Personal Data Protection

1. Data Controller

BattleOne Co., Ltd. acts as the Data Controller under the Personal Data Protection Act B.E. 2562 (PDPA). Contact us at: Email: contact@battleone.com | Phone: 02-123-4567 | Bangkok, Thailand

2. Data We Collect

• Account data such as name, email address, and phone number
• Usage data such as watch history, device information, and access logs
• Payment data is processed by trusted payment providers; we do not store your credit/debit card information
• Technical data such as IP address, device type, and operating system

3. How We Use Your Data

• Provide services, verify identity, and manage user accounts
• Improve viewing experience and recommend relevant content
• Send important service updates and notifications
• Comply with applicable laws and regulations

4. Legal Basis for Processing

• Consent: For marketing communications and behavioral analytics
• Contract: For service delivery under agreed terms
• Legitimate Interest: For improving security and service quality
• Legal Obligation: For compliance with competent authority orders

5. Data Disclosure

• Shared only with service providers necessary for delivery (e.g., payment providers, cloud services)
• Disclosed when required by law or by order of competent authorities
• We do not sell or rent personal data to third parties

6. Data Retention

• User account data: Retained for the duration the account remains active
• After account deletion: Personal data deleted within 30 days, except data required by law
• Financial data (receipts/payment history): Retained for 5 years under Thai accounting and tax laws
• Access logs: Retained for 90 days under the Computer Crime Act

7. Cookies and Tracking

• We use cookies to remember your settings and improve usability
• We use analytics tools to measure performance and improve our services
• You can configure your browser to manage or disable cookies

8. Your Rights Under PDPA

• Right of Access: You may request access to the personal data we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data
• Right to Object: You may object to certain types of processing
• Right to Data Portability: You may request your data in a machine-readable format
• Right to Withdraw Consent: You may withdraw consent at any time without affecting rights previously granted

9. Data Security

• Data encrypted in transit using TLS/HTTPS
• Access restricted to authorized personnel only
• Regular security audits and system monitoring