Effective Date: January 11, 2026

These Terms and Conditions (the “Terms”) govern the access to and use of the K-pop-related digital content and online services (the “Service”) provided by Star Bank Daeppang (the “Company,” “we,” “us,” or “our”).

By creating an account, purchasing content, or using the Service, you agree to be bound by these Terms. The Service may be accessed through PCs, mobile devices, tablets, and other compatible devices. Additional policies, notices, or guidelines displayed on specific Service pages may also apply.

Article 1. Definitions

For the purposes of these Terms, the following terms shall have the meanings set forth below:

1. “Digital Content”

“Digital Content” means all digital materials and content provided through the Service, whether in tangible or intangible form, including but not limited to lecture videos, audio files, PDF materials, images, text, and related educational or entertainment materials.

2. “Member”

“Member” means a person who agrees to these Terms, creates an account, and uses the Service provided by the Company.

3. “Access and Use”

“Access and Use” includes all forms of access to or use of the Service recorded in the Company’s systems, including but not limited to streaming, playback, viewing, downloading, logging in, or accessing content pages.

4. “Paid Content”

“Paid Content” means Digital Content or services that require payment before access or use.

Article 2. Account Registration and Eligibility

1. Account Registration

You may register for an account by providing the information requested by the Company, including an identifiable email address, password, nickname or user ID, and date of birth.

2. Minimum Age Requirement

You must be at least 14 years old to create an account and use account-based features of the Service.

Users under the age of 14 are not permitted to create an account, purchase Paid Content, or use account-based features of the Service.

3. Minor Users

If you are between 14 and 17 years old, you may use the Service only to the extent permitted by applicable law. For Paid Content or certain transactions, consent or involvement of a parent or legal guardian may be required under applicable law.

4. Accuracy of Registration Information

You must provide accurate, complete, and current information when registering and using the Service. You are responsible for updating your information, including your email address and other contact details. The Company shall not be liable for disadvantages caused by inaccurate, false, or outdated information provided by you.

5. Account Security

You are responsible for maintaining the confidentiality of your password and account credentials and for all activities occurring under your account. You may not share, transfer, assign, sell, or lend your account to any third party.

If the Company reasonably suspects unauthorized use, account sharing, identity fraud, or other improper activity, the Company may request additional verification, suspend access, or restrict use of the Service.

Article 3. Minors and Parent or Guardian Consent

1. Users Under 14

Users under the age of 14 may not register for an account or purchase Paid Content through the Service.

If the Company becomes aware that a user under 14 has registered or attempted to purchase Paid Content, the Company may refuse registration, suspend or terminate the account, cancel access where appropriate, and take other protective measures in accordance with applicable law.

2. Users Ages 14 to 17

A user between the ages of 14 and 17 may use the Service only as permitted by applicable law. Where required by applicable law, the user must obtain the consent of a parent or legal guardian before purchasing Paid Content or entering into a paid transaction.

3. False Age Information

If a user provides false or misleading age information, impersonates an adult, or otherwise misrepresents their eligibility to use the Service, the Company may suspend or terminate the account, deny refunds to the extent permitted by law, and take appropriate action to protect the Service and other users.

Article 4. Service Content, Payment, and Access Period

1. Service Content

The Company provides K-pop-related Digital Content and online services, including but not limited to dance lessons, vocal lessons, Korean language lessons, and related educational or entertainment content.

2. Payment Methods

Members may purchase Paid Content using payment methods designated by the Company, such as credit cards, simple payment services, or other approved methods made available through the Service.

3. Access Period

Unless otherwise specified on the relevant product or service page, the standard access period for purchased Digital Content is 365 days from the date of purchase.

4. Service Changes

The Company may change the method of providing the Service, including the player, interface, content structure, technical format, and related features, where reasonably necessary for operation, maintenance, service quality improvement, legal compliance, or security. In such cases, the Company will use reasonable efforts to avoid materially impairing the Member’s purchased access rights.

Article 5. Subscription Withdrawal, Cancellation, and Refund Policy

1. General Withdrawal Period

Unless otherwise required by applicable law, a Member may request withdrawal from a purchase or request a refund within 7 days from the date of purchase of Paid Content.

