Billionaires Corp. (the “Company”) places the utmost importance on the protection of users’ personal information and makes every effort to safeguard the personal information provided by users in order to use the Company’s services. Accordingly, the Company complies with personal-information laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act (PIPA).

The Company discloses this Privacy Policy on the first page of its website so that users can easily access it at any time.

This Privacy Policy may be amended pursuant to applicable laws and the Company’s internal policies, and when amended, version control will be used so that revisions can be easily identified.

Legal Basis Purpose of Collection/Use Items Retention/Use Period
PIPA Art. 15(1)4 (performance of a contract) Sign-up, service provision, and member management ID, password (hash value), name, CI (Connecting Information), date of birth, mobile phone number, email, nickname Until withdrawal
Act on the Consumer Protection in Electronic Commerce, etc. Retaining records for dispute resolution and complaint handling Consultation history, complaint handling records, related identifiers 3 years
Act on Fair Labeling and Advertising Retaining records related to labeling/advertising Ad/event exposure and processing records 6 months
Protection of Communications Secrets Act Retaining access logs Access logs, IP 3 months
Framework Act on National Taxes, etc. Tax/accounting processing Payment/settlement records (amount, payment method, etc.) 5 years
Data-subject consent (optional consent) Marketing and personalized services Email/push opt-in status, recommendations based on usage history Until consent is withdrawn (core services available even if not consented)
Data-subject consent (functional linkage consent) Linked-broker portfolio service (processing of asset data, including screen recognition/analysis) Linked asset information such as holdings/quantity/average cost Until withdrawal or unlinking (If refused/withdrawn, only that function is limited; immediately halted/segregated)
PIPA Art. 28-8 (notice of cross-border transfer) Use of overseas cloud (Google Cloud, U.S.) — operating service infrastructure Service usage logs, request/response data (processed in transmission paths) Until the purpose is achieved (see Article 4 for details)

Article 1 (Categories of Personal Information Collected)

The Company collects the following personal information.

  1. Personal information required for sign-up and use of The Rich.
    1. Member management – identity verification and identification associated with service use
    1. New service development, marketing, and advertising

As a rule, the Company uses personal information only within the scope of the collection and use purposes and does not disclose it to third parties or other companies/institutions. However, exceptions apply in the following cases:

① Where separate consent has been obtained from the data subject

② Where unavoidable to comply with legal obligations under special provisions of law

③ Where the data subject or legal representative is unable to express intent, or prior consent cannot be obtained due to unknown address, etc., and it is clearly necessary for the urgent life, body, or property interests of the data subject or a third party

④ Where necessary for statistics or academic research, and personal information is provided in a form that does not identify a specific individual

⑤ Where necessary for criminal investigations, prosecutions, and maintenance of public actions

⑥ Where member information (name, address, mobile/telephone number) is used for business contact

Article 2 (Purpose of Processing Personal Information)

The Company collects personal information based on the principles and purposes described in Article 1 above.

  1. Items Collected

    Information essential to the core functions of the service is collected as required information; if members do not provide such information, use of the service may be restricted. Optional information collected to provide more specialized services may be left blank without restricting service use. According to service use, the following information is collected.

    ① At sign-up:

    ② For service agreements with minors under 19:

    ③ For providing the linked-broker portfolio service, asset information is collected. For portfolio service provision, the quantity and average cost of held securities are collected. In this process, information displayed on screens that users view or check when retrieving broker assets may be recognized and analyzed to perform service functions.

    ④ The Company does not store personal identification keys such as joint certificates on its servers; they are securely managed with double encryption only on the member’s device.

    ⑤ For add-on services:

    ⑥ For consultation and complaint handling:

    ⑦ When signing up via third-party accounts, the Company receives personal information from the following providers:

  2. Methods of Collection

    The Company collects personal information via:

Article 3 (Retention and Use Period)

  1. The Company processes personal information within the retention/use period prescribed by law or within the period consented to at the time of collection.