Personal Information Treatment Policy
(details the policy for 2024.09.23 ~ 2024.12.31)
Grand Korea Leisure Co., Ltd. complies with the Personal Information Protection Act and other related laws to protect the freedom and rights of information owners, handling and managing personal information lawfully and safely. Accordingly, GKL guides information owners about the procedure and standards for handling personal information pursuant to Article 30 of the Personal Information Protection Act. GKL has established and disclosed the Privacy Policy as below to handle related grievances agilely and seamlessly.
[Major personal information handled]
|
||||||||||||||
 |
■ Membership management ■ Restriction of access and confirmation of identity ■ Marketing activities, such as events |
 |
■ Website member information for 3 years ■ Casino customer information for 5 years from final transaction date |
|||||||||||
| Purpose of handling | Retention period and destruction | |||||||||||||
 |
■ Third-party provision : Korea Customs Service, Bank of Korea, Korea Financial Intelligence Unit ■ Consignment of personal information : Hyundai Dream Tour, NHR Co., Ltd., consortium(URP system, Root On Plus Co., Ltd.) |
 |
■ Safety Planning Team, Information Protection Part, SUNG JI EON 02-6421-6724 mamo00@7luck.com |
|||||||||||
| Provision and consignment of personal information | Grievance department | |||||||||||||
| ※Please check the Privacy Policy below for details. | ||||||||||||||
Article 1. (Purpose of Handling of Personal Information)
① Grand Korea Leisure Co., Ltd. handles personal information for the purposes below. Personal information handled are not used for any other purposes. When the purposes are changed, necessary actions such as acquisition of consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
- 1. Personal information is handled for the purpose of checking one’s intent to join as a member, identifying and authenticating members for membership services, maintaining and managing members, verifying one’s identity according to the limited personal identity verification system, preventing illegal use of services, checking consent of a legal representative when handling personal information of a child below 14 years of age, making announcements and notifications, and handling grievances.
- 2. Personal information is used in order to handle civil complaints, such as identification of a person who has filed a complaint, details of the complaint, contact information for investigation, and notification of settlement results.
② The files on personal information the Company registers and discloses pursuant to Article 32 of the Personal Information Protection Act are as follows.
| NO | Personal information file | Basis of operation | Handling purpose | Personal informaton items recorded in the personal information file | Possession period |
|---|---|---|---|---|---|
| 1 | 7luck Website Membership Information | Consent by the subject of information, membership management | *Required: Name, e-mail, address | *Required: Name, email address, password | 3 years from last login date |
| *Optional: Nationality, sex, date of birth, membership card number, marketing consent | |||||
| 2 | Casino customer information | Article 29 of Tourism Promotion Act, Act on Reporting and Using Specified Financial Transaction Information, Article 5 Paragraph 2 | Access Restriction, Identification, Customer Management | *Required: Name, birth date, passport number, alien registration number, mobile number, address, occupation, nationality | 5 years from the final transaction date |
| Consent of information owner | Marketing such as events | *Optional: Agreement to receive SMS | |||
| 3 | Employee's personnel and labor information | Consent of information owner Labor Standards Act, Article 41, Article 48 Income Tax Act, Article 127, Article 164 | Recruitment procedure, personnel management after recruitment (employee personnel operation), internal administrative duties of public agencies | *Required: Name (Korean/English), mobile phone number, emergency contact, email address, information and certificate (if applicable) related to preferential treatment categories such as veteran, disability, low income, North Korean defector, multicultural family, independent living youth, career-discontinued woman, local talent, or high school graduate, education, major, language study, license, experience, and career, self-introduction
*Required: Resident registration certificate and abstract, family relation certificate, graduate ceritificate from highest level of education, transcript, recruitment physical examination report (or national health examination report), 3x4 photo, copy of bankbook |
Permanent (record management standards of public agencies) |
| 4 | Employee and customer information | Income Tax Act, Article 127, Article 164 | Tax, accounting, and contract management for employees and customers, internal administrative duties of public agencies | *Required: Name (name of customer), address (English address), country of residence, bank account number, resident registration number, passport number, alien registration number | Permanent (record management standards of public agencies) |
Article 2. (Personal Information Handling and Retention)
- ① The Company handles and retains personal information for the period of use and retention of personal information in accordance with the relevant legislation or for the period of use and retention of personal information to which the subject of personal information has agreed at the time of information collection.
