BTB Korea Co., Ltd. (the “Company”) values your personal information and complies with the Personal Information Protection Act and other applicable laws of the Republic of Korea. This Policy explains how the personal information you provide is used and processed, and what measures we take to protect it.

This Policy is effective from April 1, 2026.

1. Categories of personal information collected

To operate recruitment, maintain a talent pool, and respond to customer inquiries, the Company collects the following personal information.

(A) Job applications and talent registration

• Required: name, date of birth, contact information (mobile phone), email address, address, education (school, major, grades, etc.), work experience, cover letter / personal statement
• Optional: portfolio, qualifications and language skills, veterans/disability status (sensitive information), desired role and salary expectations

(B) Online inquiries and reports via the website

• Required: name, contact information, email address, inquiry or report details

2. Purposes of collection and use

The Company uses collected personal information only for the following purposes and not for any other purpose.

• Recruitment management: identifying applicants, reviewing documents and conducting interviews, verifying education and employment history, notifying results, reviewing application history, and preventing duplicate applications
• Talent pool operation: building a database for ongoing hiring, and providing hiring information or job offers when suitable positions arise
• Service delivery and complaint handling: verifying facts and responding to online inquiries and whistleblower reports submitted through the website

3. Retention and use period

In principle, personal information is destroyed without undue delay after the purposes of collection and use have been achieved. However, the Company retains certain information for the periods below in accordance with internal policies and applicable laws.

4. Destruction procedures and methods

Personal information whose purposes have been achieved is destroyed in accordance with the following procedures and methods.

• Procedures: After the purpose is achieved, data is moved to a separate database (or a separate filing cabinet for paper records), stored for the retention period required by internal policy and law, and then destroyed. Personal information moved to a separate database will not be used for any purpose other than retention unless permitted by law.
• Methods: Electronic files are permanently deleted using technical methods that make recovery impossible; paper documents are shredded.

5. Provision to third parties

In principle, the Company does not provide users’ personal information to external parties, except in the following cases.

• The user has given prior consent to provision or disclosure to a third party
• Provision is required by law or requested by an investigative authority in accordance with procedures and methods prescribed by law

6. Outsourcing of personal information processing

To operate services efficiently, the Company outsources website management to external specialists and includes in the outsourcing contract provisions necessary to ensure the safe handling of personal information.

• Processor: Three NIA INC
• Scope of work: maintenance of the website and recruitment management systems, server hosting

7. Rights of data subjects and how to exercise them

Users may at any time request access to their personal information held by the Company, request correction of errors, or request deletion (withdrawal of consent).

Because the website is operated without separate membership registration or login, users who wish to access, correct, or delete personal information should contact the “Personal information protection officer” in Section 9 in writing, by phone, or by email. The Company will verify identity and take action without undue delay. Until a correction request is completed, the information in question will not be used or provided.

8. Cookies and similar technologies

The Company uses cookies and similar technologies to provide personalized services. Users may refuse to store cookies through browser settings; however, some website features may not work properly if cookies are disabled.

9. Personal information protection officer and inquiries

To protect customers’ personal information and handle related complaints, the Company designates the following personal information protection officer and responsible departments.