In the event that the Company collects your Personal Data through applications, websites, blogs, landing pages, social media, including chatbots or online services, the Company may collect your personal data by a variety of methods, including but not limited to receiving complaints. Request a change of contact address Inquiries, requests for any other action Offering opinions and contacting the Company for other reasons.

            The Company may integrate the Personal Data received directly from you through the above channels with your Personal Data obtained from other sources in case of necessity and with your consent, except in cases where the Company is exempted by law for the purpose of updating your Personal Data to be complete and up-to-date, as well as to improve the quality and efficiency of the Company's services.

            (4.2.1) External service providers such as legal service providers, telephone network operators, research agencies, debt collection service providers, payment service providers, call center service providers, marketing agencies that provide social media channel management services, etc.

            (4.2.2) Business partners, such as business partners for customer benefits, websites of business partners, payment agents, etc.

            (4.2.3) Government agencies such as the Revenue Department, Office of the Consumer Protection Commission, judicial authorities, social security offices, enforcement departments, administrative departments, etc.

            (4.2.4) Other channels other than those mentioned above, such as National Credit Information Company Limited, Notary Public, other commercial banks, environmental third parties and/or referrals, database providers, public sources (e.g. BOL Gazette, Department of Business Development), etc.

Chapter 5: Quality of Personal Data and Purposes for Collection, Use and/or Disclosure of Personal Data

            The Company may collect, use and/or disclose your Personal Data for various purposes as explained below in accordance with the Company's authority, mission and operational objectives as required by law. By virtue of the following legal bases:

            (5.1) It is necessary for the performance of a contract. for entering into a contract or performing a contract with you;

            (5.2) It is the performance of legal duties.

            (5.3) It is necessary for the legitimate interests of the Company or of third parties in balance with the interests and fundamental freedoms relating to the protection of your personal data.

            (5.4) For the prevention or suppression of danger to life. or the health of a person.

            (5.5) For the public interest, for carrying out a mission in the public interest or performing a legal duty.

            (5.6) It is necessary for the establishment of legal claims. Compliance with or exercise of legal claims or defense of legal claims and/or

            (5.7) Your consent

            The Company collects, uses and/or discloses your Personal Data including other information that you have provided for the following purposes:

Provide you with products/products and services. Authentication for receiving services including purchases, as well as submitting offers and sharing positive experiences with you.

To inform you of the development and improvement of products/products and services, not limited to changes to the terms and conditions. In this Policy

To inform you of new products/products and services, as well as new events and benefits that you will receive according to the Company's conditions.

To improve the presentation of products/products and services to provide you with the convenience of accessing the Company, whether through offline channels or online through the Company's website, mahajak.com, online platforms and other social media channels, as well as analyzing and processing personal data in response to your usage by any means, not limited to electronic channels, to be more efficient, including to offer products or services to you, the data subject.

Personnel management, recruitment and human resource development of the Company to be used for consideration in recruiting and selecting personnel, joining the Company, for personnel management, to develop personnel to have good potential, to develop the Company to grow together.

For verification and/or verification, i.e. identification and verification, verification of information and documents (e.g., verification of sanction list and watch list). Receipt and verification of application requests for products/services Consideration before using the product/service Debtability analysis Data analysis for product/service presentation Consideration of other requests

For communication such as liaison, notification of product requests / services, interviews. Customer and/or employer surveys, emergency contact

For marketing operations such as data analysis Providing advice and consultation on products/ The Company's services, offering products / services through various channels, informing news and benefits, organizing bonding activities and inviting participation in prize distribution activities. Delivery of prizes from activities, study of needs and implementation of promotions to meet the needs and/or other promotional activities.

For management/administration such as preparing customer databases, recording data into the system, managing documents. Implementation of data masking process, verification of customer data for protection Dealing with or reducing the risk of data espionage, from illegal acts or from any other acts. Monitoring, analyzing and investigating irregular transactions (e.g. fraudulent, fraudulent or risky cases) Corporate Risk Overview Audit Valerian Investigate the cause of outstanding debts, debt collection, investigation, confiscation, freezing and auction. Asset averaging operations to pay off debts Risk management of the Company Data analysis and preparation of reports for improvement or development of products/services or internal procedures of the Company Customer behavior analysis Demand study for new product design Assessment Market research and business model preparation Product evaluation Maintaining, managing, developing and maintaining the security of information technology operating systems, equipment, tools, communication systems, creating user accounts, applications, and authorizing the use of such applications. Applications, websites, and information technology security systems, supporting the Company's projects, both in particular and in cooperation with third parties.

