Privacy Policy

Holdem Fans (the Company) publishes this policy to protect members' personal information and promptly address related concerns.

The Company processes only necessary personal information in accordance with the Personal Information Protection Act and other applicable laws. For use beyond the original purpose or third-party provision, it obtains legally required consent or follows the necessary procedures.

Account information

Email, nickname, encrypted password, social login provider and provider user ID

Kakao login

Kakao user ID, Kakao account email, and nickname and profile image where consented

Service records

Venue registration, participation, buy-in, points, settlement, ranking, leaderboard, inquiries, notifications and Telegram integration records

Automatically generated information

IP address, device and browser information, cookies, access times, usage logs and error logs

Player information

Participating games, buy-in records and status (including approval/rejection of historical requests), points, rankings, results, registered venues and favorites

Today's Run information

Date of birth, optional birth time, solar/lunar calendar selection and Today's Run usage records

Payment/subscription information

Internal user ID, store, product and transaction IDs, purchase, renewal, cancellation, refund and expiration status (card and bank account numbers are not collected)

Other optional information

Phone number, Telegram account integration and content attached to Support inquiries

• Member identification, login, account management and prevention of duplicate registration and abuse
• Venue search, game participation, buy-in records, points and settlement records
• Provide Today's Run and verify Ante/Run Pass purchases, restorations, renewals and refunds
• Verification of venue operating authority, staff permissions, leaderboards and TV displays
• Receiving and reviewing venue applications, communicating decisions and contacting applicants for verification
• Customer inquiries, announcements, incident response, quality improvement and security
• Legal compliance, dispute handling and investigations of terms violations or abuse

Personal information is destroyed without delay upon account withdrawal or fulfillment of its purpose. Information needed to prevent abuse, handle disputes or comply with law may be retained for the periods below.

Account/consent records

1 year after account withdrawal or until the dispute ends

Venue applications

If approved: 1 year after venue operations end. If rejected: 6 months from rejection, for reapplication and dispute handling

Inquiry/dispute records

3 years after resolution

Payment/transaction records

5 years under the Electronic Commerce Act

Access logs

The period required by applicable law, including the Protection of Communications Secrets Act

• Player nicknames, participation status, buy-in record status, venue points and rankings
• Venue names, addresses, hours, open-chat links and game information made public by the operator
• Author information and inquiry content needed to handle inquiries

The Company does not, in principle, sell or arbitrarily provide members' personal information externally. Where legally grounded, consented to or necessary for the service, the following may be visible to other members, venues, operators or staff.

The Company may outsource cloud, authentication, hosting, messaging and other tasks for stable service delivery. Changes to processors or transfer countries are announced in this policy or service notices.

Supabase

Authentication, database, file and log storage. Transfer countries include the United States

Vercel

Web hosting, deployment and access logs. Transfer countries include the United States

Kakao

Kakao login and account email provision. Provider in Korea

Slack

Inquiry notifications and operational responses. Author information, reply email and inquiry content are transferred using encrypted communications when an inquiry is submitted. Transfer countries include the United States. Processing remains within the inquiry-record retention period. Related requests can be sent to Support.

RevenueCat

Internal user identifiers and product, transaction and subscription status are transferred over encrypted communications at payment verification to RevenueCat, Inc. (United States, compliance@revenuecat.com). Processing is for payment, restoration, renewal and refund management until the service contract ends or the statutory retention period expires. Refusing the transfer prevents purchase and restoration of paid products.

Personal information is destroyed without delay when retention expires, its purpose is fulfilled or the member withdraws. Electronic files are deleted irrecoverably; paper records are shredded or incinerated.

Members may request access, correction, deletion, restriction of processing or withdrawal of consent at any time through the service profile, Support or contact methods provided by the Company. The Company handles requests without delay in accordance with law.

Cookies or similar technology may be used to maintain login, provide security and analyze service use. Members may refuse or delete cookies in browser settings, but this may limit features such as staying signed in.

• Encryption or hashing of authentication data such as passwords
• Access controls based on service roles and permissions
• Retention of access records and review of incident/security logs
• Data protection using cloud-service security features

The Company currently makes no fully automated decisions with legal or similarly significant effects on members and does not use personal information entered by members to train generative AI models. If such features are introduced, the data, purposes and refusal methods will be announced in advance.

