Personal Information Treatment Policy
(details the policy for 2023.03.02 ~ 2023.09.06)
Grand Korea Leisure Co., Ltd. complies with the Personal Information Protection Act and other related laws to protect the freedom and rights of information owners, handling and managing personal information lawfully and safely. Accordingly, GKL guides information owners about the procedure and standards for handling personal information pursuant to Article 30 of the Personal Information Protection Act. GKL has established and disclosed the Privacy Policy as below to handle related grievances agilely and seamlessly.
[Major personal information handled]
|
|||||||||||
 |
■ Membership management ■ Restriction of access and confirmation of identity ■ Marketing activities, such as events |
 |
■ Website member information for 3 years ■ Casino customer information for 5 years from final transaction date |
||||||||
| Purpose of handling | Retention period and destruction | ||||||||||
 |
■ Third-party provision : Korea Customs Service, Bank of Korea, Korea Financial Intelligence Unit ■ Consignment of personal information : Hyundai Dream Tour, consortium(URP system, Root On Plus Co., Ltd.) |
 |
■ Safety Planning Team, Information Protection Part, Lee Yun-Jin 02-6421-6418 dl2634@7luck.com |
||||||||
| Provision and consignment of personal information | Grievance department | ||||||||||
| ※Please check the Privacy Policy below for details. | |||||||||||
| [Contents] | |
|---|---|
| Article 1 (Purpose of Handling Personal Information) Article 2 (Personal Information Handling and Possession Period) Article 3 (Use and Third-party Provision of Personal Information) Article 4 (Consignment of Personal Information Handling) Article 5 (Rights, Obligations, and Exercise Methods of Information Owners and Legal Representatives) Article 6 (Personal Information Protection Officer) Article 7 (Personal Information File and Items Handled) Article 8 (Personal Information File Registration Status) |
Article 9 (Personal Information Destruction Procedure and Method) Article 10 (Measures to Secure Safety of Personal Information) Article 11 (Violation Rectification Method) Article 12 (Request to View Personal Information) Article 13 (Installation, Operation, and Refusal of Automatic Personal Information Collecting Systems) Article 14 (Criteria for Additional Use and Provision of Personal Information) Article 15 (Personal Information Impact Assessment Results) Article 16 (Personal Information Management Level Diagnosis Results) Article 17 (Changes to Privacy Policy) |
Article 1. (Purpose of Handling of Personal Information)
① Grand Korea Leisure Co., Ltd. handles personal information for the purposes below. Personal information handled are not used for any other purposes. When the purposes are changed, necessary actions such as acquisition of consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
- 1. Personal information is handled for the purpose of checking one’s intent to join as a member, identifying and authenticating members for membership services, maintaining and managing members, verifying one’s identity according to the limited personal identity verification system, preventing illegal use of services, checking consent of a legal representative when handling personal information of a child below 14 years of age, making announcements and notifications, and handling grievances.
- 2. Personal information is used in order to handle civil complaints, such as identification of a person who has filed a complaint, details of the complaint, contact information for investigation, and notification of settlement results.
② The files on personal information the Company registers and discloses pursuant to Article 32 of the Personal Information Protection Act are as follows.
| NO | Personal information file | Basis of operation/Handling purpose | Personal informaton items recorded in the personal information file | Possession period |
|---|---|---|---|---|
| 1 | 7luck Website Membership Information | Consent by the subject of information, membership management | *Required: Name, e-mail, address *Optional: Nationality, gender, date of birth, membership card number, mobile phone number |
3 years from last login date |
| 2 | Casino customer information | Article 29 of Tourism Promotion Act, Act on Reporting and Using Specified Financial Transaction Information, Article 5 Paragraph 2 / Access Restriction, Identification, Customer Management | *Required: Name, birth date, passport number, alien registration number, mobile number, address, occupation, nationality | 5 years from the final transaction date |
| Consent of information owner / Marketing such as events | *Optional: Agreement to receive SMS |
※For more information on personal information files registered by the Company, please visit the portal site on personal data protection, operated by the Personal Information Protection Committee (www.privacy.go.kr), and use the menu Civil Complaint on Personal Information > Request to View Personal Information > Search the List of Personal Information Files.
Article 2. (Personal Information Handling and Retention)
- ① The Company handles and retains personal information for the period of use and retention of personal information in accordance with the relevant legislation or for the period of use and retention of personal information to which the subject of personal information has agreed at the time of information collection.
