SMTOWN

Hello.

This is SMTOWN.

『SHINee WORLD VI [PERFECT ILLUMINATION] in SAITAMA』 will be held at the “SAITAMA SUPER ARENA” in JAPAN on September 30th to October 1st, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『SHINee WORLD VI [PERFECT ILLUMINATION] in SAITAMA』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 30th, 2023 (SAT) 09:00 - 23:50 (JST)

- October 1st, 2023 (SUN) 09:00 - 23:50 (JST)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. Main > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

✔️ Guidance

When you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your smartphone data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the SAITAMA SUPER ARENA in JAPAN

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello.

This is SMTOWN.

『2023 SUPER JUNIOR-D&E WORLD TOUR FANCON - [Delight Party] in MANILA』 will be held at the “SMART ARANETA COLISEUM” in MANILA on September 30th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『2023 SUPER JUNIOR-D&E WORLD TOUR FANCON - [Delight Party] in MANILA』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 30th, 2023 (SAT) 09:00 - 23:50 (PHT)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. Main > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

✔️ Guidance

If you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your mobile data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the “SMART ARANETA COLISEUM” in MANILA

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello.

This is SMTOWN.

『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in PARIS』 will be held at the “Dome De Paris” in PARIS on September 30th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in PARIS』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 30th, 2023 (SAT) 09:00 - 23:50 (CEST)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. Main > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

❗️ Guidance

If you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your mobile data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the “Dome De Paris” in PARIS.

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello.

This is SMTOWN.

『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in LONDON』 will be held at the “The O2 Arena” in LONDON on September 28th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in LONDON』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 28th, 2023 (THU) 09:00 - 23:50 (BST)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. Main > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

❗️ Guidance

If you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your mobile data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the “The O2 Arena” in LONDON.

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello. This is SMTOWN.

We are pleased to announce that the SMTOWN Terms of Service changes we announced on September 19 have been rescheduled.

1. Terms and Conditions Revision Schedule

- Notification Announcement Date: September 19, 2023

- Revision Enforcement Date: October 4, 2023

Please refer to the above in using our services.

Thank you.

2023.09.25

SMTOWN

Hello. This is SMTOWN.

We are pleased to announce additional revisions to the SMTOWN Services Privacy Policy changes we announced on September 19th.

1. Reason for the Revision of Privacy Policy

- We have explained in detail the entrustment company's entrusted work and the purpose of entrustment.

2. Revised Content of Privacy Policy

AS-IS

Article 5 (Entrustment of Collected Personal Information)

① For the smooth operation of the business, such as providing better services and facilitating customer convenience, the company entrusts the following personal information handling tasks to an external professional company. During the contract period, the entrusted company keeps the member's personal information. However, when the relevant laws specify a statutory retention period, the company keeps the member's personal information for that time period.

② The company ensures, through the entrustment contract, that the entrusted company complies with personal information protection laws, keeps personal information confidential, does not provide information to third parties, accepts responsibility for accidents, and returns or destroys personal information after the entrustment period or after handling the information.

③ The service provider who has been entrusted with personal information

※ Depending on the change in service and the contract period, the entrusted company may change. When there is a change in the service, the company will notify members in advance.

1. Domestic entrusted companies

(Omitted)

Name of entrusted company: Hyosung ITX Co., Ltd.

Entrusted work and the purpose of entrustment: Customer consultation operation

TO-BE

Article 5 (Entrustment of Collected Personal Information)

① For the smooth operation of the business, such as providing better services and facilitating customer convenience, the company entrusts the following personal information handling tasks to an external professional company. During the contract period, the entrusted company keeps the member's personal information. However, when the relevant laws specify a statutory retention period, the company keeps the member's personal information for that time period.

② The company ensures, through the entrustment contract, that the entrusted company complies with personal information protection laws, keeps personal information confidential, does not provide information to third parties, accepts responsibility for accidents, and returns or destroys personal information after the entrustment period or after handling the information.

③ The service provider who has been entrusted with personal information

※ Depending on the change in service and the contract period, the entrusted company may change. When there is a change in the service, the company will notify members in advance.

1. Domestic entrusted companies

(Omitted)

Name of entrusted company: Hyosung ITX Co., Ltd.

