Privacy Policy

1. General

Dudungsil Games (Representative: Park Hayoung; the “Company”) complies with the Personal Information Protection Act and other applicable laws, and uses this policy to explain the personal information it processes in the mobile game “Netherworld Inc.: Dungeon Division” (the “Game”) and on its website (dudungsil.com).

The Game has no sign-up process that asks for a name, phone number, email address or password. Information needed to play the Game is processed on the user’s device and through an anonymous game account. We receive an email address or similar information only when a user sends it to us directly, for example in an inquiry.

2. Personal information we process and why

The Company processes only the minimum information needed for the purposes below. If a purpose changes, we will notify you in advance and obtain any required consent as required by law.

• Game account (required): When you first launch the Game, an anonymous Firebase Authentication account is created and an account identifier (UID) is issued. The account creation and sign-in times are processed with it. The purposes are distinguishing users, associating game data and purchase status with the account, and preventing abuse.
• Platform sign-in (optional): On Android, we process the Google Play Games player identifier obtained through the authorization code received from Google Play Games sign-in. On iOS, we process the Game Center player identifier and display name and the authentication information issued by Apple (signature, public key URL, salt and timestamp), and link them to the game account. The purposes are account verification and restoring progress after changing devices or reinstalling. We do not request email, profile or friends list permissions. If you do not sign in or sign-in fails, the Game saves data only on the device as a guest.
• Cloud backup (when signed in to a platform): Game save data (currencies, staff and gear, progress, settings, purchase and reward claim status, etc.), a hash for verifying the save data, the save version and time, and upload times and counts. The purposes are restoring progress between devices running the same operating system and detecting save conflicts. Uploads happen when the app moves to the background, at least one hour apart and up to 10 times per day based on Korea Standard Time. Data transfer between Android and iOS is not provided.
• In-app purchases: Game account UID, purchase store, product ID, transaction identifiers such as the order number, purchase and delivery times, and delivery and refund status. To verify a purchase, the purchase receipt issued by the store is sent to the Company’s server and checked with the Google Play Developer API or the Apple App Store Server API; the original receipt is not stored. On iOS, a hashed value of the UID (appAccountToken) is linked to the transaction to prevent another account from using the transaction. The purposes are verifying purchases, delivering and restoring products, preventing duplicate delivery and fraudulent payments, reflecting refunds, and handling purchase inquiries. Card numbers and other payment method information are processed by each store, and the Company does not receive them.
• Rewarded ads: Ads are provided by Google AdMob. In the course of requesting and displaying ads, Google processes advertising identifiers (Android advertising ID, app set ID), IP address and the approximate location derived from it, device and operating system information, ad view and interaction information, and diagnostic information. In regions where ad consent is required, the Google UMP consent status is also processed. Starting with Game versions released after the October 24, 2026 revision (from iOS 1.0.1), when Google AdMob cannot provide an ad, Unity LevelPlay, Unity Technologies’ ad mediation service (operated by ironSource Ltd., including the Unity Ads ad network), provides the same rewarded ad; in that case ironSource and Unity process the same kinds of advertising identifiers, IP address and approximate location, device, operating system and app information, ad view and interaction information, and diagnostic information described above. The purposes are serving ads, granting viewing rewards, preventing ad fraud and measuring performance. On iOS, the Game does not request App Tracking Transparency (ATT) permission and therefore does not use the advertising identifier (IDFA).
• Usage analytics: Starting with Game versions released after the October 21, 2026 revision, we collect game usage records through Google Analytics for Firebase. The items are a random identifier newly issued for each app installation (app instance ID); in-game activity records such as screen navigation, battle start and results, tutorial progress, hiring, upgrades, currency earned and spent, rewarded ad results, shop product views and purchase results; a progress summary (chapter, dungeon level, whether paid products were purchased, etc.); device model, operating system, app version and language; country- and region-level location estimated from the IP address; and app launch and usage time. Because Analytics is linked with Google AdMob to measure ad revenue, ad impression and revenue information is also processed. The purposes are understanding game difficulty and drop-off points, improving features, and improving ads and product offerings. We do not collect advertising identifiers (Android advertising ID, IDFA) or the iOS device identifier (IDFV), do not include the game account UID, name or email in analytics data, and do not use analytics data for ad personalization.
• Customer inquiries: Email address, inquiry content, device and operating system used, and any support UID, order number or screenshots the user chooses to send. The purposes are answering inquiries, investigating errors, and handling requests such as purchases, refunds and account deletion.
• Closed test application (optional): Explained in a separate section below.
• Website use: From November 25, 2026, we use Google Analytics for website visit analytics. The items are a random identifier cookie stored in the browser (such as _ga), the URL and title of pages visited, how the visitor arrived (referring address such as a search engine or link, and campaign values), clicks on store buttons (button position and post name), browser and device type, screen size, language, and approximate location (country and city) estimated from the IP address. The purpose is to understand which pages are read and whether the website leads to game downloads, so we can improve the website and how we present the Game. Google signals and ad personalization signals are turned off, and we do not send information that directly identifies users, such as names or email addresses. Until then, the website does not use cookies or visit analytics scripts. In the course of delivering pages, the hosting provider Cloudflare processes the visitor’s IP address, browser information, requested URL and time, for the purposes of delivering the website and security. The inquiry drafting feature processes input only within the browser and does not send it to a server or store it.

