Terms of Use for Identity Verification Service Provided by Telecommunications Providers
※ All terms and consents related to authentication institutions that are not ultimately selected shall be considered withdrawn.
SKT
Article 1 (Purpose)
The purpose of these Terms of Use is to define the rights, obligations, and other relevant matters between SK Telecom Co., Ltd. (hereinafter referred to as the “Company”), which provides the identity verification service (hereinafter referred to as the “Service”), and users of the identity verification service (hereinafter referred to as the “User”) regarding the use of the Service.
Article 2 (Definitions of Terms)
① “Identity Verification Service” refers to a service that verifies a user’s identity and the accuracy of registered information by using a mobile phone under the user’s own name through a website or application (hereinafter referred to as “Site”) over wired or wireless internet, where the user enters identity verification information and completes an authentication process.
② “Identity Verification Information” refers to information entered by the User for identity verification, including the user’s date of birth, gender, name, whether the user is a Korean national or a foreigner, mobile phone number registered under the user’s name, and any other number separately set by the Company and the User, which are necessary to provide the Service.
③ “User” refers to an individual who uses the Service provided by the Company on a Site, including subscribers to the Company’s mobile services and subscribers of resellers using the Company’s network who utilize the Service.
④ “Duplicate Subscription Confirmation Information” refers to information generated to check whether a User has already registered or used a Site when the User attempts to register, access, or perform certain actions on the Site.
⑤ “Identity Verification Institution” refers to a business operator designated under relevant laws such as the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., authorized to collect and use resident registration numbers and to develop, provide, and manage methods (hereinafter “Alternative Means”) that verify identity without using resident registration numbers on Sites.
⑥ “Linked Identification Information” refers to information generated to identify a User across multiple Sites for the purpose of linking services, content, or points, or for settlement purposes.
⑦ “Agency” refers to a business operator entrusted by the Company to relay the Service between the Site and the Company, provide guidance and support regarding the Service, and handle related tasks for the User within the scope of authority delegated by the Company.
⑧ “Site” refers to a website or smartphone application that provides goods or services such as products, services, contents, and points either free of charge or for a fee.
⑨ “Access Medium” means a method that ensures the authenticity and accuracy of the User and the information entered by the User to use the Service, including the information under Paragraph ②, I-PIN ID and password issued by the Identity Verification Institution, ID and password set by the User on the Site or with the Company, and the User’s mobile phone number.
⑩ “Alternative Means” refers to a method of identifying and verifying a user’s identity without using resident registration information, including Duplicate Subscription Confirmation Information and Linked Identification Information.
⑪ “Additional Service” refers to a paid or free service provided by the Company related to the Service, such as additional security or authentication procedures. If paid, the service fee is charged to the User through the Company’s mobile service billing and collected together with the mobile phone charges.
Article 3 (Posting and Amendment of Terms)
① The Company posts these Terms on its Site or displays them when the User uses the Service to ensure the User can verify the contents. A copy of the Terms may also be provided electronically at the User’s request.
② The Company may amend these Terms as necessary and shall announce the effective date and reason for the amendment at least 15 days prior to the effective date via its Site.
③ If the Company clearly announces that continued use without expressing refusal constitutes acceptance, and the User does not explicitly object before the effective date, the User shall be deemed to have accepted the amended Terms. A User who does not agree to the amended Terms may stop using the Service and terminate the contract.
④ The Company bears no responsibility for damages arising from the User’s or Site’s failure to recognize the contents (including changes) of the Terms.
Article 4 (Establishment of Use Agreement)
The User is deemed to have agreed to these Terms and applied for the Service by clicking or checking the “Agree” button displayed when using the Service or posted on the Site.
Article 5 (Management of Identity Verification Information and Access Medium)
① When providing the Service, the Company may verify the identity, authority, and request history of the User by using the Access Medium used by the User, entered Identity Verification Information, and other information provided by the Site.
② The User must not lend, delegate, transfer, or pledge their Identity Verification Information or Access Medium to a third party, and must exercise due care to prevent forgery, alteration, or misuse.
③ The User must not disclose, expose, or neglect their Identity Verification Information or Access Medium.
④ Upon becoming aware of loss, theft, leakage, forgery, or alteration of the Access Medium or Identity Verification Information, the User must notify the Company immediately, and the Company shall suspend the Service upon receipt of such notice.
Article 6 (Guidance on the Identity Verification Service)
① The Service provided by the Company verifies the User’s identity, adulthood status, and duplicate registration status using information related to mobile phone service, Duplicate Subscription Confirmation Information, and Linked Identification Information entered by the User. For resellers using the Company’s network, only information entrusted to the Company may be used.