TO PROVIDE FINANCIAL SUPPORT AND DONATIONS FOR SOCIAL ACTIVITIES, CSR PROVIDES FINANCIAL SUPPORT AND DONATIONS (SUCH AS EDUCATIONAL FUNDS, DONATIONS, OR OTHER PUBLIC BENEFIT SUPPORTS).

To protect the legitimate interests of the Company, including but not limited to the use of CCTV for surveillance purposes. Supervise and maintain security in the Company's area, audit and manage conflicts of interest. Complying with, exercising rights, raising defenses and/or other legal proceedings in which the Company's legal claims (including the use of legal evidence, the use of information supporting grievances, etc.) Negotiations, mediation, litigation, and settlement)

To prevent or suppress dangerous incidents, prevention or suppression of danger to life. or the health of a person.

For the implementation of demographic information, the Company may collect information. Sections which can be linked to your personal identifiability. To be used for analysis, research, or statistics for demographic information and/or reports or other statistical data.

To comply with relevant laws and/or policies of the Company, such as disclosure of personal data to government agencies or regulatory agencies for compliance with laws or orders of government agencies with authority. Submission of withholding tax information

Purpose for the use of sensitive personal information. Disability) and health information (e.g., disability identification card, disability category, etc.) This is for offering and providing appropriate services, including communicating with customers to inquire about the quality of customer management services. Fair customer service (Market Conduct) for receiving and verifying orders and/or hiring orders. Use of products/services, including identity verification for qualification consideration of participation in various projects of the Company, biometric data (e.g. fingerprints, facial portraits) for electronic Know Your Customer (e-KYC) to use the service through the application for authentication and verification. In the event that you print fingerprints instead of signatures for cross-authentication through the National Digital platform. National Digital ID (NDID)

            In the event that you are a business partner of the Company and/or a person related to a juristic person who is a business partner of the Company, the Company will collect, use and/or disclose your Personal Data. as follows with

For procurement operations such as qualification consideration, selection of business partners, identification and verification, verification of information (e.g. sanction list and watch list, audit of abandonment transactions, conflict of interest check, and conflict of interest check). Consideration for participation The Company's projects, procurement, issuance of purchase orders. Entering into a legal or contractual regularity. Create a system user account System Licensing Submission of a request for replacement of security guards as supporting information for entering into a contract Liability Guarantees Changes in collateral, management of applications to participate in long-term loans, listing of entrepreneurs and/or changes in requests, holding meeting visions and/or other operations to support the operations of business partners. Contract Renewal Consideration Penalty sentencing

            If there is a change in the purpose of collection, use and/or disclosure of personal data other than those specified in this policy, the Company will notify you and may request consent from the personal data subject in case of need. If there is a change in the purpose of collection, use and/or disclosure of personal data, the Company will record the amendment as evidence.

Chapter 6: Restrictions on the Use of Personal Information

(6.1) The Company will not disclose or display or make appear in other ways that personal data is inconsistent with the purposes for which it is collected, used and/or disclosed, except with your consent for cases where consent is required, or in accordance with the authority, mission, regulations and exceptions required by law to do so, or by court order.

(6.2) In the event that the Company has entered into an agreement with a third party for the processing of information regarding the collection of your personal data or the processing of which your personal data is required. The Company will provide such third parties with limited access to your Personal Data. It must also be preserved. Your personal data shall be kept confidential in accordance with the Company's personal data protection standards as well as bound by the applicable laws.

Chapter 7: Security of Your Personal Data

            For the sake of confidentiality and security of your personal data. The Company has taken the following measures:

            (7.1) Determine the right to access, use, disclosure. The processing of personal data includes the display or verification of the person accessing or using personal data in strict accordance with the Company's information policy.