Entrusted work and the purpose of entrustment: Support for ‘KWANGYA 119’ reporting and tipping off operations

3. Privacy Policy Revision Schedule

- Notification Announcement Date: September 19, 2023

- Additional Announcement Date: September 25th, 2023

- Revision Enforcement Date: October 4th, 2023

Please refer to the above in using our services.

Thank you.

2023.09.25

SMTOWN

Hello.

This is SMTOWN.

『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in BERLIN』 will be held at the “Columbiahalle Gastro-und Betriebs Gmbh” in BERLIN on September 25th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『aespa LIVE TOUR 2023 ‘SYNK : HYPER LINE’ in BERLIN』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 25th, 2023 (MON) 09:00 - 23:50 (CEST)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. Main > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

❗️ Guidance

If you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your mobile data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the “Columbiahalle Gastro-und Betriebs Gmbh” in BERLIN.

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello.

This is SMTOWN.

『SMTOWN LIVE 2023 SMCU PALACE @JAKARTA with KB Bank』 will be held at the “GBK Stadium(Gelora Bung Karno Stadium)” in JAKARTA on September 23th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『SMTOWN LIVE 2023 SMCU PALACE @JAKARTA with KB Bank』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 23th, 2023 (SAT) 09:00 - 23:50 (WIB)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in (Log in) to SMTOWN APP

STEP 2. HOME > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

❗️Guidance

When you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your smartphone data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the “GBK Stadium(Gelora Bung Karno Stadium)” in JAKARTA

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello.

This is SMTOWN.

『2023 CHEN’s B DAY [Love Words]』 will be held at the “SHINHAN PLAY SQAURE LIVE HALL” in SEOUL on September 21th, 2023.

The Stamp issuing process has changed from META-PASSPORT APP to SMTOWN APP GPS Verification.

You can get the DIGITAL STAMP with the location verification system in the NEW SMTOWN APP.

Please refer to the following details if you are attending the 『2023 CHEN’s B DAY [Love Words]』.

Thank you.

🕰️ Time & Date information to get the DIGITAL STAMP

- September 21th, 2023 (THU) 09:00 - 23:50 (KST)

※ Schedules above are subject to change due to various circumstances.

🖼️ How to get the DIGITAL STAMP in the NEW SMTOWN APP

STEP 1. Update and sign in(Log in) to SMTOWN APP

STEP 2. HOME > Hit ‘PASSPORT’ button

STEP 3. Hit ‘STAMP’ icon at the right bottom in the ‘PASSPORT’ screen.

(Allow access at ‘Settings’ > SMTOWN > Location > ‘Always ALLOW LOCATION ACCESS’)

STEP 4. Click the ‘Location verification’ button and get the Stamp!

✔️ Guidance

If you receive an error when getting a ‘STAMP’, please check the detail as below.

1. Please check the network status in your mobile device.

If your mobile data or Wi-Fi network is unstable, then the ‘STAMP’ might not be issued.

2. Please check your location.

Check your location information access in your smartphone, and then check your location within 500m from the venue.

📍 Where to get the DIGITAL STAMP

- Within 500m from the venue at the SHINHAN PLAY SQAURE LIVE HALL in SEOUL.

(Please try the Location Verification near the concert hall as possible to avoid any interruptions in collecting STAMP)

Update the MUSIC NATION SMTOWN App first, and get the STAMP at the site!

🔗 DOWNLOAD: https://bit.ly/NEWSMTOWNAPP

Hello. This is SMTOWN.

This is to notify you of the changes in the privacy policy regarding SMTOWN services.

1. Reason for the Revision of Privacy Policy

- SMTOWN services have been updated.

- The provisions on sharing and providing personal information within services/entrustment of personal information handling have been revised.

- Items on uncollected personal information have been changed or deleted.

- Some expressions have been changed for a better understanding of the privacy policy.

2. Revised Content of Privacy Policy

AS-IS

Article 1 (Personal Information Collected)

SM Entertainment Co., Ltd. (hereafter referred to as the "Company") collects the following personal information for membership registration, consultation, and service application.