2. Restrictions on Withdrawal and Refund

Because the Service provides Digital Content, withdrawal, cancellation, or refund may be restricted once the content has been used or delivery has begun, to the extent permitted by applicable law.

In particular, withdrawal or refund may be restricted in the following cases:

1. where the content has already been streamed, played, viewed, downloaded, or otherwise used after purchase, except for preview or sample content clearly designated as such;

2. where the provision of Digital Content that can be completed or consumed in a short period of time has already begun; or

3. where refund restriction is otherwise permitted under applicable consumer protection laws for digital content.

3. Refund Standard

If a Member requests a refund within the applicable withdrawal period and has not accessed or used the purchased content, the Company may provide a full refund, except that transaction fees, payment processing fees, or other non-recoverable charges may be deducted where permitted by law.

4. Fraudulent Payments and Abuse

If a Member repeatedly engages in unjustified purchases and cancellations, initiates improper chargebacks, abuses refund procedures, or otherwise causes damage to the Company through fraudulent or bad-faith conduct, the Company may suspend or terminate the account, restrict future purchases, and seek damages or other remedies to the extent permitted by law.

Article 6. Provision of the Service and Temporary Suspension

1. Service Availability

In principle, the Service is intended to be available 24 hours a day, 7 days a week.

2. Temporary Suspension

The Company may temporarily suspend all or part of the Service where necessary due to:

• maintenance, inspection, repair, or replacement of systems or equipment;

• communication failures or technical issues;

• security incidents or risks;

• force majeure events; or

• other significant operational reasons.

Where practicable, the Company will provide prior notice. If advance notice is not possible due to unavoidable circumstances, notice may be given afterward.

Article 7. Prohibited Conduct

Members shall not engage in any of the following acts in connection with the Service:

1. registering false, inaccurate, or misleading information;

2. using another person’s identity or information without authorization;

3. sharing, lending, transferring, or selling accounts;

4. interfering with the operation, security, or stability of the Service;

5. altering, damaging, or removing notices, labels, or information posted by the Company;

6. infringing the intellectual property rights, publicity rights, privacy rights, or other rights of the Company or any third party;

7. capturing, recording, copying, reproducing, distributing, selling, posting, transmitting, or otherwise exploiting Digital Content without authorization;

8. posting or transmitting obscene, violent, defamatory, abusive, discriminatory, unlawful, or otherwise inappropriate content;

9. using the Service for commercial or profit-making purposes without the Company’s prior written consent; and

10. violating applicable laws, regulations, or these Terms.

Article 8. Termination, Withdrawal, and Loss of Membership Qualification

1. Voluntary Withdrawal

Members may terminate their account and withdraw from the Service at any time through the settings menu or through other methods designated by the Company, subject to applicable law.

2. Suspension or Termination by the Company

If a Member violates these Terms, engages in prohibited conduct, provides false information, or materially harms the Company, other users, or the Service, the Company may, without prior notice where appropriate:

• restrict access to all or part of the Service;

• suspend the account temporarily;

• terminate the account permanently; or

• take other reasonable protective measures.

3. Effect of Termination

Upon termination or withdrawal, access to Paid Content and account-based features may end, except where continued access is required by applicable law or separately provided by the Company.

Article 9. Intellectual Property Rights

1. Ownership

All copyrights, trademarks, service marks, trade names, logos, designs, software, and other intellectual property rights related to the Service and content created by the Company belong to the Company or its licensors.

2. Restrictions on Use

Except as expressly permitted by the Company or by applicable law, Members may not reproduce, distribute, publicly display, publicly perform, modify, create derivative works from, transmit, publish, sell, license, or otherwise exploit any content or materials obtained through the Service.

Unauthorized use may result in suspension or termination of the account and may also give rise to civil or criminal liability.

Article 10. Privacy

The Company processes and protects personal information in accordance with applicable laws and the Company’s Privacy Policy. The Company’s Privacy Policy forms an important part of these Terms.

Article 11. Disclaimer and Limitation of Liability

1. Force Majeure

The Company shall not be liable for failure or delay in providing the Service where such failure or delay results from force majeure events, including natural disasters, war, terrorism, labor disputes, governmental actions, internet outages, or other events beyond the Company’s reasonable control.

