Grand Korea Leisure Co., Ltd. complies with the Personal Information Protection Act and other related laws to protect the freedom and rights of information owners, handling and managing personal information lawfully and safely. Accordingly, GKL guides information owners about the procedure and standards for handling personal information pursuant to Article 30 of the Personal Information Protection Act. GKL has established and disclosed the Privacy Policy as below to handle related grievances agilely and seamlessly.
[Major personal information handled]
Purpose of Processing
Purpose of Processing
Membership registration / access control and identity verification, marketing such as events
Categories of Personal Data
Categories of Personal Data
Name, email, date of birth, mobile phone number, address, etc.
Retention Period
Retention Period
Website membership information: 3 years; Casino customer information: 5 years from the last transaction date
Provision to Third Parties
Provision to Third Parties
Korea Customs Service, Bank of Korea, Korea Financial Intelligence Unit (KoFIU)
Entrustment of Personal Data Processing
Entrustment of Personal Data Processing
HYUNDAI DREAM TOUR, Consortium (OPASNET/SECUKOREA), HUNO I&C, URP, INFOART, INCRUIT
Complaint Handling Department
Complaint Handling Department
Safety Planning Team, Information Security Unit ☎ 02-6421-6724
Article 1. (Purpose of Handling of Personal Information)
① Grand Korea Leisure Co., Ltd. handles personal information for the purposes below. Personal information handled are not used for any other purposes. When the purposes are changed, necessary actions such as acquisition of consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
② The files on personal information the Company registers and discloses pursuant to Article 32 of the Personal Information Protection Act are as follows.
| NO | Personal information file | Basis of operation | Handling purpose | Personal informaton items recorded in the personal information file | Possession period |
|---|---|---|---|---|---|
| 1 | 7luck Website Membership Information | Consent by the subject of information, membership management | *Required: Name, e-mail, address | *Required: Name, email address, password | 3 years from last login date |
| *Optional: Nationality, sex, date of birth, membership card number, marketing consent | |||||
| 2 | Visitor Applicant Information | Consent of the Data Subject | Casino Facility Tour | *Required: Affiliation, name, position, telephone number (mobile/landline), email | One year after tour application |
| *Optional: Department name | |||||
| 3 | Casino customer information | Article 29 of Tourism Promotion Act, Act on Reporting and Using Specified Financial Transaction Information, Article 5 Paragraph 2 | Access Restriction, Identification, Customer Management | *Required: Name, birth date, passport number, alien registration number, mobile number, address, occupation, nationality | 5 years from the final transaction date |
| Consent of information owner | Marketing such as events | *Optional: Agreement to receive SMS | |||
| 4 | Mobile Membership Registration Information | Article 29 of the Tourism Promotion Act, Article 5-2 of the Act on Reporting and Using Specified Financial Transaction Information, Etc. | Utilization of Mobile Membership Information for Management and Marketing | *Required: Name, Date of Birth, Home Address, Contact Information, Passport Number, Nationality, Gender | Five years from the date of the last transaction (Deleted immediately upon receipt of a withdrawal request by the responsible department. However, exceptions apply where relevant laws require the retention of such information.) |
| 5 | Employee's personnel and labor information | Consent of information owner Labor Standards Act, Article 41, Article 48 Income Tax Act, Article 127, Article 164 | Recruitment procedure, personnel management after recruitment (employee personnel operation), internal administrative duties of public agencies | *Required: Name (Korean/English), mobile phone number, emergency contact, email address, information and certificate (if applicable) related to preferential treatment categories such as veteran, disability, low income, North Korean defector, multicultural family, independent living youth, career-discontinued woman, local talent, or high school graduate, education, major, language study, license, experience, and career, self-introduction
*Required: Resident registration certificate and abstract, family relation certificate, graduate ceritificate from highest level of education, transcript, recruitment physical examination report (or national health examination report), 3x4 photo, copy of bankbook |
Permanent (record management standards of public agencies) |
| 6 | Employee and customer information | Income Tax Act, Article 127, Article 164 | Tax, accounting, and contract management for employees and customers, internal administrative duties of public agencies | *Required: Name (name of customer), address (English address), country of residence, bank account number, resident registration number, passport number, alien registration number | Permanent (record management standards of public agencies) |
Article 2. (Personal Information Handling and Retention)
Article 3. (Use of personal information for unintended purposes and provision of personal information to a third party)
① Grand Korea Leisure Co., Ltd.only handles personal information of information owners within the scope specified under Article 1 (Purpose of Handling Personal Information). Personal information is provided to third parties only if the information owner agrees and the case falls under special legal regulations such as Articles 17 and 18 of the Personal Information Protection Act.
