Privacy Policy

Effective Date: January 1, 2026

BAISED PRIVACY DISCLOSURE

This Notice at Collection and Privacy Policy ("Privacy Disclosure") explains how Vidma tv Co., Ltd. and its subsidiaries and affiliates ("BaiSed," "we," "us," “the company,” or "our") collects, uses, discloses, and/or retains personal information ("Information Practices") in accordance with the Thailand Personal Data Protection Act (PDPA) and other applicable privacy laws. BaiSed owns and operates the associated mobile applications (collectively, the "App").

BaiSed is an everyday rewards platform that provides points, XP, and rewards through your interaction with our participating brand partners, use of our app (includes uploading receipts, spinning the wheel, or referring a friend), or engaging in other activities as described in our app. As part of your participation in the “BaiSed Campaign”, you consent to BaiSed disclosing your personal information to our brand partners, third-party service providers, and advertising platform to deliver relevant offers and advertisements.

Please read this Privacy Disclosure carefully to understand our practices regarding your personal information and how we will treat it. Should you have any queries or concerns regarding this privacy statement, please contact us at contact@baisedapp.com.

The terms used in this Privacy Disclosure shall have the same or similar meaning as those terms in each of the applicable laws, or the closest approximation of such terms.

PRIVACY POLICY

The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding our Information Practices. You have certain rights to control the use of your personal information. This privacy policy describes your rights as it relates to our Information Practices as to your personal information and how you can exercise those rights.

Definitions.

“Personal Data” : Information relating to a person which enables the identification of such a person, whether directly or indirectly, but excluding the data of deceased persons.

“Sensitive Personal Data” : Personal data as specified in Section 26 of the PDPA (e.g., biometric data, health data, etc.).

“Data Subject” : An individual who is the owner of the personal data processed by the company.

“Personal Data Protection Committee” : The committee established under the PDPA.

“Data Controller” : The company or person with the authority to make decisions regarding the collection, use, or disclosure of personal data.

“Data Processor” : The company or person who collects, uses, or discloses personal data according to the instructions of the Data Controller.

“Data Protection Officer (DPO)” : The person or unit appointed to oversee data protection within the company.

“Cookies” : Small computer files that temporarily store necessary personal data on the Data Subject's device to facilitate communication speed during website usage.

“Biometric Data” : Physical or behavioral identity data generated through technology, such as facial recognition, fingerprints, or voice/writing patterns, used for identity verification.

Sources of Personal Data.

The company collects data directly from the Data Subject via: (i) voluntary forms, registration, or service applications; (ii) communications through various channels; (iii) usage behavior tracked via Cookies or similar technologies on applications and websites. (iv) third-party sources: If data is collected from other sources, the company will notify and seek consent within 30 days, unless exempt under Sections 24 or 26 of the PDPA.

Types of Data Collected.

(i) Personal identifiers; (ii) Demographic characteristics; (iii) Commercial and purchase information; (iv) Technical and network activity; (v) Profile and inferred data

Purpose and Legal Basis for Processing.

(i) Contractual Necessity: To provide core services, including identity verification, processing scanned receipts for point accumulation, and managing reward redemptions. Failure to provide this data may prevent the app from functioning. (ii) Legitimate Interest: To analyze user behavior for service development, perform marketing research, generate internal management reports, and maintain robust system security and efficiency. (iii) Consent & Legal Obligation: To deliver targeted advertisements and promotional news, utilize tracking cookies, and process sensitive biometric data. Additionally, data is processed to comply with statutory requirements, such as tax filings to the Revenue Department or court orders.

Rights of the Data Subject.

Under the PDPA, you have the following rights:

• Right to Withdraw Consent: You can withdraw consent at any time.
• Right to Rectification: You can request to update or correct inaccurate data.
• Right to Erasure: You can request to delete or destroy data when no longer necessary.
• Right to Restriction: You can request to suspend the use of your data.
• Right to Data Portability: You can request to transfer your data to another controller in an automated format.
• Right to Object: You can object to data processing for marketing or research purposes.
• Right to Complain: You can report violations to the PDPC (Personal Data Protection Committee) via:
  • Phone: 02 142 1033
  • Website: complaint.pdpc.or.th
  • Email: saraban@pdpc.or.th

Disclosure of Personal Data.

The company may disclose data to: (i) Business partners, Brand partners, directors, and employees within their scope of duty; (ii) External service providers (e.g., storage providers, marketing analysts); (iii) Third parties; (iv) Government agencies (Police, Courts, Revenue Dept.) as required by law.

International Data Transfer.

Data will not be transferred outside Thailand unless the destination country has adequate protection standards or explicit consent is obtained.

Retention Period.

Data is kept for as long as necessary to fulfill the stated purposes. Once the period expires or the data is no longer needed, it will be deleted, destroyed, or anonymized.