2. User-Caused Issues

The Company shall not be liable for service interruptions or disadvantages caused by reasons attributable to the Member, including device issues, network problems, incorrect account information, or failure to follow instructions.

3. User Content and Third-Party Information

To the extent permitted by law, the Company is not responsible for the reliability, legality, accuracy, or completeness of information or materials posted, transmitted, or provided by Members or third parties through the Service.

4. Free Services

To the extent permitted by law, the Company shall not be liable for damages arising from free services provided without charge, unless such liability cannot be excluded under applicable law.

5. No Guaranteed Outcome

The Service is intended to provide educational, creative, and informational Digital Content. The Company does not guarantee any specific result, including but not limited to audition success, debut, employment, career advancement, language proficiency, or artistic achievement. Individual outcomes may vary significantly.

Article 12. Notices and Changes to the Terms

1. Notices

The Company may provide notices relating to the Service or these Terms through the website, within the Service, by email, or by other reasonable means.

2. Changes to the Terms

The Company may revise these Terms where necessary due to changes in applicable law, business operations, service features, or other reasonable circumstances.

If the Company makes material changes to these Terms, the Company will provide notice in advance by posting the revised Terms on the website or through other appropriate means. Continued use of the Service after the effective date of the revised Terms constitutes acceptance of the revised Terms, unless applicable law requires a different procedure.

Article 13. Dispute Resolution and Governing Law

1. Governing Law

These Terms shall be governed by the laws of the Republic of Korea, except to the extent that mandatory consumer protection laws of the user’s place of residence apply and cannot be excluded by contract.

2. Dispute Resolution

If a Member applies for relief in connection with an e-commerce dispute between the Company and the Member, the matter may be submitted to the Korea Fair Trade Commission or another competent dispute resolution body.

3. Jurisdiction

Any lawsuit arising out of or relating to the Service or these Terms shall, to the extent permitted by applicable law, be submitted to the court having jurisdiction over the location of the Company’s principal office.

Article 14. Business Information

Company Name: Star Bank Daeppang
Representative: Hyerin Jung
Business Registration Number: 377-26-00860
Mail-Order Business Report Number: 2022-Seoul Gangnam-03611
Address: 9F, LS24 Bldg B, Work Forest, 14-8 Teheran-ro 70-gil, Gangnam-gu, Seoul, Republic of Korea
Chief Privacy Officer: Hyerin Jung
Phone: +82-2-2052-7774
Email: contact@starbank-daeppang.com

Effective Date: January 11, 2026

Star Bank Daeppang (hereinafter, the “Company,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal information in accordance with applicable laws, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection of the Republic of Korea.

This Privacy Policy explains how we collect, use, retain, disclose, and protect your personal information, and how you may exercise your rights regarding your personal information.

Article 1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. We do not use personal information for any purpose other than those set out below unless we obtain additional consent or are otherwise permitted or required by applicable law.

1. Membership Registration and Account Management

We process personal information to:

• confirm a user’s intent to register;

• verify eligibility for account creation and use of account-based services;

• identify and authenticate users;

• maintain and manage membership status;

• prevent fraudulent, abusive, or unauthorized use of the Service;

• provide notices, announcements, and customer support; and

• handle complaints, disputes, and related requests.

2. Provision of Goods or Services

We process personal information to:

• provide digital content and related services, including lectures, music, and other online content;

• process payments, billing, cancellations, and refunds; and

• manage purchase history and service transactions.

3. Marketing and Advertising (Optional)

Where permitted by applicable law and, where required, based on your consent, we may process personal information to:

• develop new services and features;

• provide customized services, promotions, and event information; and

• deliver advertising and marketing communications.

Article 2. Categories of Personal Information We Process

The Company collects only the personal information reasonably necessary for membership registration, service operation, and transaction processing.

