공유하기
LAST UPDATED: August 31, 2026
This Privacy Policy (the “Policy”) explains how ONE Store Corporation (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal data when you use ONEshop, our web shop at webshop.onestore.net through which you purchase in-game items for supported games (the “Services”). ONE Store is the controller of the personal data described in this Policy.
This Policy applies globally to all users of the Services. For users in certain jurisdictions, additional provisions apply, which are set out in the Regional Addenda to this Policy (see Section 11). In the event of a conflict between this Policy and a Regional Addendum, the terms of the Addendum will prevail for residents of that jurisdiction.
We collect the minimum personal data necessary to complete and deliver your purchase, and do not collect any sensitive information without explicit consent.
1.1 Information You Provide to Us
1.2 Information We Collect Automatically
1.3 Information from Third Parties
We only process your information where we have a valid legal basis to do so (e.g., your consent, contractual necessity, legitimate interests, or legal compliance). Personal data will not be used for any purposes other than those specified below. If the purpose of use changes, we will take necessary measures, such as providing prior notice or obtaining additional consent. We use the collected information for the following purposes:
We provide personal data to third parties only when we have a legal basis to do so, including your consent (where required by law), contractual necessity, legal obligations, or our legitimate interests (as permitted by applicable law). We share your personal data for the following purposes:
We retain your personal data for as long as necessary to provide the Services and to complete, verify, and support your purchase. Because guest checkout does not create an account, the data you provide at checkout is retained as part of the transaction. We may retain certain information in a depersonalized or aggregated form.
We may retain some of your data for longer than usual under the following circumstances, which override the standard retention period:
When the applicable retention period ends, your personal data will be promptly deleted or anonymized.
Depending on where you live and subject to applicable exceptions under local law, you may have the following rights: to request information about our processing; to access and/or obtain a copy of your data (including in a portable format); to correct your data; to request deletion; to withdraw consent; the right not to be discriminated against for exercising your rights; and the right to object to or request information about profiling or automated decision-making. Additional rights that apply in specific jurisdictions are set out in the Regional Addenda.
To exercise any of these rights, please contact us at help@onestore.net. For your protection, we may need to verify your identity before fulfilling your request. We may ask you for the order number and the e-mail address used at checkout so that we can locate your data and verify your request.
Our Services are not directed to children. To make a purchase, you must confirm at checkout that you are of the age of majority in your country of residence.
If we learn we have collected personal data from a child, or from any other individual below the age of majority in their country of residence, we will delete it promptly. If you believe that your child has provided us with personal data, please contact us using the contact information in this Policy.
We operate globally and may transfer your personal data to locations outside the country where you reside or where the Services are provided to you, including to the Republic of Korea, where ONE Store is established, and to our other service providers such as cloud hosting providers. Your personal data may be transferred to or accessed from countries including, but not limited to, the Republic of Korea.
Regardless of location, we implement appropriate contractual, technical, and organizational safeguards to ensure that your personal data is protected at a level equivalent to that in your country of residence.
We implement appropriate administrative, technical, and physical measures designed to protect your personal data from unauthorized access, use, disclosure, alteration, destruction, or accidental loss, including: internal policies and regular employee training and access minimization (administrative); access control, encryption in transit and at rest where appropriate, and security systems such as firewalls and anti-malware (technical); and access control for data centers and server rooms designated as restricted areas (physical). We also impose contractual security obligations on our processors, including our payment service provider.
We may update this Policy from time to time and will update the “Last Updated” date accordingly. If we make a material change, we will provide appropriate notice in accordance with legal requirements, such as by prominent posting on the Services. By continuing to use the Services, you confirm that you have read and understood the latest version of this Policy.
The following Regional Addenda form part of this Policy and set out the additional provisions that apply to residents of the jurisdictions concerned. To avoid duplication, each Addendum contains only the matters that the relevant jurisdiction requires in addition to this Policy.
This Addendum applies exclusively to residents of the United States and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of the United States.
A1. Categories of Personal Data Collected
Under applicable U.S. state privacy laws, we collect the following categories of personal data:
We do not intentionally collect sensitive personal information beyond the categories described above.
A2. Sources of Personal Data
Directly from you at checkout; from your game account when you connect it; automatically through your use of the Services; and from third parties such as our payment service provider and analytics providers.
A3. Business or Commercial Purposes for Collection
The purposes are those described in Section 2 of the Policy, in particular completing your purchase and delivering the item, processing payments and refunds, meeting tax obligations, providing support, preventing fraud, and operating and improving the Services.
A4. Categories of Third Parties to Whom Personal Data Is Disclosed
Our payment service provider; the seller of the item you purchase; the developer or publisher of the relevant game; the party responsible for the tax obligations arising from the sale and our tax and accounting advisers; service providers performing functions on our behalf (cloud hosting, customer support, analytics); our affiliates, subsidiaries, or parent company; parties to a business transaction or reorganization; and legal advisers, regulators, courts, and law enforcement authorities.
