1Handling of personal information

The Company complies with the Personal Information Protection Act as well as any other laws, regulations, and rules applicable to personal information handled by the Company.

2Acquisition of personal information

The Company obtains personal information properly without using deception or other wrongful means.

3Purposes of use of personal information

The Company will use personal information it has acquired for the following purposes only, and will not use it for any other purposes unless specified to do so by laws or ordinances:

• for users to smoothly use the services provided by the Company;
• to compile statistical data on the use of the services provided by the Company;
• to conduct questionnaires regarding the services that the Company currently provides or considers providing in the future;
• for identification and authentication services;
• for the Company to charge fees;
• for system maintenance and responding to system issues;
• to respond to inquiries from users of the services provided by the Company;
• to provide information through e-zines and the like about services of the Company and promotional information from advertisers who are business operators other than the Company;
• to formulate plans for, provide, and deliver advertisements about, the Company’s existing services or future services;
• for lotteries and delivery of prizes and goods for promotional campaigns and the like;
• to make communications as necessary, such as important notices about a service of the Company; and
• for other purposes separately set out in each service provided by the Company.

4Safety measures for personal data

The Company takes appropriate safety measures to prevent leakage of, loss of, or damage to, the personal data it handles and properly manages personal information.

5Supervision of employees and entrusted parties

The Company appropriately supervises its employees with respect to their handling of personal information.
Also, in cases where the Company entrusts the handling of personal data to third parties, it appropriately supervises such third parties to ensure proper safety management of the applicable personal data.

6Provision of personal data to third parties

The Company does not provide personal data to any third party without the consent of the person in question unless specified to do so by laws or ordinances (including the following cases):

• if pursuant to a law or regulation;
• if it is necessary to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the person in question;
• if there is a special need to improve public health or promote healthy child development, and it is difficult to obtain the consent of the person in question; or
• if it is necessary to cooperate with a national government organ, local government, or a party entrusted thereby with performing the functions prescribed by laws and regulations, and obtaining the consent of the person in question is likely to interfere with the performance of those functions.
• if the third party is an academic institution, etc. and needs to handle personal data for the purpose of study and research (including the case where a part of the purpose of handling the personal data is for study and research, and excluding the case where the handling is likely to unjustly infringe personal rights and interests). In cases where it is separately set out in the services of this Company to provide personal data to third parties (including, but not limited to, the case where the Company set out in the Separate Policy), this will be performed in a lawful manner in accordance with laws and regulations.

7Handling of personal information at linked sites

The Company might display links to external sites in connection with the Company’s services, but the Company is not liable for personal information registered or collected at those external sites.

8Disclosure, correction, etc. of retained personal data

If the Company is requested by a person to indicate the purposes of use of the person's retained personal data, or if it is requested to disclose the retained personal data, etc. (including disclosure of records of provision to third parties); to correct, add content to, or delete content from it (“correction, etc.”); to discontinue its use or to erase it (“discontinuation of use, etc.”); or to discontinue its provision to a third party (disclosure; correction, etc.; discontinuation of use, etc.; and discontinuation of provision to a third party are collectively referred to as “disclosure, etc.”), the Company will respond without delay in accordance with laws and regulations, in a reasonable period of time and within an appropriate scope. However, the Company will not respond to a request for disclosure, etc. if it is unable to confirm that the request is from the person in question.
To request disclosure, etc. of personal information retained by the Company, please contact the Company via email at the following address.

WonderPlanet Inc.
（ [email protected] ）

For the Company’s address and representatives’ names, please refer to this page (link: Company Info; WonderPlanet, Inc. (wonderpla.net)）.

9Personal information of minors

If a minor uses a service provided by the Company and submits his or her personal information, the minor must obtain consent from the person who has parental authority over the minor or any other statutory agent of the minor, and if a request is made to the Company by the person with parental authority or any other statutory agent for disclosure, etc. of the retained personal data of the minor, the Company will comply with the request.

10Information of deregistered users

If a user deletes the user's account for a service provided by the Company, the Company will properly process the user information in accordance with the applicable laws and regulations and the rules separately established by the Company.

11Information collection modules

The Company might use information collection modules selected by the Company and listed in (1) below to improve services provided by the Company or to develop new services, and might accordingly submit customer information to the providers of such information collection modules. These information collection modules will collect customer information listed in (2) below without including any information which could be used for personal identification, and the collected information will be managed according to the privacy policies prescribed by the providers of each information collection module as well as other related regulations. “Information collection module” as used here refers to a program created by a third party which is independent from the functions of an application itself and performs operations such as displaying advertisements and analyzing the frequency of the application’s use. For details on the items of information acquired, their purposes of use, and their submission to third parties, please refer to the Terms of Use and privacy policies of each respective service.

