Privacy Policy

MYBAND Co., Ltd. ("Company", "we", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA). This policy explains how we collect, use, disclose, and protect your data when using MyBand Tickets services.

1. Data We Collect

We collect various types of data to provide our services:

• Personal Data: Full name, email address, phone number
• Account Data: Username, password (encrypted), account settings
• Purchase Data: Ticket purchase history, payment details
• Artist/Organizer Data: Profile, portfolio, business information
• Usage Data: Browsing history, clicks, session duration
• Device Data: IP address, browser type, operating system

2. Purpose of Data Use

We use your data to:

• Process ticket purchases and deliver e-tickets
• Verify identity and manage user accounts
• Process payments through the mPAY system
• Send confirmation emails, receipts, and booking/event notifications
• Provide customer support
• Improve and develop our services
• Prevent fraud and ensure system security
• Comply with applicable laws and regulations

3. Legal Basis for Processing

We process your data on the following legal bases:

• Contractual Performance: To process ticket transactions you request
• Legitimate Interests: For security, fraud prevention, and service improvement
• Consent: For newsletters and marketing (you may withdraw consent at any time)
• Legal Obligation: To comply with tax, anti-money laundering, and other laws

4. Disclosure to Third Parties

We may share your data with:

• Payment Providers (mPAY/AIS): For transaction processing
• Email Provider (Postmark): For sending confirmation emails and tickets
• Artists and Organizers: Only data necessary for events you purchase tickets for
• Government Authorities: When required by court order or legal obligation

We do not sell your personal data to third parties for marketing purposes.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to provide services, analyze usage, and improve your experience. You can manage cookie settings through the consent banner on our website. Essential cookies required for system functionality cannot be disabled.

• Essential Cookies: Session management, security
• Analytics Cookies: Usage statistics (requires consent)
• Marketing Cookies: Targeted advertising (requires consent)

6. Data Retention Period

We retain your data as long as necessary for the stated purposes. Account data is kept for the lifetime of your account. Transaction data is kept for 7 years per tax law. E-ticket data is kept for 1 year after the event.

7. Data Subject Rights

Under PDPA, you have the right to:

• Right of Access: Request to view the personal data we hold
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of data under specified conditions
• Right to Data Portability: Request data in a machine-readable format
• Right to Object: Object to processing in certain cases
• Right to Withdraw Consent: Withdraw consent at any time

Submit requests to tickets@myband.co.th

8. Data Security

We implement industry-standard security measures including SSL/TLS encryption, bcrypt password hashing, role-based data access restrictions, and regular security audits. However, no system is 100% secure.

9. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via email or website announcement. Continued use of our services after notification constitutes acceptance of the revised policy.

10. Contact Us

For questions about this privacy policy, please contact: