match, or report.


4. WHY WE USE INFORMATION

We may process information to:
- Provide, operate, maintain, and improve the Services.
- Create and manage accounts, save progress, synchronize devices, and restore purchases.
- Deliver gameplay, matchmaking, leaderboards, events, rewards, customer support, and requested features.
- Process and verify transactions and prevent duplicate or fraudulent purchases.
- Diagnose crashes, improve performance, test updates, balance gameplay, and understand how features are used.
- Protect players, enforce our terms and policies, detect cheating, fraud, abuse, security incidents, and unauthorized access.
- Communicate service notices, security alerts, support responses, and material policy changes.
- Send marketing messages only where permitted by law and in accordance with your choices. You may opt out of marketing messages at any time.
- Comply with legal obligations, resolve disputes, establish or defend legal claims, and respond to lawful requests.
- Create aggregated or de-identified statistics that do not reasonably identify an individual.

Where applicable, our legal bases include performance of a contract with you, compliance with law, your consent, and our legitimate interests in operating, securing, supporting, and improving the Services. When processing is based on consent, you may withdraw consent at any time without affecting processing that occurred before withdrawal.


5. PUBLIC AND SOCIAL FEATURES

Some Services may display a nickname, profile image, score, rank, guild, match result, or other game information to other players. Please do not use a real name or include personal or sensitive information in a public nickname, profile, chat, or other public field. Game-specific notices will describe any additional social or public features.


6. WHEN WE DISCLOSE INFORMATION

We may disclose information only as reasonably necessary in the following circumstances:

A. Service Providers
We may use vendors that provide hosting, cloud storage, content delivery, analytics, crash reporting, customer support, communications, security, anti-fraud, payment verification, and similar services. They may process information only for authorized purposes and must provide protections consistent with this Policy and applicable law.

B. Platform and Transaction Partners
We may exchange limited information with Apple, Google, console platforms, payment processors, authentication providers, or similar partners to distribute a game, verify a purchase, provide sign-in, restore an account, or comply with platform rules.

C. Other Players
Information associated with public, multiplayer, leaderboard, guild, friend, or community features may be visible to other players as described in the Service.

D. Legal, Safety, and Enforcement Reasons
We may disclose information when we reasonably believe it is necessary to comply with law or lawful process; protect the rights, safety, or property of players, Sigma Studio, or others; investigate fraud, cheating, abuse, or security incidents; or enforce our agreements.

E. Business Transfers
Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising unless a particular Service clearly discloses that practice and provides any choice or consent required by law.


7. THIRD-PARTY TOOLS, SDKS, AND LINKS

A Service may include third-party software development kits (SDKs) or connect to third-party platforms. We treat data collected through an SDK on our behalf as part of our own disclosure responsibilities. We require providers that process personal information for us to protect it appropriately and use it only for authorized purposes.

The specific providers and data practices may differ by game, platform, and version. Applicable app-store privacy labels, in-game notices, or game-specific notices provide additional information. These disclosures supplement, but do not replace, this Policy.

The Services may link to third-party websites or services that we do not control. Their privacy practices are governed by their own policies.


8. INTERNATIONAL DATA TRANSFERS

Sigma Studio is based in the Republic of Korea. We and our service providers may process information in Korea and other countries where we or they operate. Those countries may have data-protection laws that differ from the laws in your country.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, consent, adequacy decisions, or another lawful transfer mechanism. You may contact us for more information about safeguards relevant to your information.


9. DATA RETENTION AND DELETION

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining account and game progress, resolving support requests and disputes, enforcing agreements, preventing fraud or abuse, and meeting legal, tax, accounting, or regulatory obligations.

Retention depends on the type of information and why it is processed:
- Account and game data are generally retained while the account or Service is active and for a reasonable period afterward where needed for recovery, security, dispute resolution, or legal compliance.
- Technical, usage, security, and diagnostic logs are retained for a reasonable operational and security period and may then be deleted or de-identified.
- Transaction records are retained for the period required by applicable tax, accounting, consumer-protection, and payment laws.
- Support records are retained as needed to resolve requests, prevent repeated abuse, and meet legal obligations.
- Backup copies are protected and deleted or overwritten according to our backup schedules unless a longer period is required by law.

When information is no longer required, we delete it, de-identify it, or securely isolate it until deletion is possible. Aggregated or de-identified information that can no longer reasonably identify you may be retained and used for legitimate business purposes.


10. SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Measures may include access controls, authentication, encryption in transit where appropriate, logging, monitoring, employee confidentiality obligations, backups, and incident-response procedures.

No system is completely secure. You are responsible for protecting your device, account credentials, and linked platform accounts and for notifying us if you suspect unauthorized access.


