Privacy Policy

 

Updated on 1 September 2025 

Kasikorn X Venture Capital Co., Ltd. (KXVC”) is a company that belongs to the Kasikorn Business-Technology Group (“KBTG”), which is a leader in total digital technology of the future to enable customers to have easy, convenient, fast and safe access to services and engage in activities through every channel. Moreover, we support unlimited digital lifestyle, because KXVC understands that you require security when conducting transactions and the protection of Personal Data. 
 
Thus, KXVC values and respects your privacy rights and the security of your Personal Data. As such, we have set strict policies, regulations and operating criteria for KXVC in order to protect your Personal Data. This ensures that your Personal Data will be used correctly and lawfully according to your intentions. 

 

1. What is The Purpose of This Policy? 

The purpose of this policy is to inform you, as a Data Subject, about the purposes and details of collection, use and/or disclosure of your Personal Data along with the legal rights of the Data Subject.  

 

2. Definitions under This Policy 

“KXVC”	means	Kasikorn X Co., Ltd.
“Employee”	means	an employee of KXVC.
“Data Subject”	means	an individual identifiable by Personal Data (who is not a real rights holder or who is the creator of such data).
“Personal Data”	means	any information relating to a natural person, which enables the  identification of such natural person, whether directly or indirectly, but not including information about deceased persons.
“Sensitive Personal Data”	means	Personal Data which requires particularly careful handling, such as data regarding ethnicity; race; political ideology; cultural, religious or philosophical beliefs; sexual orientation; criminal history; health; disability; labor union membership status; genetics; biometrics; and others as specified by the law.
“Biometrics”	means	Personal Data resulting from the use of techniques or technologies related to the use of physical features or behaviors of an individual to enable the unique identification of the individual, e.g., facial recognition data, eye recognition data, or fingerprint data.
“Data Controller”	means	A person with the authority and duty to make decisions regarding the collection, use or disclosure of Personal Data.
“Data Processor”	means	a person who takes actions regarding the collection, use or disclosure of Personal Data under the instruction or on behalf of the Data Controller.
“Data processing”	means	any action that is performed on Personal Data or Personal Data sets, whether automatic or otherwise, e.g., collection, storage, system management, storage structure management, changes or alterations, acceptance, consideration, use, or disclosure by transmission or publication or other actions that lead to usage readiness, arrangement or combination, limitation, erasure or destruction of data.

 

3. What Personal Data does KXVC collect, use and/or disclose? 

3.1. Personal Data 

Personal Data is data that can be used to identify a natural person, whether directly or indirectly, but which does not include data belonging to deceased persons. KXVC may collect and gather the Personal Data of the Data Subject through several means, including the following:  

1. Personal Data directly provided to KXVC or through KXVC or which exists with KXVC, whether due to contacts, visits or searches via digital, website, call center, designated person or other channels.
2. Personal Data that KXVC receives or has access to from other sources and not directly from the Data Subject, e.g., government agencies, other affiliated businesses/companies, financial institutes, agents, service providers, financial service providers, business partners, credit information companies and data service providers, etc. KXVC will collect data from other sources only after receiving the consent of the Data Subject in accordance with the law, unless KXVC has a necessity as legally permitted or as supported by law. 

 Below are some examples of Personal Data that KXVC collects, uses and/or discloses: 

• Personal information such as first name, last name, nickname, personal identification number, passport number, position, signature, bank acount. 

• Contact information such as home address, workplace, telephone number, email and Line ID. 

• Information about devices or tools such as IP address, MAC address, and cookie IDs. 

• Other information such as usage activity of websites, audio files, still images, videos and other information received from the business operation of KXVC. 

 

3.2. Sensitive Personal Data 

Sensitive Personal Data is Personal Data for which the law prescribes specific provisions. KXVC has no intention of collecting any Sensitive Personal Data from you. However, in certain circumstances, KXVC might be required to collect Sensitive Personal Data from you in order to prove and verify your identity or to accompany the provision of certain services or products to you. Such data may include data on religious affiliation as stated in the copy of your citizen identification card, or race as stated in the copy of the passport of some countries and biometric data (such as facial recognition data, fingerprint data and electronic signature data in which technology is used to apply the unique signing behavior of the signature to verify and confirm the identity of the signatory), criminal background information, health information, disability information, sexual orientation, etc. Accordingly, KXVC will collect, use and/or disclose such sensitive information only after KXVC receives your explicit consent or in cases where KXVC has a need to do so as permitted by law, in which case such actions may be carried out occasionally whenever there is a need to collect Sensitive Personal Data from you. 

