Nexnet , Inc. (hereinafter referred to as the "Company") complies with the relevant legal provisions regarding the protection of personal information that service providers must adhere to, and endeavors to protect the rights and interests of users by establishing a privacy policy in accordance with applicable laws regarding personal information processing.

1. Collected Personal Information and How We Collect It

a. Types of Personal Information We Collect
The Company gathers the following personal information for purposes such as member registration, facilitating smooth customer interactions, and providing various services:

* Please note that, under optional collected information, we collect the name, date of birth, and mobile phone number during identity verification or age verification


a. Methods of Personal Information Collection
The Company acquires personal information through these methods:
- Website interactions, Email communications, Participation in events, User requests
- Information provided by partner companies (with confirmation of the information provider's consent)


2.The company utilizes the collected personal information for the following purposes:

3. Provision of Personal Information to Third Parties
The Company may provide or share the user's personal information with partner companies for reasons such as providing customized services and various other services.

However, before providing information or sharing it, the Company will go through a process of notifying the user about the partner company's name, purpose of the partnership, the scope of personal information provided or shared, and how it will be protected, seeking the user's consent. In case the user does not agree, the information will not be provided or shared with the partner company.

The Company uses the user's personal information within the scope notified for the purpose of collection and use of personal information and does not use it beyond that scope or provide it to or share it with others or other organizations without the user's prior consent. However, the following cases are exceptions:

- When users have given prior consent.

- When there is a request from an investigative agency in accordance with the procedures and methods prescribed by law for investigation purposes.

- When the user's personal information is provided to partner companies for the purpose of providing customized services and various other services.

Therefore, when participating in such events, please carefully review the instructions regarding how to use, the collection and use of personal information, and matters related to personal information handling entrusted to third parties.

● List of Third-party Personal Information Provision

4. Outsourcing of Personal Information
To enhance our services, the Company entrusts personal information in accordance with relevant laws, specifies necessary matters to ensure that personal information is securely managed in outsourcing contracts.

5.Retention and Use Period of Personal Information
The company generally retains the user's personal information until the user withdraws from subscription (deletes account). However, in order to prepare for unexpected withdrawals due to identity theft and similar issues, the company retains personal information for 7 days after a withdrawal request.

Retention based on relevant laws and regulations:
If it is deemed necessary to retain, the Company will retain member information for a certain period. In this case, the Company will only use the retained information for the purpose of retention, and the retention period is as follows:

6. Destruction of Personal Information and Method
The personal information of users is promptly destroyed when the purpose of collecting and using it has been achieved.
However, the company manages the personal information of users who have not used the service for one year in accordance with the "personal information valid period system." The company's personal information destruction procedure and method are as follows:

a. Destruction Procedure
The information entered by users for account registration, etc., is transferred to a separate database (or paper documents in the case of paper) after the purpose has been achieved. It is then stored for a certain period according to the company's internal policy and other related laws (refer to retention and usage period).
Afterward, it is destroyed. The personal information is not used for purposes other than holding it as required by law.

b. Destruction Method
Personal information in printed form is shredded or incinerated.
Personal information stored in electronic file format is deleted using technical methods that make it impossible to regenerate the records.


7. Rights of Users and legal representatives and How to Exercise Them
THE BIGHIT actively takes necessary measures regarding the access, provision, and correction requests of users' personal information. Legal representatives of children under 14 years of age have the right to access, provide, and correct the child's personal information.

- You can access or correct your personal information on the 'My Account' section.
- You can withdraw your consent for data collection and usage or request account deletion by email.
- Alternatively, you can contact the Company via phone, or other means to request actions related to your personal information, such as access, provision, correction, or withdrawal of consent.