A5. Sale or Sharing of Personal Data
We do not sell or share your personal data, as those terms are defined under applicable U.S. state privacy laws. We do not exchange your personal data for monetary or other valuable consideration, and we do not disclose it for cross-context behavioral advertising or targeted advertising. We do not have actual knowledge that we sell or share the personal data of consumers under 16 years of age.
Because we do not sell or share personal data or engage in targeted advertising, we do not provide a “Do Not Sell or Share My Personal Information” link. If our practices change, we will update this Addendum and provide the opt-out mechanisms required by applicable law.
A6. Handling of Requests
We operate exclusively online and have a direct relationship with you, and we therefore accept requests to know, delete, and correct by e-mail at the address given in Section 10 of the Policy.
You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within 45 days of receipt, and may extend that period by a further 45 days where permitted, with notice to you. If we deny your request, you may appeal by contacting us at the same address, and we will inform you of our decision on the appeal within the period required by applicable law.
A prior opt-in cookie banner is not required in the United States for non-essential cookies. You may manage cookies through the settings on the Services and through your browser settings.
A7. Sales Tax Information
We collect your billing state and ZIP code at checkout solely to calculate, collect, and remit applicable sales tax on your purchase and to keep the tax records required by law.
This Addendum applies exclusively to residents of Japan and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of Japan.
This Addendum contains the information that we publish in accordance with the Act on the Protection of Personal Information of Japan (the “APPI”), in addition to the matters set out in the Policy.
B1. Business Operator Handling Personal Information
The name and address of the business operator are set out in Section 10 of the Policy. The name of our representative is Kangseo Ku.
B2. Purposes of Use of Retained Personal Data
We use retained personal data for the purposes set out in Section 2 of the Policy. We do not use retained personal data beyond the scope of those purposes without your consent, except where permitted by the APPI.
B3. Measures Taken for the Security Control of Retained Personal Data
We take the administrative, technical, and physical measures described in Section 8 of the Policy. Retained personal data is stored in the Republic of Korea, where ONE Store is established. We take security control measures after ascertaining the systems for the protection of personal information in that country, and information on those systems is available on request.
B4. Provision of Personal Data to Third Parties in Foreign Countries
Where we provide personal data to a third party located in a foreign country on the basis of your consent, we will, before obtaining your consent, provide you with information on (i) the name of the foreign country concerned, (ii) the systems for the protection of personal information in that country, and (iii) the measures for the protection of personal information taken by the recipient.
Where we provide personal data to a recipient that has established a system to continuously take measures equivalent to those required by the APPI — for example, under a data transfer agreement imposing such measures, or under an internationally recognized framework — we take the necessary steps to ensure the recipient's continued implementation of those measures and will provide you with information on those measures on request.
B5. Additional Rights under the APPI
In addition to the rights described in Section 5 of the Policy, you may request disclosure of records of provision of your personal data to third parties, and may request the cessation of use, erasure, or cessation of provision to third parties, in each case to the extent permitted by the APPI.
We may charge a fee for disclosure requests to the extent permitted by the APPI; if a fee applies, we will inform you of the amount in advance.
B6. Handling of Data Breaches
Where a leakage, loss, or damage of personal data occurs that is subject to the reporting requirement under the APPI, we will report to the Personal Information Protection Commission (PPC) and notify affected individuals promptly, in accordance with the APPI and the rules of the PPC. Where notification to individuals is difficult, we will take alternative measures such as public announcement.
B7. Complaints
You may raise a complaint regarding our handling of personal data using the contact details in Section 10 of the Policy. You may also contact an authorized personal information protection organization or the PPC.
This Addendum applies exclusively to residents of Taiwan and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of Taiwan.
This Addendum sets out the matters that we notify you of in accordance with Article 8 of the Personal Data Protection Act of Taiwan (the “Taiwan PDPA”).
C1. Notification under Article 8 of the Taiwan PDPA
| Item | Details |
|---|---|
| Name of the collector | ONE Store Corporation (see Section 10 of the Policy) |
| Purpose of collection | The purposes described in Section 2 of the Policy, in particular completing and delivering your purchase, processing payments and refunds, meeting tax obligations, providing customer support, preventing fraud, and operating and improving the Services |
| Categories of personal data | The categories described in Section 1 of the Policy |
| Period of use | The period described in Section 4 of the Policy, and thereafter the period required by applicable law |
| Region of use | The Republic of Korea, where ONE Store is established, and the countries in which the recipients described in Section 3 of the Policy and our service providers are located |
| Recipients of use | ONE Store and the recipients described in Section 3 of the Policy |
| Method of use | Collection, recording, storage, processing, transmission, and deletion by automated or non-automated means, including through information systems operated by us or by our service providers |
C2. Rights under Article 3 of the Taiwan PDPA
Your rights under Article 3 of the Taiwan PDPA, and the means of exercising them, are as described in Section 5 of the Policy. Where you request a copy of your personal data, we may charge the necessary costs of providing it to the extent permitted by law.
C3. Consequences of Not Providing Personal Data
You are free to decide whether to provide your personal data. However, if you do not provide the data required at checkout — such as your e-mail address for the receipt and the game account information required for delivery — we will not be able to process your payment or deliver the item you wish to purchase.