11. YOUR PRIVACY RIGHTS AND CHOICES

Depending on your location, you may have the right to:
- Know whether and how we process your personal information.
- Request access to or a copy of your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information.
- Request restriction or suspension of processing.
- Object to certain processing, including direct marketing.
- Withdraw consent where processing is based on consent.
- Request data portability where applicable.
- Opt out of the sale or sharing of personal information where applicable.
- Lodge a complaint with a competent privacy or data-protection authority.
- Exercise your rights without unlawful discrimination.

You can also manage permissions, advertising identifiers, notifications, cookies, and linked accounts through the relevant game, device, browser, or platform settings where those controls are available.

We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects on players.


12. ACCESS, CORRECTION, AND DELETION REQUESTS

To make a privacy request or request deletion of an account and associated game data, visit https://sigmastudio.co.kr/delete-account or email sigmastudio@sigmastudio.co.kr with the subject line "Privacy Request" or "Game Data Deletion Request." Please include:
- The name of the game.
- Your player ID or account ID, if available.
- The email address or platform account linked to the game, if applicable.
- Your country or region.
- A clear description of the request.

We may request additional information reasonably necessary to verify your identity and protect accounts from fraudulent requests. Authorized agents and parents or guardians may submit requests where permitted by law, subject to verification of their authority.

Deletion may permanently remove account information, game progress, characters, items, virtual currency, purchase history associated with the game account, and support history. Deletion cannot be reversed. We may retain limited information where required or permitted by law, including for transaction records, fraud prevention, security, dispute resolution, or legal claims.

We will respond within the period required by applicable law. If we cannot fulfill a request, we will explain the reason where the law requires us to do so.


13. CHILDREN'S PRIVACY

The Services are intended for a general audience and are not directed to children under 13. Where a higher minimum age for consent to data processing applies in a user's country, that higher age applies.

We do not knowingly collect personal information from a child below the applicable age without any verifiable parental consent required by law. If we learn that we collected such information without proper authorization, we will take reasonable steps to delete it, restrict the account, or obtain appropriate consent.

A parent or guardian who believes that a child provided personal information to us may contact sigmastudio@sigmastudio.co.kr to request access, review, correction, withdrawal of consent, or deletion. Where applicable law permits limited collection for the internal operation, safety, or security of a Service, we use that information only for the permitted purpose and retain it only as long as reasonably necessary.


14. REGION-SPECIFIC INFORMATION

A. Republic of Korea
Under the Personal Information Protection Act and other applicable Korean laws, eligible data subjects may request access, correction, deletion, or suspension of processing and may raise a privacy complaint. Requests may be sent to the contact address in Section 17.

B. European Economic Area, United Kingdom, and Switzerland
Where applicable, you may exercise rights of access, rectification, erasure, restriction, objection, and portability and may withdraw consent. You may also complain to the data-protection authority where you live, work, or believe an infringement occurred. Our legal bases are described in Section 4, and international transfer information is described in Section 8.

C. California and Other U.S. States
If applicable law grants you rights to know, access, correct, delete, or obtain a portable copy of personal information, or to opt out of sale, sharing, targeted advertising, or certain profiling, you may submit a request as described in Section 12. We do not discriminate against you for exercising applicable privacy rights. We do not sell personal information for money.


15. MARKETING AND ADVERTISING

We send promotional email or push notifications only where permitted and in accordance with your settings or consent. You may opt out by using the unsubscribe method in the message, changing device or game settings, or contacting us.

If a particular game uses advertising services, the game or platform disclosure will identify the relevant practices. Where required, we will request consent before using device identifiers or similar data for personalized advertising. You may reset or limit advertising identifiers through your device settings.


16. CHANGES TO THIS POLICY

We may update this Policy to reflect changes to the Services, data practices, technology, or law. We will update the "Last Updated" date and provide additional notice where required, such as an in-game message, website notice, or consent request for a material change.

We encourage you to review this Policy periodically. If a material change requires your consent, we will not apply that change to your personal information until the required consent is obtained.


17. CONTACT US

For privacy questions, complaints, or requests, contact:

Sigma Studio Co., Ltd.
Privacy Contact
Room 910, Industry-Academic Cooperation Hall
50 Gamasil-gil, Hayang-eup, Gyeongsan-si
Gyeongsangbuk-do, Republic of Korea
Email: sigmastudio@sigmastudio.co.kr
Support: https://sigmastudio.co.kr/support

You may also contact or lodge a complaint with the privacy or data-protection authority in your jurisdiction. In the Republic of Korea, information about privacy rights and complaints is available from the Personal Information Protection Commission at https://www.pipc.go.kr/eng/.


END OF POLICY