（１）Information collection modules used by the Company

　　(i) Programs provided by advertising SDK provider companies 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Purpose of use: Measurement of advertising effectiveness; ad placements 　　　　　　　　　　　　

　　Information to be acquired: Device model name; OS version; IP address; play status

　　(ii) Programs provided by data analyzing companies 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Purpose of use: Ascertainment of user behavior 　　　　　　　　　　　　

　　Information to be acquired: Device model name; OS version; IP address; play status

　　(iii) Programs provided by middleware development companies 　　　　　　　　　　　　

　　Acquisition method: Automatic acquisition 　　　　　　　　　　　　

　　Purpose of use: Ascertainment of user behavior 　　　　　　　　　　　　

　　Information to be acquired: Device model name; OS version; app version

（2）Customer information to be collected

　　(i) Device model name 　　　　　　　　　　　　

　　Acquisition method: Automatic acquisition 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ii) OS version 　　　　　　　　　　　　

　　Acquisition method: Automatic acquisition 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(iii) IP address (acquired as an access log and not saved in a database) 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅳ) Location setting 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅴ) Language setting (saved in the app and not saved in a database) 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅵ) Time setting on device 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅶ) Android advertising ID (if Android is used) 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅷ) IDFA (if iOS is used) 　　　　　　　　　　　　

　　Acquisition method: Acquisition after the user’s approval 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: Transmitted to data analyzing companies, 　　　　　　　　　　　　

　　middleware development companies, and advertising SDK provider companies

　　(ⅸ) Apple ID information (if iOS is used) 　　　　　　　　　　　　

　　Acquisition method: Acquisition at users’ discretion 　　　　　　　　　　　　

　　Purpose of use: Used for data migration 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: None

　　(ⅹ) Google Account information (if Android is used) 　　　　　　　　　　　　

　　Acquisition method: Acquisition at users’ discretion　(information is saved after encryption) 　　　　　　　　　　　　

　　Purpose of use: Used for data migration 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: None

　　(ⅺ) Facebook account information 　　　　　　　　　　　　

　　Acquisition method: Inputted by users at their discretion　 　　　　　　　　　　　　

　　Purpose of use: Used for data migration 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: None

　　(ⅻ) LINE account information 　　　　　　　　　　　　

　　Acquisition method: Inputted by users at their discretion　 　　　　　　　　　　　　

　　Purpose of use: Used for data migration 　　　　　　　　　　　　

　　Whether information is transmitted outside the Company or submitted to third parties, 　　　　　　　　　　　　

　　and whether information collection modules are used: None

1２Use of cookies

Cookies are used for the purpose of enhancement of convenience for users by saving user settings, for the purpose of security by maintaining and protecting sessions, and for the purpose of provision of better services by ascertaining users' frequency of access to, users' manner of use of, and number of users of, service of the Company.
Each user can allow or refuse the use of cookies, but if the user refuses to save cookies, the user might not be able to use all or a part of services of the Company, such as services that need a login.

13Update to privacy policy

This privacy policy might be revised. In that case, notification will be made of the revised content by making the revised privacy policy available for viewing in the website of the Company.
Please stay apprised of the latest privacy policy by checking the Company’s website from time to time.

14Inquiries

If there is any unclear point with respect to this privacy policy, or if there is a question, complaint, or matter for consultation with respect to the handling of personal information in any of the services provided by the Company, please contact the Company via email at the following address.

WonderPlanet Inc.
（ [email protected] ）

ANNEX I

ANNEX I-1. Privacy Policy for Customers – Nevada and California

This Annex covers the Company’s websites (“Site”) and games (“Product”) governed by our Privacy Policy and applies to consumers in Nevada and California.

Nevada Privacy Notice

California Privacy Notice

1. California Personal Information the Company Collects

2. Categories of Sources of California Personal Information

3. The Company’s Use of California Personal Information

Via email to [email protected]

4. Recipients of California Personal Information

5. A User’s Rights Regarding California Personal Information

a) Via email to [email protected]

b) Online at Contact us.

6. Minors’ Right to Opt In

The Company does not have actual knowledge that it has collected personal information of children under 16 years of age. If the Company learns that it has acquired information of anyone under the age of 16, the Company will delete it immediately.

7. Do Not Track

Some browsers have a “do not track” feature that lets a user tell websites that a user does not want to have their online activities tracked. At this time, we do not respond to browser “do not track” signals.

8. Changes to this Policy

If we make changes to this Privacy Policy for Customers – California Annex, we will post the revised Statement on the Site and games governed by our Privacy Policy and identify the effective date of the update. User’s continued use of our Site and games, following the effective date of the update, constitutes user’s acceptance of and agreement to such updates. We encourage a user to check the Site and Games periodically for updates.

9. Contact for More Information

For questions or concerns about the Company’s group’s privacy policy or practices, please contact the Company by using the information below.