①Collected information: Any usage history of Company-provided service such as, Name, login ID, password, email address, service use record, access log, cookie, access IP information, device identification number (device ID), PUSH token, fan club membership information and fan club grade, stamp issuance information, passport issuance information, etc.

※The above information about the device is in a format that cannot identify individuals, and the Company does not engage in activities that identify individuals based on the information collected.

②Methods of collection: website (membership registration, audition application, event participation, delivery request), written form, etc.

Article 2 (Purpose of Collecting and Using Personal Information)

Company uses the personal information collected for the following purposes.

①Implementation of terms and conditions relating to services provided and settlement of charges for services provided: Provision of contents, invoice delivery, purchase and payment of charges, and shipping of goods

②Membership Management: Personal identification due to the use of membership service, individual identification, prevention of illegal use or unauthorized use by a suspended member, confirmation of the intent to sign up, confirmation of age, confirmation of the consent of the legal representative of a person under 14 years of age whose personal information is being collected and personal identification of the legal representative in the future, handling of complaints, delivery of announcement, integrated ID management, membership service provision, card issuance, point saving and use settlement, VIP service provision

③Use for Marketing and Advertisement: Development and specialization of new service (product), delivery of advertisement information such as events, provision of service and posting of advertisement pursuant to demographical characteristics, identification of access frequency, and statistics on Members’ use of services

Article 3 (Retention and Usage Period of Personal Information)

In general, the Company destroys personal information without delay when the retention period has expired or when the information is no longer necessary, such as when the original purpose for collecting and using the information has been fulfilled. Nonetheless, if it is necessary to preserve information in accordance with the provisions of the applicable laws, the Company must retain the member information for a specific period of time as specified by the applicable laws and regulations.

①Items to maintain: name, login ID, password, email address, service use record, access log, cookie, access IP information, payment record, preferred artist, i-PIN number, legal representative name, i-PIN CI, and member number

(omitted)

A)Display / Advertising Records: 6 months (Act on the Consumer Protection in Electronic Commerce)

B)Record of contract or withdrawal of contract: 5 years (Act on the Consumer Protection in Electronic Commerce)

C)Record of payment and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce)

D)Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)

E)Records of collecting, processing, and using credit information: 3 years (Credit Information Use and Protection Act)

Article 4 (Procedures and Methods for Destruction of Personal Information)

The following is the procedure and method for destroying personal information.

①procedure for destruction

A)After the purpose is achieved, the information entered by the Member for membership registration, etc. is transferred to a separate database (DB) or a separate filing cabinet in the case of paper, and stored for a period of time before being destroyed in accordance with Company guidelines and relevant laws and regulations.

B)Unless otherwise required by law, personal information transferred to a separate database will not be used for any other purpose than to be kept.

②Methods of Destruction

A)Electronically stored personal information is deleted using a technical method that prevents the record from being reproduced.

B)Personal information printed on paper is shredded or incinerated.

Article 5 (Entrustment of Collected Personal Information)

①For the smooth operation of the business, such as providing better services and facilitating customer convenience, the Company entrusts the following personal information handling tasks to an external professional company. During the contract period, the entrusted company keeps the Member's personal information. However, when the relevant laws specify a statutory retention period, the company keeps the Member's personal information for that time period.

②The Company ensures, through the entrustment contract, that the entrusted company complies with personal information protection laws, keeps personal information confidential, does not provide information to third parties, accepts responsibility for accidents, and returns or destroys personal information after the entrustment period or after handling the information.

③The service provider who has been entrusted with personal information

※ Depending on the change in service and the contract period, the entrusted company may change. When there is a change in the service, the company will notify Members in advance.

The company entrusted with personal information for the provision of the service: Amazon Web Service

Entrusted work and the purpose of entrustment: System management through AWS

Contact information of the entrusted company: Aws-korea-blog@amazon.com

The country to which personal information is transferred: Japan (AWS Tokyo Region)

Items of personal information to be transferred: All personal information collected in the process of providing services

Date of personal information transfer: Date of membership registration

Method of personal information transfer: Storage of personal information in AWS cloud computing environment

The length of time to keep and use personal information: Personal information will be retained until membership is withdrawn or until its expiration* date.

*Personal information expires when a Member has not used the service for one year, and measures such as storing information separately are implemented upon expiration.