C4. Marketing
Where we use your personal data for marketing, you may notify us at any time that you object, and we will cease such use. We will bear the cost of the means by which you exercise your first objection.
This Addendum applies exclusively to residents of Thailand and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of Thailand.
This Addendum supplements the Policy for the purposes of the Personal Data Protection Act B.E. 2562 (2019) of Thailand (the “Thailand PDPA”), which applies to us because we offer goods and services to data subjects in Thailand.
D1. Lawful Bases for Processing
We process your personal data on the following bases under the Thailand PDPA:
We do not collect sensitive personal data as defined by the Thailand PDPA. If such processing becomes necessary, we will obtain your explicit consent.
D2. Basis for Transfers to Countries without Adequate Protection
Where a destination country described in Section 7 of the Policy has not been determined by the Personal Data Protection Committee (PDPC) to have adequate data protection standards, we rely on one or more of the following: appropriate safeguards that are legally enforceable and can be effectively enforced, including contractual data protection commitments; the necessity of the transfer for the performance of a contract with you or for taking steps at your request prior to entering into a contract; or your consent, after we have informed you of the inadequate data protection standards of the destination country.
D3. Additional Rights under the Thailand PDPA
In addition to the rights described in Section 5 of the Policy, and subject to the exceptions in the Thailand PDPA, you may object to the processing of your personal data, request that we restrict its processing, and request that it be erased or de-identified.
D4. Data Breach
Where a personal data breach occurs, we will notify the PDPC without delay and, where feasible, within 72 hours of becoming aware of it, and will notify affected data subjects together with remedial measures where the breach is likely to result in a high risk to their rights and freedoms.
D5. Complaints
You have the right to lodge a complaint with the Office of the Personal Data Protection Committee.
This Addendum applies exclusively to residents of Indonesia and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of Indonesia.
This Addendum supplements the Policy for the purposes of Law No. 27 of 2022 on Personal Data Protection of the Republic of Indonesia (the “Indonesia PDP Law”).
E1. Information Concerning the Processing of Your Personal Data
In accordance with the Indonesia PDP Law, we inform you of the following:
E2. Additional Rights under the Indonesia PDP Law
In addition to the rights described in Section 5 of the Policy, you have the right to end the processing of your personal data and have it deleted or destroyed; to delay or limit the processing of your personal data in proportion to its purpose; and to sue for and receive compensation for a violation of the law regarding your personal data.
E3. Conditions for Transfers Outside Indonesia
Before transferring personal data to a recipient or country described in Section 7 of the Policy, we ensure that the receiving country, or the receiving controller or processor, has a level of personal data protection that is equal to or higher than that required by the Indonesia PDP Law. Where that cannot be ensured, we put in place adequate and binding personal data protection safeguards, and where neither is available, we obtain your consent.
E4. Data Breach
Where a failure to protect personal data occurs, we will provide written notification to the affected data subjects and to the competent authority within 3 x 24 hours of becoming aware of it, stating the personal data disclosed, when and how it was disclosed, and the steps taken to handle and recover from the incident. Where the incident affects the public interest, we will also make a public announcement.
This Addendum applies exclusively to residents of the Philippines and supplements the Policy. In the event of a conflict between the Policy and this Addendum, this Addendum prevails for residents of the Philippines.
This Addendum supplements the Policy for the purposes of Republic Act No. 10173, the Data Privacy Act of 2012 (the “DPA”), and its implementing rules and regulations.
F1. Criteria for Lawful Processing
We process your personal information where the processing is necessary for the fulfilment of a contract with you or in order to take steps at your request prior to entering into a contract; where it is necessary for compliance with a legal obligation to which we are subject; where it is necessary for the purposes of our legitimate interests, except where these are overridden by your fundamental rights and freedoms; and, where applicable, on the basis of your consent. Where we rely on consent, your consent is evidenced by written, electronic, or recorded means.
F2. Additional Rights under the DPA
In addition to the rights described in Section 5 of the Policy, you have the right to object to the processing of your personal information, including processing for direct marketing; to the suspension, withdrawal, blocking, or removal of your personal information in the circumstances set out in the DPA; and to damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information. In appropriate cases, these rights may also be exercised by your lawful heirs and assigns.
F3. Data Breach Notification
Where a personal data breach occurs that meets the criteria under the DPA and the rules of the National Privacy Commission (NPC), we will notify the NPC and the affected data subjects within 72 hours of knowledge of, or reasonable belief that, the breach has occurred.
F4. Complaints
You have the right to file a complaint with the National Privacy Commission.
아이디 통합이 끝나면 팝업이 자동으로 닫힙니다. 잠시만 기다려 주세요.
PC에서 회원 가입할 수 없습니다.
휴대폰에서 가입해주세요.
외부결제란 원스토어 인앱결제 대신 판매자가 제공하는 결제수단을 이용하여 구매하는 방식이며, 쿠폰이나 이벤트 등 원스토어 혜택 대상이 아닙니다.
외부결제 상품의 구매 및 결제에 대해 궁금하신 점은 판매자에게 직접 문의해 주세요.
판매사의 정책에 따라 아래 앱은 원스토어 포인트 사용이 제한됩니다.