② Grand Korea Leisure Co., Ltd. provides personal information to a third party as below.
| No | Party provided | Purpose of provision | Items provided | Possession period | Related grounds |
|---|---|---|---|---|---|
| 1 | Korea Customs Service (Seoul Customs) | Regular business report of currency exchange business operator | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Act, Article 20 (Reports and Inspections) |
| 2 | Korea Customs Service (Busan Customs) | ||||
| 3 | National Tax Service, Korea Customs Service | Submission of foreign exchange transaction details | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Regulations, Article 3-2 |
| 4 | Bank of Korea | Submission of chips credit status | Customer number, customer name | 5 years | Foreign Exchange Transactions Act, Article 18 |
| 5 | Korea Financial Intelligence Unit | Collection and analysis of information related to anti-money laundering | Customer name, customer number, date of birth, gender, real name verification number, nationality, address, contact, occupation, actual owner(Name, real name verification number, nationality) | 5 years | Act on Reporting and Use of Certain Financial Transaction Information, Article 5-2 |
| 6 | National Tax Service | Compliance with obligations under relevant laws, such as withholding tax and submission of payment statement | Name (customer name), address (English address), country of residence, bank account number, resident registration number, passport number, alien registration number | 5 years | Income Tax Act, Article 127, Article 164 |
| 7 | Anti-Corruption & Civil Rights Commission | Measurement of integrity of public agencies | Name, phone number, email address | Upon completion of integrity measurement | Act on the Prevention of Corruption and the Establishment and Management of the Anti-Corruption and Civil Rights Commission, Article 12 Subparagraph 6, Article 29 |
| 8 | Agency that created (issued) the certificate | Confirmation of authenticity of submitted documents during recruitment procedure | Name, date of birth, certificate number (serial number, unique number, registration number) | Period required to verify authenticity | Consent of information owner |
③ In accordance with the “Guidelines on the Processing and Protection of Personal Data in Emergency Situations” jointly issued by government ministries, GKL may provide personal data to relevant authorities without the consent of the data subject in emergencies such as natural disasters, epidemics, incidents or accidents posing imminent danger to life or physical safety, or urgent risk of property loss. For details, please refer to the “Guidelines on the Processing and Protection of Personal Data in Emergency Situations.”
Article 4. (Entrustment of Personal Information Handling)
① Grand Korea Leisure Co., Ltd. consigns handling of personal information as below to ensure smooth handling of personal information.
