Dunamu Inc. (hereinafter referred to as the “Company”) considers the protection of personal information of users very important and is doing its best to protect the personal information provided by users to the Company in order to use the Company's services (digital asset trading services and related services). Therefore, the Company complies with laws and regulations related to the protection of personal information, such as the Personal Information Protection Act.
The Company makes this Privacy Policy available on the first screen of its website so that users can easily check it at any time.
This Privacy Policy may be changed in accordance with applicable laws and regulations and the Company's internal policies, and any changes will be managed through version control for easy reference.
Article 1 (Purpose for Processing Personal Information)The Company processes users’ personal information for the following purposes. The processed personal information is not used for purposes other than the following, and if the purpose of use is changed, necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act, will be taken.
| Record | Relevant Laws | Retention Period |
| Record of Customer Verification (KYC) | Act on Reporting and Using Specified Financial Transaction Information | 5 years |
| Record of Contract or Subscription Withdrawal | Act on Consumer Protection in Electronic Commerce, etc. | 5 years |
| Record of Payment Settlement and Supply of Goods | 5 years | |
| Record of Consumer Complaints or Dispute Resolution | 3 years | |
| Login Record | Act on Protection of Communications Secrets | More than 3 months |
| Record of Payment of Taxes and Public Dues | Basic Act on National Taxes | 5 years |
| Record of Processing Cash Receipts | 5 years |
| Consignment Company | Content of consignment | |
| DunamuCX Inc. | Customer consultation related to Upbit services | |
| Re-Consignment Company : Hyosung ITX Co. Ltd | ||
| Coocon Co., Ltd. | Verification of authenticity of identification cards, account ownership certification, issuance of cash receipts, and ARS phone authentication (re-outsourced by Bonanza Factory Co., Ltd.) | |
| Bonanza Factory Co., Ltd. | KRW deposit/withdrawal and account ownership certification, ARS phone authentication, two-channel additional authentication and identity verification (Kakao, Naver), Transaction safety management | |
| Amazon Web Services, Inc. | Storage of data for the provision of services and operation of services | |
| Linkhub Co., Ltd. | Issuance of cash receipts and tax invoices | |
| NICE Information Service Co., Ltd. | Real-name verification, Mobile Phone Authentication, Account Ownership Certification |
|
| Naver Cloud Corp. | Non-face-to-face ID authentication | |
| Bonanza Factory Co., Ltd. | KRW deposit/withdrawal, Account Ownership Certification |
|
| Danal Co., Ltd. | Mobile Phone Authentication | |
| FutureWiz Co., Ltd. | Two-channel additional authentication and verification (Kakao) | |
| Naver Corp. | Two-channel Additional Authentication, Verification (Naver Authentication) |
|
| BizTalk Co., Ltd., LG CNS Co., Ltd. | Agent for sending KakaoTalk message (Kakao) | |
| KT Corp., LG Uplus Corp. | Sending SMS | |
| Lambda256 Corp. (recommissioned by VerifyVASP Pte. Ltd.) | Linked data transfer in relation to digital asset deposit and withdrawal. | |
The Company transfers personal information overseas as follows.
| Consignment Company | Twilio Inc. | Amplitude, Inc. | Appsflyer Ltd. | VerifyVASP Pte. Ltd. |
| Purpose of Consignment | Sending notification mails | Collecting behavioral logs and performing statistical analysis | Collecting behavioral logs and performing statistical analysis.< | Linked data transfer in relation to digital asset deposit and withdrawal |
| Consignment Items | Email, Nickname | Member ID, Device Information (OS, Model Name, Language Information, IP Address, ADID, IDFA, IDFV, Telecommunication Company) | Device Information (OS, Model Name, Language Information, Connection Network Type, IP Address, ADID, IDFA | Sender/Recipient Name, Date of birth and Digital Asset Address |
| Country of Consignment, Contact |
United States, privacy @twilio.com |
United States, privacy @amplitude.com |
Ireland, Belgium, privacy@appsflyer.com |
Singapore, corporate @verifyvasp.com |
| Date and Method of Consignment | When sending emails, data is transferred over the network | When using services, data is transferred over the network | When using services, data is transferred over the network | When making deposits or withdrawals of digital assets, the information is transmitted over the network |
| Retention and Use Period | 30 Days after email delivery | 5 years after withdrawal from membership | 2 years | 5 years |
The Company obtains prior consent from users to provide personal information to third parties overseas. Overseas service providers may be changed without prior notice, depending on the characteristics of the partnered services and the contract.