3. Legal basis for processing

• Game account, platform sign-in, cloud backup, in-app purchases and answering inquiries: performance of the contract with the user (Article 15(1)(4) of the Personal Information Protection Act)
• Retention required by law, such as transaction records: special provisions of law and compliance with legal obligations (Article 15(1)(2) and the proviso to Article 21(1) of the same Act)
• Closed test application: consent of the data subject (Article 15(1)(1) of the same Act)
• Rewarded ads: providing the ad viewing reward the user chose, and consent under applicable laws (in regions where consent is required)
• Usage analytics and website visit analytics: achieving the legitimate interests of the personal information controller (Article 15(1)(6) of the same Act). Processing is limited to what is needed to improve the Game and the website, using only a random identifier and not for advertising.

4. Closed test application

The Company recruits pre-release test participants through Google Forms. Applying is optional, and there is no disadvantage for not applying.

• Items collected: the email address of the Google account used to respond to the form, the desired test platform (Android or iOS), confirmation of being 14 years of age or older, consent status and response time
• Purposes: test notices, registration on the Google Play Console tester list for Android, TestFlight invitations through App Store Connect for iOS, and communication about running the test
• Retention period: destroyed within 30 days after all closed tests end. If no test is held, destroyed within one year of the application date, and destroyed without delay if consent is withdrawn.
• Processing location: Responses are stored in Google Forms and Google Sheets of Google LLC (United States). The email address is entered into Google Play Console when registering Android testers and into App Store Connect of Apple Inc. (United States) when sending iOS invitations. Separate consent to this international transfer is obtained in the form.

Children under 14 cannot apply. To withdraw consent or delete an application, send the email address you applied with to [email protected].

5. Retention and destruction

The Company destroys personal information without delay once the purpose of processing has been achieved. Retention periods by item are as follows.

• Game account, cloud backup and purchase ledger: kept until the account is deleted; when deletion is requested, deleted without delay and without a grace period.
• Account deletion records and transaction identifier hashes: the identifier (UID) of a deleted account, its deletion status, request and completion times and verification hash, together with hashes of purchase transaction identifiers and a deletion marker, are kept for 5 years from the date deletion was completed and then destroyed. The purposes are preventing reuse of deleted accounts and duplicate delivery of the same purchase, and responding to disputes; they are not used for any other purpose.
• Transaction records required by law: records the Company keeps separately, such as withdrawal, refund and payment processing records, are kept in accordance with Article 6 of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce, etc.: records on contracts or withdrawal of offers for 5 years, records on payment and supply of goods for 5 years, records on consumer complaints or dispute handling for 3 years, and records on labeling and advertising for 6 months.
• Inquiry emails: kept for 3 years from the date handling was completed and then destroyed.
• Usage analytics data: automatically deleted from Google Analytics 14 months after collection. Analytics data is not linked to the game account, and when you delete your account in the Game, the analytics identifier on the device is reissued so that later records are not connected to earlier ones. Aggregated statistics that cannot identify individuals may be kept. Website visit analytics data is also deleted automatically 14 months after collection, and the _ga cookie stays in the browser for up to 2 years and can be deleted by the user at any time.
• Save files on the device: stored on the user’s device and not directly managed by the Company. They are removed when the app is deleted, but backups may remain if the operating system’s or store’s backup feature is in use.

Information kept as required by law is stored separately from other information. Electronic files are deleted using methods that make recovery impossible, and paper documents are shredded or incinerated.

6. Provision of personal information to third parties

The Company does not provide users’ personal information to third parties, except where the user consents or where the law specifically provides otherwise.

