Policy : Tencent (Thailand) Company Limited

Last modified on 29 September 2023

Tencent (Thailand) Company Limited (hereinafter referred to as “Tencent” or “We”) places great importance on the protection of your personal data. We want to assure you that we will protect and handle your personal data in compliance with the Personal Data Protection Act B.E. 2562 (hereinafter referred to as “Personal Data Protection Law”). We have established this Privacy Policy to explain how we use the Personal Data we receive from you in conducting our business and to inform you of your rights as the Data Subject. To ensure that you have a comprehensive understanding of the details as stipulated by the Personal Data Protection Law, Tencent recommends that you carefully read and understand the various provisions under this Privacy Policy in detail.

Tencent (Thailand) Company Limited’s affiliated companies refer to one or more legal entities, including but not limited to:

Tencent Online (Thailand) Ltd.
Webspace Ltd.
MWEB Portal (Thailand) Ltd.
Levelup Online Co., Ltd.
Topspace (Thailand) Co., Ltd.
WeChat (Thailand) Co., Ltd.

1. Definition

Vocabulary Definition

Personal Data	Information that enables the direct or indirect identification of an individual but excludes data concerning the deceased person.
Data Controller	Tencent, as an entity with decision-making authority, determines the collection, use, or disclosure of personal data.
Data Subject	Individuals who are data subjects include corporate customers, suppliers, and business partners
Data Processor	Individuals or legal entities who process, use, or disclose Personal Data on the orders or on behalf of Tencent
Individual	Natural person
Sensitive Data	Personal Data that is inherently sensitive and may pose a risk of unfair discrimination includes, but is not limited to, race, ethnicity, political opinions, religious or philosophical beliefs, sexual orientation, criminal records, health information, disabilities, labor union membership, genetic data, biometric data, or any other data that may similarly affect the data subject as specified by the Personal Data Protection Committee.

2. The data we collect and how we collect data

Upon the business operation of Tencent and under this policy, your Personal Data which is collected, used, or disclosed by Tencent (collectivity referred to as "process" or "processing") including but not limited to the following;

Identifiable Information: Name, Family name, Gender, Date of Birth, Marital Status, National Identification Number, Passport Number, Other government-issued identification numbers, including Personal Data appearing on documents issued by the government, Company documents containing information about authorized company personnel, issued by authorized authorities.(in the case of supplier/business partners is legal entities), tax number, nationality, photographs appearing on ID cards, passports, driver's licenses, signatures, as well as biometric data for facial or voice recognition, photographs, and video recordings from CCTV cameras.
Financial Information: Bank account numbers, credit card or debit card numbers, payment terms, income, sources of income, Personal Data appearing on invoices, tax invoices, receipts, and details or information regarding other payment transactions, etc.
Contact Information: Mobile Phone Number, Home Phone Number, Work Phone Number, Home Fax Number, Work Fax Number, Email Address, Social Media Account(s), Address as per the national identification card, Address as per the household registration, Work Address, Delivery Address for invoices, and Contact Information of individuals who can be reached.
Transaction Information: detail of purchasing of product/service, detail of service which contain Personal Data.
Information used as evidence in transactions: Personal Data appearing on a copy of the identification card, copy of the passport, copy of the civil servant card, copy of the government employee card, copy of the household registration, copy of the name change certificate, power of attorney, copy of the company affidavit (in the case of the corporate customer), medical certificate, delivery receipts, and purchase contracts or any other relevant contracts related to the transaction, etc.
Electronic Data: Computer Traffic data (Log) and data collected by Tencent through cookies or similar technologies. This data may include information about website and application usage, as well as various systems of Tencent. It also encompasses device identifiers, computer IP addresses, location data, browser types, and user behavior patterns.
Sensitive Personal Data: Generally, Tencent does not intend to collect sensitive Personal Data such as religious information, blood type, health information, etc. However, if there is a necessity for Tencent to process sensitive Personal Data, Tencent will seek your consent beforehand or comply with the requirements of the laws and regulations regarding the protection of Personal Data.