View details on the receiving of personal information to the overseas
| Category | Collected and Used Items | |
| Account Registration and Management | Registration | Upbit Nickname |
| Upbit Login | Name, Mobile Phone Number, Date and Year of Birth, Gender, Resident/Non-resident Information, Telecommunication Company, Verification Information (CI, DI), Bank Name, Account Number, PIN Password | |
| Provision of Goods or Services | Mobile Phone Authentication | Name, Mobile Phone Number, Date and Year of Birth, Gender, Resident/Non-Resident Information, Telecommunication Company, Verification Information (CI, DI) |
| If Using Biometric Authentication | [Optional] Fingerprint Information, Facial Information (**Only the result obtained by comparing the information with the data registered on the device is used, without being transmitted/stored on a separate server. Users can control the use of this feature with the on/off option.) |
|
| Individual Customer Verification | [Basic Information] Name (English), Address, Nationality, Email |
|
| [Required Information] Occupation, Workplace Information (Company Name, Address), Transaction Purpose, Source of Funds |
||
| [Identification Card Verification] (Korean) Copy of Identification Card, Name, Resident Registration Number, Driver's License Number, Issuance Date (Foreigner) Copy of Identification Card, Name, Alien Registration Number, Issuance date, Expiration Date of Stay, Proof of Stay |
||
| [Account Verification] Name of Financial Institution, Account Number |
||
| KRW Deposits and Withdrawals | [Real-Name Deposit-Withdrawal Account Verification] Name of Financial Institution, Account Number |
|
| Corporate Verification |
[Representative Information] (Common) Name (Korean/English), Nationality, Date of Birth, Gender, Mobile Phone Number, Real-Name Verification Number, Address, Email, Occupation, Copy of Real-Name Verification Document, (for Foreigners) Certificate of Residence or Permanent Resident Card in Korea [Agent Information] Name (Korean/English), Verification Number, Copy of Identification Card, Nationality, Residence Status, Address, Phone Number, Mobile Phone Number, Email, Company Name, Occupation, Workplace Address, Relationship with the Transaction Party [OTP Receiving Device Owner Information] Name, Mobile phone Number, Proof of Mobile Phone Contract, Proof of Employment. [Login Information] ID (Email Address), Password ID (Email Address), Password [Security Settings] Security Password |
|
| Digital Asset Transactions | Digital Asset Transactions Information, such as Trading Ddate, Quantity, Type, Asset Name, Deposit/Withdrawal Records, etc. | |
| Inheritance | Mobile Phone Number, Nickname, Proof of Family Relationship, Copy of Identification Card, Resident Registration Number, Death Certificate, Basic Certificate, Certificate of Registered Seal | |
| Transfer | Name, Date and Year of Birth, Mobile Phone Number, Account (Email), Nickname, Copy of Identification Card | |
| Issuance of Cash Receipt | Mobile Phone Number, Business Registration Number | |
| Usage of NFT Service |
Nickname, NFT Transaction History (**To verify transactions and activities within the service due to the nature of NFT digital assets) |
|
| Registration of Personal Wallet Address | Personal Digital Asset Address | |
| IP Address registration for Open Api service | IP Address | |
| Event Information Notification | Event Winning |
Name, Mobile Phone Number [When providing physical prizes] Address [When Paying Taxes] Copy of Identification Card (**The items collected and used may vary depending on the event being held, and consent is obtained for the items collected and used for each event.) |
| Handling of Complaints | Trading Support-Related Fraud Reporting | Name, E-mail, Mobile Phone Nnumber, Details of the Report, Attachments |
| Support for Asset Withdrawals for Members unable to complete KYC Verification | Copy of Identification Card, Proof Photo to verify the Member's Identity, Mobile Phone Number, Email Address, Information about the Digital Asset to be withdrawn, Address of the Receiving Digital Asset and Proof of Ownership, Screenshot of the Receiving Exchange's Member Information Screen | |
| Releasing Suspension of Transactions Placed on Financial Fraud Accounts |
|
|
| Name Change/Naturalization | Name, Proof of Name Change/Naturalization (such as documents of Resident Registration Abstract), Username of the Existing Account | |
| Certificate of Loss of Nationality for Foreigners | Certificate of Loss of Nationality, Resident Registration Number Included in the Certificate of Loss of Nationality | |
| Proof of Purpose of Stay in Korea | Certificate of Employment or Certificate of Enrollment, Certificate of Alien Registration or Certificate of Domestic Residence, Entry and Exit Management Certificate, Unique Identification Information Included in Each Document | |