Article 6 (Provision of Personal Information to Third Parties)

①The Company processes users' personal information only within the scope specified in the purpose of processing personal information, and only transmits personal information to a third party for cases under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the user and special provisions of the law. Otherwise, the Company does not provide personal information of users to a third party.

②order to provide smooth service in the following cases, the Company discloses personal information to third parties only to the extent necessary with the user's consent.

A)

Recipient of the information : SM Culture & Contents

Purpose of providing the information : Membership verification for member-exclusive reservation of concert and tour packages

Items of information provided : name, login ID, fan club membership information and fan club grade, stamp issuance data, and passport issuance data

Duration of storage and utilization : Until membership cancellation

A)

Recipient of the information : Yes24 Co., Ltd.

Purpose of providing the information : Membership verification pertaining to offline performance reservations

Items of information provided : name, name, login ID, fan club membership information and fan club grade

Duration of storage and utilization : Until membership cancellation

A)

Recipient of the information : SM BRAND MARKETING

Purpose of providing the information : Membership verification associated with the sale of exclusive items to members

Items of information provided : name, login ID, fan club membership information and fan club grade, stamp issuance data, and passport issuance data

Duration of storage and utilization : Until membership cancellation

③In emergency situations such as natural disasters, infectious diseases, events/accidents that pose an imminent threat to life or body, and imminent property loss, the Company must provide personal information to relevant organizations without the consent of the subject of information, in accordance with the personal information handling and protection rules for emergencies jointly announced by the relevant government departments. Please click here* for additional details.

Article 7 (Rights of Users and Legal Representatives and Method of Exercising the rights)

①Users and legal representatives may inquire about or modify the registered personal information of themselves or children under 14 at any time, as well as request membership cancellation.

②Users or legal representatives can view and correct personal information or cancel membership after clicking 'Change Personal Information' (or 'Edit Member Information', etc.) to view and correct personal information of the user or children under 14 years of age or clicking 'Withdraw membership' to cancel membership (withdraw consent) and going through the identity verification process. Or, they can contact the person in charge of managing personal information via email, phone, or letter to make a request, which will be handled expeditiously.

③In the event of a request to correct errors in personal information, the information may not be used or disclosed until the correction has been made.

④If incorrect personal information has already been provided to a third party, the result of the correction will be immediately communicated to the third party so that the correction can be implemented.

⑤The Company ensures that personal information that has been canceled or deleted at the request of a user or legal representative cannot be viewed or used for any other purpose, in accordance with Article 3.

⑥In the event of a request to suspend the viewing and processing of personal information, users' rights may be restricted in accordance with paragraphs 4 of article 35 and paragraph 2 of article 37 of the Personal Information Protection Act.

Article 8 (Matters Concerning the Installation, Operation, and Rejection of Automatic Collection of Personal Information)

The Company employs "cookies" that frequently store and retrieve user data. The server used to operate the Company's website stores the cookie as a text file on the user's computer's hard drive. The Company employs cookies for the purposes outlined below.

①Objective of using cookies

A)Targeted marketing and personalized services are provided by analyzing the access frequency and visit time of Members and non-Members, identifying users' tastes and interests and tracking their traces, and determining the level of participation in various events and the number of visits, etc.

B)Users have the option of installing cookies. The user can therefore configure their web browser to accept all cookies, check each time a cookie is saved, or reject all cookies.

②Methods to disable cookie settings

A)A user can accept all cookies by selecting the web browser's option, check each allowed cookie before saving it, or reject all cookies.

B)example of cookie configuration for Internet Explorer: select personal information on the Internet options by accessing tools at the top of the web browser

C)If a user declines to accept cookies, it may be difficult to provide services.

Article 9 (Measures for Personal Information)

Article 10 (Additional Use and Provision of Information)

Article 11 (Obligation to Notify when Changing Privacy Policy)

①In the event that additions, deletions, or modifications are made to the content of this privacy policy in accordance with government policy or company policy, the company will provide 7 days' notice via the website prior to the revision.

Article 12 (Complaint handling service related to personal information)

①The Company has designated the following department and a chief privacy officer in order to protect the personal information of customers and respond to complaints involving such information.