3. How do we collect or receive your Personal Data

We may collect or receive Personal Data of person or business customers via many channels as follows;
1. In case you provide your Personal Data to Tencent directly
  1. Upon your purchasing of product/service from Tencent
  2. Upon your reserving of product or service with Tencent
  3. Upon your sending of any documents which contain Personal Data to Tencent
  4. Upon your communication, inquiry of product or service of Tencent including via telephone which being recorded, letter, email, or other communication.
  5. Upon your providing of comment or opinion to Tencent via any channel such as website, application, online social media, and customer contact center
  6. Upon your registration or joining an event or marketing activity or other activities held or on behalf of Tencent
  7. Upon your subscription to news or marketing from Tencent
2. In case Tencent receives your Personal Data from third-party
  1. Upon affiliates or group company and/or partner or supplier of Tencent send your Personal Data to Tencent for the benefit of purposing and/or providing service to you and operating related business
  2. Upon service providers provide your Personal Data to Tencent upon assignment to provide any service to you
  3. Sometimes, Tencent may collect your Personal Data from publicly available or trade information data warehouses whether you disclose such information by yourself or allowed another person to disclose your information such as government authority, publicly available information via the internet or social media
3. In case Tencent collects Personal Data automatically
  1. Upon your visiting and/or using service of the website, application, or 7online service of Tencent where use of cookies or similar technology to collect your technical information. Please see Tencent's cookie policy
  2. Upon your using the service of Tencent or contact Tencent at its place of business operation which installed CCTV to record picture and motion
We may collect or receive the Personal Data of suppliers or business partners via the following channels:
1. In case you provide Personal Data to Tencent directly
  1. Upon your registration as a supplier/business partner with Tencent
  2. Upon your purchasing of product/service from Tencent
  3. Upon your reserving of product or service with Tencent
  4. Upon your sending of any documents which contain Personal Data to Tencent
  5. Upon your communication, inquiry of product or service of Tencent including via telephone which being recorded, letter, email, or other communication
  6. Upon your subscription to news or marketing from Tencent
2. In case Tencent receives your Personal Data from third-party
  1. During registration as a supplier/business partner of Tencent such as credit assessment, trade reference, Tencent's customer, your customer, law enforcement authority
  2. Sometimes, Tencent may collect your Personal Data from publicly available or trade information data warehouses whether you disclose such information by yourself or allowed another person to disclose your information such as government authority, publicly available information via the internet or social media
3. In case Tencent collects Personal Data automatically
  1. Upon your visiting and/or using service of the website, application, or 7online service of Tencent where use of cookies or similar technology to collect your technical information. Please see Tencent's cookie policy
  2. Upon your using the service of Tencent or contact Tencent at its place of business operation which installed CCTV to record picture and motion

4. How do we use your Personal Data

What type of Personal Data we may receive from you directly or receive by your direct transaction with us. The following table illustrates the detail related to the type of Personal Data which we may collect upon your joining any activity
How do we use your Personal Data and why do we use your Personal Data. The following table will explain how we process your Personal Data and the purpose of the collection and use of such information.
On what legal ground we use to use your Personal Data, we explain such legal ground in the following table
In case we refer to the lawful benefit as a legal ground to process your Personal Data, we considered that your right is not less important than our benefit
The Personal Data collected by Tencent due to its necessity to comply with the contract or other laws is illustrated in the following table. In case you do not provide necessary Personal Data which may affect Tencent not to be able to perform its obligation under the contract or affect Tencent not to be able to provide service or process your request
In case Tencent wishes to process your Personal Data out of the scope provided in the following table, Tencent shall arrange an additional privacy policy or announcement and/or service letter for your acknowledgment to explain the process Personal Data in such a manner. Nonetheless, you shall study additional related policies or announcement
In case you provide another person's Personal Data to us, you shall be responsible to inform such person of this privacy policy and/or requesting consent (if necessary)