1. Information You Provide Directly

Mandatory Information for Account Registration

• Email address

• Password

• Nickname or user ID

• Date of birth

2. Information Collected Automatically During Service Use

When you use our website or services, we may automatically collect certain technical and usage information, such as:

• IP address

• cookies and similar tracking technologies

• device information

• browser and access logs

• service usage records

• visit records

• records of unauthorized or improper use

3. Payment Information

When you purchase paid content or services, payment-related information may be processed through our payment service providers, including:

• payment approval results

• payment records

• purchase history

• cancellation or refund records

Please note: Core payment information, such as full credit card numbers, is processed and stored by the relevant payment gateway or payment processor, and not by the Company, except to the extent necessary to receive and retain transaction results.

Article 3. Processing and Retention Period of Personal Information

1. General Rule

The Company retains and uses personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

2. Retention Period by Category

Membership Registration and Account Management

Personal information relating to membership registration and account management is retained until account deletion or membership withdrawal.

However, we may retain relevant information for a longer period in the following cases:

• where an investigation, dispute, or legal proceeding is in progress, until the matter is resolved;

• where outstanding obligations, payments, or credits remain, until such matters are settled; or

• where retention is required by applicable law.

Provision of Goods or Services

Personal information relating to paid purchases and service transactions is retained until the relevant goods or services have been provided and payment or settlement has been completed, unless a longer period is required by law.

3. Statutory Retention Periods

Where required by applicable law, the Company retains certain information for the following periods:

• Records on contracts or withdrawal/cancellation of subscriptions: 5 years

• Records on payment and supply of goods or services: 5 years

• Records on consumer complaints or dispute resolution: 3 years

• Login records under the Protection of Communications Secrets Act: 3 months

Article 4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope stated in Article 1 of this Privacy Policy.

In principle, the Company does not provide personal information to third parties without the user’s consent, except where such disclosure is permitted or required by applicable law, including where:

• the user has given prior consent;

• disclosure is required by law or lawful request of a competent authority; or

• disclosure is otherwise permitted under applicable personal information protection laws.

Article 5. Entrustment of Processing and Overseas Transfer

To provide stable and efficient services, the Company entrusts certain personal information processing activities to service providers and may store certain data on overseas cloud servers.

1. Domestic Service Providers

The Company entrusts the following tasks to domestic service providers where necessary:

Trustee: Toss Payments Co., Ltd.
Entrusted Tasks: payment approval and settlement, cancellation and refund processing, and escrow-related services.

2. Overseas Transfer and Cloud Storage

The Company uses overseas cloud infrastructure for service operation, hosting, backup, and data security.

Service Provider: Vultr (The Constant Company, LLC / related operating entity)
Countries/Regions of Storage or Processing: including South Korea, Japan, the United States, and other regions where Vultr data centers may be located
Method and Timing of Transfer: encrypted transmission and storage over the network during service use and system operation
Categories of Information Transferred: account registration information, service usage records, and transaction history to the extent necessary for hosting, operation, and backup
Purpose of Transfer: system operation, hosting, security, maintenance, and backup
Retention Period: until account deletion, withdrawal, or the end of the outsourcing relationship, unless longer retention is required by law

If the details of entrusted processing or overseas transfer materially change, the Company will update this Privacy Policy accordingly.

Article 6. Children’s Privacy and Age Restrictions

The Service is not directed to children under the age of 14, and the Company does not knowingly allow children under 14 to create accounts for account-based use of the Service.

We use date of birth as part of the registration process to determine eligibility for account creation. If we learn that a person under 14 has created an account or submitted personal information in connection with account registration, we may refuse registration, suspend or terminate the account, and delete the related personal information unless retention is required by applicable law.

If a parent or legal guardian believes that a child under 14 has provided personal information to the Company, they may contact us at contact@starbank-daeppang.com, and we will review the matter and take appropriate action.

For users who are minors under applicable law but at least 14 years old, additional consent from a parent or legal guardian may be required for certain paid purchases or services, depending on applicable law.

Article 7. Rights of Users and Legal Representatives

Users may, subject to applicable law, exercise the following rights regarding their personal information:

• request access to their personal information;

• request correction of inaccurate or incomplete personal information;

• request deletion of personal information;

• request suspension or restriction of processing; and

• withdraw consent where processing is based on consent.

Requests may be submitted in writing or by email to the contact information provided in this Privacy Policy, and the Company will respond in accordance with applicable law.

