DWVIP’s Privacy Policy
Yuanta Securities (Thailand) Company Limited

Derivatives Department of Yuanta Securities (Thailand) Company Limited (the “Company”, “We”, “Us”, “Our” or “Team DW19”) recognize the importance of your privacy. We have always placed importance on the security and protection of your personal data (as "you" or "your" or "Member”) through using our products and services. 

This privacy notice (the "Privacy Policy") applies to the Personal Data (defined below in section 1) of (1) our individual customers/members including prospective customers (potential customers), current customers, and former customers/ members, and (2) Another person who contacts us through any channel or we are a service provider; and (3) Visitors and users of our website, applications, and social networking sites on mobile devices.

This Privacy Policy describes how we collect, use, disclose, and cross-border transfer (together as “Process”) your Personal Data including erasure or destroy your Personal Data, and your rights in accordance with the Thailand’s Personal Data Protection Act B.E. 2562 (“PDPA”). This Privacy Policy applies to our social networking sites (including but not limited to Facebook and Line@), mobile applications, call centers, events and exhibitions (such as seminar, campaign and booth event), online communication channels, other locations and any means where we collect, use disclose, or cross-border transfer your Personal Data.

1.Personal Data we collect

"Personal Data" means any identified or identifiable information about you as listed below. We may collect your Personal Data directly from you e.g. through our staffs, call center or other service channels or indirectly from other sources e.g. public sources, social media where you have set as public, outsourcing service providers, advisors, business partners, or any person having a contractual relationship with us. The types of Personal Data we collect depend on the relationship between the Clients or juristic persons and us, as well as services or products the Clients require from us.

“Sensitive Data" means Personal Data classified by law as sensitive data.

   1.1 Identity Data: such as full name, gender, age, occupation, job title, business type, date of birth, information on government-issued cards (e.g., national identification number, passport number, tax identification number, driver's license details or similar identifiers), signature, education, household income, salary and personal income, investment records, detail of investment accounts and any other personal details you provided to us;

   1.2 Contact details: such as postal address, delivery details, billing address, telephone number, fax number, email address, ID from social networking sites (e.g. LINE, Facebook, Google, Twitter), your contact person's contact details (e.g. telephone number, contact data on any correspondence), and any other contact details you provided to us;

   1.3 Membership details: such as account details, member card number, reward points, member ID (e.g. DWVIP membership ID, member ID of DWVIP website, customer ID of Yuanta Securities (Thailand) and of other securities companies), member type, customer type, member join/registration date and month, membership period, account settlement details, service and product applications (e.g. membership application), and any other membership details;

   1.4 Transaction details: such as details of transaction records about securities investment, payment to and from you, payment date and/or time, payment amount, details about refund, refund amount, points deposit, redeem convert and transfer, time and from which companies of transaction, transaction/order number, complaints and claims, transaction status, transaction type and any other details of products and services you have used;

   1.5 Technical details: such as login log, access time and location, time spent on the page, login data, search history, browsing details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on devices you use to access the platform, and any other technical details from the use on the platforms and systems;

   1.6 Profile details: such as your username and password, transactions and historical trading recorders, your interests, preferences, feedback and survey responses, satisfaction survey, social media engagement, participation details, your use of points, attendance to Team DW19’s event and any other profile details;

   1.7 Usage details: such as information on how you browse or use our websites, platform, application products and services and timestamp of last click and Q&A record, and any other usage details;

In case you deny giving the necessary information to us for providing our services, we may not provide you our services in part or in full. In case you give us the Personal Data of other person, you are responsible for notifying such person to acknowledge our Privacy Policy or our services’ Terms & Conditions, including having their consent prior disclose other person’s Personal Data to us in some case.

We do not knowingly collect information from customers under the age of 20 without their parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardian's consent. In the event we learn that we have unintentionally collected personal information from anyone under the age of 20 without parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardians, we will delete it immediately or process only if we can rely on other legal bases apart from consent.