Table display collection and use of individual and business partner's Personal Data

Personal Data that may be collected / processed The purpose of collection, uses, or disclosure of your Personal Data Legal basis

Personal Data related to name, family name, gender, date of birth, marriage status, identification number, passport number, banking or financial information, purchasing information, signature on the document, and other information related to you that you have sent to us	To record information and history of customer To manage purchase orders and other transactions with you To be evidence of entering the contract To provide service or deliver products to you To reply inquiry or contact you in other cases To present the benefit program To approach product, news, and other benefits To arrange marketing activities, events, seminars, and training To track, ask or investigate the asset in case not complying with the contract afterward To track and develop the website/application of Tencent To analyze and collect statistic To secure the website and application of Tencent To manage the relationship between us and you	Contractual Basis Legitimate interests Legal Obligation
Information related to contact includes telephone number, Email, Line, contactable address	To be evidence of entering into the contract To contact you for delivery product/service (if any) To contact for proposing product/service (upon your request) To send marketing information (upon your request) To analyze and collect statistic To secure the website and application of Tencent To manage the relationship between we and you	Contractual Basis Legitimate interests Consent Basis
Personal Data that we may receive could include the following information Data related to the usage of our website/application Data that indicates your location or the origin Webpage that you visit Video that you have watched Your location The duration of your visits Electronic Data include IP addresses, browser information, device information	To enable the website/application to function appropriately Displaying appropriate contents User settings, such as language preferences Your device settings configuration Updating our website/application To ensure the website/application’s security and stability To compile statistics To customize the service for you	Legitimate interests Consent Basis
Information related to comments, expectations, and satisfaction of product/service of Tencent	To evaluate, analyze and improve service to you	Legitimate interests
Information received from CCTV	To prevent dangers against life, body or health includes security within the building, place of Tencent by CCTV To the legitimate interest of Tencent, customers, and other persons	Vital Interests Legitimate interests
Identification information and contact information displayed on the contract or company affidavit or contact attachment includes telephone number, Email, contactable address	To comply with the law and establish the right of claim or complaint or defense as available by law or to comply with legal procedure includes reporting or disclosing to a government authority, independent organization, regulatory authority, person, or other authority as required by law	Legitimate interests Legal Obligation

Table display collection and use of supplier and business partner's Personal Data

Personal Data that may be collected / processed The purpose of collection, uses, or disclosure of your personal data Legal basis

Personal Data related to name, family name, gender, age, identification number, bank account information, and other Personal Data displayed on the company affidavit or attachment of the contract	To verify person For the sake of entering into the contract and other transactions with Tencent To be evidence for entering into the contract To pay money and manage payment To comply with the law related to transactions with Tencent To contact for business purposes such as contacting, arranging meetings, joint meetings for business meetings related to product or service To verify qualification or evaluation before entering any transaction, risk assessment of any transaction, authority verification, power of attorney, and proxy to sign an agreement or contract with Tencent To arrange marketing activities, events, seminars, and training To track, ask or investigate the asset in case not complying with the contract afterward To track and develop the website/application of Tencent To analyze and collect statistic To secure the website and application of Tencent To manage the relationship between we and you	Contractual Basis Legitimate interests Legal Obligation
Information related to contact includes telephone number, Email, Line, contactable address	To be evidence of entering into the contract To contact you for delivery product/service (if any) To contact for proposing product/service (upon your request) To send marketing information (upon your request) To analyze and collect statistic To secure the website and application of Tencent To manage the relationship between we and you	Contractual Basis Legitimate interests
Personal Data that we may receive could include the following information Data related to the usage of our website/application Data that indicates your location or the origin Webpage that you visit Video that you have watched Your location The duration of your visits Electronic Data include IP addresses, browser information, device information	To enable the website/application to function appropriately Displaying appropriate contents User settings, such as language preferences Your device settings configuration Updating our website/application To ensure the website/application’s security and stability To compile statistics To customize the service for you	Legitimate interests Consent Basis
Information received from CCTV	To prevent dangers against life, body or health includes security within the building, place of Tencent by CCTV To the legitimate interest of Tencent, customers, and other persons	Vital Interests Legitimate interests
Identification information and contact information displayed on the contract or company affidavit or contact attachment includes telephone number, Email, contactable address	To comply with the law and establish the right of claim or complaint or defense as available by law or to comply with legal procedure includes reporting or disclosing to a government authority, independent organization, regulatory authority, person, or other authority as required by law	Legitimate interests Legal Obligation