Via email to [email protected]

ANNEX I-2. Privacy Notice for Customers – EEA and UK

This Annex covers the Company’s websites (“Site”) and games (“Product”) governed by our Privacy Policy and applies to consumers in the EEA and UK.

FAIR PROCESSING NOTICE

1. LAWFUL PROCESSING

2. WHAT PERSONAL DATA WE COLLECT ABOUT YOU

2.1.We process the following types of personal data about you:
(a)Your name, age, gender, job, language, place of residence, email address, and other contact details;
(b)Details of your preferences for services, marketing events or materials;
(c)Your messages, feedback or contributions to customer surveys and questionnaires;
(d)Details of your account details and your access to our systems, websites and applications (including device information and IP address).
2.2.It may be mandatory for you to provide us with your personal data, to enable us to manage our business and operations, to maintain your account with us, to provide our products or services to you or to comply with our legal and regulatory obligations. If you fail to provide your personal data when requested, we may not be able to maintain your account with us or to provide our products or services to you.
2.3.We make every effort to maintain the accuracy and completeness of your personal data which we store and to ensure all of your personal data is up to date. However, you can assist us with this considerably by promptly contacting us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

3. HOW WE COLLECT PERSONAL DATA

We usually collect your personal data from the information you submit. This will typically be done when you create your account with us, you sign up to our news list and you contact our customer service desk.
We may also collect your personal data from other sources such as our dealers or retail partners, social media service providers (such as Google and Facebook), magazine publishers and PR firms.

4. HOW WE USE PERSONAL DATA

5. INTERNATIONAL TRANSFERS OF PERSONAL DATA

This website and our applications are controlled and operated from Japan and the files containing your personal data will be maintained on our servers or those of our IT service providers located in Japan or the United States. Nevertheless, we will process your personal data with the same level of protection as in the EEA and the UK and recognise your rights on your personal data you would hold under the GDPR or the UK GDPR.
Where we (or our IT service providers maintaining the servers containing your personal data) transfer your personal data to countries or territories outside the EEA and the UK, the laws of such countries or territories may not offer the same level of protection of personal data as are enjoyed within the EEA and the UK. We will ensure that any such international transfers are made in compliance with the GDPR or the UK GDPR. For further information, please contact us as set out below.

6. WHEN WE MAY DISCLOSE YOUR PERSONAL DATA

7. USE OF SERVICES PROVIDED BY FACEBOOK, GOOGLE AND APPSFLYER

We use services provided by Facebook, Google and AppsFlyer for analytics, advertising and account management. They may collect various personal data when you are using our services. Please refer to their privacy policies for further information.

8. HOW WE PROTECT YOUR PERSONAL DATA

We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorized destruction, loss, alteration, disclosure or access.

9. YOUR RIGHTS IN RELATION TO THE PERSONAL DATA WE COLLECT

1.Under certain circumstances, you have the following rights in relation to our processing of your personal data:
(a) The right of access
(b) The right to rectification
(c) The right to erasure
(d) The right to restriction of processing
(e) The right to object to processing
(f) The right to data portability
2.If you wish to exercise any of your rights, please contact us using the contact details provided below. We may request that you prove your identity in order for us to comply with our security obligations and to prevent unauthorized disclosure of data.

10. HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR

We will only retain your personal data as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

11. DIRECT MARKETING

If you tell us that you do not wish us to provide you with information about our products or services and other marketing materials, we will not contact you further for the purpose of direct marketing. You can contact us using the contact details set out below.

12. USE OF COOKIES AND OTHER TECHNOLOGIES (For Site users only)

A "cookie" is a small text file that is stored on a user's hard drive or mobile device. Cookies are generated by web servers when the user enters an internet page, and are passed to the user's computer or mobile device and stored for subsequent future access. They perform a number of functions associated with browsing websites and are used for a variety of different purposes, such as tracing users from page to page on an internet site. This can enhance a user's experience on a website, enabling the site to be personalized according to e.g. a user's preferences and browsing activities.
For more information about how we use cookies, please read our cookie policy cookie policy in ANNEXII.

13. HOW WE UPDATE OR CHANGE THIS NOTICE

We may change or update parts of this Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Notice so you are fully aware of any changes or updates.

14. HOW YOU CAN CONTACT US

15. HOW YOU CAN CONTACT OUR EU/UK REPRESENTATIVE

16. HOW TO LODGE A COMPLAINT TO THE DATA PROTECTION AUTHORITY

We commit to resolve complaints about our use of your personal data. If you consider that we have breached your data protection rights, please contact us using the details set out above. If you are not satisfied with the response, you are entitled to lodge a complaint with a competent data protection authority of each EEA member state or the UK.

ANNEX II. Cookie policy

Third party cookies