Before

Privacy Policy

THE DATA WE COLLECT

Data you provide us.
• Your messages to the Service (such as chat logs and player support tickets)
• Other data you choose to give us (such as data to identify a lost account)
Data we collect automatically.
• Data about your account and game progress.
• Your IP address and mobile device identifiers (such as your device ID, advertising ID, MAC address, IMEI).
• Data about your device, such as device name and operating system, browser type and language.
• Data we collect with cookies and similar technologies (see more below).
• Data about your use of the Service, such as gameplay data and your interactions with other players inside the Service
In most cases, we also create a GalaLab’s specific ID for you when you use the Service.

Data we collect from our partners.
• Data we receive if you link a third party tool with the Service (such as Facebook or Google)
• Demographic data (such as to determine the coarse location of your IP address)
• Data to fight fraud (such as refund abuse in games or click fraud in advertising)
• Data from platforms that the games run on (such as to verify payment)
• Data for advertising and analytics purposes, so we can provide you a better Service

WHY DO WE COLLECT YOUR DATA

To make the Service work.
To perform the contract, we process data necessary to
• Create accounts and allow you to play our games and use our Service
• Operate the Service
• Verify and confirm payments
• Provide and deliver products and services you request
• Send you Service-related communications

To make the Service more suitable for our players.
To provide a great Service to our players, we have a legitimate interest to collect and process necessary data to
• Update and develop player profiles
• Develop and improve the Service and player experience
• Manage our relationship with you
• Provide social features as part of the Service
• Customize your Service experience
• Respond to your comments and questions and provide player support
• Provide you GalaLab’s offers in the Service as well as in other websites and services, and by email
• Send you related information, such as updates, security alerts, and support messages 

To show personalized advertisements.
To show you personalized advertisements in the Service as well as in other websites and services (including email) we have a legitimate interest to process necessary data to
• Track the content you access in connection with the Service and your online behavior
• Deliver, target and improve our advertising and the Service
For information on how to opt-out from personalized advertisements, see section 'Your rights and options' below.

To keep the Service safe and fair.
Ensuring a level playing field in the Service is a top priority for us. For more information on our acceptable use policy, see the GalaLab Terms of Service.
In order to keep the Service and its social features safe and fair, to fight fraud and ensure acceptable use otherwise, we have a legitimate interest to process necessary data to
• Analyze and monitor use of the Service and its social features
• Moderate chats either automatically or manually
• Take action against fraudulent or misbehaving players

To analyze, profile, and segment.
In all of the above cases and purposes, we may analyze, profile and segment all collected data.

WHO CAN SEE YOUR DATA

Apart from GalaLab, your data can be accessed by others in the following situations:

OTHER PLAYERS AND USERS.
Social features are a core component of our games. Other players and users may, for example, see your profile data, in-game activities and read the messages you have posted.

PARTNERS WORKING FOR GALALAB.
GalaLab has partners to perform services for us. These partners process your data only at and according to instructions from GalaLab and partners to provide the Service, such as hosting, player support, advertising, analytics and fraud prevention.

Other companies and public authorities.
In order to combat fraud and illegal activity, we may exchange data with other companies and organizations and provide it to public authorities in response to lawful requests.
We may also disclose your data based on your consent, to comply with the law or to protect the rights, property or safety of us, our players or others.

Advertising and Social Media partners.
The Service includes features from our partners, such as social media interaction tools and in-game advertising. These partners may access your data and operate under their own privacy policies. We encourage you to check their privacy policies to learn more about their data processing practices.

-

YOUR RIGHTS AND OPTIONS

Your other rights.
You also have the right to correct your data, have your data deleted, object how we use or share your data, and restrict how we use or share your data. You can always withdraw your consent.
We will respond to all requests within a reasonable timeframe. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact Korea Consumer Agency (free of charge) in South Korea where the company is located.

HOW DO WE PROTECT YOUR DATA

Security Safeguards.
In order to help ensure a secure and safe player experience, we are continuously developing and implementing administrative, technical and physical security measures to protect your data from unauthorized access or against loss, misuse or alteration.

Data retention.
We retain your data for as long as your account is active or as needed to provide you the Service. We will for example periodically de-identify unused game accounts and we regularly review and de-identify unnecessary data.
Note that if you ask us to remove your personal data, we will retain your data as necessary for our legitimate business interests, such as to comply with our legal obligations, resolve disputes, and enforce our agreements.