8. Installation/Operation and Rejection of Personal Information Automatic Collection Device
Cookies and Similar Technologies
THE BIGHIT uses cookies and similar technologies (e.g., pixels, local storage) to enhance user experience, improve site performance, and deliver personalized content.

a. Purpose of Using Cookies

Cookies are small text files that are stored on your device when you visit our website. We use them to:
● Remember your login status
● Analyze how users interact with our platform
● Improve functionality and performance
● Deliver personalized content or promotions (where applicable)

Types of Cookies We Use:
● Essential Cookies: Required for basic functionality (e.g., logging in, site security)
● Performance Cookies: Help us analyze website traffic and usage patterns (e.g., Google Analytics)
● Functional Cookies: Remember user preferences (e.g., language, game settings)
● Advertising Cookies (if applicable): Used to deliver ads and track campaign effectiveness

b.Managing or Rejecting Cookies
You have the right to accept or decline cookies at any time. Most web browsers automatically accept cookies, but you can modify your browser settings to refuse cookies or alert you when a cookie is being sent. However, some features of the platform may not function properly without cookies.
- How to specify whether to enable cookies:
● Chrome: Settings > Privacy and security > Cookies and other site data
● Edge: Settings > Site permissions > Cookies and site data
● Safari: Preferences > Privacy > Manage Website Data
● Firefox: Options > Privacy & Security > Cookies and Site Data
For more information about cookies and how to control or delete them, you may also visit: www.allaboutcookies.org

9. Measures to Protect Personal Information
The company implements the following technical and administrative measures to ensure the security of users' personal information, preventing its loss, theft, leakage, alteration, or damage:

a. Personal Information Encryption
The company encrypts personal information such as passwords according to the standards required by the law. Important data is subject to additional security measures, including the encryption of files and transmitted data, to protect users' personal information. THE BIGHIT member IDs and passwords are stored and managed in encrypted form, known only to the individual user. Confirmation and modification of personal information can only be done by the user who knows their password.

b. Measures Against Hacking and Other Threats
The company takes utmost precautions to prevent the leakage or damage of users' personal information due to hacking, computer viruses, and similar threats. Data is regularly backed up to safeguard against data loss, and up-to-date antivirus software is employed to prevent the exposure or corruption of users' personal information. Secure communication methods, including encryption, are used for the safe transmission of personal information over networks. Intrusion detection systems are utilized to control unauthorized access from external sources, and all possible technological measures are taken to ensure system security.

c. Minimization of Staff Handling Personal Information and Training
The company limits personnel responsible for handling personal information and assigns separate passwords to them, regularly updating these credentials. Ongoing training is provided to staff to emphasize compliance with THE BIGHIT's personal information processing policy.

d. Operation of a Dedicated Personal Information Protection Unit
The company operates an in-house unit dedicated to personal information protection. This unit monitors compliance with the 2023 Personal Information Processing Policy and ensures that staff members adhere to it. If any issues are identified, they are promptly addressed and rectified.
However, the company does not assume responsibility for issues arising from the user's negligence or problems occurring on the internet that lead to the exposure of personal information, such as ID and password.


10. Personal Information Protection Manager and Contact Information
The company has appointed a personal information protection manager responsible for receiving opinions and handling complaints related to personal information. The contact information is as follows:

E-MAIL: help@nexnet.co.kr

Users may report all complaints related to personal information protection arising from the use of the Company's services to the contact information of the personal information protection manager. The Company will promptly provide sufficient responses to user complaints.

11. Miscellaneous
If there are any additions, deletions, or modifications to the content of this privacy policy, we will notify you through our website at least 7 days prior to the changes. However, if there are significant changes to user rights, such as the collection and use of personal information or third-party provision, we will provide notice at least 30 days in advance.

12. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of the Republic of Korea, where Nexnet, Inc. is headquartered
However, if you reside in a jurisdiction with specific privacy laws that provide additional rights or impose additional obligations (such as the European Union’s General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or others), we will comply with those laws to the extent they are applicable.
Any disputes arising from this Privacy Policy or our processing of your data shall be subject to the exclusive jurisdiction of the courts of the Republic of Korea, unless otherwise required by applicable law.

13. International Data Transfers
As a globally accessible platform operated by Nexnet, Inc. in the Republic of Korea, your personal information may be transferred to, stored, or processed in countries other than your country of residence. These countries may have data protection laws that are different from those in your jurisdiction and may not provide the same level of protection.
By using our services, you acknowledge and consent to this international transfer of your personal data.
We take appropriate safeguards, such as contractual protections or security measures, to ensure your personal data is treated securely and in accordance with this Privacy Policy and applicable law.

Date of Announcement: July 1st, 2025