1. Personal information controller
Business name: Mallang Studio · Representative: Choi Won-ho · Email support · Phone: 010-3734-9936
Address: Unit 402, Building 1, 44 Gyeongchung-daero 2313beon-gil, Bubal-eup, Icheon-si, Gyeonggi-do, Republic of Korea
2. Personal information processed and methods
Cash receipt applications require optional consent to process a mobile phone number for income deduction or business registration number for expense evidence, and the application type. Identification numbers are stored encrypted and sent with order information to a Discord channel restricted to the operations team for issuance. Once completion is confirmed, the number is removed from that message. It is used only for issuance and deleted when issuance and legally required retention purposes end. You may refuse consent, but the issuance application cannot then be accepted.
MALOO may process the following information during use of the service.
① Game and web account authentication: Minecraft UUID, nickname, XUID, verification code and login session identifiers
② If Discord or Microsoft linking is selected: external account identifiers and linking status
③ Website use: access IP, date and time, browser request records, and security and error records
④ Customer inquiries: nickname, contact details, inquiry content and attachments provided by the user
⑤ Top-up requests: order identifier, game account identifier, sender name, amount, delivery and error records
⑥ Cash receipt applications: issuance type, mobile phone number or business registration number, application consent and processing status
Information is collected through user input and linking consent, game connections, website use and support inquiries. Website top-ups currently use bank transfer or culture gift voucher applications. The operator processes order identifiers, payment amounts, payment methods and processing status needed for orders and delivery. The operator does not directly collect or store sensitive payment authentication data such as card numbers or bank account passwords. In-game bank transfer verification may use bank notification contents; voucher processing may use encrypted PINs and duplicate-prevention hashes.
3. Purposes of processing
Information is processed for account creation and login, game account linking, verification code issuance, service provision, maintenance and improvement, top-up requests and delivery, prevention of abuse, theft and security incidents, inquiries and disputes, and fulfillment of legal obligations.
4. Retention and use periods
Account linking information is retained until account closure or unlinking is requested, then deleted or de-identified without delay. Verification codes remain valid for 5 minutes and web login sessions for up to 30 days after issuance. Web access records are kept for up to 14 days for security and incident response. Legally retained contract and withdrawal, payment and supply records are kept for 5 years; consumer complaint and dispute records for 3 years; and display and advertising records for 6 months. Full authentication information such as voucher PINs is not indiscriminately retained long term solely to preserve transaction records.
5. Third-party disclosure and processing delegation
As a rule, the operator does not provide personal information to third parties. If you choose to link an external account such as Discord or Microsoft, that provider's services and privacy policy apply. Culture gift voucher PINs are sent to a separate encryption processing service, and their plaintext is not stored on the website server.
6. International transfers
When external account linking is selected, the browser connects to the provider’s OAuth login screen. MALOO receives the external account identifier and linking status to complete linking. Game database currency, connection records and order records are not sent to that provider during this process.
Discord linking: Discord Inc. · Location: United States and countries necessary to provide the service · Timing and method: HTTPS OAuth when the user chooses linking · Data: Discord account identifier, display name and linking authorization · Purpose: account identification and linking · MALOO retention: until unlinking or account withdrawal · Details: Discord Privacy Policy
Microsoft linking: Microsoft Corporation · Location: data centers in countries where Microsoft operates to provide its services · Timing and method: HTTPS OAuth when the user chooses linking · Data: Microsoft/Xbox account identifiers and linking authorization · Purpose: Minecraft account identification and linking · MALOO retention: until unlinking or account withdrawal · Details: Microsoft Privacy Statement
Without external linking, those features are unavailable, but ordinary website browsing is unaffected. The providers’ policies govern retention and international processing details for information they process directly.
When a cash receipt is requested, your nickname, payment amount and order identifier, issuance type, and entered mobile phone number or business registration number are sent to a private Discord channel restricted to the operations team for issuance. This processing is separate from Discord login linking. Application identification numbers are stored encrypted on the server and removed from the notification once the team's completion confirmation is recorded. Discord's privacy policy applies to information processed there.
7. User rights and how to exercise them
Users may request access to, correction or deletion of their personal information, suspension of processing and withdrawal of consent. Requests may be submitted by email or official Discord customer support. After identity verification, the operator processes requests without delay. Reasons are provided for restrictions imposed by law.
8. Security measures
The operator manages personal information through access permission controls, hashing authentication information, protection during transmission, access logging and technical and administrative safeguards. Users must not share verification codes, account access methods or personal information with others.
9. Cookies and similar technologies
The website may use essential session cookies to maintain login status. These cookies are used only for account authentication and are invalidated on logout or expiry. Cookies may be blocked through browser settings, but this may limit login functionality.
10. Privacy inquiries and policy changes
Privacy inquiries, complaints and requests for remedies may be submitted using the contact details below. This policy may be amended due to changes in laws or services, with changes announced on the website before they take effect.
11. Children and public profiles
Where consent is required to process personal information of children under 14, consent from a legal guardian must be obtained and verified. Related requests may be made by email. The website displays game nicknames, farm levels and activity information according to visibility settings in search and rankings. Online status is not public by default. Requests to change visibility or delete information may be submitted by email.