Effective date: June 29, 2026 ThaiETF.Asia ("we") strictly protects all visitors' personal data and complies with Singapore's Personal Data Protection Act (PDPA), Thailand's ETDA regulations, and the ASEAN cross-border data security framework. This Privacy Policy explains the full rules for data collection, use, storage, sharing, and protection, as well as all legal rights you have. By browsing ETF, crude oil, and tech articles, sending email, or using this website's services, you confirm that you have read and unconditionally accepted all terms below. 1. Types of data we collect 1.1 Personal information you submit voluntarily We only collect data you submit voluntarily and that does not require mandatory disclosure: Email inquiries, article submissions, business cooperation: name, email, company entity, financial/energy role, contact number Website partnership forms: cooperation needs for fund and commodity institutions Member registration (if applicable): login email, account password, display nickname 1.2 Automatically collected anonymous logs (cookies / server logs) When you browse Thailand ETF or crude oil pages, our servers automatically record de-identified device data: IP address, browser version, operating system, visited URL, session duration, click path, and device unique ID. These data are used only to improve page loading speed, calculate traffic metrics, and block web crawlers that steal financial data. They cannot be traced back to any single individual. 1.3 Sensitive data we do not proactively collect Without a legitimate business need, we will never ask you to provide ID documents, passports, bank cards, trading accounts, proof of assets, or biometric data. We only receive such materials when you voluntarily upload corporate cooperation documents. 2. Legal purposes of data use Responding to Thailand ETF, crude oil, and AI tech inquiries, submissions, and business emails Improving real-time fund quote pages and weekly ASEAN investment newsletters Generating anonymized Southeast Asian financial statistics reports (fully stripped of personal identifiers and not traceable) Identifying crawlers, abnormal access, and cyberattacks to keep the site stable Disclosing data in accordance with law when formal legal documents are issued by Singapore or Thai financial regulators Sending you subscribed weekly market briefings (you may unsubscribe at any time) 3. Data storage and retention Storage location: compliant Singapore cloud servers, fully aligned with PDPA and Thailand ETDA cross-border standards Retention rules: Email correspondence archive: kept for 3 years, then encrypted for long-term archiving Website access logs: kept for 90 days only, then deleted automatically Business cooperation forms: kept for 2 years after contract termination; early deletion requests may be accepted Anonymization: all statistical datasets are stripped of personal identifiers to prevent user identification. 4. Data sharing rules We make a binding commitment: without your written consent, we will not sell, rent, or share your identifiable personal information with third parties. Disclosure is allowed only in the following lawful cases: You provide written authorization allowing release of your personal data Singapore or Thai judicial/financial regulators issue a formal legal subpoena The website is involved in a merger or equity transfer; the successor entity must continue to comply with this Privacy Policy De-identified logs are provided to cybersecurity service providers for platform protection An emergency arises that requires protection of public or personal life and property Third-party ads and analytics plugins receive only anonymous traffic data and cannot access your name or email address. 5. Your statutory data rights Please submit requests via privacy@thaietf.asia. We will complete identity verification and process all requests within 15 business days: Right of access: request a copy of all personal data stored under your name Right to correction: correct outdated or inaccurate contact details Right to deletion: delete all emails and cooperation-form archives related to you Right to withdraw consent: unsubscribe from investment newsletters and disable tracking cookies Right to account deletion: permanently delete your member account and related data Right to complaint: raise concerns about our data processing practices and undergo compliance review 6. Cookies and tracking technology Our site uses cookies to speed up ETF and crude oil quote loading and save your browsing preferences: Essential cookies: used for real-time fund data display and normal site operation; cannot be turned off Statistics cookies: used for traffic measurement and can be fully removed through browser settings Turning off cookies only affects user experience and does not limit your freedom to read research articles 7. Data security safeguards Site-wide HTTPS end-to-end encryption to prevent data interception during transmission All user data is encrypted at rest; backend access is role-based, and only compliant staff may access it Regular server security audits and vulnerability scans, with a formal data breach response process All employees sign confidentiality agreements and are prohibited from exporting or distributing data without authorization The internet itself carries security risks, so 100% absolute data protection cannot be guaranteed. Do not upload trading accounts, ID documents, or confidential corporate files. 8. Protection of minors This site is intended for adult investors and energy/finance professionals. We do not intentionally collect data from users under 18. If we accidentally collect data from a minor, we will immediately and completely delete all records. 9. Privacy policy updates As our platform changes, we may revise this policy to comply with Singapore PDPA, Thailand ETDA, and ASEAN data laws. The revised version will be published immediately at the bottom of the website. Material changes will be notified by email to users who have previously contacted us. Continued use of this site means you accept the updated policy. 10. Dedicated privacy support contact Privacy compliance email: privacy@thaietf.asia Singapore registered operating entity: ThaiETF Media Pte. Ltd.