FireStone Privacy Policy
This policy is effective from April 1, 2024.
Dear User,
FireStone (referred to as “the Company” below) highly values the security of your personal data and the protection of your privacy rights. In order to safeguard your rights, we have formulated this Privacy Policy (“the Policy”) in accordance with the provisions of the Personal Data Protection Act (“PDPA”), notifying you of the following before collecting any data:
1. Name of non-governmental organization.
2. Purpose of collection.
3. Categories of personal data.
4. Period, region, recipients, and methods of personal data utilization.
5. Rights and methods available to individuals under Article 3 of the PDPA.
6. The impact on the individual’s rights and interests if personal data is not provided when the individual has the freedom to choose to provide it.
Before registering and logging into the games and services provided by our company, please review and agree to the User Agreement provided by our company and read and agree to this Policy on our website. Please note that by registering and logging into the services provided by our company, in accordance with the provisions of the User Agreement (or Terms of Service), you are deemed to have reviewed, understood, and agreed to this Policy. Our company reserves the right to modify, change, or supplement this Policy at any time. When our company publishes the content amended, changed, or supplemented as mentioned above, the updated content will take effect immediately. Please regularly visit our website and related notifications or announcements. If there are substantial changes to the revised version, our company will publish update messages on the company’s website 30 days in advance. Upon the expiration of the 30-day period, our company will officially implement the aforementioned Privacy Policy. If you continue to use the services provided by our company, you will be deemed to have read, understood, and agreed to accept all modifications.
Please be reminded that if you are under 18 years old, your legal guardian should agree to this Policy and the User Agreement on your behalf. If you are under 7 years old, your parents, guardians, caretakers, or your legal guardian should review and agree to this Policy and the User Agreement on your behalf, and they should register and log in on your behalf. Once you complete the registration and login process, you will be deemed to fully understand, know, and agree to this Policy and the User Agreement, so please proceed with caution.
Article 1: Scope of Application
When you use the services provided by our company, this Policy applies to the collection, processing, and utilization of your personal data. However, it does not apply to third-party websites or pages operated by third parties through our company’s website or services. The privacy policies of those third-party services apply to their services, and our company bears no joint responsibility.
Article 2: Categories of Data Collected
The categories of personal data that our company may collect (please refer to the Ministry of Justice – PDPA Specific Purposes and Categories of Personal Data):
I. Identifiers (C001): Name, title, address, work address, previous address, home phone number, mobile phone number, instant messaging account, account applied on internet platforms, communication and household registration address, photo, fingerprint, email address, electronic signature, certificate card serial number, certificate serial number, records of providing online identity authentication or applying for inquiry services, and any other identifiable personal data.
II. Financial information (C002): Number and name of financial institution accounts, credit card or debit card numbers, insurance policy numbers, and other personal numbers or accounts.
III. Identifiers in government data (C003): National identification number, unified certificate number, tax identification number, insurance certificate number, disability certificate number, retirement certificate number, license number, passport number, etc.
IV. Personal descriptors (C011): Age, gender, date of birth, place of birth, nationality, voice, etc.
V. Retrievers of written documents (C131): Indexes or codes of written documents not processed by automated machines, etc.
VI. Unclassified data (C132): Unclassifiable letters, files, reports, or emails, etc.
Article 3: Types of Data Collected
In order to provide services to you, our company will collect and use the following types of information (limited to actual acquisition):
I. Information for gaming: To enable you to log in and play games, our company will collect specific information provided by you, including name, nickname, ID number, phone number, email address, residential area, language settings, and other necessary relevant information.
II. Information for game operations: To maintain the operation of games and service quality, we may collect data related to your computer hardware, software, and mobile phone devices, as well as information related to mobile devices and connection environments, including your IP location, product model, operating system, network service provider, browser type, login time, usage time, website addresses/records, etc. Additionally, information such as game content, purchase records, prize records, and relationships with other players may also be collected.
III. Information for online transactions: In order to ensure the completion of payment and recharge services, when using online transaction services, we will collect order-related data and credit card information provided by you based on the online transaction type you request. We will only use your credit card information for the purpose of processing your purchase or use of our company’s paid services. However, since your credit card payment will be processed by appropriate payment institutions, we will not retain your credit card information.
IV. Contact information for customer service and support: If you contact our company through contact forms or other methods provided by our company, we may obtain and retain any information you choose to provide, including your name, email address, and phone number, as well as contact information such as device type and operating system type, etc. We will use this information to provide support and improve our customer support services.