- ② The said periods of personal information use and retention are as follows.
- 1. Member registration and management on the 7luck marketing website : 3 years from last login date (deleted right after withdrawal from membership)
- 2. Casino customer management : 5 years from the final transaction date (Upon membership withdrawal, information is deleted immediately upon receipt by the department in charge. However, information is not deleted if relevant laws require storage of information.)
- 3. Employee personnel and labor management: Permanent (record management standards of public agencies)
- 4. Employee and customer management: Permanent (record management standards of public agencie)
Article 3. (Use of personal information for unintended purposes and provision of personal information to a third party)
① Grand Korea Leisure Co., Ltd.only handles personal information of information owners within the scope specified under Article 1 (Purpose of Handling Personal Information). Personal information is provided to third parties only if the information owner agrees and the case falls under special legal regulations such as Articles 17 and 18 of the Personal Information Protection Act.
② Grand Korea Leisure Co., Ltd. provides personal information to a third party as below.
| No | Party provided | Purpose of provision | Items provided | Possession period | Related grounds |
|---|---|---|---|---|---|
| 1 | Korea Customs Service (Seoul Customs) | Regular business report of currency exchange business operator | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Act, Article 20 (Reports and Inspections) |
| 2 | Korea Customs Service (Busan Customs) | ||||
| 3 | National Tax Service, Korea Customs Service | Submission of foreign exchange transaction details | Customer name, nationality, real name verification number | 5 years | Foreign Exchange Transactions Regulations, Article 3-2 |
| 4 | Bank of Korea | Submission of chips credit status | Customer number, customer name | 5 years | Foreign Exchange Transactions Act, Article 18 |
| 5 | Korea Financial Intelligence Unit | Collection and analysis of information related to anti-money laundering | Customer name, customer number, date of birth, gender, real name verification number, nationality, address, contact, occupation, actual owner(Name, real name verification number, nationality) | 5 years | Act on Reporting and Use of Certain Financial Transaction Information, Article 5-2 |
| 6 | National Tax Service | Compliance with obligations under relevant laws, such as withholding tax and submission of payment statement | Name (customer name), address (English address), country of residence, bank account number, resident registration number, passport number, alien registration number | 5 years | Income Tax Act, Article 127, Article 164 |
| 7 | Anti-Corruption & Civil Rights Commission | Measurement of integrity of public agencies | Name, phone number, email address | Upon completion of integrity measurement | Act on the Prevention of Corruption and the Establishment and Management of the Anti-Corruption and Civil Rights Commission, Article 12 Subparagraph 6, Article 29 |
| 8 | Agency that created (issued) the certificate | Confirmation of authenticity of submitted documents during recruitment procedure | Name, date of birth, certificate number (serial number, unique number, registration number) | Period required to verify authenticity | Consent of information owner |
Article 4. (Entrustment of Personal Information Handling)
① Grand Korea Leisure Co., Ltd. consigns handling of personal information as below to ensure smooth handling of personal information.
| NO | Contractor | Period of Entrustment | Address | Tel. | Entrusted Works | |
|---|---|---|---|---|---|---|
| 1 | HYNDAI DREAM TOUR | '24/06/01 ~ ‘26/05/31 |
2583, Nambusunhwa-ro Seocho-gu, Seoul | 02-723-2233 | Checking information when a customer books an airline ticket | |
| 2 | consortium | URP system | ‘22/10/16 ~ ‘24/10/15 |
70, Gukjegeumyung-ro, Yeongdeungpo-gu, Seoul (Miwon Building) | 02-6297-3198 | Operation and management of information system (including agency and marketing websites) |
| Root On Plus Co., Ltd. | 503, 204 Singil-ro, Yeongdeungpo-gu, Seoul (Singil-dong, Inui Building) | 02-6225-7087 | ||||
| 3 | NHR Co., Ltd. | '24/06/12 ~ ‘24/12/31 |
NHR Tower, 23, Kkachisan-ro, Gangseo-gu, Seoul | 02-725-9536 | Recruitment agency service | |
② The Company sets out not only the objective of entrusted works in an entrustment agreement or other such documents, according to Article 26 of the Personal Information Protection Act, but also prescribes responsibilities, such as prohibition of personal information processing, technical/administrative measures for protection, restrictions on re-entrustment, management and supervision of contractors, and compensation for damage. In addition, the Company supervises the contractors so as to ensure safe processing of personal information.