            (7.2) To send and transfer personal data to foreign countries, including sending personal data to be stored on any other database. The data transfer service provider or data storage service is located abroad. The destination country where the data is retained must have protection measures. Personal data equivalent to or better than the measures under this policy

            (7.3) In the event of a violation of the Company's security measures resulting in a personal data breach or leakage of personal data to the public. The Company will promptly notify the data subject as well as inform the public of the remediation plan for damages from breaches or data leakage in the event of the Company's defects. The Company shall not be liable for any damages arising from the use or disclosure of personal data to third parties, including neglect or neglect to log out of the Company's database or social communication system by the actions of the data subject or other persons with the consent of the data subject.

            (7.4) The Company has reviewed and evaluated the effectiveness of the personal data protection system by the Internal Audit Unit.

Chapter 8: Disclosure of Personal Information

            The Company may disclose or transfer your Personal Data to any recipient of Personal Data for the purpose of collecting, using and/or disclosing relevant Personal Data in accordance with the relationship between you and the Company as specified. (Quality of Personal Data and Purposes of Collection, Use and/or Disclosure of Personal Data of the Company) The recipient of these personal data may be located in Thailand or outside Thailand. The Company recommends that you review the Personal Data Protection Policy of the recipients of these personal data. To acknowledge and understand that the network of data recipients. How does such personal data collect, use and/or disclose your personal data?

            The Company will not use or disclose your information before obtaining consent, except for information collected without consent in accordance with the Personal Data Protection Act B.E. 2562, Section 24 or Section 26.

            In the event that the Company discloses your Personal Data to an external person or juristic person, such person or juristic person must first inform the Company of the purpose of using or disclosing your Personal Data and it is essential that you give your consent first. and must not be in addition to the objectives provided to the Company.

            The Company may disclose your personal data to third parties who contribute to the data for analysis and development of products and/or services. Conducting research or preparing statistical data. Business management and marketing promotion, such as publicizing activities, products and/or services to you.

            In the event that the Company uses or discloses personal data that is exempt from consent, the Company will record the use or disclosure of such information in writing or electronic system for future investigation.

Chapter 9: Sending or Transferring Personal Data Abroad

            The Company may send or transfer your Personal Data overseas, such as to service providers who liaise with customers located abroad in transactions with the Company, acting as intermediaries for liaison. Collect information and coordinate with clients in legal proceedings. Royal Thai Consulate/Embassy Overseas at the customer's country of residence Overseas taxation authorities where some recipients of personal data may be located in destination countries or international organizations that have not been certified to have personal data protection standards equivalent to those set out in Thailand. Everything. In the event that the Company needs to send or transfer your Personal Data to the recipient of the information. Personal data in a country with personal data protection standards that have not been certified as equivalent. The Company will follow appropriate procedures and measures for the transfer of your Personal Data. or where such transfer is permitted to be done in accordance with the Protection Act. Personal data, such as entering into a contract with the data recipient to ensure that your personal data is protected. According to appropriate protection standards, it is equivalent to the standards set forth in Thailand.

Chapter 10.Use of Cookies

            In the event that you use the Company's website, application or other online service channels, the Company may monitor the behavior of searching for information and use the data linkage system. As part of the Company's security process, the Company may use a "cookie" system to verify the authenticity of the user's request. "Cookie" is information sent from the website, application or other online service channels to the computer or smartphone of the visitor while the visitor is visiting the Company's website. Such "cookies" may collect certain types of information which may be considered as your personal data. However, you have the right not to receive cookie connections. You can choose your cookie settings on your electronic device, but refusing to connect cookies may affect certain functions on the website. The Company's applications or other online service channels may be inaccurate or as effective as they should be.

            In addition, if you visit the Company's website, application or other online service channels using the search engine, such search engine may use cookies. In order to collect your information, the Company recommends that you Also check the privacy policy set by the search engine.

Chapter 11: Participation and Rights of Data Subject

            Subject to limitations under the Personal Data Protection Law. You have rights as a personal data subject. as follows

(11.1) Right to access and obtain a copy of personal data You have the right to access and/or request a copy of your personal data under the Company's responsibility. In order to ensure the safety of your personal data, the Company may ask you to confirm: Identity before providing the information you request.

            (11.2) Right to rectification of one's personal data You have the right to request the Company to correct your personal data under the Company's responsibility. If the information is incomplete, inaccurate, misleading, or not up to date.

