Steam PC Edition | Effective: August 24, 2026 | Version 1.0

Controller: NURIWORKS
Address: 16, Sapyeong-daero, Seocho-gu, Seoul 06552, Republic of Korea
Privacy contact: privacy@havfun.com

This Privacy Policy explains how NURIWORKS ("NURIWORKS," "we," "us," or "our") processes personal information when you access or use the Steam PC edition of Havfun, its game servers, customer support, and related Havfun services that link to this Policy (collectively, the "Service").

Havfun is a free-to-play social casino and mini-game service. Its casino-style games use virtual chips only. Havfun does not permit cash wagering, cash-out, or exchange of virtual chips for money or other items of real-world value.

Valve Corporation and its affiliates operate Steam. Valve processes information under Valve's own privacy policy. This Policy describes NURIWORKS's processing and does not replace Valve's policy.

• Steam sign-in: we use your SteamID and authentication result to create or access your Havfun game account. We do not receive your Steam password.
  
• Purchases: Steam processes payment credentials through the Steam Wallet. We receive transaction and entitlement information needed to fulfill and support purchases; we do not receive full payment-card details from Steam.
  
• Social play: information you choose to display or send through multiplayer, profile, ranking, or chat features may be visible to other players.
  
• No real-money gambling: gameplay records concern simulated casino play and virtual chips that have no cash value.
  
• Your choices: depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection by contacting privacy@havfun.com.

This Policy applies only to personal information processed by NURIWORKS for the Service. It does not apply to Steam storefront pages, the Steam client, Steam Wallet, Steam Community, or other services controlled by Valve. Valve and NURIWORKS generally act as separate controllers for their respective processing. When you use Steam, Valve's terms and privacy policy also apply.

If you follow a link to another website or service, that provider's privacy notice governs its processing. We encourage you to review it before providing information.

2.1 Information from Steam

• Steam account identifiers and authentication data, including your unique SteamID, authentication ticket or validation result, and game ownership or access status.
  
• Steam profile information made available to the Service through Steam, such as your display name, avatar, and profile visibility-related information.
  
• Purchase and entitlement information, such as order or transaction identifiers, product or virtual-item identifiers, currency, country or region information returned for pricing or transaction handling, transaction status, refunds, chargebacks, and fulfillment records.
  
• Steam feature data used by the Service, where enabled, such as lobby, multiplayer session, friend-invite, achievement, statistics, or leaderboard information.

We do not receive your Steam password. Steam Wallet and payment credentials are processed by Valve. We receive only the information needed to authenticate you, provide purchased content, maintain records, prevent fraud, and provide support.

2.2 Information You Provide

• Account and profile content, such as an in-game nickname, avatar customization, profile image, and settings.
  
• Communications and social content, such as text chat, reports, blocks, moderation appeals, and content sent to customer support.
  
• Support information, including your email address, correspondence, screenshots, logs, and any other information you choose to submit.
  
• Microphone audio only when you affirmatively use an enabled voice feature and grant device permission. Unless the Service expressly tells you otherwise at the point of use, NURIWORKS does not retain voice audio after it is transmitted for live communication. Steam or other enabled voice services may process audio under their own policies.

2.3 Information Collected Automatically

• Device and network information, such as IP address, operating system, hardware and device characteristics, language, time zone, game build and app version, and connection information.
  
• Gameplay and account activity, such as login times, session duration, game modes, virtual-chip balances and changes, item inventory, purchases and entitlements, quests, rankings, achievements, match or table activity, and interaction with game features.
  
• Security, integrity, and moderation data, such as authentication events, suspected cheating or automation signals, abuse reports, sanctions, fraud indicators, and relevant chat or activity records.
  
• Diagnostics, such as crash reports, error logs, latency, performance, and server events.
  
• Approximate location inferred from IP address or country/region information provided through Steam. We do not state that the Service collects precise GPS location unless a separate notice and permission are presented.

