WAME Privacy Policy
Effective Date: May 14, 2026
BlackWho's Co., Ltd. ("Company", "we", "us", or "our") complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws and regulations, and safely protects users' personal information.
Article 1 General Provisions
① The Company handles users' personal information with care in providing the WAME platform (the "Service") and transparently informs users of the types, purposes, retention periods, and other details of personal information processed through this Policy.
② This Policy applies in conjunction with the WAME General Terms of Service and the WAME Partner Terms of Service.
③ The Company makes this Policy publicly available within the Service so that users can review it at any time.
Article 2 Personal Information Collected
The Company collects the following personal information to provide the Service.
Upon General Member Registration
- Required: Email address, nickname, password
- Optional: Preferred game genres, game style, interest tags, and other preference information
Upon Conversion to Creator Member
- Required: Channel URL of platforms where the creator is active (YouTube, Twitch, etc.), primary content genre
- Optional: Contact email or social media account
Upon Game Company Member Registration
- Required: Company name, contact person name, contact person email, business registration number
- Optional: Contact person phone number, company introduction materials
Upon Third-Party Platform Linking
- When linking external platform accounts such as Steam, PlayStation Network, Xbox Live, etc., game library, playtime, achievement data, and other information within the scope provided by the respective platform
- Separate consent is obtained from the user at the time of linking, and unlinking is available at any time in account settings.
Automatically Collected During Service Use
- IP address, access logs, cookies, device information (OS, browser, screen size, etc.)
- Search queries within the Service, click history
- Content viewing history (viewing duration, completion rate, etc.), bookmarks, sharing behavior
- Reactions to recommended content (clicks, dismissals, negative feedback, etc.)
Upon Event Participation
- Required information for each event (name, contact information, etc.) is collected after separate notice on the relevant event page.
Article 3 Purposes of Use of Personal Information
The Company uses the collected personal information for the following purposes:
Membership Management
- Member identification, verification of intent to register, prevention of duplicate registration, prevention of unauthorized use
Service Provision
- Game information search and recommendation, content display, community features
- AI matching and personalized recommendation between creator content and users
- Provision of insight dashboards to game companies (only anonymized statistical data provided)
Provision and Enhancement of AI-Based Services
- Content DNA tagging (automatic classification of style, genre, target user level, etc.)
- User persona generation and recommendation accuracy improvement
- Vector database construction and indexing for personalized recommendations via RAG (Retrieval-Augmented Generation)
Statistical Analysis
- Generation of anonymized usage behavior statistics
- Service usage trend analysis and operational improvement
Customer Support
- Handling inquiries and complaints, notification of usage restrictions
Security Management
- Prevention of unauthorized use, prevention of security incidents
Event Operation
- Event participation confirmation, prize delivery
Article 4 AI Utilization of User-Generated Content
① Content (reviews, posts, comments, video links, tag information, etc.) posted or registered by members on the Service is utilized for AI analysis, tagging, and matching purposes in accordance with Article 8 of the WAME General Terms of Service.
② The specific scope of utilization is as follows:
- AI automatically analyzes and tags the style, genre, tone, target user level, etc. of content.
- Analyzed data is stored in a vector database.
- Used for matching with user personas and personalized recommendations.
- Processed into anonymized statistical data and provided as insights to game companies.
③ The Company does not artificially transform, distort, or recreate members' content using AI.
④ The Company excludes information that can directly identify an individual (real name, contact information, etc.) from the scope of AI analysis. Biometric information such as faces and voices contained within videos, images, and audio is not used for separate biometric recognition analysis purposes; only non-identifying characteristics such as content style, genre, and tone are analyzed.
Article 5 Retention and Destruction of Personal Information
① The Company destroys personal information without delay when the purpose of collection is achieved. However, where retention is required by applicable laws and regulations, the information is retained for the relevant period and then destroyed.
Retention Period by Category
| Category | Retention Period | Legal Basis |
|---|---|---|
| Records on contracts or withdrawal of offers | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records on payment and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records on consumer complaints or dispute resolution | 3 years | Act on Consumer Protection in Electronic Commerce |
| Access logs | 3 months | Protection of Communications Secrets Act |
Destruction Methods
- Electronic files: Permanently deleted in an irrecoverable manner
- Documents: Shredded or incinerated
Article 6 Provision of Personal Information to Third Parties
① In principle, the Company does not provide users' personal information to third parties. However, the following cases are exceptions:
- Where the user has given prior consent
- Where there is a request based on laws and regulations (such as a lawful request from investigative authorities)
② Insight dashboard data provided to game company partners is provided only in a statistical form that does not identify individual users. The Company implements technical and managerial safeguards to prevent re-identification, such as not providing small-scale aggregated data below a certain threshold.
