MUANGTHAI PAY LATER COMPANY LIMITED (“Company”, “we”) is the data controller for the Muangthai Pay app, website, and related services. This policy explains what we collect, why we use it, recipients, retention, and your rights.

We may collect name, phone, email, address, date of birth, identification, income, employment, disbursement account, application and payment history, device data, IP address, usage logs, and information provided to support.

We limit collection to what is needed for identity checks, affordability assessment, fraud prevention, contracting, service delivery, and legal obligations.

Camera: used when you choose to photograph identity or application documents. Photos: used when you choose an existing document. We do not activate the camera or read your entire library automatically and access only items you select or permit. Permissions can be denied or withdrawn in device settings.

Contacts: used when you select required references during an application. We disclose the purpose before permission and do not use contacts for advertising or retain the full address book unnecessarily. GPS: used with permission to assist address entry, validate application consistency, and reduce fraud. We do not continuously track location when unnecessary.

Advertising IDs or device identifiers may be used for campaign attribution, duplicate/fraud prevention, and performance analytics. Consent is requested where law or the operating system requires it. We do not sell personal data or use sensitive data for personalized advertising.

We process data for pre-contract and contract performance, legal obligations, fraud and harm prevention, legitimate interests, and consent where required. Refusing required information may prevent assessment or service delivery.

Data may be shared with contractually bound processors, identity, infrastructure, payment and analytics providers, legal advisers, auditors, lawful debt servicing providers, and competent authorities. Sharing is limited to purpose, with appropriate safeguards for international transfers.

We use encryption in transit and where appropriate at rest, role-based access, access logging, vulnerability testing, backups, and incident response. Staff and vendors are bound by confidentiality. No system is perfectly secure, but we continuously assess safeguards and will notify affected parties as legally required.

We retain data through the relationship and for periods required by legal, accounting, tax, fraud prevention, or dispute obligations, then delete, destroy, or anonymize it. Request account deletion at /del.html. Deletion may exclude records legally required or needed for outstanding claims.

Subject to applicable law, you may request access, copy, correction, portability, deletion, restriction or objection, withdraw consent, and complain to Thailand’s Personal Data Protection Committee. Withdrawal does not affect prior lawful processing. Contact us with sufficient identity verification.

The credit service is for persons aged 18 or older. We may update this policy and will communicate material changes through the app or website. Contact privacy support at developer@muangthaipalaterlat.com, +66 94 269 1241 daily 9:00–18:30, or at the company address above.