2. The Purpose of collection, use or disclosure of your Personal Data

   2.1 Purpose for which consent is required

• Marketing Communications: we collect, use and disclose your personal data for Marketing Communications purpose, personalized promotions & newsletters, promotional materials about the products/services of the company, offers of special privileges, and invitations to our exclusive events which we cannot rely on other legal bases.
• Disclose information for Product/ Service Offering: we disclose your personal data and any other data to our affiliates and/or business partner in foreign countries for product/service offering purposes, to develop better products and services based on data analytics, research, and statistical data to offering or providing products or services and promotions suitable to you which we cannot rely on other legal bases.

   2.2 Purpose for which we may rely on other legal grounds for processing your Personal Data

       We may collect, use, disclose, and/or cross-border transfer your Personal Data by relying on the following legal grounds: (1) a contractual basis, for our initiation or fulfillment of a contract with you; (2) a legal obligation; (3) the legitimate interest of ourselves and third parties, to be balanced with your own interest and fundamental rights and freedoms in relation to the protection of your Personal Data; (4) vital interest, for preventing or suppressing a danger to a person’s life, body or health; and (5) public interest, for the performance of a task carried out in the public interest or for the exercise of official actions. 
       We rely on the legal grounds in (1) to (5) above for the following purposes of collection, use, disclosure, and/or cross-border transfer of your Personal Data:

• Registration and Authentication: Contacting you prior to your entering into a contract with us, register, verify, identify and authenticate you or your identity;
• To provide products and services to you: To enter into a contract and manage our contractual relationship with you; to carry out financial transaction and services related to the payments including transaction checks, verification, and cancellation; to process your orders, delivery, and collections and returns; to provide aftersales services; to support and perform other activities related to such services or products;
• Loyalty programs, reward programs and all kinds of events: To allow you to participate to loyalty programs, reward program, and all kinds of events from Team DW19, seminars and any related communications (e.g., sending you reminder emails). This includes to process and administer your account registration, gift registration, event registration; to process points collection, addition, exchange, earning, redemption, and transfer of points; to examine your entire user history, both online and offline; to provide and issue gift vouchers, gift cards, and invoices;
• Manage our relationship with you: To contact and communicate with you as requested by you or in relation to the products and services you obtain from us, affiliates, subsidiaries and business partners; to handle customer service-related queries, request, feedback, complains, claims, disputes or indemnity; to provide technical assistance and deal with technical issues; to process and update your information; to facilitate your use of the products and services;
• Analyzing and researching for profiling: Analyzing and researching for profiling in which we collected data from observing your behavior and/or location by using Cookies or any other technology or electronic, data analytics, data profiling, market research, surveys, assessments, behavior, statistics and segmentation; to determine the effectiveness of the promotional campaigns; qualitative information development; to recommend products and services that might be of interest to you and you benefit from us, affiliates, subsidiaries and our business partners where such interests and businesses are not overridden by your fundamental rights to personal data. 
• Improve business operations, products, and services: To evaluate, develop, manage, and improve, research and develop the services, products, system, and business operations for you and all of our customers, Yuanta Securities (Thailand), affiliates, subsidiaries and business partners; to identify and resolve issues; to create aggregated and anonymized reports, and measure the performance of our physical products, digital properties, and marketing campaigns;
• Functioning of the sites, mobile application, and platform: To administrate, operate, track, monitor, and manage the sites and platform to facilitate and ensure that they function properly, efficiently, and securely; to facilitate your experience on the sites and platform; improve layout, and content of the sites and platform;
• IT Management: For business management purpose including for IT operations, management of communication system, operation of IT security and IT security audit; managing your access to any systems to which we have granted you access; to enable our business to operate, and to enable us to identify and resolve issues in our IT systems, and to keep our systems secure, performing IT systems development, implementation, operation and maintenance; 
• Compliance with laws and government authorities: To comply with legal obligations, legal proceedings, or government authorities' orders which can include orders from government authorities outside Thailand, and/or cooperate with the court, regulators, government authorities, and law enforcement bodies. This includes disclosures to tax authorities, financial service regulators, and other regulatory and governmental bodies, and investigating or preventing crime;
• Protection of our interests: To protect the security and integrity of our business; to exercise our rights or protect our interest where it is necessary and lawfully to do so, for example to detect, prevent, and respond to fraud claims, intellectual property infringement claims, or violations of law; to manage and prevent loss of our assets and property; 
• Fraud prevention and detection: To verify your identity, and to conduct legal and other regulatory compliance checks, detecting and investigating fraud, misconduct, detecting unusualness of transaction that could lead to illegal activities (such as money laundering, terrorism or public fraud). whether or not requested by any governmental or regulatory authority, and analyzing and managing risks;
• Corporate transaction: in the event of sale, transfer, merger, reorganization, or similar event we may transfer your Personal Data to one or more third parties as part of that transaction; and
• Managing risks, supervising conduct, and managing internal management: To perform risk management, audit performance, and risk assessments; managing our infrastructure, internal control, internal audit and business operations and complying with our policies and procedures that may be required by applicable laws and regulations.

