Privacy Policy

Junglesoft Inc. (주식회사 정글소프트)
Effective date: September 7, 2026

1. Scope and who is responsible

Junglesoft Inc., a company based in the Republic of Korea ("Junglesoft," "we," "us," or "our"), is responsible for the personal information described in this Privacy Policy when it determines the purposes and means of processing that information.

This Policy applies to games, applications, websites and related services operated by Junglesoft that link to or present this Policy (the "Services"). It covers our casual, puzzle, card and social casino games.

The "Social Casino Services" are Golden City Casino – Free Slots and My Jackpot City only. These two Services are restricted to users aged 21 or older. Our other games are intended for teenagers and adults and are not directed to children under 13. Their content ratings do not change the rules described in Section 12.

This Policy explains our information practices and your rights. Acknowledging it or accepting our Terms of Service does not replace any separate consent required by law. The Terms address gameplay, purchases and contractual disputes; they do not waive non-waivable privacy rights.

Privacy contact: Support Team
Email: support@jungle-soft.com
Telephone: +82-2-556-0206
Address: 13F, Inho IP Building, 720, Yeoksam-dong, Gangnam-gu, Seoul, Republic of Korea

2. Information we collect and its sources

The information involved depends on the particular Service, platform, features you use and permissions you grant. Personal information includes data that can reasonably be linked to you or your device; device and advertising identifiers are not necessarily anonymous.

2.1 Account and platform information

We may receive a name or nickname, player ID, platform-specific user ID, email address, profile picture or picture URL, account preferences and information needed to authenticate an account. Sources include you and supported login or distribution platforms, including Meta/Facebook, Google and Apple, to the extent they make information available under your permissions and their policies.

We do not obtain your friend list. Making a profile publicly visible does not give us unrestricted permission to collect or reuse it.

2.2 Gameplay and technical information

Use of a Service generates information such as game progress, scores, achievements, sessions, virtual-item balances and transactions, rewards, purchases, advertising interactions, access times and error reports. Technical information may include an IP address, device or advertising identifier, operating system, browser, app version, language, time zone, network information and crash diagnostics. An IP address may be used to estimate an approximate location.

We do not collect precise geolocation through our ordinary game or account features. Where notifications are supported, relevant device or platform notification identifiers may be used to deliver messages subject to your settings and applicable permissions.

2.3 Purchases and transactions

The platform or payment provider processes the payment details entered into its checkout and may also be the seller or merchant of record. We receive transaction information needed to deliver and account for purchases, such as a player ID, order or transaction ID, product, amount, currency, date, status, refund information and information relevant to a payment dispute or fraud investigation.

We generally do not directly collect or store complete payment-card numbers or card security codes for purchases processed by those providers. Their independent processing is explained in their own privacy notices. Do not send full payment credentials or passwords to our Support Team.

2.4 Support and other information you provide

We collect information included in support requests, privacy requests, reports and other correspondence, including relevant screenshots and transaction references. We may retain limited records of permissions, privacy choices, acceptance of Terms and how requests were handled for the associated compliance or dispute-resolution purpose.

2.5 Images and AI features

Certain Services use a profile photo, avatar or other image selected for an image-transformation, face-swap or puzzle feature. The source image, output image and any temporary processing information are handled as described in Section 6.

2.6 Information not requested in ordinary operations

We do not request or collect dates of birth, telephone numbers, precise geolocation or friend lists through our ordinary game and account operations. Information that you independently include in a support message may nevertheless contain such details. Please provide only information relevant to your request and do not send government identifiers, health information or other unnecessary sensitive information.

3. How we use information and legal bases

We use relevant information to operate accounts and games; save progress; deliver purchases and rewards; provide requested image features; respond to support; maintain security; detect cheating, fraud and abuse; diagnose errors; analyze and improve performance; measure advertising and campaigns; communicate with users; and meet legal obligations or establish, exercise or defend legal claims.

Promotional communications, advertising, device access and optional image processing remain subject to applicable permission and choice requirements. Advertising is not treated as necessary to perform the gameplay contract merely because it funds a Service.

Where the GDPR, UK GDPR or another applicable law requires a legal basis, the following principles apply:

For processing governed by Korean law, the legal basis is the applicable basis under the Personal Information Protection Act, including valid consent, necessary contractual processing or another statutory ground. An overseas legal basis does not displace additional Korean-law requirements.

