• Identification Data: Full name, nationality, date of birth, passport details, national ID card numbers, and photos/copies of legal identity documents.
• Contact Information: Phone number, physical address, email address, and social media handles (if used for communication).
• Financial Transaction Data: Transaction dates, exchange amounts, currencies traded, source of funds, and bank account details (for electronic transfers).
• Technical & Security Data: CCTV footage from our retail locations, device fingerprints, and IP addresses if accessing online platforms.

• Legal Obligation: We must collect and verify identity data to fulfill Know Your Customer (KYC) and Customer Due Diligence (CDD) rules enforced by the Anti-Money Laundering Office (AMLO) and the BOT.
• Contractual Necessity: To execute currency exchange transactions and issue transaction receipts.
• Legitimate Interests: For security monitoring via CCTV at physical premises and to prevent fraudulent activities.

⚠️ REGULATORY MANDATE: Under Thai Anti-Money Laundering laws, financial records and customer verification data must be retained for a minimum of 10 years from the date the transaction or business relationship terminates.

• Government Authorities: Compliance reporting to AMLO, the Bank of Thailand, tax offices, and law enforcement agencies upon valid legal request.
• Service Providers: Trusted IT partners, cloud storage providers, and security vendors under strict data processing agreements.

• Right of Access: Request copies of your personal data held by us.
• Right to Rectification: Request corrections to inaccurate or incomplete information.
• Right to Restriction/Objection: Limit processing of data under specific legal circumstances.
• Right to Data Portability: Request transfer of your data to another data controller where technically feasible.

• iSurge Money Exchange Co Ltd
• Email: hi@isurge.money