② The Company provides the Service directly or through an Agency to the Site via service screens or socket interfaces, and the Site provides the User with the means to use the Service according to related laws and its own terms.
③ A User who agrees to the Company’s and the Agency’s terms, and the Site’s terms, may use the Service on that Site.
④ Upon agreement to such terms, the User enters personal information (such as name, date of birth, gender, nationality, carrier, and phone number), and if the entered information matches, identity verification is completed by correctly entering a one-time password (OTP) sent to the User’s mobile number. For Sites operated by the Company or allowed to collect resident registration numbers under the law, resident registration numbers may be collected instead of date of birth.
⑤ Once identity verification is completed, the User’s information may be provided to the Site upon request, including Identity Verification Information, Duplicate Subscription Confirmation Information, and Linked Identification Information, and will be handled according to the Site’s own terms and agreements with the User.
Article 7 (Value-Added Services for the Identity Verification Service)
① The Company may provide additional “Value-Added Services” either for a fee or free of charge to users who apply for such services and require enhanced security in connection with the use of the Identity Verification Service.
② The Value-Added Services provided by the Company are as follows, and the detailed service descriptions and usage conditions shall be governed by the respective service terms.
- Mobile Authentication Protection Service (KRW 1,000 per month, VAT excluded)
Article 8 (Creation and Provision of Alternative Means)
① The Company may create alternative means using the resident registration number collected at the time of the User’s mobile phone subscription and provide them to the Site.
② The Company creates and provides such alternative means in the following ways:
- At the time of the User’s mobile subscription, the Company verifies the real-name usage status via a third-party Identity Verification Institution and receives and stores the alternative means.
- During the User’s use of the Identity Verification Service, the Company generates the alternative means or receives them from a third-party Identity Verification Institution based on an agreed format such as a password.
- During the User’s use of the Identity Verification Service, the Company provides the resident registration number obtained at the time of the User’s subscription along with the Site’s unique ID to a third-party Identity Verification Institution and receives the corresponding alternative means.
③ In the case where the Company receives the alternative means from a third-party Identity Verification Institution as described in subparagraph 3 of paragraph ②, the Company shall not be held liable for the accuracy of such alternative means.
Article 9 (Provision Hours for the Identity Verification Service)
① The Identity Verification Service shall, in principle, be available 24 hours a day, 365 days a year. However, service may be temporarily suspended for periods determined by the Company due to regular maintenance, technical reasons, or other operational purposes, or by the technical or operational circumstances of the respective Site.
② The Company shall not compensate Users for the suspension of the Identity Verification Service. However, in the case of Users who subscribe to the Service under a fixed-rate payment plan, if the service is suspended for more than 24 hours, the Company or the Agency (depending on who charged the fee) shall provide a refund or deduction on a pro rata basis based on the number of days in the month.
Article 10 (Rights and Obligations of the Company)
① If the Company is not the issuer of the Access Medium, the Company shall not be liable for damages caused to the User due to forgery, alteration, or leakage of the Access Medium.
② The Company shall not be liable for damages incurred by the User resulting from the use of an Access Medium or Identity Verification Information that cannot be verified for fraudulent use, or if the User fails to comply with Article 5, paragraphs 2 through 4.
③ The Company shall not disclose or distribute the Identity Verification Information of a User acquired in connection with the provision of the Identity Verification Service to any third party without the User’s consent, unless requested in accordance with legal procedures by government authorities or for criminal investigations, or otherwise permitted under applicable laws.
④ The Company shall continuously perform preventive checks, maintenance, and repairs of systems, procedures, and functions related to the stable provision of the Identity Verification Service and shall promptly repair and restore service in the event of a disruption.
⑤ To prevent damage caused by fraudulent acts that disrupt market order (such as cloned phones, phone-based microloans, etc.), the Company may restrict or suspend the Identity Verification Service for suspicious Users or phone lines, and may request investigations by administrative or judicial authorities in accordance with relevant laws.
⑥ The Company may restrict the use of the Identity Verification Service for Users who fail to pay communication service charges or are subscribed to special rate plans offered by the Company.
⑦ If the Company confirms that identity theft, forgery or falsification of submitted documents, or other illegal acts were involved in the application for the Company’s telecommunications services, it shall immediately suspend the Identity Verification Service for the corresponding User and line and may take actions under applicable laws and telecommunications terms.
⑧ For Users subscribed to alternate telecommunications service providers that use the Company’s mobile network, the Company shall not bear any liability for failures in identity verification, document forgery, or inaccuracies in identity information, and such providers shall bear all relevant responsibility.