| NO | Contractor | Re-entrustment | Period of Entrustment | Address | Tel. | Entrusted Works | |
|---|---|---|---|---|---|---|---|
| 1 | HYNDAI DREAM TOUR | Not applicable | '21/06/01 ~ ‘26/05/31 |
2583, Nambusunhwa-ro Seocho-gu, Seoul | 02-723-2233 | Checking information when a customer books an airline ticket | |
| 2 | consortium | Security Korea Co., Ltd. | Not applicable | ‘24/10/16 ~ ‘27/10/15 |
10th floor, 521 Teheran-ro, Gangnam-gu, Seoul | 02-2193-8600 | Operation and management of information system (including agency and marketing websites) |
| Opasnet Co., Ltd. | Applicable (Re-entrustment) |
Room 1006, 10th floor of A-dong, 11, Beopwon-ro 110gil, Songpa-gu, Seoul | 02-3400-0877 | ||||
| 2-1 | Lord System Co., Ltd. | - | Room 1123, Jamsil Lyseon, 87 Ogeum-ro, Songpa-gu, Seoul | 02-1833-6775 | |||
| 3 | URP Co., Ltd. | Not applicable | '24/11/01 ~ ‘26/10/31 |
5F, 570, Yangcheon-ro, Gangseo-gu, Seoul | 02-784-9271 | Surveillance and maintenance | |
| 4 | INFOART Co., Ltd. | Not applicable | '25/01/01 ~ ‘26/12/31 |
#301, Hwanghak Acro Tower, Toegye-ro, Jung-gu, Seoul | 02-2269-5029 | Operation of electronic company newsletter | |
| 5 | MINDFOREST Co., Ltd. | Not applicable | '25/10/01 ~ ‘26/09/30 |
14th Floor, Unit 1405, 244 Beotkkot-ro, Geumcheon-gu, Seoul | 02-3281-2858 | Operation of Employee Assistance Program (EAP) | |
| 6 | Insa Bareun Co., Ltd. | Not applicable | '26/05/28 ~ '27/05/27 |
Room 510, 260, Changnyong-daero, Yeongtong-gu, Suwon-si, Gyeonggi-do | 031-8067-6630 | Recruitment Agency Services | |
② The Company sets out not only the objective of entrusted works in an entrustment agreement or other such documents, according to Article 26 of the Personal Information Protection Act, but also prescribes responsibilities, such as prohibition of personal information processing, technical/administrative measures for protection, restrictions on re-entrustment, management and supervision of contractors, and compensation for damage. In addition, the Company supervises the contractors so as to ensure safe processing of personal information.
③ In accordance with Article 26(6) of the Personal Information Protection Act (PIPA), When an entrusted party intends to re-entrust the Company’s personal data processing tasks, it must obtain prior consent from GKL.
④ Change in entrusted works or contractors will be forthwith disclosed according to this Personal Information Policy.
Article 5. (Rights and Obligations of Subject of Personal Information)
[Required procedures, such as the viewing of personal information]
[Procedure for raising objection to access of personal information]
[Objection statement against access of personal information] ☞Click
Article 6. (Privacy protection manager)
① Grand Korea Leisure Co., Ltd. is generally responsible for handling of personal information and appoints a personal information protection manager as below to handle any grievances and relieve damages of information holders in relation to personal information.
▶ Privacy protection manager
▶A department that handles personal information protection duties and related grievances
② Information holders may contact the person and department in charge of protecting personal information in relation to all personal information inquiries, complaints and damages that arise while using the services of Grand Korea Leisure Co., Ltd. Grand Korea Leisure Co., Ltd. will respond to any inquiries of information holders without delay.
Article 7 (Personal Information File Registration Status and Personal Information Items Handled)
① The personal information file registered and disclosed by Grand Leisure Korea pursuant to Article 32 of the Personal Information Protection Act is as follows.
| NO | Personal information file | Items of Personal Information Recorded in Personal Information File | ||
|---|---|---|---|---|
| 1 | 7luck Website Membership Information | Required items | Name, email address, password | - |
| Optional items | Nationality, sex, date of birth, membership card number, marketing consent | - | ||
| 2 | Visitor Applicant Information | Required Items | Affiliation, name, position, telephone number (mobile/landline), email | - |
| Optional Items | Department name | - | ||
| 3 | Casino customer information | Required items | Name, phone number, address, occupation, purpose of transaction, financial source, actual owner (name, real name verification number, nationality), passport number, alien registration number |   |
| Optional items | Consent to receive SMS | - | ||
| 4 | Mobile Membership Registration Information | Required Items | Name, Date of Birth, Home Address, Contact Information, Passport Number, Nationality, Gender | |
| 5 | Employee's personnel and labor information | Required items | (Applicant) Name (Korean/English), mobile phone number, emergency contact, email address, information and certificate (if applicable) related to preferential treatment categories such as veteran, disability, low income, North Korean defector, multicultural family, independent living youth, career-discontinued woman, local talent, or high school graduate, education, major, language study, license, experience, and career, self-introduction
(Successful applicant) Resident registration certificate and abstract, family relation certificate, graduate ceritificate from highest level of education, transcript, recruitment physical examination report (or national health examination report), 3x4 photo, copy of bankbook |
 |
| 6 | Employee and customer information | Required items | Name (customer name), address (English address), country of residence, bank account number, resident registration number, passport number, alien registration number | |
※ For the disclosure of the personal information file registration by Grand Korea Leisure Co., Ltd., please use the Personal Information Protection Committee's Personal Information Support Portal (www.privacy.go.kr) → Persoanl Information Service → Request to Access Personal Information → Search List of Personal Information Files menu. ☞ Link
② Grand Korea Leisure handles the following personal information items by obtaining the consent of information owners.
