DDI AI Technology Co., Ltd. (hereinafter referred to as the "Company") is committed to properly handling our customers' personal information and specific personal information in accordance with the following policies:

1. Compliance with Laws and Regulations

The Company complies with the "My Number Act," the "Act on the Protection of Personal Information," other applicable laws, the "Guidelines for the Proper Handling of Specific Personal Information (for businesses)," and internal regulations to ensure the appropriate handling of personal and specific personal information.

2. Acquisition and Use of Personal Information

The Company takes necessary measures to prevent the leakage, loss, or damage of personal information. We manage personal information of customers, business partners, employees, etc., appropriately, and we supervise employees to ensure proper handling of personal information. When outsourcing the handling of personal information, the Company also supervises the outsourcing party to ensure proper management.

3. Management of Personal Information

The Company implements necessary measures to prevent leakage, loss, or damage of personal information and ensures appropriate management. We supervise employees in handling personal information and ensure that outsourcing parties also properly manage personal information.

4.Provision of Personal Information to Third Parties

The Company will not provide personal information of customers, business partners, or employees to third parties without their prior consent (including cases where personal information is entrusted within the scope necessary to achieve the purpose of use), except where permitted by law.

5. Disclosure, Correction, and Suspension of Personal Information

If customers, business partners, or employees request notification, disclosure, correction, or suspension of the use of their personal information, the Company will verify the request and respond in accordance with the law.

6. Provision of Specific Personal Information

The Company will not provide specific personal information of business partners or employees to third parties, except as permitted by law.

7. Safety Management Measures

The Company will take necessary and appropriate safety management measures to prevent leakage, loss, or damage of personal and specific personal information. We will also supervise employees and outsourcing parties (including subcontractors) who handle personal information to ensure proper management.

8. Internal System and Organizational Structure

The Company appoints a person responsible for the handling of personal and specific personal information and strives to continuously improve and maintain an adequate safety management system.