-A department responsible for customer service for the protection of personal information: FC Management Unit

-Telephone: 02-6240-9800

-email: privacy@smtown.com

-Name of Chief Privacy Officer: Choi, Byung-beom

-Telephone: 02-6240-9800

-email: privacy@stown.com

②Users can report any complaints regarding the protection of personal information that occur while using the Company's services to the chief privacy officer or the responsible department. The Company will respond promptly and adequately to user reports.

Users are encouraged to contact the following organizations to report or seek advice on other personal information violations.

(Omitted)

TO-BE

Article 1 (Personal Information Collected)

SM Entertainment Co., Ltd. (hereafter referred to as the "Company") collects the following personal information for membership registration, consultation, and service application.

① Collected information

3. Information collected during membership registration: Name, ID, password, email address

4. Information collected during service use: Service usage records, access logs, cookies, IP information, device identification number (device ID), push tokens

※ The above information about the device is in a format that cannot identify individuals, and the company does not engage in activities that identify individuals based on the information collected.

② Collection methods

1. Users consent to personal information collection and personally provide such information during membership registration and service use

2. Users provide personal information during consultation with the customer center, using a webpage, email, fax, phone, etc.

3. Users consent to personal information collection and personally provide such information for audition applications

Article 2 (Purpose of Collecting and Using Personal Information)

The company uses the personal information collected for the following purposes.

① Performance of Service Contracts: Providing content, sending event gifts, etc.

② Membership Management: Identity verification and personal identification for membership service usage, prevention of unlawful and unauthorized use by malicious users, confirmation of membership registration intentions, confirmation of age over 14, handling of complaints, delivery of announcements, and management of integrated IDs

③ Use for Marketing and Advertisement: Development and specialization of new service (product), delivery of advertisement information such as events, provision of service and posting of advertisement pursuant to demographical characteristics, identification of access frequency, and statistics on members’ use of services

④ Support for users’ audition applications

Article 3 [Retention and Usage Period of Personal Information]

In general, the company destroys personal information without delay when the retention period has expired or when the information is no longer necessary, such as when the original purpose for collecting and using the information has been fulfilled. Nonetheless, if it is necessary to preserve information in accordance with the provisions of the applicable laws, the company must retain the member information for a specific period of time as specified by the applicable laws and regulations.

① Items to retain: ID (email address), name, password, service usage records, access logs, cookies, IP information, member number

(Omitted)

1. Display / Advertising Records: 6 months (Act on the Consumer Protection in Electronic Commerce)

2. Record of contract or withdrawal of contract: 5 years (Act on the Consumer Protection in Electronic Commerce)

3. Record of payment and supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce)

4. Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)

5. Records of collecting, processing, and using credit information: 3 years (Credit Information Use and Protection Act)

Article 4 (Procedures and Methods for Destruction of Personal Information)

The following is the procedure and method for destroying personal information.

① procedure for destruction

1. After the purpose is achieved, the information entered by the member for membership registration, etc. is transferred to a separate database (hereinafter DB) or a separate filing cabinet in the case of paper, and stored for a period of time before being destroyed in accordance with company guidelines and relevant laws and regulations.

2. Unless otherwise required by law, personal information transferred to a separate database will not be used for any other purpose than to be kept.

② Methods of Destruction

1. Electronically stored personal information is deleted using a technical method that prevents the record from being reproduced.

2. Personal information printed on paper is shredded or incinerated.

Article 5 (Entrustment of Collected Personal Information)

① For the smooth operation of the business, such as providing better services and facilitating customer convenience, the company entrusts the following personal information handling tasks to an external professional company. During the contract period, the entrusted company keeps the member's personal information. However, when the relevant laws specify a statutory retention period, the company keeps the member's personal information for that time period.

② The company ensures, through the entrustment contract, that the entrusted company complies with personal information protection laws, keeps personal information confidential, does not provide information to third parties, accepts responsibility for accidents, and returns or destroys personal information after the entrustment period or after handling the information.

③ The service provider who has been entrusted with personal information

※ Depending on the change in service and the contract period, the entrusted company may change. When there is a change in the service, the company will notify members in advance.

1. Domestic entrusted companies

Name of entrusted company: Megazone Cloud Co., Ltd.