You may withdraw consent through the relevant available control or by contacting us. Withdrawal does not invalidate earlier lawful processing. You may object to processing based on legitimate interests where the applicable law allows. Declining information necessary for a particular feature may prevent that feature from operating; it does not automatically justify requiring unrelated optional processing.

4. Recipients and disclosures

4.1 Providers and platforms

We use providers for cloud infrastructure, analytics, attribution, advertising, technical integrations and payment-related functions. They receive information relevant to their work. The applicable role and restrictions depend on the service and processing: a hosting provider acting on our instructions is different from a platform or advertising partner using information for its own purposes.

The following providers and integrations are included in our Services, although not every game uses every provider:

An SDK integration does not mean that every listed company receives every category of information. Payment providers and platforms may act independently under their own privacy notices. Advertising disclosures and related rights are addressed in Sections 5 and 10.

4.2 User-directed visibility

A name, avatar, score or content may be visible to other users where the feature makes it visible, such as a leaderboard or a sharing action you choose. AI-generated puzzle images are not automatically published to other players. Section 6 explains the treatment of images you independently save or share.

4.3 Legal, safety and business circumstances

We may disclose information reasonably necessary to comply with applicable law or valid legal process, obtain professional advice, investigate misuse, protect rights or safety, or evaluate or complete a merger, acquisition, restructuring or transfer of the relevant business. Applicable confidentiality, notice and purpose restrictions continue to apply. A corporate transaction does not itself authorize an incompatible new use of personal information.

4.4 Provider information

Relevant provider information is available from Google, AdMob, Firebase, Meta, AppsFlyer, SDKBOX, Apple, Xsolla and AWS.

Those notices describe the providers' own processing and do not replace this Policy. In particular, AWS customer-content handling is governed by the applicable cloud service arrangements, rather than solely by AWS's general website privacy notice.

5. Advertising, cookies and your privacy choices

5.1 Web and mobile technologies

Our websites and web games may use cookies, local storage, pixels and similar technologies. Native applications may use SDKs, device identifiers and advertising identifiers without using browser cookies. Purposes include essential functionality, authentication, security, analytics, attribution, advertising and saving preferences.

Where law requires prior consent for a non-essential technology or purpose, that activity requires valid consent before it begins. Accepting the Terms does not supply that consent. Browser and device controls offer additional choices but do not replace any choice or consent mechanism that we are required to provide.

5.2 Sale, sharing and targeted advertising

We do not sell personal information in exchange for money. Certain disclosures of identifiers, device information, activity, advertising interactions or attribution events to advertising partners can nevertheless constitute a "sale," "sharing" for cross-context behavioral advertising, or "targeted advertising" under applicable law.

Where those rights apply, you may opt out of such processing without deleting your account. Send your choice to support@jungle-soft.com, identifying the game and account or player ID if available. A suggested subject is "Privacy Request – Opt Out"; no special wording is required. Any privacy choices presented within a Service may also be used. Contextual or non-personalized advertisements may continue after an advertising opt-out.

Only information needed to apply an opt-out should be provided. Verification required for access to specific personal information is not a prerequisite to a sale/sharing opt-out, and you do not need to create an account merely to submit a privacy request.

5.3 Browser preference signals and device controls

Where applicable law requires recognition of an opt-out preference signal, including Global Privacy Control (GPC), you have the right to have that signal applied to the covered sale or sharing associated with the sending browser or device, and to an associated profile or known account to the extent required by law. An email request is not a substitute for legally required signal handling. Contact the Support Team for assistance with a privacy choice.

Legacy "Do Not Track" settings are different from GPC and should not be relied on as a substitute for an applicable opt-out method. On mobile devices, you can use the advertising and tracking controls provided by your operating system. An operating-system permission does not by itself replace any separate consent required for other processing.

5.4 Communications

You may ask us to stop promotional communications by contacting support and use any unsubscribe mechanism supplied with the message. Device or platform settings can be used to manage push notifications. Necessary purchase, account-security and support communications may continue. Additional consent requirements or restrictions relating to younger users take priority where applicable.

6. Images, AI processing and sharing

For the covered face-swap, image-transformation and AI puzzle-image features, processing takes place on servers operated by Junglesoft, rather than through an external generative-AI API.

You can decline an optional image feature by not using it and can request deletion through the Support Team. Identify the game and player ID where available; avoid sending additional unnecessary photos or identity documents.