- ② The said periods of personal information use and retention are as follows.
- 1. Member registration and management on the 7luck marketing website : 3 years from last login date (deleted right after withdrawal from membership)
- 2. Casino customer management : 5 years from the final transaction date (Upon membership withdrawal, information is deleted immediately upon receipt by the department in charge. However, information is not deleted if relevant laws require storage of information.)
Article 3. (Use of personal information for unintended purposes and provision of personal information to a third party)
① Grand Korea Leisure Co., Ltd. only handles personal information of information holders within the scope stipulated in Article 1 (Purpose of Handling Personal Information). Personal information is only provided to a third party when Article 17 of the Personal Information Protection Act applies, as agreed by the information holder or specially regulated by laws.
② Grand Korea Leisure Co., Ltd. provides personal information to a third party as below.
| No | Party provided | Purpose of provision | Items provided | Possession period | Related grounds |
|---|---|---|---|---|---|
| 1 | Korea Customs Service (Seoul Customs) | Regular business report of currency exchange business operator | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Act, Article 20 (Reports and Inspections) |
| 2 | Korea Customs Service (Busan Customs) | ||||
| 3 | National Tax Service, Korea Customs Service | Submission of foreign exchange transaction details | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Regulations, Article 3-2 |
| 4 | Bank of Korea | Submission of chips credit status | Customer number, customer name | 5 years | Foreign Exchange Transactions Act, Article 18 |
| 5 | Korea Financial Intelligence Unit | Collection and analysis of information related to anti-money laundering | Customer name, customer number, date of birth, gender, real name verification number, nationality, address, contact, occupation, actual owner(Name, real name verification number, nationality) | 5 years | Act on Reporting and Use of Certain Financial Transaction Information, Article 5-2 |
Article 4. (Entrustment of Personal Information Handling)
① Grand Korea Leisure Co., Ltd. consigns handling of personal information as below to ensure smooth handling of personal information.
| NO | Contractor | Period of Entrustment | Address | Tel. | Entrusted Works | |
|---|---|---|---|---|---|---|
| 1 | HYNDAI DREAM TOUR | '23/06/01 ~ ‘24/05/31 |
2583, Nambusunhwa-ro Seocho-gu, Seoul | 02-723-2233 | Checking information when a customer books an airline ticket | |
| 2 | consortium | URP system | ‘22/10/16 ~ ‘24/10/15 |
70, Gukjegeumyung-ro, Yeongdeungpo-gu, Seoul (Miwon Building) | 02-6297-3198 | Operation and management of information system (including agency and marketing websites) |
| Root On Plus Co., Ltd. | 503, 204 Singil-ro, Yeongdeungpo-gu, Seoul (Singil-dong, Inui Building) | 02-6225-7087 | ||||
② The Company sets out not only the objective of entrusted works in an entrustment agreement or other such documents, according to Article 26 of the Personal Information Protection Act, but also prescribes responsibilities, such as prohibition of personal information processing, technical/administrative measures for protection, restrictions on re-entrustment, management and supervision of contractors, and compensation for damage. In addition, the Company supervises the contractors so as to ensure safe processing of personal information.
③ Change in entrusted works or contractors will be forthwith disclosed according to this Personal Information Policy.
Article 5. (Rights and Obligations of Subject of Personal Information)
- ① Information holders can exercise their rights to view, correct, delete and suspend handling of personal information with Grand Korea Leisure Co., Ltd. at any time.
- ② Your rights related to Grand Korea Leisure Co., Ltd. described in paragraph 1 can be exercised via a written document, e-mail or fax in accordance with Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. Grand Korea Leisure Co., Ltd. will promptly respond to your request.
- ③ You may exercise your rights under Paragraph 1 via the legal representative or delegated party of the information owner. In this case, a letter of attorney according to Annexed Form No. 11 of the "Notice of Personal Information Handling Method (No. 2020-7)" must be submitted.
- ④ A request to view or suspend handling personal information may limit the right of the subject of the information in accordance with Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
- ⑤ A request to correct or delete personal information shall not be fulfilled in the case where the personal information concerned is stipulated by the relevant legislation as an object of information collection.
- ⑥ The Company will verify the identity of the person who as the subject of personal information, has made a request to view, correct, delete or suspend handling personal information.
Article 6. (Privacy protection manager)
① Grand Korea Leisure Co., Ltd. is generally responsible for handling of personal information and appoints a personal information protection manager as below to handle any grievances and relieve damages of information holders in relation to personal information.