③ Change in entrusted works or contractors will be forthwith disclosed according to this Personal Information Policy.
Article 5. (Rights and Obligations of Subject of Personal Information)
- ① Information holders can exercise their rights to view, correct, delete and suspend handling of personal information with Grand Korea Leisure Co., Ltd. at any time.
- ② Your rights related to Grand Korea Leisure Co., Ltd. described in paragraph 1 can be exercised via a written document, e-mail or fax in accordance with Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. Grand Korea Leisure Co., Ltd. will promptly respond to your request.
- ③ You may exercise your rights under Paragraph 1 via the legal representative or delegated party of the information owner. In this case, a letter of attorney according to Annexed Form No. 11 of the "Notice of Personal Information Handling Method (No. 2020-7)" must be submitted.
- ④ A request to view or suspend handling personal information may limit the right of the subject of the information in accordance with Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
- ⑤ A request to correct or delete personal information shall not be fulfilled in the case where the personal information concerned is stipulated by the relevant legislation as an object of information collection.
- ⑥ The Company will verify the identity of the person who as the subject of personal information, has made a request to view, correct, delete or suspend handling personal information.
- ⑦ If they are dissatisfied with or object to the actions taken in response to their request for access, correction, deletion, or suspension of processing, the information owner may file an objection (appeal) through the contact information and methods provided by the department responsible for receiving and handling requests for access to personal information.
[Required procedures, such as the viewing of personal information]
[Procedure for raising objection to access of personal information]
[Objection statement against access of personal information] ☞Click
Article 6. (Privacy protection manager)
① Grand Korea Leisure Co., Ltd. is generally responsible for handling of personal information and appoints a personal information protection manager as below to handle any grievances and relieve damages of information holders in relation to personal information.
▶ Privacy protection manager
- Name : Kim Hyun Gi
- Department : Head of Management Headquarters
- Position: Executives (Head of Headquarters)
- Contact : <02-6421-6005>, <privacy@7luck.com>
- ※ his leads to the department in charge of protecting personal information.
▶A department that handles personal information protection duties and related grievances
- Department : Safety Planning Team, Information Protection Part
- Position : SUNG JI EON
- Contact : <02-6421-6724>, <mamo00@7luck.com>
② Information holders may contact the person and department in charge of protecting personal information in relation to all personal information inquiries, complaints and damages that arise while using the services of Grand Korea Leisure Co., Ltd. Grand Korea Leisure Co., Ltd. will respond to any inquiries of information holders without delay.
Article 7 (Personal Information File Registration Status and Personal Information Items Handled)
① The personal information file registered and disclosed by Grand Leisure Korea pursuant to Article 32 of the Personal Information Protection Act is as follows.
| NO | Personal information file | Items of Personal Information Recorded in Personal Information File | |
|---|---|---|---|
| 1 | 7luck Website Membership Information | Required items |
|
| Optional items |
|
||
| 2 | Casino customer information | Required items |
|
| Optional items |
|
||
| 3 | Employee's personnel and labor information | Required items |
|
| 4 | Employee and customer information | Required items |
|
※ For the disclosure of the personal information file registration by Grand Korea Leisure Co., Ltd., please use the Personal Information Protection Committee's Personal Information Support Portal (www.privacy.go.kr) → Persoanl Information Service → Request to Access Personal Information → Search List of Personal Information Files menu. ☞ Link
② Grand Korea Leisure handles the following personal information items by obtaining the consent of information owners.
| No | Name of personal information file | Grounds for operation | Purpose of handling | Personal information items recorded in the personal information file | Retention period |
|---|---|---|---|---|---|
| 1 | Member information on the 7Luck website | Consent of information owner | Management of online members and marketing usage | *Required: Name, email address, password | 3 years from the last login date |
| *Optional: Nationality, sex, date of birth, membership card number, marketing consent | |||||
| 2 | Casino customer information | Consent of information owner | Casino membership registration | *Required: Name, phone number, address, occupation, purpose of transaction, financial source, actual owner (name, real name verification number, nationality), passport number, alien registration number | 5 years from the final transaction date(Deleted immediately when received by the department in charge upon membership withdrawal, unless the information needs to be retained pursuant to relevant laws) |
| Consent of information owner | Marketing, such as events | *Optional: Consent to receive SMS | |||
| 3 | Employee's personnel and labor information | Consent of information owner | Recruitment procedure | *Required: Name (Korean/English), mobile phone number, emergency contact, email address, information and certificate (if applicable) related to preferential treatment categories such as veteran, disability, low income, North Korean defector, multicultural family, independent living youth, career-discontinued woman, local talent, or high school graduate, education, major, language study, license, experience, and career, self-introduction | Permanent (record management standards of public agencies) |
③ Grand Korea Leisure handles the following personal information items without the consent of information owners pursuant to relevant laws.