3. To whom we may disclose or transfer your Personal Data

       We may disclose or transfer your Personal Data to the following third parties who process Personal Data in accordance with the purposes under this Privacy Policy. These third parties may be located in or outside Thailand. We will act in accordance with the laws and will procure sufficient Personal data protection standards. 

     3.1 Companies in the Yuanta Financial Holdings: As Team DW19 is part of Yuanta Securities (Thailand) Company Limited, and other companies within Yuanta Financial Holdings.
     3.2 Our service providers: We may use other companies, agents or contractors to perform services on our behalf or to assist with the provision of products and services to you. We may share your Personal Data to these service providers, including but not limited to: (1) infrastructure, internet, infrastructure technical, software, website developer and IT service providers; (2) payment, payment system and authentication service providers and agents; (3) marketing, advertising media, and communications agencies; (4) call center; (5) campaign and event organizers; (6) telecommunications and communication service providers; (7) verifying and data checking service providers; (8) data storage and cloud service providers; and/or (9) dispatchers. In the course of providing these services, the service providers may have access to your Personal Data. However, we will only provide our service providers with the Personal Data that is necessary for them to perform the services, and we ask them not to use your Personal Data for any other purposes.
     3.3 Our business partners: We may transfer your Personal Data to persons acting on your behalf or otherwise involved in the provision of the type of product or service you receive from us, including businesses of banking, finance, credit, loan, asset management, investment, insurance, credit cards, telecommunications, marketing, retail, e-commerce, reward and loyalty program, and data analytics, including platform sellers or providers whom we may jointly offer products or services, or whose products or services may be offered to you, to whom we disclose Personal Data in the course of providing products and services to you and whom you authorize us to disclose your Personal Data to, provided that these data recipients agree to treat your Personal Data in a manner consistent with this Privacy Policy.
     3.4 Social networking sites: such as log on our sites and platforms using the social network login system, you explicitly authorize us to access and store public data on your social network accounts (e.g. Facebook, Google, Instagram), as well as other data mentioned during use of such a social network login system. In addition, we may also communicate your email address to social networks in order to identify whether you are already a user of the concerned social network and in order to post personalized, relevant adverts on your social network account if appropriate.
     3.5 Third parties required by law: In certain circumstances, we may be required to disclose or share your Personal Data in order to comply with a legal or regulatory obligations. This includes any law enforcement agency, court, regulator, government authority or other third party where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals’ personal safety, or to detect, prevent, or otherwise address fraud, security, or safety issues.
     3.6 Professional advisors: This includes technicians, auditors and lawyers, who assist in running our business, and defending or bringing any legal claims.
     3.7 Third parties: such as assignees, transferees, or novates which we may assign, transfer, or novate our rights or obligations to a third party, to the extent permitted under the terms and conditions of any contract between you and us. We may disclose or transfer your Personal data to any assignees, transferees, or novatees, including prospective assignees, transferees, or novatees, provided that these data recipients agree to treat your Personal data in compliance of the Personal Data protection laws and in a manner consistent with this Privacy Policy;
     3.8 Third parties connected with business transfer: We may disclose or transfer your Personal Data to our business partners, investors, significant shareholders, assignees or prospective assignees, transferees or prospective transferees in the event of any reorganization, restructuring, merger, acquisition, sale, purchase, joint venture, assignment, dissolution or any similar event involving the transfer or other disposal of all or any portion of our business, assets or shares. If any of the above events occurs, the data recipients will comply with this Privacy Policy to respect your Personal Data;