Google Play, the App Store, Google Play Games and Game Center process users’ information directly under their own privacy policies. For information about payments, store refunds and platform accounts, please also check each provider’s policy.

7. Outsourcing of personal information processing

The Company outsources the following tasks to provide the service.

• Google LLC: game account authentication, storage and server processing of cloud backups and purchase records (Firebase), game usage analytics (Google Analytics for Firebase), website visit analytics (Google Analytics), receiving and storing inquiry emails (Google Workspace), and receiving test applications (Google Forms)
• Cloudflare, Inc.: website hosting and delivery

Safe processing of personal information, prohibition of processing for other purposes, restrictions on sub-outsourcing and similar matters in the outsourcing contracts follow each processor’s terms of service and data processing terms. If a processor or outsourced task changes, we will announce it through this policy.

8. International transfer of personal information

To perform the service contract, the Company processes and stores personal information outside Korea as described below (Article 28-8(1)(3) of the Personal Information Protection Act). The Firebase database and server functions are located in the Seoul region (asia-northeast3), but authentication, email and ad processing may take place on servers outside Korea.

• Google LLC (the United States and other countries where Google data centers are located; contact: https://support.google.com/policies): game account, platform sign-in, cloud backup and in-app purchase information, rewarded ad information, usage analytics information, website visit analytics information, inquiry emails and test application information. Transferred over the network when playing the Game, watching ads, visiting the website or sending email, and kept for the retention periods above. The purposes are the same as those listed for each item above.
• ironSource Ltd. / Unity Technologies (Israel, the United States and other countries where Unity data centers are located; contact: https://unity.com/legal/privacy-policy): advertising identifiers, IP address, device and app information, and ad view and interaction information when rewarded ads are requested and displayed through Unity LevelPlay in Game versions released after the October 24, 2026 revision (from iOS 1.0.1). Transferred over the network when watching ads, and processed for the period set by Unity’s policies. The purpose is the same as providing rewarded ads.
• Apple Inc. (United States; contact: https://www.apple.com/legal/privacy/contact/): transaction identifiers and appAccountToken for verifying App Store purchases, and Game Center authentication verification information. Transferred over the network at purchase and sign-in, and processed under Apple’s policies.
• Cloudflare, Inc. (the United States and other countries where the Cloudflare network is located; contact: https://www.cloudflare.com/privacypolicy/): website visitor IP address, browser information, requested URL and time. Transferred when visiting the website, and processed for the period set by Cloudflare’s policies.

If you do not want your information transferred abroad, you may stop using the Game and request account deletion. In that case, you will not be able to use the Game, cloud backup or purchase features. If you do not sign in to a platform, cloud backup information is not transferred.

9. Automatic collection tools and ad choices

From November 25, 2026, the website uses Google Analytics cookies (_ga and cookies starting with _ga_) for visit analytics. Until then it does not use cookies or visit analytics scripts, and it does not use ad tracking tools. If you do not want cookies stored, you can block or delete them in your browser settings, or use the Google Analytics Opt-out Browser Add-on ↗. Blocking cookies does not affect your use of the website.

During rewarded ads in the Game, Google AdMob and Unity LevelPlay (ironSource) process device information such as advertising identifiers, and ads tailored to the user’s interests may be shown using it. Users can make choices as follows.

• Android: you can delete or reset your advertising ID under device Settings → Google → Ads.
• iOS: the Game does not request tracking permission (ATT) and does not use the advertising identifier (IDFA).
• In regions where ad consent is required (the European Economic Area, the United Kingdom, some U.S. states, etc.), you make your choice on the Google UMP consent screen and can change it at any time under Settings → Ads & Privacy Choices in the Game. This choice is also passed to Unity LevelPlay.
• You can use the Game without watching rewarded ads.

For how Google processes ad data, see How Google uses information from sites or apps that use its services ↗, and for how Unity LevelPlay processes data, see the Unity Privacy Policy ↗.

10. Analytics and error reporting tools

Starting with Game versions released after the October 21, 2026 revision, the Company uses Google Analytics for Firebase for game usage analytics. The items collected, purposes and retention period are as described above. On both Android and iOS, the Game is released with advertising identifier collection and ad personalization signals turned off. The Game does not yet offer a setting to turn off usage analytics alone; if you want processing suspended, you can request it using the method for exercising rights below. We do not use error reporting tools (such as Crashlytics).