Entrusted work and the purpose of entrustment: Operation of AWS services

Name of entrusted company: Hyosung ITX Co., Ltd.

Entrusted work and the purpose of entrustment: Customer consultation operation

2. Overseas entrusted companies

Name of entrusted company: Amazon Web Services

Entrusted work and the purpose of entrustment: System management through AWS

Contact information of the entrusted company: Aws-korea-blog@amazon.com

The country to which personal information is transferred: Japan (AWS Tokyo Region)

Items of personal information to be transferred: All personal information collected in the process of providing services

Date of personal information transfer: Date of membership registration

Method of personal information transfer: Storage of personal information in AWS cloud computing environment

Name of entrusted company: SENDGRID

Entrusted work and the purpose of entrustment: Sending emails for membership registration and password reset

Contact information of the entrusted company: datasubjectrequests@sendgrid.com

The country to which personal information is transferred: United States

Items of personal information to be transferred: Name, email

Date of personal information transfer: Date of membership registration

Method of personal information transfer: Sent via network with each service use

Article 6 (Provision of Personal Information to Third Parties)

① The company processes users' personal information only within the scope specified in the purpose of processing personal information and only transmits personal information to a third party for cases under Articles 17 and 18 of the Personal Information Protection Act, such as the consent of the user and special provisions of the law. Otherwise, the company does not provide the personal information of users to a third party.

② Order to provide smooth service in the following cases, the company discloses personal information to third parties only to the extent necessary with the user's consent.

Recipient of the information: SM BRAND MARKETING Co., Ltd.

Purpose of providing the information: Membership verification associated with the sale of exclusive items to members

Items of information provided: Name, ID

Duration of storage and utilization: Until membership cancellation

Article 7 (Rights of Users and Legal Representatives and Method of Exercising the rights): Deleted

Article 7 (Matters Concerning the Installation, Operation, and Rejection of Automatic Collection of Personal Information)

The company employs "cookies" that frequently store and retrieve user data. The server used to operate the company's website stores the cookie as a text file on the user's computer's hard drive. The company employs cookies for the purposes outlined below.

① The objective of using cookies

1. Targeted marketing and personalized services are provided by analyzing the access frequency and visit time of members and non-members, identifying users' tastes and interests and tracking their traces, and determining the level of participation in various events and the number of visits, etc.

2. Users have the option of installing cookies. The user can therefore configure their web browser to accept all cookies, check each time a cookie is saved, or reject all cookies.

② Methods to disable cookie settings

1. A user can accept all cookies by selecting the web browser's option, check each cookie before saving it, or reject all cookies.

2. Methods to disable cookie settings

- Internet Explorer users: [Tools] > [Internet options] > [Privacy] > [Settings]

- Chrome users: [Settings] > [Show advanced settings] > [Privacy and security] > [Cookies and other site data]

3. If a user declines to accept cookies, it may be difficult to provide services.

Article 8 (Measures for Personal Information): Changed Number

Article 9 (Additional Use and Provision of Information): Changed Number

Article 10 (Obligation to Notify when Changing Privacy Policy)

① In the event of additions, deletions, or other revisions to the content of this privacy policy in accordance with government policy or company policy, the company will make an announcement of such changes on the first page of the service website of the service at least 7 days in advance. As for changes that are disadvantageous to users, the company will make announcements to users with a period of at least 30 days in advance, and ensure that the differences before and after the revision are clearly presented and easily understood by users.

Article 11 (Complaint handling service related to personal information)

① The company has designated the following department and a chief privacy officer in order to protect the personal information of customers and respond to complaints involving such information.

- Name of Chief Privacy Officer: Choi Byung-beom

- Telephone: 82-2-6240-9800

- email: privacy@smtown.com

② Users can report any complaints regarding the protection of personal information that occur while using the company's services to the chief privacy officer or the responsible department. The company will respond promptly and adequately to user reports. Users are encouraged to contact the following organizations to report or seek advice on other personal information violations.

(Omitted)

3. Privacy Policy Revision Schedule

- Notification Announcement Date: September 19, 2023

- Revision Enforcement Date: September 26, 2023

Please refer to the above in using our services.

Thank you.

2023.09.19

SMTOWN