Officer

Holdem Fans Privacy Officer

Department

Holdem Fans Operations Team

Contact

In-service Support or arkenworks.ai@gmail.com

This policy takes effect on September 8, 2026. Changes and their effective dates will be announced through service screens or announcements.

Holdem Fans (the Company) publishes this policy to protect members' personal information and promptly address related concerns.

The Company processes only necessary personal information in accordance with the Personal Information Protection Act and other applicable laws. For use beyond the original purpose or third-party provision, it obtains legally required consent or follows the necessary procedures.

Account information

Email, nickname, encrypted password, social login provider and provider user ID

Kakao login

Kakao user ID, Kakao account email, and nickname and profile image where consented

Service records

Venue registration, participation, buy-in, points, settlement, ranking, leaderboard, inquiries, notifications and Telegram integration records

Automatically generated information

IP address, device and browser information, cookies, access times, usage logs and error logs

Nonmember service inquiries

Name or nickname, reply email, inquiry, optional venue name, and submission and privacy-consent time/version. Used to answer inquiries; refusing collection/use consent limits inquiry submission.

Operator information

Operator name, nickname, phone number, approval status, venue permissions, staff permissions and activity records

Venue applications

Venue name and location, operator name (real name or name used at the venue), contact details (mobile number or KakaoTalk ID), application time, review status, rejection reason, and personal-information collection/use consent time and policy version

Venue information

Venue name, address, description, business hours, contact details, open-chat link, business information and game settings

• Member identification, login, account management and prevention of duplicate registration and abuse
• Venue search, game participation, buy-in records, points and settlement records
• Verification of venue operating authority, staff permissions, leaderboards and TV displays
• Receiving and reviewing venue applications, communicating decisions and contacting applicants for verification
• Customer inquiries, announcements, incident response, quality improvement and security
• Legal compliance, dispute handling and investigations of terms violations or abuse

Personal information is destroyed without delay upon account withdrawal or fulfillment of its purpose. Information needed to prevent abuse, handle disputes or comply with law may be retained for the periods below.

Account/consent records

1 year after account withdrawal or until the dispute ends

Venue applications

If approved: 1 year after venue operations end. If rejected: 6 months from rejection, for reapplication and dispute handling

Inquiry/dispute records

3 years after resolution

Access logs

The period required by applicable law, including the Protection of Communications Secrets Act

• Player nicknames, participation status, buy-in record status, venue points and rankings
• Venue names, addresses, hours, open-chat links and game information made public by the operator
• Author information and inquiry content needed to handle inquiries

The Company does not, in principle, sell or arbitrarily provide members' personal information externally. Where legally grounded, consented to or necessary for the service, the following may be visible to other members, venues, operators or staff.

The Company may outsource cloud, authentication, hosting, messaging and other tasks for stable service delivery. Changes to processors or transfer countries are announced in this policy or service notices.

Supabase

Authentication, database, file and log storage. Transfer countries include the United States

Vercel

Web hosting, deployment and access logs. Transfer countries include the United States

Kakao

Kakao login and account email provision. Provider in Korea

Slack

Inquiry notifications and operational responses. Author information, reply email and inquiry content are transferred using encrypted communications when an inquiry is submitted. Transfer countries include the United States. Processing remains within the inquiry-record retention period. Related requests can be sent to Support.

Personal information is destroyed without delay when retention expires, its purpose is fulfilled or the member withdraws. Electronic files are deleted irrecoverably; paper records are shredded or incinerated.

Members may request access, correction, deletion, restriction of processing or withdrawal of consent at any time through the service profile, Support or contact methods provided by the Company. The Company handles requests without delay in accordance with law.

Cookies or similar technology may be used to maintain login, provide security and analyze service use. Members may refuse or delete cookies in browser settings, but this may limit features such as staying signed in.

• Encryption or hashing of authentication data such as passwords
• Access controls based on service roles and permissions
• Retention of access records and review of incident/security logs
• Data protection using cloud-service security features

The Company currently makes no fully automated decisions with legal or similarly significant effects on members and does not use personal information entered by members to train generative AI models. If such features are introduced, the data, purposes and refusal methods will be announced in advance.

Officer

Holdem Fans Privacy Officer

Department

Holdem Fans Operations Team

Contact

In-service Support or arkenworks.ai@gmail.com

This policy takes effect on September 8, 2026. Changes and their effective dates will be announced through service screens or announcements.