The source-image rule concerns the working copy used for AI processing. An ordinary account avatar or profile-image URL is a separate account record. Deleting our processing copy does not delete the original image from the social platform where it was obtained.

The limited content license in the Terms is not permission for unrelated advertising with your likeness, general-purpose model training or processing that requires a separate legal authorization. Where applicable law treats a particular image-processing operation as regulated biometric processing, its additional notice, authorization, retention and deletion requirements apply. Non-retention of facial feature data is not a representation that every form of temporary processing falls outside biometric law.

7. Retention and destruction

Our retention policy is to keep personal information only for the period necessary for the disclosed purpose and applicable legal obligations. The following periods and criteria apply:

The five-year and three-year periods refer to the relevant records under Korea's Act on the Consumer Protection in Electronic Commerce and its Enforcement Decree. A different mandatory tax, accounting or other legal retention period takes priority for the particular records it covers. An actual dispute, investigation or legal hold may require limited records to be preserved for longer. These exceptions do not authorize indefinite retention of all account data or unrelated images.

Information retained after account deletion for a legal obligation or specific claim is restricted to that purpose and separated from ordinary use by appropriate access or storage controls. Once the purpose and required retention end, electronic records are deleted or rendered irrecoverable using an appropriate method; any paper records are securely destroyed. Appropriately de-identified information may be retained only where it no longer constitutes personal information under applicable law.

We maintain no company-held personal-information backups outside AWS. Restricted AWS backup copies may remain until their applicable rotation removes them; they are not a basis for renewed ordinary use of deleted data. Required deletions must be maintained following restoration. Backup handling does not extend the image-specific periods in Section 6 or override a shorter period required by law.

8. Account deletion and platform disconnection

Request account or personal-information deletion by emailing support@jungle-soft.com. Include the game and your player ID if available. Do not send account passwords or complete payment credentials.

Deleting an account may permanently remove game progress, access to virtual items and related account information. Required legal retention and non-waivable refund or other consumer rights remain unaffected. We may verify a deletion request proportionately to prevent unauthorized deletion.

Uninstalling an app or disconnecting it from Facebook, Google, Apple or another platform does not necessarily delete information already held by Junglesoft. Independent platforms and payment providers handle their own records under their own obligations.

9. Privacy requests and safeguards

Depending on applicable law, you may have rights to access, obtain a copy of, correct, delete, transfer, restrict or object to processing of personal information; withdraw consent; opt out of sale, sharing or targeted advertising; limit specified sensitive-information uses; and challenge qualifying automated decisions.

Send requests to the Support Team at support@jungle-soft.com, or contact us using the details in Section 16. You may act through an authorized agent where permitted. For requests requiring verification, we use information proportionate to the request, relying where possible on information already held. We do not disclose another person's information in response to a request.

We respond within the applicable legal time limit and explain any permitted denial, exception or extension. Where a privacy decision is appealable, contact the same email with "Privacy Appeal" or otherwise clearly identify your appeal. We provide a reasoned response and regulator information as required by law. You may complain to a competent regulator without first using our internal appeal process.

We do not unlawfully discriminate against you for exercising a privacy right. Privacy requests, consent withdrawal, regulator complaints and their statutory deadlines are not subject to the Terms' 60-day informal-dispute procedure. A separate private legal claim is subject to an arbitration agreement only where that agreement validly applies and the law permits.

10. California privacy rights

This Section applies where Junglesoft is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). It supplements the information and rights above.

10.1 Categories and disclosures

Our collection and disclosure practices are described in Sections 2–6. Relevant categories include:

Sources are you, your devices, use of the Services and the platforms or providers described above. Purposes are stated in Section 3, recipient groups in Section 4, and retention periods or criteria in Section 7. We do not sell information for money. Disclosures of identifiers, activity, approximate location and purchase/attribution events for advertising may constitute CCPA sale or sharing as explained in Section 5.

You may request the categories and specific pieces collected about you, categories of sources and recipients, business purposes, and applicable sale, sharing and business-purpose disclosure information. A request is not automatically limited to the preceding 12 months where the law requires a longer period to be covered.

10.2 Rights and timing

Eligible residents may request access, deletion or correction; opt out of sale or sharing; and limit sensitive-information use or disclosure where the statutory right applies. Use the contact methods in Section 9. Authorized agents may submit requests as permitted by law.