 

 (Hereinafter in this policy, unless specifically mentioned, the above Personal Data and Sensitive Personal Data pertaining to the Data Subject will be collectively known as “Personal Data.) 

 

4. For what purposes does KXVC collect, use and/or disclose your Personal Data? 

KXVC will collect, use and/or disclose Personal Data for the benefit of the Data Subject in the use of products and/or services and in order to comply with any law which KXVC or the Data Subject is required to follow and in order to undertake other activities as the law permits according to the purposes specified in this policy as follows: 

 

4.1 For Participation in KXVC’s Activities 

To enable the Data Subject to  participate in KXVC’s activities as intended by the Data Subject who is party to a contract with KXVC or in order to carry out a request of the Data Subject before attend the KXVC’s activities (contractual basis), for example:   

1. In the consideration of approval for participation in current or future activities, seminars, or events organized by KXVC. 
2. In any activity related to carry out any actions related to investment, communication and coordination, due diligence, business review, or any business operations of us. 

 

4.2 For Compliance with Relevant or Applicable Laws  

For the purpose of compliance with the applicable laws (legal obligations), for example:  

1. To comply with the instructions of a legally authorized party.
2. To comply with financial institute business laws, securities and exchange laws, cyber security laws, tax laws, anti-money laundering laws, anti-terrorism financing and proliferation of weapons of mass destructions laws, computer laws, bankruptcy laws and other laws which KXVC is required to follow, whether in Thailand or abroad, along with announcements and regulations issued by virtue of such laws. 

 

4.3 For Other Activities of KXVC 

1. CCTV footage and building access card exchanges.
2. For maintaining our relations, e.g., complaint management, satisfaction survey, attendee support, notifications any activities that the Data Subject is involved with KXVC for the benefit of the Data Subject.
3. For managing risks, providing oversight, internal organization management and transmission to affiliated companies in order to achieve the aforementioned purposes.
4. For anonymizing Personal Data. 
5. For preventing, handling or reducing risk of corruption, cyber threats, debt defaults or breaches of contract (e.g., bankruptcy information), and legal violations (e.g., money-laundering, terrorism financing and proliferation of weapons of mass destruction, offenses relating to property, life, body, freedoms or reputation), including the sharing of Personal Data in order to enhance the work standards of companies within the same business/company group for the prevention, handling and reduction of the aforementioned risks. 
6. For the collection, use and/or disclosure of the personal information of directors, delegated persons and representatives of juristic person clients for the purpose of identity verification, authorization and receipt of authorization and/or for use as evidence to accompany related transactions and activities.
7. For making contacts, taking photos, making video and audio recordings relating to the organizations of meetings, lectures, recreational activities and exhibitions. 
8. For the collection, use and/or disclosure of Personal Data of individuals in order to comply with related laws such as tax laws, anti-money laundering laws and bankruptcy laws, etc. 
9. For sending and receiving packages, documents, or any communications.
10. For the analysis, development, and improvement of our various activities. 

 

4.4 For Receiving Benefits from Participate in any Activities of KXVC 

1. For providing the Data Subject with better activities  in accordance with the needs of the Data Subject.
2. For offering the special privileges, recommendations and various information, including rights to attend special activities. 
3. In this regard, whether it is products and/or services,  benefits, promotional offers, news or special activities of KXVC or affiliated companies/businesses or any parties for which KXVC acts as a representative, agent, distributor or KXVC’s business partner or third parties that are associated with KXVC, whatever as permitted by the consent of the Data Subject. 

 

If KXVC needs to collect, use and/or disclose Personal Data from Data Subject for the purpose of entering into or complying with a contract between Data Subject and KXVC and/or performing  KXVC’s legal obligations, and the Data Subject fails to provide such required data to KXVC upon request, KXVC might not be able to proceed with your request , including the consideration, approval, or delivery of documents or information to the Data Subject, which may also affect the performance of duties under the relationship between the Data Subject and KXVC.  

 

5. Whose Personal Data might be disclosed by KXVC? 

KXVC may disclose Personal Data to other parties with the consent of the Data Subject or rely on other legal basis as stipulated by the law to permit for such disclosures, whereby persons or agencies that receive such data will collect, use and/or disclose the Personal Data within the scope of consent granted by the Data Subject or within the relevant scope under this policy. 

