Privacy Policy
Last updated: 2025-10-17
Welcome to our mobile application Royal Paiza Club (“App”). We respect your privacy and are committed to protecting the personal data of all users. This Privacy Policy explains how we collect, use, share, store, and protect your personal data, as well as your legal rights under the Personal Data Protection Act (Thailand) (PDPA) and other applicable privacy laws.
By using our App, you agree to the practices described in this Privacy Policy. Please review this page regularly to stay informed about any updates or revisions. If you have any questions, you may contact us using the details provided below.
1. Definitions
1.1. “Personal data” means any information relating to an identified or identifiable natural person.
1.2. “Processing” means any operation performed on personal data, such as collection, storage, use, sharing, or deletion.
1.3. “Controller” means the entity that determines the purposes and means of processing personal data (see Section 10).
1.4. “Processor” means a third party that processes personal data on behalf of the controller.
1.5. “SDKs” are software development kits from third-party providers integrated into our App.
2. Data We Collect
We may collect the following categories of data:
2.1 Non-personally identifiable information
2.1.1 Usage data, in-app activity logs, crash reports, and analytics information.
2.1.2 Cookies or similar tracking technologies to improve app functionality and user experience.
2.2 Personally identifiable information (PII)
2.2.1 Account registration details (name, email address, phone number)
2.2.2 Network identifiers (IP address, device ID, advertising ID)
2.2.3 Communication data, personal content voluntarily submitted by users
2.2.4 Location data (if enabled by user)
We collect this data to provide accurate, personalized, and improved services to you.
3 How We Collect and Use Your Data
3.1 Collection Methods
We collect your data through:
3.1.1 Information you provide when registering an account or using our services
3.1.2 Data automatically collected while you use the App
3.1.3 Cookies and web beacons (see below)
3.2 Cookies and Mobile Identifiers
We and our authorized third-party partners may use cookies, device identifiers, and similar technologies to:
3.2.1 Remember your login or preferences
3.2.2 Analyze how you use our App
3.2.3 Improve advertising relevance and performance
You can disable or manage cookies via your browser or device settings.
3.3 Purpose of Data Use and Legal Basis
We process your personal data on the following legal bases under the Personal Data Protection Act (Thailand) and other applicable laws:
3.3.1 Consent: when you give your consent (e.g. marketing analytics)
3.3.2 Contract: when processing is necessary to provide the services you requested
3.3.3 Legal obligations: when required by applicable laws
3.3.4 Legitimate interests: when processing is necessary for our legitimate business interests and does not override your rights
We use your data to:
3.3.5 Create and manage your account
3.3.6 Provide our services and products
3.3.7 Send service-related notifications or updates
3.3.8 Maintain security and prevent fraud
3.3.9 Improve and personalize our services continuously
4 SDK Integration, Partners, and Data Sharing
To provide our services, this App integrates the following third-party software development kits (SDKs) (“partners” or “data processors”):
4.1 Firebase – analytics, crash reporting (Privacy Policy: https://firebase.google.com/support/privacy)
4.2 Google Play Billing (In-App Purchases) – process in-app payments (Privacy Policy: https://policies.google.com/privacy)
4.3 Google Play In-App Review API – collect in-app user feedback (Privacy Policy: https://policies.google.com/privacy)
4.4 AppsFlyer – marketing attribution and analytics (Privacy Policy: https://www.appsflyer.com/legal/privacy-policy/)
4.5 LINE – optional social sign-in and user engagement features (Privacy Policy: https://line.me/en/terms/policy/)
These partners may collect limited data (e.g. device identifiers, usage statistics) strictly for their stated purposes. They act as our data processors under contractual confidentiality and security obligations.
We do not sell personal data to any third party. We may share limited personal data only with service providers who act as our data processors under contractual confidentiality and security obligations.
The only external link included in our App is the link to this Privacy Policy.
5 Data Security
We implement appropriate technical and organizational measures to safeguard your personal data against loss, unauthorized access, use, alteration, or disclosure, including:
5.1 Strict access controls and internal data security procedures
5.2 Encryption technologies (TLS/SSL) and data anonymization where appropriate
5.3 Secure data storage and retention systems
5.4 Regular security monitoring and staff training
6 Data Retention and Deletion
We retain your personal data only as long as necessary to fulfill the purposes described in this Privacy Policy, and to comply with legal, accounting, or regulatory requirements. When your data is no longer needed, we will securely delete or anonymize it.
You may also request deletion of your personal data (see Section 8).
7 International Data Transfers
Your personal data may be transferred to and processed in countries outside of Thailand where our servers or third-party service providers are located. These countries may have different data protection laws.
We will take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and the Personal Data Protection Act (Thailand) (PDPA), including by using contractual data protection agreements with such third parties.
8 Your Rights and Choices
Under the Personal Data Protection Act (Thailand) and other applicable laws, you have the following rights:
8.1 Right to Access – request a copy of your personal data we hold
8.2 Right to Rectification – request correction of inaccurate or incomplete data
8.3 Right to Deletion (Right to be Forgotten) – request deletion or anonymization of your personal data
8.4 Right to Know – request to know if your personal data has been sold or shared
8.5 Right to Opt-Out – request that we stop selling or sharing your personal data
8.6 Right to Withdraw Consent – withdraw your consent at any time (if processing is based on consent)
To exercise these rights, please contact our Data Controller or DPO using the details below. We will respond within the timeframe required by law.
9 Children’s Privacy
Our App is not directed to children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13 without parental consent, we will promptly delete such data.
If you believe that a child has provided personal data to us, please contact us immediately using the contact details below.
10 Data Controller and Data Protection Officer (DPO)
For the purposes of applicable data protection laws, including the Personal Data Protection Act (Thailand) (PDPA), the entity responsible for determining the purposes and means of processing your personal data (the “Data Controller”) is:
Data Controller
Phoptorn Sengpadang
Contact Information:
Address: Samet, Mueang Chon, Chon Buri, Thailand, 20000
Email: contact@coralpeak.co
Phone: (+66) 81-584-4879
The Data Controller has appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Policy and data protection obligations:
Data Protection Officer (DPO)
Contact Information:
Phoptorn Sengpadang
Email: contact@coralpeak.co
Phone: (+66) 81-584-4879
If you have any questions or concerns about how your personal data is collected, used, or shared, or if you wish to exercise any of your privacy rights, you may contact our Data Controller or DPO using the contact information provided above.
11 Regional Privacy Laws (CCPA and VCDPA)
Our App is primarily intended for users located in Thailand and is governed by the Personal Data Protection Act (Thailand) (PDPA).
We do not specifically target users in the United States. However, to maintain transparency and accommodate any users who may reside in jurisdictions with additional privacy protections, we acknowledge the following privacy laws:
11.1 California Consumer Privacy Act (CCPA): grants California residents certain rights, including the right to know, access, delete, and opt out of the sale of their personal data.
11.2 Virginia Consumer Data Protection Act (VCDPA): grants Virginia residents similar rights regarding access, correction, deletion, and opting out of targeted advertising or data sales.
If you are a resident of these jurisdictions and wish to exercise your privacy rights under these laws, you may contact us as described in Section 14 (Contact Us). We will review and respond to such requests in accordance with applicable legal requirements.
12 Privacy Policies of Linked Third-Party Services
Our App may link to third-party services or integrate third-party SDKs. These third parties process data under their own privacy policies. We encourage you to review their privacy policies (see links in Section 4) before using their services.
13 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes, and the latest version will always be available within the App and via the external link provided.
14 Contact Us
If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: contact@coralpeak.co