Privacy Policy for Meety Application
Effective Date: June 24, 2026Version: 2.1 (PDPA Risk-Mitigated & Storage Optimized)Meety App (hereinafter referred to as “the Platform”, “we”, “us”, or “our”) recognizes the importance of personal data protection. This Privacy Policy has been established in strict accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). To ensure absolute business continuity and protect Meety from potential operational disruptions, vexatious claims, or the malicious execution of data rights, this policy clearly delineates the statutory limitations of data subject rights and outlines the absolute operational conditions under which data is acquired and processed.
1. Data Controller Information
For the purposes of the Thai PDPA, Meety App operates as the Data Controller. For inquiries regarding data management, right execution protocols, or verification requirements, users may contact our Data Protection Officer (DPO) at:
- Email: support@meety.club
- Address: Promjerja Co., Ltd., Bangkok, Thailand
2. Categories of Personal Data Collected
To access and utilize Meety’s social, tournament, marketplace, and booking ecosystem, the collection of the following data blocks is mandatory. Refusal to provide these data blocks prevents platform access:
| Data Category | Specific Data Fields & Core Operational Scope |
|---|---|
| Account & Profile Data | Legal name, verified email address, valid telephone number, unique username, encrypted credentials, profile images, and verification records. |
| Sports, Gameplay & Tournament Data | Sports interests, skill matrices, match histories, competitive game scores, public leaderboards, ranking algorithms, and performance graphics. |
| Transaction, Booking & Coupon Data | Ticket parameters for private events, payment receipts, time-based court or coach bookings, selected merchant discounts, and operational coupon usage data. |
| Precise Geolocation Data | Real-time GPS tracking data gathered exclusively during active app deployment to support map-based listings and match groups. |
3. Purposes and Non-Consent Legal Bases for Processing
To minimize risk from sudden or malicious “consent withdrawals” that could disrupt the community, Meety processes data primarily under statutory non-consent legal frameworks as per Sections 24 and 26 of the Thai PDPA:
| Processing Operation | Lawful Basis (Thai PDPA) | Business Protection Continuity Strategy |
|---|---|---|
| Account provisioning, matchmaking operations, tournament table hosting, and event registrations. | Performance of a Contract (Section 24(3)) | Processing is legally mandatory to fulfill the user contract. Sudden deletion demands cannot be executed while an account or tournament remains active. |
| Marketplace transaction routing, coach/court time allocations, and B2B commercial coupon validation. | Performance of a Contract (Section 24(3)) | Data processing cannot be retracted or deleted post-transaction, ensuring stability for partner merchants and financial logs. |
| Fraud detection, anti-scraping tracking, community security monitoring, leaderboard calculation, and AI model protection. | Legitimate Interests (Section 24(5)) | Meety holds an overriding right to process security and tournament data to protect platform integrity; user objections are explicitly restricted here. |
| Tax compliance, structural bookkeeping, commercial invoicing, and statutory legal orders. | Legal Obligation (Section 24(6)) | Data is retained for a mandatory period under Thai law and is entirely immune to any user erasure requests. |
4. Storage of Personal Information
We will keep your Personal Information in both document and electronic form. We store your Personal Information securely on our company’s server located in Thailand, as well as within Google Cloud services and authorized external cloud architectures to ensure high availability and redundancy.
5. Sharing and Disclosure of Personal Information
In certain circumstances, we may disclose or share your Personal Information with third parties, only if we obtain your consent or as permitted by applicable law. The third parties with whom we will disclose or share your Personal Information include the following individuals and organizations:
- Internal Organization: Authorized departments, employees, and personnel within our corporate structure who require access to fulfill operational, customer support, and system administration duties.
- Service Providers: Trusted financial intermediaries for secure payment processing, technical infrastructure vendors, and cloud storage utilities operating under strict non-disclosure conditions.
- Business Partners and Sponsors: Commercial listing merchants, venue operators, and sports event sponsors. Registering for events or utilizing commercial coupons automatically routes necessary tokens/parameters to these entities to fulfill operational frameworks.
- Business Transfer: Third parties involved in corporate restructuring, mergers, acquisitions, sales of company assets, or transitions of service control.