Security Measures.

The company implements appropriate security measures to prevent loss, unauthorized access, or illegal modification of data. Any third-party processors are strictly required to maintain the same level of security.

Contact Information.

If you have questions, please contact:

Company Name: Vidma TV Co., Ltd.
Address: 146 Soi Ladprao 107 (Deesomchoke), Khlong Chan, Bang Kapi, Bangkok, Thailand, 10240
Phone: (+66)92 415 9115

NOTICE AT COLLECTION

The following notice identifies the categories of personal data to be collected from you and the specific purposes for which this data will be used. This includes whether that information is shared with our participating brand partners or utilized for the purposes of cross-context behavioral advertising (e.g., targeted advertisements and personalized offers) and market insight analytics.

GENERAL PERSONAL INFORMATION

Categories of Personal Information:

• Identifiers. For example, a name, address, online identifier, internet protocol ("IP") address, email address, username, mobile phone number, mobile device ID, or other similar identifiers.
  We sell/share IP address, device type and characteristics, unique device identifiers to web analytics providers and advertising partners.
• Personal Identifiers (Pursuant to PDPA). For example, full name, date of birth, mobile phone number , address.
  We share this information with our reward fulfillment partners and third-party service providers (such as SMS gateways) to verify your identity and ensure your rewards reach you.
• Demographic Characteristics. For example, age, gender, and general location (province/district).
  We disclose this data to our brand partners and advertising platforms. This allows BaiSed to surface "Quests" and “Campaigns” that are relevant to your demographic
• Commercial & Purchase Information. For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This may include details about products you have scanned, purchased, searched for or favorited; details about rewards earned and redeemed, deals, challenges, discounts, and coupons associated with your account; time, duration, and location of your use of the App and other activity logs.
  We share this data with our participating brand partners. This enables them to understand consumer behavior, measure the success of their campaigns on BaiSed, and provide you with targeted "Bonus Point" opportunities. This data is the foundation of the analytics reports we provide to our brand partners.
• Technical & Network Activity. For example, device ID, IP address, operating system, and information regarding your interaction with the App.
  We may disclose this information with our brand partners, web analytics partner, and third party service providers.
• Profile and Inferred Data. Inferences drawn from your purchase history to create a consumer profile. This reflects your shopping preferences, brand loyalty, characteristics, habits, attitudes, aptitudes, abilities, and predicted future behaviors.
  We may disclose this information with our brand partners and third party service providers.
• Geolocation Data. For example, information or data that can be used to determine a device’s location.
  When you consent to geolocation tracking on the App we will disclose geolocation information to third parties.

Purposes for Collection, Use, or Processing. BaiSed collects and utilizes your personal information for the following specific purposes:

• Core Service & Reward Fulfillment. We process your personal data to (i) deliver the core BaiSed experience, including utilizing our proprietary OCR and AI systems to process your receipts and award Points and XP; (ii) enable you to create and maintain a secure account, verify your identity via OTP, and manage your ongoing interactions with our brand partners; (iii) fulfill the specific transactional reasons for which the information was provided, such as verifying a specific SKU purchase required for a Quest; and (iv) determine your eligibility for specific rewards, tiered services, or location-based promotions.
• Social & Community Engagement. To facilitate a community-driven experience, we use your information to (i) enable your participation in our social features, such as referring new users or engaging with other members on the App; (ii) allow other BaiSed members to find and connect with you through discovery features like the Social Feed or Leaderboards; and (iii) support your participation in contests, surveys, and the posting of testimonials, acknowledging that if you provide a testimonial, your name and profile picture may be publicly displayed.
• Data Insights & Personalized Marketing. For the purposes of growth and partnership value, we utilize data to (i) present you with targeted promotions, coupons, Quests, and offers tailored specifically to your shopping behavior; (ii) disclose purchase data to BaiSed brand partners pursuant to your explicit consent and in accordance with their privacy policies; (iii) analyze market trends and consumer behaviors for internal business development and to support advertising-related services; and (iv) provide "Brand Insights" that allow BaiSed and our partners to measure marketing effectiveness and derive insights through tools such as Data Dashboards.
• System Security & Fraud Prevention. To maintain the integrity of our ecosystem, we process data to (i) prevent, detect, and remediate security or legal concerns, with a strict focus on fraud detection, including identifying duplicate scans or retail abuse; (ii) protect the rights, property, and safety of BaiSed, our users, and the integrity of our digital content; and (iii) perform auditing related to consumer transactions, ad impressions, and general regulatory compliance.
• Communication & Technical Maintenance. We utilize your contact information to (i) manage program correspondence and respond to customer service requests via our LINE Official Account (@baised) or email; (ii) provide you with critical technical updates, security reminders, or other essential informational content; (iii) analyze usage trends to optimize and improve the App, our Website, and our OCR services; and (iv) perform technical maintenance and debugging to identify and repair software errors.
• Legal & Third-Party Operations. Finally, we use your data to (i) comply with applicable laws, PDPA regulations, or industry requirements, and respond to lawful government requests; (ii) share necessary information with trusted service providers, such as cloud hosting and data processors, to carry out business operations; and (iii) fulfill any other purpose for which you provide explicit consent at the time of collection.