| No | Name of personal information file | Grounds for operation | Purpose of handling | Personal information items recorded in the personal information file | Retention period |
|---|---|---|---|---|---|
| 1 | Casino customer information | Tourism Promotion Act, Article 29, Act on Reporting and Using Specified Financial Transactions Information, Article 5-2 | Registration of casino customers, access history management, business activities | *Required: Name (customer name), address (English address), country of residence, bank account number, register registration number, passport number, alien registration number | 5 years from the final transaction date(Deleted immediately when received by the department in charge upon membership withdrawal, unless the information needs to be retained pursuant to relevant laws) |
| 2 | Employee's personnel and labor information | Labor Standards Act, Article 41, Article 48. Income Tax Act, Article 127, Article 164 | Personnel management after recruitment (employee personnel operation) and internal administrative duties of public agencies | *Required: Resident registration certificate and abstract, family relation certificate, graduate ceritificate from highest level of education, transcript, recruitment physical examination report (or national health examination report), 3x4 photo, copy of bankbook | Permanent (record management standards of public agencies) |
| 3 | Employee and customer information | Income Tax Act, Article 127, Article 164 | Tax, accounting, and contract management for employees and customers, internal administrative duties of public agencies | *Required: Name (customer name), address (English address), country of residence, bank account number, register registration number, passport number, alien registration number | Permanent (record management standards of public agencies) |
Article 8. (Procedure and Method of Personal Information Destruction)
① Grand Korea Leisure Co., Ltd. destroys personal information immediately when it becomes unnecessary due to expiration of the possession period and accomplishment of the purpose.
② If personal information needs to be preserved in accordance with other laws despite expiration of the possession period agreed by the information holder or accomplishment of the purpose, such personal information (or personal information file) is preserved by transferring it to a separate database or relocating to a separate storage place.
③ The procedure and method of destroying personal information are as follows.
- A. Procedure for Destruction
- Grand Korea Leisure Co., Ltd. establishes a plan to destroy personal information (or personal information file) and destroys it accordingly. Grand Korea Leisure Co., Ltd. selects personal information (or personal information file) that needs to be destroyed and destroys personal information (or personal information file) by receiving approval of the personal information protection manager.
- B. Destruction Method
- Grand Korea Leisure Co., Ltd. destroys personal information recorded or stored in electronic files in a way that the record cannot be restored. Personal information recorded on paper documents are destroyed by shredding or incinerating.
Article 9. (Measures to Secure Safety of Personal Information)
① Grand Korea Leisure Co., Ltd. takes the following measures to secure safety of personal information.
- 1. Administrative measures: Establishment and enforcement of an internal management plan,, periodic education of employees, etc.
- 2. Technical measures: Management of access to the personal information handling system, etc., encryption of unique identification information, etc., installation of security programs
- 3. Physical measures: Control of access to computer room, data storage room, etc.
Article 10. (Remedy for Infringement on Rights and Interests)
The subject of personal information may inquire to the following agencies about a remedy for infringement or for consultation regarding personal information.
<The agency below is an agency irrelevant to Grand Korea Leisure Co., Ltd. If you are discontent about handling of personal information or damage relief by Grand Korea Leisure Co., Ltd., contact the agency below for help.>
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Jurisdiction: Report or consultation on infringement on a right to personal information
- Website: privacy.kisa.or.kr
- Tel.: (without a telephone exchange number) 118
- Address: Personal Information Infringement Reporting Center, 3F, 9, Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)
▶ Privacy dispute arbitration committee (operated by Korea Internet & Security Agency)
- Jurisdiction: Application for personal information dispute mediation, settlement of collective dispute (civil remedy)
- Website: www.kopico.go.kr
- Tel.: (without a telephone exchange number) 1833-6972
- Address: 4F, Government Complex-Seoul, 209, Sejong-daero, Jongno-gu, Seoul (03171)
▶ Supreme Prosecutor's Office, Cyber Crime Investigation Division: (without a telephone exchange number) 1301 (www.spo.go.kr)
▶ Cyber Safety Bureau of Korean National Police Agency: (without a telephone exchange number) 182 (ecrm.police.go.kr)
Article 11. (Request to View Personal Information)
- ① A request to view personal information under Article 35 of the Personal Information Protection Act may be made by the subject of the information to the following department. The subject of information may make a request to the Ministry of the Interior and Safety. The Company will make efforts to have such a request to be promptly processed.