| Certificate of Alien Registration | Residency certificate or Certificate of Facts related to Entry and Exit | |
| Submission of Additional Documents for Customer Verification |
- The Following Documents Submitted by the User
|
|
| Verification of the Source of Funds | Deposit Date and Time, Type of Digital Assets deposited, Deposit TXID, Source of the Assets, Reason for the Deposit, Trading Plan for the deposited Digital Assets, Financial Institution Transaction Records, Records of Transactions on other Digital Asset Exchanges, Documents for proving Donation, Transfer, Inheritance, or other Relevant Transactions. | |
| Confirmation for measures to normalize abnormal deposit/withdrawal account activity | >Name, Date and Year of Birth, Mobile Phone Number, Photo Identification that can verify the Member's Identity. | |
| Submission of Supporting Documentation for Withdrawals | Proof of Withdrawal Destination, Reason for Withdrawal. | |
| Withdrawal Suspension Objection | Effective Date of the Withdrawal Suspension, Details of the Objection, Materials that Can Confirm the Withdrawal Destination and Reason for Withdrawal. | |
| Digital Asset Deposit Application | TXID, Proof of Withdrawal, Digital Asset Name and Quantity, Proof of Ownership of Digital Asset Address Used for Withdrawal, Return Digital Asset Address and Proof of Ownership | |
| Digital Asset Return Application·Incorrect Deposit | TXID, Proof of Withdrawal, Digital Asset Name and Quantity, Proof of Ownership of Digital Asset Address Used for Withdrawal, Return Digital Asset Address and Proof of Ownership
[Fee Payment] Name of the Digital Asset, Fee Deposit Statement |
|
| For Lifting Self-Requested Withdrawal Suspension | Call Recording for Self-Verification | |
| Inquiries about NFT Trading Support |
[Individual] Name, Website or SNS Address, Email Address, Contact Information, Relationship with Original Copyright Holder [Corporation] Corporate Name, Website or SNS Address, Email Address, Contact Information, Relationship with Original Copyright Holder |
|
| Items Generated and Processed during the Service Usage Process | Service Usage | Device Information (OS, Model Name, Telecommunication Company, Device ID assigned by the Company, Language Information, ADID, IDFA, IDFV), IP Address, Service Usage Record, Cookie |
The Company has implemented the following administrative, technical, and physical measures necessary for ensuring the security of personal information, in accordance with Article 29 of the Personal Information Protection Act.
Cookies are used to store user preferences and other information to provide a faster web environment and to improve services for more convenient use. This allows users to use services more easily.
Users have the option to refuse or delete the installation of cookies at any time.
Users have the option to refuse or delete the installation of cookies at any time.
Information collected includes user activity information, such as web/app service browsing history, search/click usage history, device information, IP address, etc.
The information is collected automatically using log analysis tools during service use.
The information is used for the purposes of developing products and services, statistics and customer analysis, improving service speed and status, and providing other services based on user behavioral information.
Information is retained for a maximum of 26 months from the date of collection and will be promptly deleted upon expiration of the retention period.
Users can refuse the use of cookies and manage their information through browser settings.
If you need help with remedies or consultation regarding personal information infringement, you may contact the following organizations.
The Company may provide links to external sites for users. In this case, the Company cannot guarantee or be responsible for the usefulness, truthfulness, or legality of the services or information provided by the external sites, as the Company has no control over them. The privacy policies of linked external sites are not related to the Company, so please check the policies of the relevant external site.
In the event that the Company changes its Privacy Policy, it will continually disclose the timing of the change and the changed contents, and will make the changed contents easily accessible to users by comparing the contents before and after the change.
This Privacy Policy V2.31 is effective as of February 1, 2024.
The previous Privacy Policy can be found below.
※ This English version of the Upbit Privacy Policy is a translation based on the original Korean version of the Upbit Privacy Policy . If there is any conflict between the original Korean version and this English version, the original Korean version of the Upbit Privacy Policy shall prevail.