AGE LIMITS

We do not knowingly collect or solicit personal data about or direct or target interest based advertising to anyone under the age of 13 or knowingly allow such persons to use our Services. If you are under 13, please do not send any data about yourself to us, including your name, address, telephone number, or email address. No one under the age of 13 may provide any personal data. If we learn that we have collected personal data about a child under age 13, we will delete that data as quickly as possible. If you believe that we might have any data from or about a child under the age of 13, please contact us.

-

After

Privacy Policy

Items of Personal Information collected

We collect the minimum amount of personal information necessary to provide our services.

Using Personal Information

We use personal information for the following purposes, among others, to manage members, provide and improve services, and administer Flyff Legacy and related services
• Member management, including user identification
• User protection and service operation, including restrictions on use for members who violate the terms of service and related laws, prevention and sanctions for acts that interfere with the smooth operation of the service, including fraudulent use, prevention of account theft and fraudulent transactions, delivery of notices, preservation of records for dispute resolution, and handling of complaints.
• Analyzing service usage records and access frequency, statistics on service usage, providing customized services and displaying advertisements based on service analysis and statistics, etc.
• Marketing and promotion, such as providing event information and participation opportunities, providing advertising information, etc.

Provision of Personal Information

We do not provide personal information to external parties without the prior consent of the member, except in cases where the member has directly consented to the provision of personal information in order to use the services of an external partner, or where the obligation to submit personal information to the company has arisen in accordance with relevant laws and regulations, or where there is an imminent danger to the life or safety of the user and it is necessary to resolve it.

The period of retention and use of personal information of the recipient is until withdrawal of membership or termination of service, and other storage periods stipulated by the company's internal policies and laws. The Company entrusts some of the tasks that are essential for the provision of services to specialized companies in Korea and abroad, and manages them in compliance with relevant regulations so that the entrusted companies can safely process personal information in accordance with relevant laws and regulations.

Period of Retention and Use of Personal Information, and Destruction

In principle, the Company destroys members' personal information without delay when the purpose of using personal information is fulfilled.
For electronic files, we use technical methods to securely delete them so that they cannot be recovered or reproduced, and we destroy printouts by shredding or incinerating them.
However, if we have obtained prior consent from the member, or if we are obligated to retain it by applicable law, we will store it securely and in accordance with applicable standards.
In the following cases, we are obligated to preserve information in accordance with related laws, such as the Act On The Consumer Protection In Electronic Commerce, Framework Act On National Taxes, Electronic Financial Transactions Act, and Protection Of Communications Secrets Act.

Member's Rights and How to Exercise Them

Your other rights.

You also have the right to objectively explain how we correct, delete, use, and share your data, and to restrict how we use or share your data. We will respond to all requests within a reasonable time after receiving them. If you have a privacy or data use concern that has not been resolved to your satisfaction, you may contact the Korea Consumer Affairs Organization (free of charge) in the country where we are located.

 • Flyff Legacy Customer Service - https://galalab.helpshift.com/hc/ko/4-flyff-legacy/

How We Protect Your Data

In processing your personal information, we take the following technical and administrative measures to ensure the safety of your personal information so that it is not lost, stolen, leaked, altered, or damaged.

 • Members' personal information is stored encrypted, and when it is necessary to transmit such personal information, it is transmitted securely using encrypted communication. 
 • We back up and manage important data from time to time to prevent damage to personal information, and install and operate regularly updated antivirus programs to prevent infection with malware or viruses. 
 • We minimize the number of people in charge of handling personal information, and conduct regular or ongoing training and campaigns for personal information handlers and company-wide employees. 

Rights of Members and Legal Representatives and How to Exercise Them

In principle, the Company destroys the information after the purpose of collecting and using personal information is fulfilled. However, if it is necessary to preserve it in accordance with the provisions of the relevant laws and regulations, the Company will keep the member's information for a certain period of time stipulated by the relevant laws and regulations.
Members and their legal representatives may request the deletion of their personal information or that of their children under the age of 14 at any time, and the Company will take necessary measures without delay upon such request.
To delete personal information of a member or child under the age of 14, please contact our customer service, and after going through the identification procedure, you can delete and withdraw.
• Flyff Legacy Customer Service https://galalab.helpshift.com/hc/ko/4-flyff-legacy/
We will process personal information deleted at the request of a member or legal representative as specified in the 'Personal Information Retention and Use Period' and will not be able to view or use it for any other purpose.

Contact Us

We have designated a privacy officer to handle inquiries and complaints regarding members' personal information.

We also designate a Data Protection Officer (DPO) for users located in the European Union or United Kingdom.

If you need to report or discuss other privacy breaches, you can contact the organizations below for assistance.