▶ Department Responsible for Receiving and Handling Requests to View Personal Information
Department: Safety Planning Team, Information Protection Part
Officer: SUNG JI EON
Contact: <02-6421-6724>, <mamo00@7luck.com> - ② The subject of information may make a request to view personal information on the Personal Information Protection portal site of the Ministry of the Interior and Safety (www.privacy.go.kr) as well as to the department referred to in Paragraph 1.
▶ Visit the Personal Information Protection portal site of the Personal Information Protection Committee. Use the menu Civil Complaint on Personal Information > Request to View Personal Information, etc. (I-PIN is required for personal verification.)
Article 12 (Installation, Operation, and Refusal of Automatic Personal Information Collecting Systems)
- ① The Grand Korea Leisure website uses cookies to find and store customer information as necessary. Cookies are extremely small text files sent from our server to the web browser of customers to be saved on the customer's PC. Customers may choose to accept or refuse the collection of text information contained in cookies by configuring security settings on their web browser.
- 1. Select [Internet Option]-[Security]-[Custom Level] under the [Tools] menu of the web browser to decide the level of information collected using cookies.
- 2. Using the menu above, you may check every time cookies are saved or refuse all cookies.
- 3. If you refuse to install cookies, you may have difficulty using the content on our website.
- ② Information collected by cookies and the purpose of use are as follows.
- 1. Collected information: ID, connecting IP, member type, service information such as available content
- 2. Purpose of use: Differentiated information is provided according to the areas of personal interest.
Article 13 (Standards for Additional Use and Provision of Personal Information)
- Grand Korea Leisure may additionally use or provide personal information without consent of the information subject by considering Article 14-2 of the Enforcement Decree of the Personal Information Protection Act pursuant to Article 15 Paragraph 3 and Article 17 Paragraph 4 of the Personal Information Protection Act.
- 〈Accordingly, Grand Korea Leisure considers the following matters to additionally use and provide personal information without consent of the information subject.〉
- ▶Whether the purpose of additionally using or providing personal information is relevant to the original purpose of collection
- ▶Whether additional use or provision is predictable based on the collecting circumstance or handling practice
- ▶Whether additional use or provision of personal information unjustly infringes interests of the information subject
- ▶Whether necessary safety measures have been taken, such as the use of a fake name and encryption
Article 14 (Personal Information Impact Assessment Results)
- ➀ Grand Leisure Korea undergoes "personal information impact assessment" pursuant to Article 33 of the Personal Information Protection Act to investigate, analyze, and evaluate the effects of the personal information system on the personal information file of information owners.
- ➁ Grand Korea Leisure conducted impact assessment on the following personal information files.
| Name of personal information file | Personal information items recorded on the personal information file | Year conducted |
|---|---|---|
| Casino customer information | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 2018 |
| Casino customer information | Name, date of birth, passport number, alien registration number, mobile phone number, address, nationality, occupation | 2024 |
Article 15 (Results of Evaluating Personal Information Protection Level)
- ➀ Grand Korea Leisure receives "diagnosis of personal information management level of public institutions" by the Personal Information Protection Committee each year pursuant to Article 11 of the Personal Information Protection Act to safely manage personal information of information owners.
- ➁ Grand Korea Leisure obtained an 'A' grade from the Assessment of Personal Information Management Level in 2023.
- ③ Based on the results of the Assessment of Personal Information Management Level in 2023, Grand Korea Leisure has taken the following improvement measures.
- <Improvement measures>
- ⦁Strengthened the monitoring and security of encryption algorithms
Article 16. (Change in Personal Information Policy)
- ① This Personal Information Policy shall be effective on and after SEPTEMBER 23, 2024.
- ② The previous policies may be viewed as shown below.
