True Corporation Public Company Limited (the "Company") and any juristic persons that the Company holding the majority of shares, directly or indirectly, or the Company had controlling or administrative power whether by having majority vote in such juristic persons, by contracts or by any other means (hereinafter referred to as the "Company Group") had awareness of the importance of personal information protection. This policy described the measures that the Company and/or the Company Group treated your personal information, for example, collecting, maintaining, using and disclosing your rights. We, therefore, prepared Privacy Policy, covering the methods of the Company and/or Company Group for collecting, using, disclosing and storing your data. Please take a moment to study the guidelines of our Privacy Policy. If you have any questions, please feel free to contact us.

Respect for privacy of the Customer

• 1. The Company and/or the Company Group respected for and paid attention to your rights, personal information and personal information protection and we were aware that you, as the customer of the Company and/or the Company Group, desired the safety and security of service.
• 2. Your personal information, such as your name, age, address, telephone number, number of Identity Card, financial data which could be used to identify your identity and were the valid, correct, updated and qualified personal information, would be used to be in accordance with the business objectives of the Company and/or the Company Group. We would strictly proceed the measures for safety and security including preventing the personal information from using without your prior consent.

Objectives of collecting personal information

• 1. The Company and/or the Company Group collects your personal information to proceed the work pursuant to the objectives of business performance of the Company and/or the Company Group and to improve quality of service to be more efficient via electronic means. Usually, the data collected by the Company and/or the Company Group were used by the Company and/or the Company Group to answer your questions, further proceed pursuant to your request or allow you to access the data with special characteristics. Sometimes, the Company and/or the Company Group may give your e-mail address to famous organizations which the Company and/or the Company Group considered that their products or services might be interesting to you. In this case, you are entitled to create the restriction of access to your personal information. If you had registered to online business with any of the company, your personal information might be used by such company to propose what might meet your business requirements. The technology called “Cookie” might be used to propose the data designed to meet your requirements. Cookie was sub-component of the data that the website sent to your browser. After that, Cookie would be kept in the hard disk of your computer which would make the Company and/or the Company Group know when you visited the website of the Company and/or the Company Group next time. Cookie would help the Company and/or the Company Group properly managed in relation to your interest. However, you could configure your browser to notify you when you received Cookie. The using of Cookie would not be related to your personal information while you were using the website of the Company and/or the Company Group. In some occasions, the Company and/or the Company Group might be launched the online survey for better understanding of the requirement and the data of visitors of the website of the Company and/or the Company Group. In the mentioned survey, the Company and/or the Company Group would try to inform you how your information collected via internet would be used. The participation in the survey would be voluntary. Therefore, you could choose whether you would disclose your personal information or not by notifying the Company and/or the Company Group.
• 2. In case that the Company and/or the Company Group collected, kept, used and disclosed your personal information for the purposes other than the specified purposes, you are entitled to choose whether you agree or not agree that the Company and/or the Company Group would collect, keep, use or disclose such personal information by notifying the Company and/or the Company Group.
• 3. For the objectives of analysis and following up of usage of services and for the objective of retrospective examination due to the problems on usage, the Company and/or the Company Group would automatically collect the data of your Log Files by collecting at least the following data:
• 3.1 IP Address
• 3.2 Type of Browser
• Besides, the Company and/or the Company Group used the external corporation to collect the data of Log Files of the websites as required by law in the event that the Company and/or the Company Group hired such corporation to provide the website service.
• 4. The Company and/or the Company Group would not perform any action different from the specified objectives of data collection, except for
• 4.1 the new objectives had been notified to the User and the consent from the User had be obtained; and
• 4.2 the cases as required by law

Collection of personal information

Personal Information denoted the information used to identify or contact a person. The Company and/or the Company Group might request you to specify your personal information whenever you contact the Company and/or the Company Group. The Company and/or the Company Group might mutually use this personal information in compliance with this Privacy Policy. Besides, the mentioned personal information might be used together with other information for purposes of providing and improving the products, services, contents and advertisements of the Company and/or the Company Group. You might not specify your personal information that the Company and/or the Company Group requested for but if you chose not to specify the information in many cases the Company and/or the Company Group would be unable to provide you with products or services or to answer your questions, including completely responding to your requirements. These were examples of types of personal information that the Company and/or the Company Group collected and the methods of usage of the mentioned information:

