Privacy Policy

1. Information We Collect

We collect personal data you provide directly, including name, date of birth, nationality, contact details, payment details, and KYC/AML verification documents. We also automatically collect technical information such as device data, IP address, and activity on the Platform.

2. How We Use Your Information

We use your data to enable token purchases, identity verification, payouts, portfolio tracking, customer support, fraud prevention, compliance checks, and service improvement. Data may also be used for marketing (with your consent), analytics, and legal obligations.

3. Legal Basis for Processing

We process your data under the following grounds:

• Contractual necessity (to provide services you request).
• Legal obligations (KYC/AML, taxation, financial compliance).
• Legitimate interests (fraud prevention, improving services).
• Consent (marketing communications, optional features).
• Vital interests (safety, fraud, preventing illegal activity).

4. Information Sharing

We may share your data with affiliated entities (Singapore SPV, Thailand Operating Company), service providers (payment processors, KYC partners, hosting), legal authorities when required, and auditors. We do not sell or rent personal data.

5. Business Transfers

If our business undergoes a merger, acquisition, restructuring, financing, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change where required by law.

6. International Data Transfers

Your data may be processed in Singapore, Thailand, or the EU/EEA. We use contractual safeguards to ensure protection of data transferred outside your country of residence.

7. Data Retention

Identification and KYC data are kept for at least 5 years after termination of the business relationship (per AML rules). Transaction data is retained as required by tax law. Other personal data is deleted when no longer necessary for its original purpose.

8. Your Rights

Depending on jurisdiction, you may request access, correction, erasure, restriction, or transfer of your personal data. You may also withdraw consent for marketing.
- EU/EEA/UK users: you may lodge a complaint with your national data protection authority.
- Thailand users: you have rights under the Thailand PDPA.
- Singapore users: you have rights under the PDPA to access and correct your data.
Requests can be sent to: privacy@thaivesttoken.com.

9. Cookies & Tracking

We use cookies and similar technologies to maintain sessions, analyse usage, and improve performance. You may disable cookies in your browser, but this may affect site functionality.

10. Do-Not-Track Features

Most browsers include a Do-Not-Track (“DNT”) feature. At present, no uniform standard exists for recognising DNT signals. Therefore, we do not currently respond to DNT requests, but will comply if future standards are adopted.

11. Security

We implement encryption, two-factor authentication, secure storage, audits, and access controls. However, no method of transmission over the Internet or electronic storage is completely secure. You use the Platform at your own risk.

12. Legal Age Policy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete it promptly.

13. Marketing & Opt-Out

You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in emails or by contacting us directly. Even after opting out, we may still send you non-marketing messages (e.g., service updates, account notifications).

14. Updates to this Policy

We may update this Privacy Policy from time to time. Updates will be posted on the Platform with a revised date. Continued use of the Platform after updates indicates acceptance.

15. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us at: privacy@thaivesttoken.com.