Where permitted by applicable law, a legal representative may exercise certain rights on behalf of a minor user.

Article 8. Destruction of Personal Information

1. Timing of Destruction

The Company destroys personal information without undue delay when the information is no longer necessary for the purposes for which it was collected, including where the retention period has expired or the processing purpose has been fulfilled, unless retention is required by law.

2. Destruction Procedures and Methods

• Personal information stored in electronic form is deleted using technical methods designed to prevent recovery or reproduction.

• Personal information printed on paper is destroyed by shredding or incineration.

Where retention is required by law or internal policy for a limited period, the information may first be moved to a separate storage system before final deletion.

Article 9. Measures to Ensure the Security of Personal Information

The Company implements reasonable administrative, technical, and physical safeguards to protect personal information, including:

• establishment and implementation of internal privacy and security policies;

• limitation and management of access rights to personal information;

• password encryption and other security measures for stored data;

• monitoring and response measures against unauthorized access or misuse; and

• installation, maintenance, and updating of security programs and related protective technologies.

Article 10. Cookies and Similar Technologies

1. Use of Cookies

The Company uses cookies and similar technologies to improve website operation, analyze usage patterns, remember preferences, and provide certain customized features.

2. Purpose of Cookie Use

Cookies may be used to:

• maintain login and session functionality;

• analyze access frequency, visit times, and usage behavior;

• understand user preferences and areas of interest; and

• support service improvement, marketing, and personalization, where permitted by law.

3. How to Manage Cookies

You may manage your cookie preferences in the following ways:

• On our website: by using the “Cookie Settings” or “Privacy Settings” option made available on the website, where applicable

• In your browser: by adjusting your browser settings to block or delete cookies

Please note that blocking strictly necessary cookies may affect certain website functions, including login-related services.

Article 11. Chief Privacy Officer and Contact Information

The Company designates the following person as the person responsible for personal information protection:

Name: Hyerin Jung
Position: CEO
Contact: +82-2-2052-7774
Email: contact@starbank-daeppang.com

For any questions, complaints, or requests concerning this Privacy Policy or the processing of your personal information, please contact us using the information above.

Article 12. Remedies for Infringement of Rights

Users may seek assistance or dispute resolution from the following institutions in relation to personal information infringement:

• Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / 118

• Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972

• Supreme Prosecutors’ Office Cyber Investigation Division: www.spo.go.kr / 1301

• National Police Agency Cyber Investigation Bureau: ecrm.police.go.kr / 182

Article 13. International Users

Your personal information may be transferred to, stored in, and processed in countries other than the country in which it was collected, including South Korea, Japan, and the United States, for the purposes described in this Privacy Policy.

Where required by applicable law, the Company will take appropriate steps to protect personal information transferred internationally.

Article 14. Additional Information for EEA and UK Users

If you are located in the European Economic Area or the United Kingdom, you may have certain rights under applicable data protection laws, including the right to:

• access your personal data;

• request correction of inaccurate personal data;

• request deletion of personal data;

• request restriction of processing;

• object to certain processing; and

• request portability of your personal data, where applicable.

To exercise these rights, please contact us at contact@starbank-daeppang.com.

Article 15. Additional Information for California Residents

If you are a California resident, and to the extent the California Consumer Privacy Act, as amended, applies to the Company, you may have the following rights:

• the right to know what categories of personal information we collect, use, disclose, and, where applicable, sell or share;

• the right to request deletion of personal information, subject to legal exceptions;

• the right to request correction of inaccurate personal information;

• the right to opt out of the sale or sharing of personal information, where applicable; and

• the right not to receive discriminatory treatment for exercising your privacy rights.

Where required by applicable law, the Company will not sell or share the personal information of a user whom it actually knows is under 16 years of age unless the legally required consent has been obtained.

California residents may exercise applicable rights by contacting us at contact@starbank-daeppang.com. Where required, we may take reasonable steps to verify the identity of the requesting person before processing the request.

Article 16. Changes to This Privacy Policy

This Privacy Policy is effective as of January 11, 2026.

If we make any additions, deletions, or material changes to this Privacy Policy, we will notify users through the website’s notice section or by other appropriate means in accordance with applicable law.