Location Data and Geofencing Services.

BaiSed utilizes your device’s location data to enhance your experience by (i) providing you with personalized content, such as identifying nearby brand partners and surfacing localized "Quests" or rewards relevant to your current area; (ii) communicating timely offers to you based on your proximity to specific retail locations via the App’s push notification system; and (iii) ensuring the integrity of our rewards ecosystem by approximating your device location during active use solely for the purpose of fraud detection and verifying the validity of receipt scans. Please be advised that while we use location data for in-app engagement and push notifications, we do not utilize your precise geo-location as a basis for sending text or SMS messages. You maintain full control over these features and may choose to disable push notifications through the BaiSed App Settings or opt out of location services entirely via your device’s operating system settings. However, please note that disabling location services may significantly degrade the features and functionality we can provide, such as the ability to participate in location-specific brand campaigns or earn bonus Points at nearby stores.

SENSITIVE PERSONAL INFORMATION

BaiSed does not sell or share your sensitive personal information with third parties for the purpose of cross-context behavioral advertising without your explicit authorization. However, to provide our core services, BaiSed may disclose specific sensitive data—including your precise geolocation and the full contents of your physical or electronic receipts—to our trusted brand partners and analytics providers, provided you have granted us clear consent to do so for the purpose of earning rewards and generating market insights.

Categories of Sensitive Personal Information:

• Account Access and Financial Data: We may collect account login credentials or limited financial information (such as partial account details for reward fulfillment). These are collected only to facilitate secure access to your account and to process the rewards you have requested. We never store full credit or debit card numbers on our servers.
• Precise Geolocation: We will collect and utilize your precise geolocation data only if you provide explicit consent through your device settings. This data is used to surface nearby rewards, verify the authenticity of receipt scans, and provide localized "Quests."
• Health and Medical Information: Because our OCR technology scans all printed text on an uploaded receipt, information regarding your health (such as specific medications, diagnoses, or treatments) may be collected if it appears on a pharmacy or hospital receipt you choose to upload. By voluntarily uploading such receipts, you explicitly consent to the processing of this information for the purposes of awarding points and analyzing consumer behavior.
• Contents of Electronic Communications: For the purpose of processing digital rewards or e-receipts, we will only collect and disclose receipt-related information from your shared files or digital uploads. BaiSed will never access the contents of your private mail, email, or text messages unless you have intentionally shared a specific document with us for the purpose of earning rewards.

Purposes for Collection, Use, or Processing. BaiSed utilizes sensitive personal information for the following limited purposes:

• Service Delivery. To perform the services and provide the rewards you request and reasonably expect from us, primarily the processing of receipt data via our OCR and AI systems to award Points and XP.
• Security Incident Management. To detect, prevent, and investigate security incidents or system vulnerabilities that may involve your information, ensuring your account remains secure.
• Fraud Prevention & Prosecution. To investigate, curtail, and remediate malicious, fraudulent, or illegal actions directed at our platform—including "Retail Abuse," the scanning of duplicate or public receipts, and the submission of manipulated digital files—and to pursue necessary actions against those responsible.
• Safety & Protection. To ensure the safety of you, other BaiSed members, and the public, while protecting the rights and property of BaiSed.
• Real-Time App Enhancement. To enhance your real-time experience on the BaiSed App through personalized features and localized content, provided that such information is not disclosed to third parties without your explicit consent.
• Business Operations. To perform essential services for our business needs, such as maintaining user accounts, providing customer support through our LINE Official Account (@baised), and fulfilling reward redemptions.
• Quality Assurance. To ensure the ongoing quality, accuracy, and safety of our OCR technology, AI verification models, and overall App functionality.
• Specific Service Fulfillment. To collect or process sensitive personal information (such as data from a pharmacy receipt) where it is necessary to provide a specific service or reward you have requested, without using that information to infer protected characteristics about you unless you have granted separate, explicit consent.

PROGRAM SPECIFIC INFORMATION COLLECTION

Friend information when you Refer a Friend or participate in Social. When you participate in our referral or social features, we collect information to help you grow your network.

• Refer a Friend: When you invite someone to join BaiSed, we provide you with a unique referral code and pre-formatted invitation text. You send these to your friend independently; you do not share your friend’s personal information with BaiSed. If your friend signs up using your code, we will notify them that you (their "Advocate") have received a referral bonus. We will notify you once they have successfully registered and completed their first valid receipt scan.
• BaiSed Social: If a friend joins using your referral code, or if you connect via your device’s contact list, you will be added to each other’s BaiSed Friends list. For existing members, we may send a push notification to facilitate the connection. We collect and display your username, profile photo, and certain activity milestones (such as Points earned or current Streaks) on the Social Feed and Leaderboards visible to your connected friends. We also monitor how you interact with friends, pages, and groups within the App to improve your social experience.