- Legal Authority: Government bodies, tax entities, regulatory agencies, and law enforcement when required to satisfy mandatory structural bookkeeping, commercial invoicing, or valid legal orders.
- Cross-border Data Transfer: International cloud nodes, networks, or data processing clearinghouses essential for global platform continuity.
6. Cookies
The Platform utilizes cookies, web beacons, and equivalent tracking technologies to distinguish you from other users, optimize platform navigation, secure your account lifecycle, and support anti-scraping telemetry. We deploy session cookies (which expire when you close your app/browser) and persistent cookies (which remain on your device to remember settings across visits). You may configure your device or browser settings to refuse or disable cookies; however, please note that restricting cookies may permanently degrade platform performance or render specific functionalities completely inaccessible.
7. Public vs. Private Platform Data Stability
To safeguard tournament data and match integrity from arbitrary removal requests, Meety enforces a clear visibility split: data designated as “Public” including tournament results, ranking trees, community leaderboards, historical game scores, and venue photographs constitutes permanent, public platform metadata. While an account can be deleted, public tournament brackets and competitive historical metrics are retained permanently in an anonymized state to maintain the integrity of the community ecosystem.
8. International Data Transfers
Meety utilizes encrypted cloud server architectures situated outside Thailand (e.g., AWS centers and Google Cloud nodes). Pursuant to Section 28 of the Thai PDPA, users explicitly acknowledge and validate that these server deployments use appropriate safeguards, including standard contractual agreements and data-at-rest encryption protocols, satisfying legal transfer mandates.
9. Data Security Measures
We apply technical and administrative security frameworks, including Transport Layer Security (TLS/SSL) for all data pathways, internal access controls, and firewall systems. While we deploy these measures to prevent unauthorized data access, users acknowledge that no platform can provide an absolute warranty of electronic safety.
10. Retention and Accountability Controls
Data is retained for the duration of active account lifecycle operations. Upon user-initiated account deletion, a mandatory 30-day grace period applies. After 30 days, personal identification data is permanently scrubbed. However, financial logs and tax invoices are securely retained for up to 10 years to satisfy mandatory Thai commercial and revenue legislation, overriding generic erasure demands.
11. Data Subject Rights & Strategic Business Disruption Safeguards
While users hold statutory rights under Sections 30-34 of the Thai PDPA, these rights are subject to significant statutory exceptions. To maintain continuous service and protect Meety from vexatious or wrongful rights execution, the following operational restrictions apply:
- Limitations on the Right to Erasure & Objection (Section 33 & 34): Meety reserves the legal right to completely deny any erasure, destruction, or processing objection request if the underlying data is necessary for:
- The performance of an active contract or booking agreement (Section 24(3));
- The preservation of public competitive match scores, active tournament structures, and historical leaderboards;
- Compliance with mandatory Thai statutory or tax accounting duties (Section 24(6));
- The establishment, compliance, exercise, or defense of potential legal claims.
- Operational Consequences of Forced Data Removal: If a user requests the erasure of data or withdraws consent for data that Meety deems structurally essential for platform security or basic functionality (e.g., core account data, historical skill metrics), Meety shall have the absolute right to immediately terminate the user’s account and block platform access to protect system stability. Any such termination results in the immediate, absolute forfeiture of all active subscriptions, booked slots, and marketplace coupons without eligibility for a refund.
- Repetitive and Vexatious Request Safeguards: In accordance with legal provisions, Meety reserves the right to charge a reasonable administrative processing fee, or flatly refuse to act upon user requests, if such requests are manifestly unfounded, excessive, repetitive, or executed in a malicious manner designed to cause platform disruption.
- Identity Verification Prerequisite: To prevent social engineering and fraudulent data access, no right execution request will be processed unless the user provides comprehensive identification documentation satisfying Meety’s strict security standards. Meety has up to 30 days from successful identity verification to assess and respond to a valid request.
12. Policy Modifications
Meety reserves the right to modify this Privacy Policy at any time. Changes become effective immediately upon posting. If a modification structurally alters your legal liabilities or our data acquisition rules, a prominent in-app notification or an explicit email broadcast will be issued to your registered address prior to the implementation date. Continued utilization of the app post-notice constitutes comprehensive validation of the modified terms.