5. Retention period for the collection of Personal Data

Tencent will retain your Personal Data for as long as necessary to achieve the specified purposes for processing that Personal Data. The retention period of collection of Personal Data is variable and depends on the specified purpose to process Personal Data and the following factors
1. Necessary period according to the purpose of retention or necessity to provide any service to you
2. Period as required by related law (if any)
3. Prescription to proceed with the trial or related to the documents or Personal Data collected by Tencent in each item
4. Until you withdraw the consent, in case we refer to consent basis to process your Personal Data
5. Tencent's practice and related business standards for each Personal Data. Nonetheless, Tencent will store your Personal Data not exceeding 10 years from the termination date of the transaction or legal relation between you and Tencent

However, after the aforesaid period, we will:

delete, destroy when the use of Personal Data is no longer necessary; or
make your Personal Data unable to identify you for other beneficial purposes.

6. Disclosure of your Personal Data to external parties

In order to fulfill the purposes specified in this Privacy Policy Tencent may disclose your Personal Data to the following external parties:

Affiliated companies and group companies located abroad, including executives, board members, employees, contractors, and/or personnel within those companies, to the extent permitted and necessary for the processing of your Personal Data
The consultants of Tencent, such as auditors, legal advisors, attorneys, or other experts, both internal and external group companies of Tencent (Thailand) Company Limited.
Government agencies, state agencies, independent organizations, regulatory bodies or other entities as required by law. This may include officials who exercises legal authority, such as courts, the Office of the Attorney General, the Royal Thai Police, the Revenue Department, the Office of the Consumer Protection Committee, the Office of the Personal Data Protection Committee, etc.
Representative, contractor/sub-contractor, and/or service provider of any service to Tencent as the Personal Data processor such as information technology service, web service, data warehouse service, data analysis service, research service, marketing service, or any service which is the benefit to you or related to the business of the company
Website interface, application interface, news broadcast within Tencent and/or online social media of Tencent
Individuals or any organization where you consented to disclose your Personal Data

7. Transfer to disclose information to a foreign country

In certain cases, for the benefit or necessity to achieve the purposes related to Personal Data processing as stated above, Tencent may be required to disclose your Personal Data to oversea entities, which may have different data protection standards from those in Thailand. This is because Tencent has the group companies located abroad and may conduct business or transactions with oversea companies. Therefore, we may need to disclose your Personal Data to those companies. Additionally, Tencent may store your data on computer servers or cloud service providers located abroad and may process the data using programs or applications provided by oversea service providers. This may also involve the disclosure of data to foreign countries for litigation or arbitration that may arise. However, for the disclosure or transfer of Personal Data to foreign countries in whatsoever case, Tencent shall comply with the Personal Data Protection Act B.E. 2562 (2019).