2.4 Sensitive Information and Payment Data
We do not ask you to provide government identification numbers, biometric identifiers, precise location, or full payment-card information through the Service. Please do not send such information in chat or support messages. If you voluntarily include sensitive information in a support request, we will use it only as reasonably necessary to handle the request and comply with law.

• Provide, operate, maintain, and personalize the Service, including Steam authentication, multiplayer sessions, inventories, rankings, virtual chips, and game progress.
  
• Process and fulfill Steam purchases, confirm entitlements, manage refunds or chargebacks, reconcile transactions, and respond to billing support requests.
  
• Enable social features, including profiles, chat, lobbies, invitations, rankings, reports, and blocking tools.
  
• Protect players and the Service by detecting, investigating, preventing, and responding to fraud, cheating, automation, account compromise, harassment, abuse, security incidents, and violations of our rules.
  
• Troubleshoot errors, improve stability and performance, analyze feature use, balance gameplay, and develop new features using individual-level or aggregated information.
  
• Communicate with you about support, security, transactions, material service changes, and, where permitted and with required choices, marketing.
  
• Comply with legal obligations, enforce agreements, establish or defend legal claims, and respond to lawful requests.
  
• Support a merger, acquisition, financing, reorganization, sale of assets, insolvency, or similar corporate transaction, subject to appropriate protections.

Where applicable law requires a legal basis, we rely on the following:

• Contract: processing necessary to create and operate your Havfun account, authenticate through Steam, provide gameplay and social features, and fulfill purchases.
  
• Legitimate interests: securing and improving the Service, preventing fraud and abuse, moderating conduct, analyzing performance, and protecting legal rights, where those interests are not overridden by your rights.
  
• Legal obligation: retaining or disclosing information where required by tax, accounting, consumer-protection, law-enforcement, or other applicable law.
  
• Consent: processing that applicable law requires us to base on consent, such as certain optional communications or device permissions. You may withdraw consent at any time, without affecting processing already performed lawfully.

We disclose personal information only as reasonably necessary for the purposes described in this Policy:

• Valve/Steam, to authenticate users, operate Steam features, process and fulfill Steam Wallet transactions, manage entitlements and refunds, prevent fraud, and provide platform support.
  
• Hosting, database, networking, security, anti-cheat, analytics, crash-reporting, customer-support, communication, and moderation service providers acting for us under contractual restrictions.
  
• Other players and the public, when you use public or shared features. Display names, avatars, rankings, achievements, lobby or session information, and content you post may be visible according to the feature and your settings.
  
• Affiliates and professional advisers that need the information for legitimate business, audit, legal, tax, security, or operational purposes and are subject to appropriate duties.
  
• Authorities or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, users, or the Service.
  
• A successor or transaction participant in connection with a proposed or completed corporate transaction, subject to confidentiality and applicable law.

NURIWORKS does not sell personal information for money. NURIWORKS also does not share personal information for cross-context behavioral advertising as those terms are defined by California law. If our practices change, we will update this Policy and provide any required opt-out mechanism before the change applies.

Havfun is a social multiplayer service. Do not post information you want to keep private. Depending on the feature and your settings, your Steam display name, in-game nickname, avatar, status, rankings, achievements, lobby participation, gameplay activity, and messages may be visible to other players or the public.

Other players may capture, copy, or redistribute content you make visible. We cannot control how independent users use information they obtain from public or shared areas. Use reporting and blocking functions where available and contact support if you believe content violates our rules.

Havfun's virtual chips and casino-style gameplay are for entertainment only. Virtual chips are not money, have no cash value, cannot be redeemed for cash or prizes of real-world value, and may not be sold or transferred except where the Service expressly permits an in-service function.

Purchases are authorized and processed through Steam Wallet under Valve's terms. NURIWORKS receives transaction results and entitlement records needed to deliver items, maintain your account, prevent fraud, address refunds or chargebacks, and comply with accounting and legal duties. Questions about Steam Wallet payment processing may also need to be directed to Steam Support.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security and integrity, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, and audit obligations.

• Account, inventory, progress, and entitlement data is generally retained while your account is active and for a reasonable period after closure when needed for restoration, dispute handling, fraud prevention, or legal compliance.
  