• 1. Regarding the collection and keeping of your quality personal information, the Company and/or the Company Group would apply the legally and equitably methods to collect and keep the information, including collecting and keeping personal information in restricted manner on a necessary basis for electronic transactions or services by any electronic means under the objectives of the Company and/or the Company Group;
• 2. The Company and/or the Company Group would request for your consent before collecting information. However, when the Company and/or the Company Group had received any of your information, it shall be deemed the Company and/or the Company Group obtained your consent, except:
• 2.1 the cases required by law;
• 2.2 for your benefit and the consent could not be obtained at that time;
• 2.3 for benefit of your life, health or safety or those of other users;
• 2.4 for benefit of investigation of the Inquiry Official or the adjudication of the Court; and
• 2.5 for benefit of study, research or statistics preparation.
• 3. The Company and/or the Company Group would not collect your personal information in connection with hereditary characteristics, sexual behavior or information that might be harmful, defamed or causing the feelings of discrimination or inequality to any person, except:
• 3.1 receiving your consent in writing;
• 3.2 the cases required by law;
• 3.3 for your benefit and the consent could not be obtained at that time;
• 3.4 for benefit of your life, health or safety; and
• 3.5 for benefit of investigation of the Inquiry Official in accordance with Criminal Procedure Code or the adjudication of the Court;
• 3.6 for benefit of study, research or statistics preparation and the personal information therein was kept in confidentiality.
• 4. The Company and/or the Company Group might collect your personal information together with your personal information received from other sources in case of necessity and with your consent only for benefit of updating your personal information and improving the quality and efficiency of services of the Company and/or the Company Group.

Usage of personal information

• 1. The Company and/or the Company Group would use or disclose your personal information after receiving your consent and upon the objectives of the Company and/or the Company Group only.
• 2. The Company and/or the Company Group would supervise the workers of the Company and/or the Company Group not to disclose, show or present your personal information in any manner other than under the objectives of the Company and/or the Company Group, except:
• 2.1 the cases required by law;
• 2.2 receiving your consent;
• 2.3 for benefit of your life, health or safety;
• 2.4 for benefit of investigation of the Inquiry Official in accordance with Criminal Procedure Code or the adjudication of the Court; and
• 2.5 for benefit of study, research or statistics preparation
• 3. In some cases, the Company and/or the Company Group might allow other persons or departments to access your personal information as necessary and to be in accordance with the objectives and authority of the Company and/or the Company Group. However, the Company and/or the Company Group must obtain your prior consent thereon.

Security

The Company and/or the Company Group were aware of the importance of security of your personal information, therefore, the Company and/or the Company Group had specified proper security measures for your personal information to be in accordance with the confidentiality of personal information to prevent the loss, access, destruction, usage, modification, revision or disclosure of personal information without right or in illegal means by following the policy and guidelines of information technology security of the Company and/or the Company Group.

Accuracy and storage of personal information

The Company and/or the Company Group would keep your personal information as long as necessary to achieve the objectives of the Company and/or the Company Group as specified in this Privacy Policy, except such personal information needed longer storage as required or allowed by law.

Access to personal information

You were able to verify the contact information and your setting for correctness and updated information by logging in your account. In regard to other personal information that the Company and/or the Company Group had stored, we would manage to allow you to access the mentioned information no matter for any purpose, including requesting us to revise the mentioned information in case of incorrectness or to delete the mentioned information in case that the Company and/or the Company Group needed not to keep such information any more in accordance with law or their legal business objectives. We might refuse to perform the request if such request was not important, or was a disturbance of privacy of other persons, or could not be performed in any circumstance, or such access was not prescribed by local law. You might request to access, revise or delete the mentioned information via form of request on privacy issues.

Children and Youth

The Company and/or the Company Group were aware of the importance of the preventive measures of protection of privacy and safety of children and youth who used the products or services of the Company and/or the Company Group. Consequently, the Company and/or the Company Group would not collect, use or disclose the personal information of persons of age under 13 years old or equivalent in the jurisdiction of relevant courts without consent of parent. If the Company and/or the Company Group found that there was the collection of personal information of persons of age under 13 years old or equivalent in the jurisdiction of relevant courts without consent of parent, the Company and/or the Company Group would delete the mentioned information as soon as possible.

Personal information access and participation of owners of personal information

You were able to verify that your personal information was correct, complete and updated by logging in your account in the website or application of the Company and/or the Company Group. With respect to other personal information that the Company and/or the Company Group had kept, you could ask for the mentioned information via Call Center 1331 no matter for any purposes, including requesting the Company and/or the Company Group to revise the mentioned information in case of incorrectness or to delete the mentioned information in case that the Company and/or the Company Group needed not to keep such information any more in accordance with law or their legal business objectives. The Company and/or the Company Group might refuse to perform the request if such request was not important, or was a disturbance of privacy of other persons, or could not be performed in any circumstance.