8. Your rights as the Data Subject under the Personal Data Protection Law

The Personal Data Protection Act B.E. 2562 (2019) aims to enhance the control that you have over your Personal Data. You can exercise your rights under the Personal Data Protection Act B.E. 2562 (2019), which has the following details:

The right to withdraw your consent (unless the consent withdrawal is restricted by law or contract that benefits you as the Data Subject.)
The right to access, obtain, and request disclosure of the source of your Personal Data that we collect, unless we have the right to refuse your request under the law or a court order, or if your request may adversely affect the rights and freedoms of other individuals.
The right to request the rectification of your inaccurate or incomplete Personal Data in order to ensure its accuracy, currency, completeness, and to prevent any misunderstandings.
The right to suspend the use of your Personal Data in any of the following situations:
1. When we are conducting an examination based on your request to rectify your Personal Data for its accuracy, completeness and currency.
2. Your Personal Data is collected, used, or disclosed without your consent or against the law.
3. When your Personal Data is no longer necessary for the purposes, we have informed you during the collection process, but you wish us to continue storing the data for the exercise of your legal rights.
4. When we are verifying the legal grounds for the collection, use or disclosure of your Personal Data for public interest purposes due to the fact that you have exercised your right to object to the collection, use or disclosure of your Personal Data.
The right to object to the collection, use, or disclosure of your Personal Data, unless we have legitimate grounds to reject your request in accordance with the law.
The right to request the deletion, destruction, or anonymization of your Personal Data, making it unable to identify you as the Data Subject.
The right to request the transfer of your Personal Data to another Data Controller or to yourself, in certain circumstances and as permitted by law.
The right to lodge a complaint if Tencent violates or fails to comply with the Personal Data Protection Act B.E. 2562 (2019).

9. Using the Personal Data according to its original purpose

Tencent has the right to collect and use your Personal Data that was collected prior to the effective date of the Personal Data Protection Act B.E. 2562. Regarding the collection, use, and disclosure of the relevant data, the original purposes will continue to be enforced. If you do not wish Tencent to continue collecting and using your Personal Data, you can notify Tencent to withdraw your consent at any time. However, the withdrawal of consent does not affect the rights of Tencent to use, collect, or process your Personal Data based on other legal grounds in accordance with Tencent's applicable laws. (If any).

10. The security of your Personal Data

Tencent implements measures to protect Personal Data by limiting access to Personal Data only to authorized personnel or individuals who have a necessary and legitimate need to access such data for the stated purposes as communicated by the Data Subject. These individuals must strictly adhere to and comply with Tencent's personal data protection measures and have a duty to maintain the confidentiality of the Personal Data they become aware of in the course of performing their duties. Tencent has security measures in place to ensure the organizational and technical security of data, in accordance with the regulations set by the Personal Data Protection Committee.

Furthermore, when Tencent sends, transfers, or discloses Personal Data to third parties, whether for service delivery, contractual obligations, or other agreements, Tencent establishes appropriate security and confidentiality measures in compliance with applicable laws to ensure the continuous security and confidentiality of the Personal Data collected by Tencent.

11. Amendment of this privacy policy

This privacy policy may be occasionally revised or amended. If there are changes or additions that impact the processing of your Personal Data, we will announce any such changes through our website and/or notify you directly via email to inform you of the amendments. However, Tencent recommends that you periodically review this privacy policy for any updates or amendments.

12. Contact Channels

If you have any questions, concerns, or inquiries regarding the protection of your Personal Data, data collection, usage, disclosure, or exercise of your rights, or if you have any complaints, you can contact us through the following channels:

Data Controller: Tencent (Thailand) Co., Ltd.

Address:
8, T-one building, 10th, 11th, 12th floor (unit 3-5), Soi Sukhumvit 40, Sukhumvit Road, Prakanong District, Klongtoey Sub-district, Bangkok 10110
Telephone: 02-833-3000
facsimile: 02-833-3113

Data Protection Officer

Address:
8, T-one building, 10th, 11th, 12th floor (unit 3-5), Soi Sukhumvit 40, Sukhumvit Road, Prakanong District, Klongtoey Sub-district, Bangkok 10110
Telephone: 02-833-3000

Email:

Tencent (Thailand) Company Limited

Privacy Policy For individual, corporate customers, suppliers, and business partner