• Transaction, refund, and chargeback records are retained for the period required by applicable commercial, tax, accounting, and consumer-protection laws.
  
• Support, moderation, security, and anti-abuse records are retained for the time needed to resolve the matter, prevent repeat abuse, protect users and the Service, and establish or defend legal claims.
  
• Operational logs and diagnostics are retained for periods appropriate to security, troubleshooting, and service improvement, then deleted or de-identified when no longer needed.

Retention periods may differ because of the data type, sensitivity, risk, context, legal requirements, and whether information can be de-identified. When deletion is required, we delete or de-identify information unless continued retention is permitted or required by law. Backup copies may remain until overwritten in the ordinary backup cycle and will be protected from active use.

NURIWORKS is established in the Republic of Korea. The Service and its providers may process information in Korea and other countries, including countries whose data-protection laws may differ from those where you live. Where required, we use recognized transfer mechanisms and safeguards, such as adequacy decisions, contractual protections including the European Commission's Standard Contractual Clauses, and supplementary measures appropriate to the transfer. You may contact us for information about applicable safeguards.

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Measures may include access controls, encryption in transit, logging, monitoring, least-privilege practices, secure server-side handling of Steam credentials or keys, and incident-response procedures, as appropriate to the risk.

No system is completely secure. You are responsible for maintaining the security of your Steam account and devices. Do not share authentication credentials, and contact Steam and NURIWORKS promptly if you suspect unauthorized access.

Depending on where you live and subject to legal exceptions, you may have the right to:

• know whether and how we process your personal information and access a copy;
  
• correct inaccurate or incomplete information;
  
• request deletion or restriction of processing;
  
• object to processing based on legitimate interests or to direct marketing;
  
• receive certain information in a portable format;
  
• withdraw consent where processing is based on consent;
  
• appeal a refusal where applicable law provides an appeal right; and
  
• lodge a complaint with a competent data-protection authority.

To exercise a right, email privacy@havfun.com and identify the Havfun account or SteamID concerned, the right you wish to exercise, and enough information for us to understand the request. Do not send your Steam password or full payment-card details. We may request proportionate information to verify identity and authority. An authorized agent may submit a request where permitted by law; we may require proof of authorization and direct verification with the account holder.

We will respond within the period required by applicable law. We will not discriminate against you for exercising privacy rights. We may deny or limit a request when an exception applies, such as protecting another person's rights, preventing fraud, preserving security records, completing a transaction, or complying with law, and will explain the reason where required.

Account deletion from Havfun does not automatically delete your Steam account or information controlled by Valve. To exercise rights regarding Steam, contact Valve through Steam's privacy or support channels.

Havfun's Steam PC edition is intended only for users who are at least 18 years old, or the higher minimum age required for simulated casino games in their jurisdiction. We do not knowingly collect personal information through the Service from a person below the applicable minimum age. If we learn that we collected such information, we will take appropriate steps to delete or restrict it as required by law. A parent or guardian may contact privacy@havfun.com with a substantiated request.

We may use automated rules or signals to identify suspected fraud, cheating, automation, account compromise, or abusive behavior and to prioritize moderation or security review. These systems may result in a warning, transaction review, matchmaking or feature restriction, or account action. Where applicable law gives you rights regarding a decision based solely on automated processing that produces legal or similarly significant effects, you may request information or human review by contacting us. Routine game balancing, rankings, and matchmaking generally do not constitute such a decision.

We may update this Policy to reflect changes in the Service, our practices, or applicable law. We will post the revised Policy and update the effective date. If a change materially affects your rights or how we use personal information, we will provide additional notice or obtain consent when required by law. Your rights are not waived merely because you continue to use the Service after an update.

Privacy inquiries and rights requests: privacy@havfun.com
General support: info@havfun.com

NURIWORKS
16, Sapyeong-daero, Seocho-gu
Seoul 06552, Republic of Korea

If applicable law requires a local representative, data protection officer, or additional contact channel, NURIWORKS will publish that information in the jurisdiction-specific notice or service interface.