V. Contact information for promotional activities and customer surveys: If you participate in occasional activities or surveys provided by our company, we may collect any information you choose to provide, including but not limited to name, postal address, phone number, email address, gender, and date of birth.
VI. Cookies: Cookies can remember your preferences and usage habits when you return to the website and automatically adjust the displayed content to improve your user experience. Data collected by our company using cookies may include website management, activity records, website usage dynamics, etc. If you do not want to accept cookies, you can change your cookie settings or set the privacy level to high through your browser settings. However, please note that disabling cookies may result in some website functions not functioning properly.
VII. Information for browsing web pages: In order to improve the quality of our services, when you browse or query on our company’s website or its affiliated websites, our server will automatically record relevant information such as your IP location, time, and browsing. This data is used solely for traffic statistics and optimization of internet services, is only for aggregate analysis, and is not associated with specific individuals.
VIII. Information voluntarily provided by you for using our services. IX. Information about you provided by other users for using our services. X. Other: In addition to personal data directly provided by you, you may also voluntarily provide personal data to our company’s partner companies. With your consent or for the purpose of fulfilling the contract, your personal data may be provided to our company. If you link to third-party services while participating in our company’s
Article IV Specific Purposes
I. The Company will use your information for the following purposes (please refer to the Ministry of Justice – Personal Information Protection Act for specific purposes and categories of personal data):
1. Article 4: Marketing (including joint marketing business with partner companies).
2. Article 63: Collection, processing, and utilization of personal data by non-governmental organizations pursuant to statutory duties.
3. Article 69: Contractual, similar contractual, or other legal relationship matters.
4. Article 90: Consumer and customer management and services.
5. Article 91: Consumer protection.
6. Article 98: Business and technical information.
7. Article 129: Accounting and related services.
8. Article 135: Information services.
9. Article 136: Information and database management.
10. Article 137: Information security and management.
11. Article 148: Online shopping and other e-commerce services.
12. Article 150: Auxiliary and logistical support management.
13. Article 157: Investigation, statistics, and research analysis.
14. Article 173: Supervision and management of purpose-related businesses by other governmental agencies.
15. Article 181: Other business operations in accordance with the items of business registration or articles of association.
16. Article 182: Other consulting and advisory services.
II. Used to fulfill the services provided by the Company: The Company may use the collected information to provide, maintain, and improve the Company’s applications, related websites, etc., and to prevent illegal activities and violations of user agreements. If you choose to use online transaction services, the Company will collect the relevant order information and credit card information you provide to ensure that you complete payment, recharge, or logistics and other consumer services according to the online transaction type you specify.
III. Used to resolve user difficulties or consumer disputes: If you encounter problems when using related applications or web services and seek assistance from the Company, the information you provide may be used to resolve such issues. If you have disputes with the Company, your personal data may be used to prove or communicate relevant circumstances.
IV. Providing, maintaining, and improving Company services, and developing new services: i. The Company may use the collected information to operate, maintain, enhance, provide, create, develop platforms and other related services, and automatically update applications on user systems, and remember your user information so that you do not need to re-enter it during your visit or the next visit to Company services. ii. The Company may use the collected information to help develop new services.
V. Communication with users: The Company may directly communicate and interact with you using the collected information (such as user name, phone number, email address, etc.). This includes, but is not limited to, sending you notifications about upcoming changes or improvements to network services, or contacting you about any content you post to or download from network services. In addition, if you contact the Company, your requests will be recorded to help resolve any issues you may face.
VI. Providing personalized services, including content, promotions, recommendations, marketing, activity message notifications, and various business relationship development and other business message delivery: The Company may use the collected information and provide it to Company-related enterprises or cooperative partners to provide you with customized network services and improve your experience with network services, including providing content recommendations, promotions related to the Company, Company-related enterprises, or cooperative partners, and other business messages (including but not limited to advertisements, marketing information, activity message notifications, and various business relationship development and other business message delivery). The Company may also periodically send you promotional materials or notifications related to network services.
VII. Statistics and analysis: i. When you use game services, the Company will automatically collect relevant information about your device usage and use it for analysis of your personal gaming habits and consumption behavior, in order to improve services, design member activities, optimize game content, marketing activities, and develop new products and services, etc. Additionally, the data obtained when you apply for a game account and the records generated by the server during site browsing will be periodically subject to overall member behavior analysis and statistics, but this analysis will not target individual behavior. ii. To improve service quality, the Company may use, share, or disclose the collected information to Company-related enterprises, cooperative partners, or third parties for market analysis, statistics, or surveys, for sales, rewards, or to provide you with a broader and more comprehensive range of services.