▶ Privacy protection manager
- Name : Kim Hyun Gi
- Department : Head of Management Headquarters
- Position: Executives (Head of Headquarters)
- Contact : <02-6421-6005>, <privacy@7luck.com>
- ※ his leads to the department in charge of protecting personal information.
▶A department that handles personal information protection duties and related grievances
- Department : Safety Planning Team, Information Protection Part
- Position : Lee Yun-Jin
- Contact : <02-6421-6418>, <dl2634@7luck.com>
② Information holders may contact the person and department in charge of protecting personal information in relation to all personal information inquiries, complaints and damages that arise while using the services of Grand Korea Leisure Co., Ltd. Grand Korea Leisure Co., Ltd. will respond to any inquiries of information holders without delay.
Article 7. (Items of Personal Information Handled)
The items of personal information handled by the Company are as follows.
| NO | Personal information file | Items of Personal Information Recorded in Personal Information File |
|---|---|---|
| 1 | 7luck Website Membership Information |
|
| 2 | Casino customer information |
|
Article 8 (Personal Information File Registration Status)
The purpose, period, and items of the personal information file registered and disclosed by Grand Korea Leisure pursuant to Article 32 of the Personal Information Protection Act are as follows.
| NO | Name of personal information file | Grounds for operation | Purpose of handling | Personal information items recorded on the personal information file | Possession period |
|---|---|---|---|---|---|
| 1 | 7Luck website member information | Consent of information owner | Membership management | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 3 years from last login date |
| 2 | Casino customer information | Article 29 of Tourism Promotion Act, Article 5-2 of Act on Reporting and Use of Certain Financial Transaction Information | Access restriction, identity check, customer management | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 5 years from final transaction date |
| Consent of information owner | Marketing activities, such as events | *Option: Consent to receive SMS |
※For other registered matters of personal information files of Grand Leisure Korea Co., Ltd., please use the Privacy Protection Portal of the Personal information Protection Committee (www.privacy.go.kr) → Privacy Service → Request to View Personal Information → Search List of Personal Information Files.
Article 9. (Procedure and Method of Personal Information Destruction)
① Grand Korea Leisure Co., Ltd. destroys personal information immediately when it becomes unnecessary due to expiration of the possession period and accomplishment of the purpose.
② If personal information needs to be preserved in accordance with other laws despite expiration of the possession period agreed by the information holder or accomplishment of the purpose, such personal information (or personal information file) is preserved by transferring it to a separate database or relocating to a separate storage place.
③ The procedure and method of destroying personal information are as follows.
- A. Procedure for Destruction
- Grand Korea Leisure Co., Ltd. establishes a plan to destroy personal information (or personal information file) and destroys it accordingly. Grand Korea Leisure Co., Ltd. selects personal information (or personal information file) that needs to be destroyed and destroys personal information (or personal information file) by receiving approval of the personal information protection manager.
- B. Destruction Method
- Grand Korea Leisure Co., Ltd. destroys personal information recorded or stored in electronic files in a way that the record cannot be restored. Personal information recorded on paper documents are destroyed by shredding or incinerating.
Article 10. (Measures to Secure Safety of Personal Information)
① Grand Korea Leisure Co., Ltd. takes the following measures to secure safety of personal information.
- 1. Administrative measures: Establishment and enforcement of an internal management plan,, periodic education of employees, etc.
- 2. Technical measures: Management of access to the personal information handling system, etc., encryption of unique identification information, etc., installation of security programs
- 3. Physical measures: Control of access to computer room, data storage room, etc.
Article 11. (Remedy for Infringement on Rights and Interests)
The subject of personal information may inquire to the following agencies about a remedy for infringement or for consultation regarding personal information.