KXVC may disclose Personal Data in order to accomplish various objectives, including to analyze and improve products and/or services, to conduct research or prepare statistical data, to promote sales and to engage in KXVC’s public relations activities, including to facilitate business management, to prevent corruption and to allow other parties to provide supporting services to KXVC in order to verify customer identity. In doing so, KXVC might make disclosures to individuals or agencies such as affiliated businesses/companies, the  Data Processor, business partners involved in the release of shared products (co-brands), third-party service providers, agents of KXVC, sub-contractors, financial institutes, auditors, third-party auditors, rating agencies, asset management companies, credit rating agencies, legally authorized parties, parties interested in receiving the transfer of rights and/or recipients of rights transfers in transactions or business acquisitions of KXVC, juristic persons or individuals that have a relationship or contract with KXVC, including executives, employees, workers, sub-contractors, representatives and advisors of KXVC and of such individuals or agencies that are recipients of the aforementioned data.  

  

 

6. Does KXVC transfer your Personal Data abroad? 

KXVC may need to transfer Personal Data to affiliated businesses/companies located abroad or to other data recipients as part of the normal business operations of KXVC, such as when transferring Personal Data for storage on servers/cloud service providers in various countries. 

If the destination country lacks adequate Personal Data protection measures, KXVC will take care to ensure that the transfer of Personal Data takes place in accordance with the law and will take action to ensure the presence of Personal Data protection measures that are deemed to be necessary, appropriate and consistent such as by making confidentiality agreements with data recipients located in such country and/or making an agreement to ensure  that your Personal Data will be protected under standards equivalent to the personal data protection standards of Thailand. Otherwise, in cases where the data recipient is an affiliated business/company within the same business network, KXVC may adopt Binding Corporate Rules that is reviewed and approved by the relevant legal authorities and then transfer Personal Data to the affiliated business/company located abroad according to the aforementioned privacy policy in lieu of taking other actions as specified by the law. 

International transfers of Personal Data must be strictly undertaken in accordance with Personal Data transfer policies. 

 

7. For how long does KXVC store your Personal Data?  

KXVC will store Personal Data for as long as required while the Data Subject is a client or has a relationship with KXVC or for as long as required in order to achieve the related purposes set out in this policy. In doing so, it may be necessary to retain Personal Data after the termination of relationship with KXVC until the statute of limitations has expired or for as long as prescribed or permissible by the law, for example:  

• For 5-10 years of storage according to anti-money laundering laws from the termination of the relationship, depending on the case; 

• For a period not exceeding 10 years of storage for verification purposes in cases where a dispute arises within the statute of limitations.  

 

KXVC will erase or destroy Personal Data or anonymize Personal Data only after the aforementioned necessity or duration has expired. 

 

The storage, deletion and destruction of Personal Data will be undertaken strictly according to the Personal Data Storage and Destruction Policy. 

 

 

8. How does KXVC protect your Personal Data? 

KXVC will provide effective protection for your Personal Data through technical measures, organizational measures and physical safeguards to ensure appropriate security in the processing of Personal Data and to prevent Personal Data breaches. KXVC has established policies, regulations and operational procedures for Personal Data protection, including information technology security standards and abuse of data prevention measures, and KXVC regularly reviews and updates the aforementioned policies, regulations and procedures. 

Furthermore, executives, employees, workers, contractors, representatives, advisors and data recipients of KXVC are strictly obligated to maintain the confidentiality of Personal Data under the confidentiality measures established by KXVC. 

 

 

9. What are your rights regarding your Personal Data?  

The rights of Data Subject under this clause are the legal rights that the Data Subject should be aware of. The Data Subject can exercise these various rights under the relevant law and policies enacted at the time or as amended in the future, including the criteria set forth by KXVC, and in cases where the Data Subject is below 20 years of age or has limited legal capacity , the Data Subject may request to exercise their rights by assigning the Data Subject’s parents, custody holder or authorized representative to state their intention. 