• 1. In case that you desired to know your own personal information, you could submit a request pursuant to the criteria and methods specified by the Company and/or the Company Group. After receiving the request, the Company and/or the Company Group would notify you of the existence or details of the mentioned personal information in a timely manner.
• 2. If you found that your personal information was incorrect, you could notify the Company and/or the Company Group to revise, modify or delete the mentioned personal information. In this regard, the Company and/or the Company Group would record your objection of storage, correctness or any action in relation to your personal information as evidence.
• 3. You were entitled to examine the existence, personal information characteristics, objectives of usage of such information and the office of the Company and/or the Company Group. Besides, you were entitled to the following:
• 3.1 to request a copy or a copy certified true copy of your personal information;
• 3.2 to revise or modify your personal information for correctness:
• 3.3 to suspend usage or disclosure of your personal information;
• 3.4 to request for deletion or destruction of your personal information; and
• 3.5 to request for disclosure of the source of your personal information in case of no consent obtained for collection or storage. However, the Company and/or the Company Group might reject your right in the case required by law or in case that your personal information could not identify your name or any characteristics that could identify yourself.

Disclosure of personal information to the third party

Sometimes, the Company and/or the Company Group might disclose some of your personal information to our strategic partners who worked with the Company and/or the Company Group in providing products and services or help the Company and/or the Company Group to distribute the products to users. For example, when you bought and activated your mobile phone of the Company and/or the Company Group, you allowed the Company and/or the Company Group to exchange your information provided during the activation of the mobile phone for benefit of providing services to you. If you were allowed to use the service, your account would be under the Privacy Policy of the Company and/or the Company Group. The Company and/or the Company Group would disclose your personal information for purpose of providing or improve the product, service or advertisement of the Company and/or the Company Group only and would not disclose the mentioned information to the third party for purpose of marketing. The Company and/or the Company Group would disclose the personal information to companies who provided services such as data processing, extension of term of credit line, processing of purchase order of users, distribution of products to users, management and improvement of users’ information, customer relation services, assessment of your interest in products or services of the Company and/or the Company Group and research and development or satisfaction survey. The mentioned companies had obligation to protect your personal information.

The Company and/or the Company Group might need to disclose your personal information as required by law, the legal proceedings, the litigation and/or the request of the private or public agencies, inside or outside the country. Besides, the Company and/or the Company Group might disclose your information if the Company and/or the Company Group deemed necessary or appropriate for purposes of national security, law enforcement or other important aspects to the public.

The Company and/or the Company Group might need to disclose your personal information if the Company and/or the Company Group considered the information disclosure was reasonably necessary for enforcement of terms and conditions of the Company and/or the Company Group or for protection of the work performance or users of the Company and/or the Company Group. Besides, in case of organization restructuring, merger or sale of business, the Company and/or the Company Group might transfer any and all personal information collected by the Company and/or the Company Group to the related companies.

Service Providers

The Company and/or the Company Group would disclose the personal information to companies who provided services such as data processing, extension of term of credit line, processing of purchase order of users, distribution of products to users, management and improvement of users’ information, customer relation services, assessment of your interest in our products or services and customer research and development or satisfaction survey. The mentioned companies had obligation to protect your personal information and might have establishment in any places the Company and/or the Company Group located. The Company and/or the Company Group might need to disclose your personal information as required by law, the legal proceedings, the litigation and/or the request of the private or public agencies, inside or outside the country. Besides, we might disclose your information if the Company and/or the Company Group deemed necessary or appropriate for purposes of national security, law enforcement or other important aspects to the public. We might need to disclose your personal information if the Company and/or the Company Group considered the information disclosure was reasonably necessary for our enforcement of terms and conditions or for protection of the work performance or our users. Besides, in case of organization restructuring, merger or sale of business, we might transfer any and all personal information collected by the Company and/or the Company Group to the related companies.

Change of Privacy Policy

The Company and/or the Company Group might improve the Privacy Policy from times to times to be in accordance the change of services, work performance of the Company and/or the Company Group and your suggestion and comment. The Company and/or the Company Group would notify the change explicitly before changing or might directly deliver the notification to you.

You have already read and understood all above-mentioned terms and conditions and agreed to comply with the mentioned terms and conditions.