Last Updated: 1st June 2022
1.3 Personal Data. ‘Personal data’ means any information relating to an identifiable living individual, in particular the data subject, who can be identified from that data or from that data and other data or any other data that are defined as the ‘personal data’ under the relevant laws and regulations, in particular the Personal Data Protection Act of Thailand and the subordinated legislatures.
3. Personal Data Collected
3.1 Sources of Personal Data. We may collect your personal data directly or indirectly from 3 main sources, including:
3.1.1 Directly from you. When you contact us via several communication channels (online and offline); log on to this Website and/or the Platforms; register as the user on this Website and/or the Platforms; or use the Services offered or provided by us, we will collect and process your personal data.
3.1.2 Automatically by our system. When you visit or log on our Website and/or Platforms, our system will collect and process some of your online identifier (as defined below) automatically; and
3.1.3 Indirectly from other sources. We may legitimately collect or obtain your personal data from the third-party sources, including government database or any other third-party service providers or business partners, social media or any other public data sources.
3.2 Personal Data being collected: When you use this Website, Platforms and/or our Services, we would need to process the following personal data of yours for the purpose of performing our legal and contractual obligations as well as to exercise our legitimate rights and interests that we may have against you.
The personal data that will be collected are defined as follows:
|Types of Personal Data||Details and Examples|
|Online Identifier||Information relating to the device or equipment that you may use to connect to the Website and/or Platforms, including IP address or Mac address, Cookies, Device ID, search and query track that you may execute on the Website and/or Platform, location data, version or plug-in browser, operating system or any other technical identifiers of you or your device.|
|Identity Data||Identity data can help us verify whether you are eligible to be registered as a member of this Website and/or the Platforms. It includes but is not limited to your name, residential address, mailing address, other certificates and corresponding numbers thereof that are issued by your country or government to certify your identity information, as well as all other information that can help us to verify your identity that we are obliged under the applicable laws (including without limitation the Anti-Money Laundering laws and the requirements of the supervisory authorities, Securities and Exchange Commission of Thailand) to collect in order to verify and validate your identity.|
|Sensitive Personal Data||Facial recognition and comparison information that you would be required to submit the live selfie and our system will compare such facial image with the biometric information contained in the national identification card or passport.|
|Contact Data||Current address, residential address, telephone number, email and other social media accounts.|
|Qualification Data||Educational and occupational information, suitability test result, risk acceptance level as assessed via our system and the AML/CFT risk profile as we would be obliged under the applicable laws to collect, assess and process prior to the acceptance of any customer (including without limitation KYC, CDD, FATCA and other risk assessments).|
|Financial Data||Bank account information, source of income and other proof of income (including without limitation payment slips).|
|Transaction Data||User account, user ID, login information, electronic signature and any other transactional information executed by you on the Website and/or the Platforms (including without limitation the order placement, digital assets and fiat delivery and settlement and other history information collected).|
|Other Data||Any other personal data that you have provided to us for participation in the event, for the complaint management, the feedback management, the contact-back process and any other personal data as specified in the form that we requested from you.|
3.3 Additional Personal Data. When you use this Website and/or the Platforms or the Services, we may collect further personal data as required from our exclusive mailboxes or in other manners that we consider as being in compliance with relevant requirements, for the purpose of improving the functions of this Website and/or the Platforms, enhancing your experience of using this Website and/or the Platforms and its Services as well as the security thereof, or as is required by any court order, any applicable law, administrative regulation or any order of any other competent government agencies.
Most browsers are designed to accept cookies. You can opt to set your browser to reject cookies. However, if you set your browser to disable cookies, it is possible that you may not be able to launch or use some functions of our Website and/or the Platforms.
4. Purposes of Personal Data PROCESSING
4.1 We will process your personal data (as defined above) for the following purposes and relying on the following lawful basis:
4.1.1 Contractual Basis where we are obligated to process your personal data to carry out any obligations or responsibilities that you are requesting from us or that we commit according to the terms and conditions of this Website and/or the Platforms to perform and provide to you, including in particular the following detailed purposes:
(a) to respond to your request for information and inputs relating to our Websites, the Platforms; and/or the Services that you have submitted through various communication channels;
(b) to verify your qualifications before being registered as our users pursuant to the terms and conditions defined; to identify and confirm your identity when you use our Website, the Platforms; and/or the Services; as well as to verify your qualification according to the defined terms and conditions for the VIP conditions;
(c) to provide you with our Services through our Website and/or the Platforms, including without limitation to coordinate and facilitate transactions as you may execute on the Website and/or the Platforms from order placement to settlement and delivery;
(d) to provide any additional services and contractual obligations that you may request from us or we may host and you may participate in, including without limitation any additional services that may be provided to the VIP customers according to the tier defined.
4.1.2 Legal or regulatory obligations where we need to comply with the legal or regulatory obligations that we are subject to and we would then need to process your personal data to satisfy those obligations, including without limitation for the following detailed purposes:
(a) to complete your identity verification and validation through the know-your-customer and/or customer enhanced due diligence process (including the AML/CFT risk assessment and profiling) as we are obliged under the AML and other subordinated regulations to perform prior to the acceptance of you as our user;
(b) to monitor and report any required cash or digital assets transaction as well as any suspicious transactions to the AML authorities and to the supervisory authorities, in particular the Securities Exchange and Commission of Thailand;
(c) to proceed with the tax documentation and tax payment requirements as we may be obliged under the tax and accounting laws to perform;
(d) to perform any other personal data processing as instructed by the applicable laws, subordinated legislatures and order / judgment and/or instructions of the relevant government authorities.