Article 11 (Rights and Obligations of the User)
① Users shall not engage in any of the following acts when using the Identity Verification Service, and the Company shall bear no legal responsibility for such acts:
- Illegally using or impersonating another person’s Identity Verification Information
- Infringing on the copyrights or other rights of the Company, the Agency, the Site, or any third party
- Engaging in acts that violate any laws or are otherwise illegal
- Violating any obligations or requirements set forth in these Terms
② Users shall comply with the provisions of these Terms and the usage guides or precautions related to the Identity Verification Service.
③ Users must fulfill the obligations stipulated in Article 5.
Article 12 (Scope of Provision of User Information)
① The Company shall not provide, disclose, or use for purposes other than business any User information acquired in the course of providing the Identity Verification Service, without the User’s consent.
② If a User consents to the collection, use, and provision of personal information and a Site or a third party such as a credit card company requests verification of the authenticity of the User’s mobile number or alternative identification method held by them, the Company may respond to such requests with information on the validity of the mobile number or alternative identification.
Article 13 (Ensuring Stability of the Identity Verification Service)
① The Company shall take technical and administrative measures, including the configuration of intrusion prevention systems and security management frameworks, and access restrictions, to ensure the safety, reliability, and security of the Identity Verification Service.
② The Company shall implement a monitoring system capable of supervising, alerting, and controlling the operational status of the information processing system resources in order to verify the normal operation of servers and communication devices related to the Identity Verification Service.
③ To prevent hacking and security breaches, the Company shall install and operate the following systems and programs:
- Installation of intrusion prevention and detection systems
- Installation of other necessary protective equipment or encryption programs, and other information security systems
④ The Company shall internally operate procedures for the prevention, detection, and recovery from computer virus infections.
Article 14 (Protection of User’s Personal Information)
① The User’s personal information shall be protected in accordance with relevant laws and the privacy policy established and operated by the Company. Detailed information on the scope of the Company’s collection and use of personal information can be found in the mobile service subscription form and the privacy policy provided on the Company’s main website (www.sktelecom.com).
② For Users who subscribe to individual telecommunication service providers using the Company’s mobile network, the respective alternative telecommunications provider shall bear full responsibility for complying with legal procedures related to the protection, collection, use, and provision of personal information. The scope of personal information collection and use for those Users shall be subject to the respective provider’s privacy policy.
③ In addition to the privacy policies described in paragraphs ① and ②, the Company may provide part of the User’s personal information to companies designated by the Company for the purpose of providing the Identity Verification Service, in the following cases:
- When the Site requires the User’s identification information (such as Duplicate Subscription Check Information or Alternative Means) for the use of the Identity Verification Service, the Company may provide the User’s resident registration information to a third-party Identity Verification Institution for the generation, management, and provision of such identification information.
- The personal information (Duplicate Subscription Check Information, Alternative Means) collected or obtained by the Company may be provided to the Site through the Company or the Agency.
- The scope of the Company’s collection, use, and provision of personal information for the Identity Verification Service, as well as the entrusted data processors and details of entrusted tasks, shall be separately linked to the screen where this agreement is posted.
Article 15 (Matters Not Specified in the Terms)
Matters not specified in these Terms shall be governed by the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., other relevant laws, or customary practices.
Article 16 (Jurisdiction)
① In the event of any dispute arising between the Company and the User in relation to the use of the Identity Verification Service, the Company and the User shall make sincere efforts to resolve the dispute through consultation.
② If the dispute is not resolved through such consultation, either party may file a lawsuit with the court having jurisdiction under the Civil Procedure Act.
Addendum
(Effective Date) These Terms shall take effect from the date of publication.
KT
Article 1 (Purpose)
The purpose of these Terms and Conditions is to stipulate the terms and procedures for the provision of services and other necessary matters between KT Corporation (hereinafter referred to as the “Company”), which provides an alternative identity verification service to the resident registration number, and service users (hereinafter referred to as “Users”).
Article 2 (Definitions of Terms)
The definitions of terms used in these Terms and Conditions are as follows:
① “Identity Verification Service” refers to a service that allows a User to safely identify and verify themselves online without entering a resident registration number, by using a mobile phone registered under their own name (either a phone under the individual User’s name or under a corporation’s name for which the User has subscribed to the identity verification service).
② “Simple Identity Verification Service” refers to a method where the identity verification information input is simplified to name and mobile phone number and uses the “PASS” application.
③ “PASS” refers to an application (hereinafter the “PASS app”) provided by the Company, which verifies that the User is the owner of the device by confirming the authentication method registered by the User in the PASS app (e.g., password input, fingerprint recognition, etc.).