For requests to know, delete or correct, we acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days, subject to a permitted extension of up to another 45 calendar days with timely notice and reasons. A sale/sharing opt-out or applicable sensitive-information limit request is to be implemented as soon as feasible and no later than 15 business days, or sooner where another applicable requirement applies.

The preference-signal rights described in Section 5 apply where required. We do not condition an advertising opt-out on verification required for access to specific information. We do not knowingly sell or share information of a person under 16 without the affirmative authorization required by the CCPA, and stricter applicable restrictions remain in effect.

11. Other regional rights

Republic of Korea. Where Korean law applies, you or an authorized representative may exercise rights under the Personal Information Protection Act, including applicable rights to access, correction, deletion, suspension of processing, withdrawal of consent and protections relating to qualifying automated decisions. Mandatory retention or another statutory exception may limit a particular request. Requests and complaints may be directed to our Support Team or the competent Korean privacy authorities.

Other U.S. states. Applicable laws may provide access, correction, deletion, portability, opt-out rights for sale, targeted advertising or qualifying profiling, and an appeal of a denied request. The relevant legal deadlines, sensitive-data requirements and protections for minors apply. Submit requests or appeals through Section 9.

EEA and United Kingdom. Where the GDPR or UK GDPR applies, rights include access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may object to direct marketing at any time and complain to your competent supervisory authority. Responses are provided without undue delay and normally within one month; a permitted extension of up to two further months requires timely notice and reasons. Any applicable rights concerning solely automated decisions with legal or similarly significant effects remain available.

12. Children and age-restricted Services

Golden City Casino – Free Slots and My Jackpot City are for users aged 21 or older. Parental permission does not override this requirement. If we learn that an underage user is using one of those games, we take appropriate steps to restrict access and handle the information lawfully.

Our other casual puzzle and card games are intended for teenagers and adults and are not directed to children under 13. An IARC or platform content rating, including a 3+ rating, describes content suitability; it is not a statement that we target three-year-olds or permission to disregard privacy or platform eligibility requirements.

We do not knowingly collect personal information from a child under 13 without any authorization required by applicable law. If we learn that such information has been collected without required authorization, we stop the unauthorized processing and delete or otherwise handle it as required by law. Where Korean law requires consent from a legal representative for a child under 14, or another applicable law requires a higher consent age or additional safeguards, those requirements take priority. Ordinary acceptance of the Terms is not verified parental consent.

Parents or legal guardians may contact support@jungle-soft.com regarding a child's information. Please identify the relevant game and account if known, without supplying unnecessary identity documents.

13. International processing

Junglesoft is based in the Republic of Korea and uses AWS infrastructure, including infrastructure in the United States. Information may be accessed by our personnel in Korea and processed or stored outside your country of residence. Data-protection laws and government-access rules may differ between countries.

Independent platforms, advertising partners and payment companies may process information in other locations under their applicable arrangements and notices. Our statement that company-held backups are confined to AWS does not mean that every independent recipient stores data only on AWS.

Where a restricted transfer requires consent, a contractual safeguard or another legal mechanism, the applicable requirement must be satisfied before that transfer. You may contact us for information about the safeguards applicable to your information and, where legally available, a copy subject to necessary redactions. This Policy does not itself constitute blanket transfer consent or a representation that Junglesoft has a certification it has not obtained.

14. Security

We use reasonable administrative, technical and organizational safeguards appropriate to the information and risks, including controls over access and system operations. No online transmission or storage method can guarantee absolute security. This statement does not exclude a duty or remedy imposed by law.

Report a suspected account or information-security issue to support@jungle-soft.com. Do not include passwords, full payment credentials or unnecessary sensitive information in the report.

15. Changes to this Policy

We may update this Policy when Services, information practices or applicable requirements change. The published version identifies its effective date. Material changes receive additional notice, and any new permission required by law must be obtained before the affected processing begins.

A revised Policy does not retroactively authorize an undisclosed purpose or remove an existing privacy choice. A change to this Policy does not amend the arbitration agreement in the Terms. California disclosures are reviewed at least as often as required by applicable law.

16. Contact

Junglesoft Inc. (주식회사 정글소프트)
Privacy and support contact: Support Team
Email: support@jungle-soft.com
Telephone: +82-2-556-0206
Postal address: 13F, Inho IP Building, 720, Yeoksam-dong, Gangnam-gu, Seoul, Republic of Korea

Contact us for privacy requests, complaints, questions or an accessible version of this Policy. Please identify the relevant Service so that your request can be routed correctly.