<The agency below is an agency irrelevant to Grand Korea Leisure Co., Ltd. If you are discontent about handling of personal information or damage relief by Grand Korea Leisure Co., Ltd., contact the agency below for help.>
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Jurisdiction: Report or consultation on infringement on a right to personal information
- Website: privacy.kisa.or.kr
- Tel.: (without a telephone exchange number) 118
- Address: Personal Information Infringement Reporting Center, 3F, 9, Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)
▶ Privacy dispute arbitration committee (operated by Korea Internet & Security Agency)
- Jurisdiction: Application for personal information dispute mediation, settlement of collective dispute (civil remedy)
- Website: www.kopico.go.kr
- Tel.: (without a telephone exchange number) 1833-6972
- Address: 4F, Government Complex-Seoul, 209, Sejong-daero, Jongno-gu, Seoul (03171)
▶ Supreme Prosecutor's Office, Cyber Crime Investigation Division: (without a telephone exchange number) 1301 (privacy@spo.go.kr)
▶ Cyber Safety Bureau of Korean National Police Agency: (without a telephone exchange number) 182 (cyberbureau.police.go.kr)
Article 12. (Request to View Personal Information)
- ① A request to view personal information under Article 35 of the Personal Information Protection Act may be made by the subject of the information to the following department. The subject of information may make a request to the Ministry of the Interior and Safety. The Company will make efforts to have such a request to be promptly processed.
▶ Department Responsible for Receiving and Handling Requests to View Personal Information
Department: Safety Planning Team, Information Protection Part
Officer: Lee Yun-Jin
Contact: <02-6421-6418>, <dl2634@7luck.com> - ② The subject of information may make a request to view personal information on the Personal Information Protection portal site of the Ministry of the Interior and Safety (www.privacy.go.kr) as well as to the department referred to in Paragraph 1.
▶ Visit the Personal Information Protection portal site of the Personal Information Protection Committee. Use the menu Civil Complaint on Personal Information > Request to View Personal Information, etc. (I-PIN is required for personal verification.)
Article 13 (Installation, Operation, and Refusal of Automatic Personal Information Collecting Systems)
- ① The Grand Korea Leisure website uses cookies to find and store customer information as necessary. Cookies are extremely small text files sent from our server to the web browser of customers to be saved on the customer's PC. Customers may choose to accept or refuse the collection of text information contained in cookies by configuring security settings on their web browser.
- 1. Select [Internet Option]-[Security]-[Custom Level] under the [Tools] menu of the web browser to decide the level of information collected using cookies.
- 2. Using the menu above, you may check every time cookies are saved or refuse all cookies.
- 3. If you refuse to install cookies, you may have difficulty using the content on our website.
- ② Information collected by cookies and the purpose of use are as follows.
- 1. Collected information: ID, connecting IP, member type, service information such as available content
- 2. Purpose of use: Differentiated information is provided according to the areas of personal interest.
Article 14 (Standards for Additional Use and Provision of Personal Information)
- Grand Korea Leisure may additionally use or provide personal information without consent of the information subject by considering Article 14-2 of the Enforcement Decree of the Personal Information Protection Act pursuant to Article 15 Paragraph 3 and Article 17 Paragraph 4 of the Personal Information Protection Act.
- 〈Accordingly, Grand Korea Leisure considers the following matters to additionally use and provide personal information without consent of the information subject.〉
- ▶Whether the purpose of additionally using or providing personal information is relevant to the original purpose of collection
- ▶Whether additional use or provision is predictable based on the collecting circumstance or handling practice
- ▶Whether additional use or provision of personal information unjustly infringes interests of the information subject
- ▶Whether necessary safety measures have been taken, such as the use of a fake name and encryption
Article 15 (Personal Information Impact Assessment Results)
- ➀ Grand Leisure Korea undergoes "personal information impact assessment" pursuant to Article 33 of the Personal Information Protection Act to investigate, analyze, and evaluate the effects of the personal information system on the personal information file of information owners.
- ➁ Grand Korea Leisure conducted impact assessment on the following personal information files.
| Name of personal information file | Personal information items recorded on the personal information file | Year conducted |
|---|---|---|
| Casino customer information | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 2018 |
Article 16 (Personal Information Management Level Diagnosis Results)
- ➀ Grand Korea Leisure receives "diagnosis of personal information management level of public institutions" by the Personal Information Protection Committee each year pursuant to Article 11 of the Personal Information Protection Act to safely manage personal information of information owners.
- ➁ Grand Leisure Korea obtained 'Satisfactory' grade during personal information management level diagnosis in 2021.
- ③ Grand Korea Leisure took the following improvement measures according to the results of personal information management level diagnosis in 2021.
- <Improvement measures>
- ⦁Periodic monitoring of personal information owners
- ⦁Reinforced authority to access personal information and manage information history
Article 17. (Change in Personal Information Policy)
- ① This Personal Information Policy shall be effective on and after MARCH 02, 2023.
- ② The previous policies may be viewed as shown below.