4. Cross-border transfer of your Personal Data

     For the purposes as mentioned above in this Privacy Policy, we may disclose or transfer your Personal Data to third parties or servers located overseas which the destination countries may or may not have the same data protection standards as Thailand. In addition, we have taken steps and measures to ensure that your Personal Data is securely transferred, that the data recipients have suitable data protection standards in place, and that the transfer is lawful by relying on the derogations as permitted under the law.

5. How long do we keep your Personal Data

     We will retain your Personal Data for as long as it is reasonably necessary to fulfill the purposes for which we have obtained your Personal Data as set out in this Privacy Policy, and to comply with legal and regulatory obligations. We may extend to retain your Personal Data if it is necessary for you to exercise any legal defenses, claims, or rights. After such period, and your Personal Data is no longer necessary for the purposes as specified above, we will delete, destroy, or anonymize your Personal Data according to the standards issued by the Personal Data Protection Committee or any laws or international standard.
   In some cases, your Personal Data e.g. name, surname, address, date of birth, the start and end date of your relationship with us, may be stored as our archive database and will not be used or disclosed to other persons for any purpose.

6. Security Measures for Personal Data Protection

    We established security measures for your Personal Data in terms of technical, physical, and administrative security measures designed to provide optimal protection of your Personal data from loss, misuse, unauthorized access, disclosure, and modification, including prescribed the information technology security policies and guidelines, and minimum standard which improve from time to time according to the law requires.

7. Cookies and how they are used

    If you visit our websites, we will gather certain information from you by using cookies. Cookies are small text files that are placed on your computer and/or devices through a web browser when you visit our website, to enhance your experience and satisfaction with our website. This includes providing you with basic functionality, keeping your sign in, remembering your use of our website, your behavior, preferences, and interests. You can check cookies status or refuse the use of cookies in your browser. For more information about Cookies, please see our Cookies Policy.

8. Your rights with regard to your Personal Data 

     8.1 Right to Access: you may have the right to access or request a copy of the Personal Data we are processing about you or request us to disclose the sources of your Personal Data which you have not given consent;
     8.2 Right to Data Portability: you may have the right to obtain Personal Data hold about you, in a structured, electronic format, and to transmit this data to another data controller, unless it is impossible to do so because of the technical circumstances;
     8.3 Right to Object: you may have the right to object to how we process your Personal Data in certain activities which specified in this Policy e.g. direct marketing;
     8.4 Right to Erasure: you may have the right to request that we delete, destroy, or de-identify your Personal Data that we process about you, e.g. if the data is no longer necessary for the purposes of processing, you have withdrawn consent and where we do not have any other legal basis for such collection, use and/or disclosure your Personal Data, and/or objected the data processing in some cases and we could not reject such request;
     8.5 Right to Restriction of Processing: you may have the right to restrict our processing of your Personal Data if you believe such data to be inaccurate, that our processing is unlawful, or that we no longer need to process this data for a particular purpose;
     8.6 Right to Ratification: you may have the right to have Personal Data that is incomplete, inaccurate, misleading, or out-of-date rectified; and
     8.7 Right to Withdraw Consent: you may have the right to withdraw consent that was given to us for the processing of your Personal Data at any time, unless there are restrictions on the right to withdraw consent as required by the law, or a contract that benefits you; and

9. Changes to this Privacy Policy

     We reserve the right to modify this Privacy Policy from time to time, so we encourage you to read this Privacy Policy carefully and periodically to review any changes that may occur in accordance with the terms of this Privacy Policy, and we will post its latest version on our website DWVIP. We will notify you or obtain your consent again if there are material changes to this Privacy Policy, or if we are required to do so by law.

10. Contact Us

• Derivatives Department of Yuanta Securities (Thailand)
• Tel: 02-009-8710, 02-009-8719 (Monday to Friday from 9:00 am. – 05:00 pm.)
• Email: dwvip@yuanta.co.th