INFORMATION FROM OTHER SOURCES

BaiSed may collect publicly available data, such as content or feedback you have shared on social media platforms or public forums. We also supplement our internal records with demographic insights from trusted third-party partners. This 'data enrichment' is used to (i) verify your identity and strengthen our Fraud Prevention System; (ii) ensure the integrity of our rewards ecosystem; and (iii) refine our analytics to provide you with more personalized Quests and service improvements.

RETENTION PERIODS

The duration for which BaiSed retains your information is determined by the specific purposes for which it was collected. We will proceed to delete or permanently de-identify your personal data once it is no longer required to fulfill our service obligations (such as awarding Points or generating market insights), unless a longer retention period is mandated by the Thailand PDPA or other applicable laws. In rare cases where technical or operational constraints prevent full deletion, BaiSed will implement reasonable measures to lock the data and prevent any further processing.

YOU CONSENT TO DISCLOSE YOUR PERSONAL INFORMATION

By utilizing the BaiSed App and engaging with our services, you provide your consent for us to disclose your information to our network of brand partners. This data sharing is fundamental to our ability to operate the BaiSed ecosystem and deliver high-value rewards and personalized experiences. To ensure we continue providing you with the best products and services, you agree that BaiSed may share your information in the following ways:

BRAND PARTNERS

With Our Participating Brands and Advertising Platforms. When you use the BaiSed App and participate in our rewards ecosystem, you provide your explicit consent for BaiSed to (i) disclose the information you share—including personal identifiers and purchase behavior captured from your receipts—to all participating BaiSed partners who provide "Campaigns," Point-earning opportunities, and targeted promotions via the App; and (ii) acknowledge that these brand partners may engage with you and utilize your information in accordance with their own respective privacy policies. To protect your most private data, BaiSed does not share your phone number, precise geolocation, or sensitive health data with our brand partners or advertising platforms unless you have granted specific, additional consent for a specialized service. For further details on the rules governing our rewards and interactions, please review our Terms of Service.

What Value Do You Receive from Participating?
The primary benefit of participating in the BaiSed program is the ability to convert your everyday spending into tangible rewards. By sharing your purchase data with our brand partners, you gain (i) exclusive access to "BaiSed Campaigns" and Point-earning opportunities that are unavailable to the general public; and (ii) a highly personalized experience where the rewards you receive are calculated based on the frequency and nature of your interactions with our participating brands. This value exchange is designed to reward your loyalty and provide you with relevant, high-impact offers from the brands you shop most.

Opting-Out (Withdrawal of Consent).
Under the Thailand Personal Data Protection Act (PDPA), you have the right to withdraw your consent for the collection, use, and disclosure of your personal information at any time. However, because the BaiSed ecosystem is fundamentally powered by the exchange of purchase data for rewards, we do not offer a partial "opt-out" while maintaining an active account. If you no longer wish to share your personal information with our brand and advertising partners, you must (i) exercise your right to withdraw consent by permanently deleting your account through the App settings; (ii) acknowledge that upon such withdrawal, you will immediately lose access to all BaiSed Services, including the ability to scan receipts or participate in Campaigns; and (iii) understand that the closure of your account will result in the immediate and permanent forfeiture of all accumulated Points and XP, as we will no longer have the legal basis to process the data required to maintain your balance.

With Your Friends or Other BaiSed Members Participating in BaiSed Social. When you utilize a referral code, BaiSed will notify the person who issued the code that you have joined the community, and you will both be automatically added to each other’s suggested Friends list. Within BaiSed Social, friends who are directly connected share a high level of transparency to foster community engagement. This includes sharing (i) your username and profile photo; (ii) total spending (THB) from scanned receipts, total earned Points, monthly earned Points, and the date you joined BaiSed; and (iii) details regarding specific stores/merchants visited and rewards redeemed. To support the competitive spirit of our community, BaiSed features a Global Leaderboard. Users with whom you are not directly connected (including Friends-of-Friends and the general BaiSed community) can view your username, profile picture, date you joined BaiSed, and your current rank or total Points/XP accumulation. This allows you to compete for top positions and recognition within the nationwide BaiSed ecosystem. To help you build your network, other BaiSed members can search for you using your referral code or mobile phone number (based on your friend’s mobile contact list). If a match is found, your name and profile photo will be displayed to that member so they can send you a friend invitation. You maintain control over your social footprint. If you wish to stop sharing information with specific individuals or the entire community, you can turn off your feed activity within the App setting.