Article 7 Outsourcing of Personal Information Processing
The Company may outsource personal information processing tasks to external parties for smooth service provision, and will notify users when doing so.
Current Outsourcing Status
| Outsourced Company | Outsourced Tasks | Outsourced Data |
|---|---|---|
| Amazon Web Services, Inc. | Cloud server operation and data storage | All personal information collected during service use |
Article 8 Overseas Transfer of Personal Information
The Company may transfer personal information overseas for service provision.
- Transfer Country: United States of America
- Transfer Recipient: Amazon Web Services, Inc.
- Purpose of Transfer: Cloud server operation
- Transferred Items: Personal information collected during service use
- Timing of Transfer: Real-time during service use
The Company complies with the protective measures required by applicable laws and regulations for overseas transfers.
Article 9 Notice on Automated Processing and Profiling
① The Company performs automated profiling to provide users with optimized game and content recommendations.
② Data used for profiling:
- Usage behavior such as searches, clicks, viewing, saving, and sharing within the Service
- Preferred genres and preferences directly entered by the user
- Game library and play history obtained with explicit consent when linking third-party platform accounts
③ Results of profiling:
- The user's game preference persona (e.g., "PvE beginner, prefers emotional storytelling, light player")
- Personalized content and game recommendations based on the persona
④ Profiling is performed based on the user's consent at the time of membership registration. Users may refuse personalized recommendations or unlink third-party platform accounts at any time in account settings. Even upon refusal, the basic functions of the Service (game search, content browsing, community, etc.) remain available, and popular content or general recommendations will be provided instead.
⑤ If an automated decision based on profiling significantly affects the user, the user may request an explanation of the decision from the Company and, if necessary, request a review.
Article 10 Cookies and Tracking Technologies
① The Company may use cookies and similar tracking technologies for service usage analysis and personalized recommendations.
② Purposes of cookie use:
- Maintaining login status
- Usage behavior analysis
- Personalized content recommendations
③ Users may refuse cookie storage through browser settings. However, some service usage may be limited upon refusal.
Article 11 Security Measures
The Company implements the following measures to protect personal information:
Administrative Measures
- Designation of a Personal Information Protection Officer
- Minimization of staff handling personal information and regular training
- Establishment and implementation of internal personal information protection policies
Technical Measures
- Encrypted storage of passwords and sensitive information
- Operation of firewalls to prevent external intrusion
- Access authority control and log record management
Physical Measures
- Server room access control
- Operation of security systems
Article 12 User Rights and Exercise Methods
① Users may exercise the following rights at any time:
- Request to view personal information
- Request to correct or delete personal information
- Request to suspend processing of personal information
- Withdraw consent to collection, use, or provision of personal information
- Request explanation and review of automated decisions
- Refuse profiling and personalized recommendations
② Rights can be exercised through the settings menu within the Service or via email to the Personal Information Protection Officer, and the Company will process the request within 10 days of receipt.
③ Users may contact the following institutions for reporting or consultation regarding personal information infringement:
- Personal Information Protection Commission (Personal Information Protection Commission main site / 118 without area code)
- Personal Information Infringement Report Center (privacy.kisa.or.kr)
Article 13 Personal Information Protection Officer
The Company designates a Personal Information Protection Officer to oversee personal information processing tasks and handle user complaints and damage relief.
Peter Choi
Personal Information Protection Officer (DPO)
Email:
peter@wame.is
Article 14 Children Under 14 Years of Age
In principle, the Company does not collect personal information from users under the age of 14. If personal information of a user under 14 is collected during service use, the Company will immediately destroy such information.
Article 15 Amendment History and Notice Obligation
① This Policy is effective as of May 14, 2026.
② When amending this Policy, the Company will notify users through in-service announcements and email at least 7 days in advance. For changes unfavorable to users, at least 30 days' notice will be provided.
③ The amendment history of this Policy can be reviewed within the Service.