 

1. Right to Withdraw Consent: If the Data Subject has given consent for KXVC to collect, use and/or disclose Personal Data (whether the consent was given by the Data Subject before or after the effective date of Personal Data Protection laws), the Data Subject has the right to withdraw the consent at any time for as long as the Personal Data is held by KXVC, unless it is subject to legal restrictions or contracts providing benefits to the Data Subject.  Accordingly, the withdrawal of the Data Subject’s consent may impact to the participation to any activities. For example, the Data Subject may no longer receive new privileges, offers, information about other improved activities consistently according to needs or may not receive news and beneficial information, etc. Therefore, the Data Subject should review and inquire about the potential impacts before withdrawal of consent. 
2. Right to Access Data: The Data Subject has the right to access their Personal Data that is under the responsibility of KXVC and request copies of such data, including requesting KXVC to disclose how KXVC acquired the Data Subject’s Personal Data.
3. Right to Data Portability: The Data Subject has the right to receive their Personal Data in cases where KXVC has prepared such Personal Data in a structured format that can be read or used by an automated tool or device, and which can automatically use or disclose the Personal Data. This includes the right to request for KXVC to transfer Personal Data in the aforementioned format to other Data Controller by automatic means and the right to directly receive Personal Data which KXVC has transferred in the aforementioned format to other Data Controller, except for the cases where it is impossible to do so due to technical reasons. Accordingly, the aforementioned Personal Data must be the Personal Data which the Data Subject has consented for KXVC to collect, use and/or disclose or  Personal Data which KXVC must collect, use and/or disclose in order to enable the Data Subject to use KXVC’s products and/or services as a contractual partyor for the purpose of carrying out the requests of the Data Subject before using KXVC’s products and/or services or be other Personal Data as determined by the legal authorities. 
4. Right to Objection: The Data Subject has the right to object to the collection, use and/or disclosure of your Personal Data at any time if such actions are conducted for legitimate interests Personal Data of KXVC or any third parties without exceeding reasonable expectations or for the purpose of fulfilling public interest missions. If the Data Subject objects, KXVC may continue to collect, use and/or disclose thier Personal Data  solely for the parts in which KXVC can demonstrate legal grounds that supersede even the fundamental rights of the Data Subject or for the establishment legal rights, compliance with laws, or defense of legal claims whatever the case may be. Furthermore, the Data Subject also has the right to object to the collection, use and/or disclosure of thier Personal Data for the purposes related to direct marketing or conducting scientific, historical research or statistical studies. 
5. Right to Erasure: The Data Subject has the right to request for the deletion or destruction of thier Personal Data or to anonymize Personal Data if the Data Subject believes that their Personal Data are collected, used and/or disclosed in violation of related laws or if  KXVC no longer needs to retain such Personal Data according to the related purposes described in this policy or when Data Subject has exercised the aforementioned Right to Withdraw Consent or the Right to Objection. 
6. Right to Restrictiona: The Data Subject has the right to temporarily suspend the use of Personal Data in cases where KXVC is undergoing a review pursuant to the request to correct or objections or in other cases in which KXVC no longer needs to delete or destroy the Personal Data but the Data Subject requests to suspend the use of data instead of deletion or destruction. 
7. Right to Rectification: The Data Subject has the right to request correction of their Personal Data to ensure it is accurate, up to date, complete and not causing misunderstandings.
8. Right to lodge complaints: The Data Subject has the right to file complaints to the relevant legal authorities if the Data Subject believes that the collection, use and/or disclosure of thier Personal Data is in violation or in breach of applicable laws.  

The exercising of the Data Subject’s rights above may be subjected to limitations  pursuant to related laws and there may be certain situations and necessities in which KXVC may refuse or be unable carry out Data Subject’s requests to exercise the aforementioned rights such as legal obligations or court order compliance, public interest, or to protect the rights and freedoms of others, etc. 

If KXVC refuses such requests, KXVC will inform the reason of the refusal to the Data Subject, and the Data Subject can exercise thier rights through the contact channels stated in this policy. 

 

10. Will KXVC Amend, Update or Revise this Policy? 

KXVC may consider making changes, additions, updates or revisions to this policy from time to time as appropriate and as permissible by law. In the event of any changes, additions, updates or revisions to this policy, KXVC will announce the latest version of the policy for your information via www.KXVC.tech/privacypolicy. 

 

11. How can you contact KXVC and the Personal Data protection officer? 

If the Data Subject has any suggestions or inquiries regarding the collection, use and/or disclosure of their Personal Data, including requests to exercise their rights under this policy, the Data Subject can contact KXVC and/or the Data Protection Officer via the following channels:  

• KXVC Website: www.KXVC.tech 

• Data Protection Officer’s email: KX_DPO@kbtg.tech 

Address: Kasikorn X Venture Capital Co., Ltd.: No. 46/6, Popular Road, Ban Mai Sub-district, Pak Kret Sub-district, Pak Kret District, Nonthaburi Province 11120.