            (11.3) Right to data portability You have the right to obtain personal data about you under the Company's responsibility in an organized format that can be read or used in electronic form, and has the right to request the Company to send or transfer such data to other data controllers under Conditions as required by law

            (11.4) Right to object You have the right to object to the collection, use and disclosure of certain aspects of your personal data.

            (11.5) Right to restrict the use of personal data You have the right to request the Company to suspend the use of your personal data in certain circumstances.

            (11.6) Right to withdraw consent You have the right to withdraw your consent to the Company for collection, use, disclosure and/or Transfer your personal data at any time, unless there is a restriction on your right to withdraw, consent as required by law or a contract that benefits you.

            (11.7) Right to erasure or destruction of personal data You have the right to request the Company to delete or destroy your personal data or to make it in an anonymable manner under conditions prescribed by law.

            (11.8) Right to complain You have the right to complain to the regulatory authority. If you deem that the Company or other persons acting on behalf of the Company's responsibility collect, use, disclose and/or transfer your Personal Data unlawfully or in accordance with the Personal Data Protection Law. However, the Company would like to ask you to contact the Company in order to give the Company an opportunity to be informed of the facts. Clarify and address your concerns. Before you contact the relevant authorities

            If you wish to exercise your rights as stated above. Please contact the Company as detailed in Clause 16.

            Everything. Your exercise of the rights set forth above may be limited by applicable laws and exceptions. In some cases, the Company may be required to legally reject your request, such as if the Company has a legal obligation or court order.

Chapter 12: Responsibilities of the Person in Charge of Data

            The Company has designated its personnel to continuously focus on and be responsible for the collection, collection and protection of personal data. This is in accordance with the measures set out in this policy.

Chapter 13.Period of Collection of Personal Data

            The Company will retain your Personal Data as necessary and relevant to the purpose for which it is performed. The Company will arrange an audit to be able to proceed with the deletion or destruction of personal data for a period of 10 years or longer. When the retention period has elapsed or is irrelevant or exceeds the necessity for the purpose of collecting personal data, or as you requested, or that you have withdrawn your consent in accordance with legal conditions. However, the Company may retain your Personal Data for a longer period of time in order to comply with applicable laws or regulations, as well as to comply with the Company's internal policies and as otherwise necessary.

Chapter 14: Changes to the Personal Data Protection Policy

            The Company may change the purpose of collecting, using and/or disclosing your Personal Data or update or amend this Policy from time to time. The Company will publish the revised policy in www.mahajak.com and/or in the channels specified (in accordance with Clause 4) and may seek your consent in case consent is required, unless otherwise required by law. In this regard, the Company would like to ask you to check this policy periodically, including before using the service, to check for revisions or updates to this policy.

Chapter 15: Links to Other Websites

            In the event that you use the Company's websites, applications or other online service channels, those websites, applications or services may have links to social networks. The Company cannot endorse any statements or endorsements and cannot take any responsibility for the collection, use and/or disclosure of your personal data by social networks. such platforms, websites or services.

In this regard, the Company recommends that you check the privacy policy of social networks. Platforms, websites or services linked to the Company's website or online services (if any) to acknowledge and understand that social networks Such platforms, websites or services are collected, used and/or disclosed. How do you collect your personal data?

16. Contact Information

            In case you have any questions, suggestions, or comments about this Policy, or if you wish to submit an application to exercise any of the rights set forth in this Policy. You can contact the Company and/or the Company's Data Protection Officer at

            - Mahajak Development Company Limited (Nana) 46 Soi Sukhumvit 3, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

            - Mahajak Development Company Limited (Ramkhamhaeng), 43 Ramkhamhaeng Road, Ratpattana, Saphan Sung, Bangkok 10240

            - Customer Service Center Tel. 02-2560020-6 ext. 319, 391

            - Data Protection Officer of the Company

                Information Technology Officer, Legal Officer

            Address : Mahajak Development Company Limited, Mahajak Building (Nana), 46 Soi Sukhumvit 3, Sukhumvit Road,     

                    Khlong Toei Nuea, Watthana, Bangkok 10110

            E-mail : pdpa@mahajak.com

            Office Hours: Mon-Fri 8.30 a.m. – 6.00 p.m.