| No | Name of personal information file | Grounds for operation | Purpose of handling | Personal information items recorded in the personal information file | Retention period | |
|---|---|---|---|---|---|---|
| 1 | Member information on the 7Luck website | Consent of information owner | Management of online members and marketing usage | *Required: Name, email address, password | - | 3 years from the last login date |
| *Optional: Nationality, sex, date of birth, membership card number, marketing consent | - | |||||
| 2 | Visitor Applicant Information | Consent of the Data Subject | Casino Facility Tour | *Required: Affiliation, name, position, telephone number (mobile/landline), email | - | One year after tour application |
| *Optional: Department name | ||||||
| 3 | Casino customer information | Consent of information owner | Casino membership registration | *Required: Name, phone number, address, occupation, purpose of transaction, financial source, actual owner (name, real name verification number, nationality), passport number, alien registration number | |
5 years from the final transaction date(Deleted immediately when received by the department in charge upon membership withdrawal, unless the information needs to be retained pursuant to relevant laws) |
| Consent of information owner | Marketing, such as events | *Optional: Consent to receive SMS | - | |||
| 4 | Mobile Membership Registration Information | Consent of Data Subject | Mobile Membership Registration | *Required: Name, Date of Birth, Home Address, Contact Information, Passport Number, Nationality, Gender | |
Five years from the date of the last transaction (Deleted immediately upon receipt of a withdrawal request by the responsible department. However, exceptions apply where relevant laws require the retention of such information.) |
| 5 | Employee's personnel and labor information | Consent of information owner | Recruitment procedure | *Required: Name (Korean/English), mobile phone number, emergency contact, email address, information and certificate (if applicable) related to preferential treatment categories such as veteran, disability, low income, North Korean defector, multicultural family, independent living youth, career-discontinued woman, local talent, or high school graduate, education, major, language study, license, experience, and career, self-introduction | - | Permanent (record management standards of public agencies) |
③ Grand Korea Leisure handles the following personal information items without the consent of information owners pursuant to relevant laws.
