Effective Date: April 4, 2025
PT SERUNI MUSTIKA PERKASA (hereinafter referred to as "we", "us" or "our") attaches great importance to the protection of your personal data. This Privacy Policy explains how we collect, use, store and protect your personal data when you use the SMP TopUp platform (website: www.smptopup.com) services, in compliance with the Personal Data Protection Act B.E. 2565 (PDPA) of Thailand and other relevant laws and regulations.
1.1 We only collect personal data that is necessary for providing services to you, including but not limited to:
Account information: SMP TopUp account ID, registered mobile phone number, email address;
Payment information: PromptPay recharge vouchers, transaction numbers, and other payment-related information (we will not store your complete payment account password);
Service usage information: Order records, recharge records, product purchase records on the Platform;
Other information: Proof materials provided when you apply for a refund (such as screenshots of unsuccessful crediting, etc.), and information actively provided by you when contacting customer service.
1.2 We will not collect your personal data beyond the scope necessary for providing services, unless you voluntarily provide it.
We use your personal data only for the following legitimate purposes:
To create and manage your Platform account, and provide you with game top-up services;
To verify the validity of your recharge and transaction, and process your refund application;
To communicate with you, such as notifying you of service updates, review results of refund applications, etc.;
To improve the quality of our services, optimize the user experience, and prevent fraudulent activities;
To comply with legal obligations under Thai laws and regulations.
3.1 We adopt appropriate technical and organizational security measures to protect your personal data from unauthorized access, use, modification, disclosure or loss. These measures include but are not limited to data encryption, access control, and regular security audits.
3.2 We will only authorize employees who need to access your personal data to perform their work duties, and require them to abide by strict confidentiality obligations. Any employee who violates these obligations will be subject to corresponding disciplinary actions.
In accordance with the PDPA, you have the following rights regarding your personal data:
The right to know: To inquire about the collection, use and storage of your personal data;
The right to access: To request a copy of your personal data held by us;
The right to correction: To request correction of inaccurate or incomplete personal data;
The right to erasure ("right to be forgotten"): To request erasure of your personal data under specific circumstances;
The right to data portability: To request us to provide your personal data in a structured, commonly used and machine-readable format;
The right to object: To object to the processing of your personal data in certain circumstances.
To exercise the above rights, please contact us through the customer service email. We will verify your identity and process your request in accordance with the PDPA and relevant procedures.
If a personal data breach occurs that may cause serious harm to your rights and interests, we will notify you and the Office of the Personal Data Protection Committee (PDPC) of Thailand as soon as possible, and in any case within 72 hours of becoming aware of the breach. We will also take necessary remedial measures to mitigate the impact of the breach.
We will store your personal data only for the period necessary to achieve the purposes stated in this Privacy Policy, or as required by Thai laws and regulations. After the storage period expires, we will securely delete or anonymize your personal data.
90.1 We will not share your personal data with any third party without your prior explicit consent, except in the following cases:
To comply with legal obligations or respond to judicial procedures;
To cooperate with the game party to verify the top-up and crediting status (we will only provide the necessary minimum information);
To protect our legitimate rights and interests, such as investigating fraud or other illegal activities.
95.2 If we share your personal data with third parties in accordance with the above provisions, we will require the third parties to abide by strict confidentiality obligations and take appropriate security measures to protect your personal data.
We may update this Privacy Policy from time to time. Any updates will be posted on the Platform or notified to you via email. The updated Privacy Policy will take effect on the date of publication. We encourage you to review this Privacy Policy regularly to stay informed of how we protect your personal data.
If you have any questions, comments or requests regarding this Privacy Policy or the protection of your personal data, please contact us through the following customer service email: support@smptopup.com