4.1.3 Legitimate Interests where we require your personal data to achieve our legitimate interest of running our business in some specific situations, provided your interests and fundamental rights and freedoms are not overridden, including without limitation to the following detailed purposes:
(a) to keep statistics relating to the use of our Website and/or the Platforms, and to be used for data analysis carried out for the improvement and upgrade of the Services of this Website and/or the Platforms;
(b) to personalize your experience; and to conduct user segmentation for the purpose of customization and improvement of our Services and/ or your journey on our Website and/or the Platforms;
(c) to monitor, detect and audit any fraud or any suspicious transaction executed on the Website and/or the Platforms pursuant to the risk management and market surveillance framework that we may set and define; and
(d) to manage any complaint or legal proceedings that you may have brought against us or we may need to enforce against you.
4.1.4 Consent where you have provided, in certain cases, your consent for us to process your personal data for particular purposes, we will proceed accordingly. In particular, we will proceed with the following personal data processing with your consent:
(a) to process the biometric comparison data, in particular the facial recognition data, which is categorized as the sensitive personal data for the purpose of the identity verification as we are obliged under the applicable laws to perform; provided that it should be emphasized that in case you are not giving this specific consent, we may be obliged under applicable laws not to accept you as our customer;
(b) to contact you in connection with the products and services that you may be interested in and in particular to send you personalized marketing communications to ensure that you are always kept up-to-date with our latest products and services that suits your interests.
5. Retention Period for Personal Data
6. Disclosure of Personal Data
6.1 To whom the Personal Data will be shared. We may disclose your personal data to the following parties:
6.1.1 Affiliates or trusted third-party service providers (i) who help us operate this Website and/or the Platforms, manage our business, or provide the Services to you; (ii) when we believe that personal data disclosure is required to ensure the effectuation of the transaction and order that you make;
6.1.2 Government authorities where we are obliged by any of the applicable laws, regulations, rules or by any order of courts or other competent authorities to disclose your personal data to, including in particular the AMLO, the Revenue Department and the Securities and Exchange Commission of Thailand;
6.1.3 Any person that you give consent to us to disclose your personal data to
6.2 Confidentiality Arrangement. For the case where your personal data is being disclosed to other third-parties, we will ensure the protection of your personal data, such as confidentiality arrangement, appropriate security measures to the extent as required by laws and we will only disclose your personal data on a necessary and need-to-know basis.
7. Protection of Personal Data
We adopt appropriate physical, electronic, management and technical measures so as to protect and safeguard the security of your personal data. We will, to the fullest extent possible, ensure that any personal data collected through our Website and/or the Platforms shall be free from being subject to nuisance by any third party unrelated to us. The security measures that we may take include but are not limited to:
7.1 Physical measures: records of your personal data will be stored in an appropriately locked and secured premises.
7.2 Electronic measures: the computer data that contain your personal data will be stored in computer systems and storage medias that are subject to strict login restrictions.
7.3 Management measures: only staff members duly authorized by us can access your personal data, and these staff members shall comply with our internal code concerning personal data confidentiality.
7.4 Technical measures: such encryption techniques as Secure Socket Layer Encryption may be used to convey your personal data.
7.5 Other measures: our network servers are protected by proper ‘firewalls’.
8. Your Rights
Subject to applicable laws and exceptions thereof, your personal data rights include:
8.1 Right to Be Informed. You have the right to know the objectives of the processing, necessity to provide personal data and impact for not providing personal data when entering into a contract, retention period, the person the personal data will be transferred to and contact information of the data controller and DPO.
8.2 Right to Access. You have the right to request a copy of all your personal data we are processing about you, provided that there may be applicable fees at the rate approved by the relevant authority.
8.3 Right to Data Portability. For the case where we have an automated platform allowing you to access your personal data automatically: (i) you may have the right to ask for your personal data to be transferred automatically to other organizations; and (ii) you may have the right to ask for your personal data to be directly transferred to other organizations, with the exceptions of cases where there are technological limitations.
8.4 Right to Object. You have the right to object to any data processing activity of your personal data in certain circumstances that we may exercise our legitimate rights to process your personal data.
8.5 Right to Rectification. You have the right to edit your personal data to be correct and up to date.
8.6 Right to Erasure. You have the right to request the deletion or anonymization of the personal data that we process about you, in accordance with the following cases: (i) the personal data is no longer necessary for the processing purposes; (ii) once the consent has been withdrawn; (iii) you object to the processing of your personal data by us based on our legitimate interests, and we do not have overriding legitimate grounds for the processing; and (iv) the processing activity is not in accordance with the law.
8.7 Right to Restriction. You have the right to restrict any data processing activities in the following cases: (i) during the verification process in accordance with the rights request to update personal data; (ii) for cases related to personal data where initially there was a request for erasure, but this was followed by an additional request of processing restrictions instead; (iii) for cases when the data processing terms have ended, but you have requested further processing restrictions due to legal reasons; and (iv) during the process of personal data processing objection verification.
8.8 Right to Withdraw Consent. You have the right to withdraw your consent regarding the processing of your personal data at any time if such withdrawal is not restricted by law or any contract that provides benefits to you. It should be noted, for the avoidance of doubt, that in case you withdraw the consent given to us to process your facial recognition, we would be obliged to refuse and retain such personal data for the period of time as prescribed under applicable laws.
8.9 Right to Lodge a Complaint. You have the right to lodge a complaint with the competent authorities in the case that we act unlawfully or not in compliance with applicable laws in the processing of your personal data.
10. Communication with Us
If you have any requests, comments, or wish to exercise your rights under the laws, you can contact us at 15th Floor Athenee Tower, 63, Wireless Road, Lumpini Sub-district, Pathumwan district, Bangkok 10330, Thailand, or send an email to our Data Protection Officer at [email protected], which is the valid and official email through which we communicate with you.