| No | Name of personal information file | Grounds for operation | Purpose of handling | Personal information items recorded in the personal information file | Retention period | |
|---|---|---|---|---|---|---|
| 1 | Casino customer information | Tourism Promotion Act, Article 29, Act on Reporting and Using Specified Financial Transactions Information, Article 5-2 | Registration of casino customers, access history management, business activities | *Required: Name (customer name), address (English address), country of residence, bank account number, register registration number, passport number, alien registration number | |
5 years from the final transaction date(Deleted immediately when received by the department in charge upon membership withdrawal, unless the information needs to be retained pursuant to relevant laws) |
| 2 | Employee's personnel and labor information | Labor Standards Act, Article 41, Article 48. Income Tax Act, Article 127, Article 164 | Personnel management after recruitment (employee personnel operation) and internal administrative duties of public agencies | *Required: Resident registration certificate and abstract, family relation certificate, graduate ceritificate from highest level of education, transcript, recruitment physical examination report (or national health examination report), 3x4 photo, copy of bankbook | |
Permanent (record management standards of public agencies) |
| 3 | Employee and customer information | Income Tax Act, Article 127, Article 164 | Tax, accounting, and contract management for employees and customers, internal administrative duties of public agencies | *Required: Name (customer name), address (English address), country of residence, bank account number, register registration number, passport number, alien registration number | |
Permanent (record management standards of public agencies) |
| 4 | Mobile Membership Registration Information | Article 29 of the Tourism Promotion Act, Article 5-2 of the Act on Reporting and Using Specified Financial Transaction Information, Etc. | Utilization of Mobile Membership Information for Management and Marketing | *Required: Name, Date of Birth, Home Address, Mobile Phone (Contact Information), Passport Number | |
Five years from the date of the last transaction (Deleted immediately upon receipt of a withdrawal request by the responsible department. However, exceptions apply where relevant laws require the retention of such information.) |
Article 8. (Procedure and Method of Personal Information Destruction)
① Grand Korea Leisure Co., Ltd. destroys personal information immediately when it becomes unnecessary due to expiration of the possession period and accomplishment of the purpose.
② If personal information needs to be preserved in accordance with other laws despite expiration of the possession period agreed by the information holder or accomplishment of the purpose, such personal information (or personal information file) is preserved by transferring it to a separate database or relocating to a separate storage place.
③ The procedure and method of destroying personal information are as follows.
Article 9. (Measures to Secure Safety of Personal Information)
① Grand Korea Leisure Co., Ltd. takes the following measures to secure safety of personal information.
Article 10. (Remedy for Infringement on Rights and Interests)
The subject of personal information may inquire to the following agencies about a remedy for infringement or for consultation regarding personal information.
<The agency below is an agency irrelevant to Grand Korea Leisure Co., Ltd. If you are discontent about handling of personal information or damage relief by Grand Korea Leisure Co., Ltd., contact the agency below for help.>
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Jurisdiction: Report or consultation on infringement on a right to personal information
- Website: privacy.kisa.or.kr
- Tel.: (without a telephone exchange number) 118
- Address: Personal Information Infringement Reporting Center, 3F, 9, Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)
▶ Privacy dispute arbitration committee (operated by Korea Internet & Security Agency)
- Jurisdiction: Application for personal information dispute mediation, settlement of collective dispute (civil remedy)
- Website: www.kopico.go.kr
- Tel.: (without a telephone exchange number) 1833-6972
- Address: 4F, Government Complex-Seoul, 209, Sejong-daero, Jongno-gu, Seoul (03171)
▶ Cyber Safety Bureau of Korean National Police Agency: (without a telephone exchange number) 182 (ecrm.police.go.kr)
Article 11. (Request to View Personal Information)
▶ Department Responsible for Receiving and Handling Requests to View Personal Information
Department: Safety Planning Team, Information Protection Part
Officer: SUNG JI EON
Contact: <02-6421-6724>, <mamo00@7luck.com>
▶ Visit the Personal Information Protection portal site of the Personal Information Protection Committee. Use the menu Civil Complaint on Personal Information > Request to View Personal Information, etc. (I-PIN is required for personal verification.)
Article 12 (Installation, Operation, and Refusal of Automatic Personal Information Collecting Systems)
Article 13 (Standards for Additional Use and Provision of Personal Information)
Article 14 (Possibility of Disclosure of Sensitive Personal Information and Methods for Non-disclosure)
Article 15 (Management of Audio and Video Recordings of Civil Complaint Consultations)
Article 16 (Personal Information Impact Assessment Results)
| Name of personal information file | Personal information items recorded on the personal information file | Year conducted |
|---|---|---|
| Casino customer information | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 2018 |
| Casino customer information | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 2024 |
Article 17 (Results of Evaluating Personal Information Protection Level)
Article 18. (Change in Personal Information Policy)
COPYRIGHT (C) 2010. SEVEN LUCK CASINO ALL RIGHTS RESERVED
Korean
Japanese
Chinese
Vietnam