VIII. Compliance with applicable laws and fulfillment of legal obligations.
IX. The Company will not actively collect or process special categories of personal data (such as medical records, medical, genetic, sexual life, health checks, and criminal records). If it is necessary to process special categories of personal data for legitimate reasons, we will follow relevant laws (such as Article 6, Paragraph 2 of the Personal Information Protection Act). When you provide special categories of personal data to the Company, please ensure that you have the legal right to disclose such information to us.
X. As the company evolves and grows, the Company may buy or sell companies, subsidiaries, products, or assets. In these transactions, customer data typically constitutes part of the transferred business assets. In the event of a transfer operation involving a commercial transaction conducted by the Company (such as merger, acquisition, or sale of all or part of a product or asset), your personal data may be transferred accordingly; however, this is limited to personal data related to the transferred operational services.
Article V Period, Region, Objects, and Methods of Use
I. Period: i. User data will be used during the operation of the Company’s services until the date you request to stop using them or the termination of the service. ii. Based on the preservation period required by relevant laws and regulations, the preservation period required for the execution of statutory duties, or the preservation period stipulated in individual contracts for data (the longer period among the above-mentioned periods or the prescribed preservation period shall prevail).
II. Objects: i. The Company, Company-related enterprises or cooperative partners, and their personnel (referring to any shareholders, directors, consultants, senior officers, employees, contractors, or other personnel, as well as other professional, financial, legal, or accounting consultants). ii. Governmental and non-governmental agencies authorized by law or legal authority. iii. Other objects with your consent. iv. Social media or software service providers used by the Company (such as Facebook, LINE, Instagram, YouTube, Discord, Google, etc.).
III. Region: The service area or location of the Company, Company-related enterprises or cooperative partners, social media or software service providers used by the Company, and associated websites of the Company and its affiliated websites.
IV. Methods: In compliance with relevant personal data protection laws, collection, processing, international transmission, and utilization will be carried out using automated or other non-automated machines or carriers.
Article VI Rights and Methods You Can Exercise
I. In accordance with Article 3 of the Personal Information Protection Act, you have the following rights regarding your personal data held by the Company: i. You may inquire, request access to, or request copies of your personal data from the Company, and the Company may charge necessary costs in accordance with the law. ii. You may request supplementation or correction from the Company. However, in accordance with Article 19 of the Enforcement Rules of the Personal Information Protection Act, you should provide appropriate explanations of the reasons and facts. iii. You may request the Company to stop collecting, processing, or utilizing and request deletion. iv. Pursuant to Article 11, Paragraph 2 of the Personal Information Protection Act, if there is a dispute about the accuracy of personal data, you may request the Company to stop processing or using your personal data. However, according to the provisions of the same paragraph, this does not apply if the Company needs to perform its duties or has obtained your written consent and indicated the dispute. v. Pursuant to Article 11, Paragraph 3 of the Personal Information Protection Act, when the specific purpose of collecting personal data disappears or the deadline expires, you may request the Company to delete, stop processing, or stop using your personal data. However, according to the provisions of the same paragraph, this does not apply if the Company needs to perform its duties or has obtained your written consent. vi. If the Company violates the provisions of the Personal Information Protection Act regarding the collection, processing, or utilization of your personal data, pursuant to Article 11, Paragraph 4 of the Personal Information Protection Act, you may request the Company to stop collecting.
II. If you do not meet the Company’s application procedures or there are other statutory provisions, the above rights will be limited.
III. If you wish to exercise the rights in the first paragraph of this article, you need to complete the following procedures: i. You should fill out the application form. ii. The party should provide identification documents that can be confirmed by the Company. iii. The Company may charge necessary costs for your request. iv. If someone else is entrusted to apply on your behalf, a letter of authorization should be provided, and identification documents for both the principal and the agent should be provided.
Article VII Impact of Not Providing Personal Data Freely and Its Effects on Your Rights and Interests If you cannot provide complete and truthful personal data, it will affect the Company in the following situations: providing services, contacting you, completing transactions, identity verification, processing consumer/transaction/complaints, and other business matters. It is recommended that you provide complete personal data and update it regularly. If failure to provide complete and truthful personal data causes damage to you or third parties, you shall bear full legal responsibility. If it causes damage to the Company, you shall also be liable for compensation.