On the website, we run visit analytics with Google Analytics from November 25, 2026 (see “Website use” above). Website data is stored in the same Google Analytics property as the game analytics, but it is not linked to game accounts or the app’s analytics identifiers.

However, sign-in, payment and ad SDKs and the operating system may process technical information such as the app version and device type to provide their functions, and this happens within the purposes described above.

11. Rights of users and legal guardians and how to exercise them

Users and their legal guardians may at any time request access to, correction or deletion of, or suspension of processing of personal information processed by the Company, and may withdraw consent.

• Account and data deletion: You can do this directly under Settings → Delete Account & Data in the Game. If you cannot use the app, please request it by email following the account and data deletion guide (in Korean).
• Other requests: Send your request to [email protected], together with the support UID shown in the Game’s settings (if available).

The Company will handle the request within 10 days of receiving it and notify you of the result. We may ask for the minimum information needed to verify your identity, and if an agent makes the request, we will verify the authorization. If we refuse or limit a request as permitted by law, we will tell you the reason and how to object. Please do not send passwords, verification codes, card numbers or copies of identification documents.

12. Personal information of children under 14

The Game does not receive information that directly identifies a child, such as a name or contact details. The Company does not receive personal information from children under 14 that would require the consent of a legal guardian, and only those aged 14 or older may apply for the closed test.

If a child under 14 contacts us by email, we will handle the inquiry after confirming the consent of the legal guardian. If we become aware that we have received a child’s personal information without such consent, we will destroy it without delay.

13. Measures to ensure the security of personal information

• Administrative measures: Access to personal information is limited to the representative, and access rights to operational accounts are restricted to what is necessary.
• Technical measures: All transmissions are encrypted with HTTPS (TLS). Database security rules allow users to access only their own data and block access by accounts that are being deleted or have been deleted. Purchases are delivered only after the server verifies them with the store, and original receipts are not stored. Server secret keys are kept in a separate secret store.
• Physical measures: Personal information is stored in the cloud data centers of Google and Cloudflare and follows each provider’s physical security measures.

14. Chief Privacy Officer

The Company designates a Chief Privacy Officer to oversee personal information processing and to handle user inquiries and complaints.

• Name: Park Hayoung
• Title: Representative
• Contact: [email protected]

Requests for access to personal information can also be made through the contact above.

15. Remedies for infringement of rights

If you need counseling or dispute resolution regarding infringement of personal information, you can contact the organizations below.

• Personal Information Infringement Report Center: 118 (in Korea, no area code) · privacy.kisa.or.kr ↗
• Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr ↗
• Supreme Prosecutors’ Office: 1301 (in Korea, no area code) · www.spo.go.kr ↗
• Korean National Police Agency: 182 (in Korea, no area code) · ecrm.police.go.kr ↗

16. Changes to this policy and effective date

This Privacy Policy takes effect on October 21, 2026, and the October 24, 2026 revision below takes effect on October 24, 2026, the release date of iOS 1.0.1 (posted on the website on October 23, 2026). The November 25, 2026 revision takes effect on November 25, 2026 (posted on the website on October 26, 2026). The preparatory draft previously posted on the website (written October 13–16, 2026) never took effect and is replaced by this policy.

Revision history

• Revised November 25, 2026 (posted October 26, 2026): With the introduction of Google Analytics for website visit analytics, we added the items collected, purposes, legal basis, cookies, retention period, and the related outsourcing and international transfer details. Before this revision, the policy stated that “the website does not use cookies or visit analytics scripts,” and no website visit analytics information is collected before the effective date.
• Revised October 24, 2026: Added Unity LevelPlay (ironSource Ltd. / Unity Technologies, including Unity Ads) as a rewarded ad provider. It provides the same rewarded ad in place of Google AdMob when Google AdMob cannot provide one, and the processed items, purposes, international transfer details and ad choice information were updated accordingly. Game versions released before the revision do not include Unity LevelPlay.
• Revised October 21, 2026 (before official launch): With the introduction of a usage analytics tool (Google Analytics for Firebase), we added the items, purposes, legal basis and retention period (14 months) for usage analytics, as well as the related outsourcing and international transfer details. Before this revision, the policy stated that “the Company does not use behavioral analytics or error reporting services,” and Game versions released before the revision do not collect usage analytics information.

If we change this policy, we will announce it on the website and through in-game notices at least 7 days before the change takes effect. For changes that are important to users’ rights, such as adding collected items or providing information to third parties, we will give notice 30 days in advance and obtain consent again where required.