1. Introduction This Privacy Policy describes how Pubcastplus ZCANME ENTERPRISE COMPANY LIMITED ("Pubcastplus," "we," "us," or "our") collects, uses, and protects the personal data of individuals
("Patrons," "you," or "your") who use the Pubcastplus KYC verification service ("the Service") at our partner establishments ("Establishments"). We are committed to protecting your privacy in compliance with Thailand's Personal Data Protection Act B.E. 2552 (2019) ("PDPA").

2. The Data Controller Pubcastplus is the sole Data Controller for all personal data collected through the Service.

• Company Name: ZCANME ENTERPRISE COMPANY LIMITED
• Address: 559/101 Suea Yai Uthit Alley, Khwaeng Chan Kasem, Khet Chatuchak, Krung Thep Maha Nakhon 10900, Thailand
• Data Protection Officer (DPO) Contact: janerob suppatpisal

3. Personal Data We Collect The Service reads information directly from your Thai National ID card. The data we process is detailed below:

4. Lawful Basis for Processing We process your data based on the following legal grounds:

• Legal Obligation: To enable our partner Establishments to comply with their legal duty to verify age under the Alcoholic Beverage Control Act, B.E. 2551.
• Legitimate Interest: We have a legitimate interest in operating our verification service, providing security for our partner Establishments, preventing fraud, and assisting in incident reporting.

5. How We Use Your Data Your personal data is used for the following specific purposes:

• To provide our core identity and age verification service to Establishments.
• To create a temporary, secure log of entries for safety and incident management.
• To compile anonymized, aggregate statistics to analyze demographic trends and improve our service.

6. Disclosure of Personal Data to Establishments To allow for on-site verification, we disclose a limited subset of your data to the staff at the Establishment you are entering.

• Data Disclosed: Your photograph, age, and sex.
• Method: This data is displayed temporarily on a secure screen and is not stored by the Establishment.
• Obligation: Our contract requires the Establishment to use this data only for verification and to ensure their staff maintain its confidentiality.

7. Data Retention

• Personally Identifiable Information (PII): All PII is stored securely for 14 days.
• Permanent Deletion: After this period, all PII is automatically and permanently purged from our systems.
• Anonymized Data: Anonymized data (age and sex) is retained for statistical analysis.

8. Data Security We implement robust technical and organizational security measures, including database encryption, strict access controls, secure network configurations, and automated deletion protocols to protect your data at all times.

9. Your Rights as a Data Subject Under the PDPA, you have the right to:

• Right to be Informed: To be informed about the collection and use of your data.
• Right of Access: To request a copy of the personal data we hold about you.
• Right to Rectification: To have inaccurate personal data corrected.
• Right to Erasure: To have your personal data erased ('right to be forgotten').
• Right to Restrict Processing: To request the restriction of your data processing.
• Right to Data Portability: To obtain and reuse your data for your own purposes.
• Right to Object: To object to the processing of your data.

To exercise these rights, please contact Pubcastplus directly using the details in Article 10.

10. Contact Information For any questions, concerns, or requests, please contact our Data Protection Officer:

• Email: dpo@pubcastplus.com

11. Changes to This Privacy Policy We may update this policy from time to time. The latest version will always be available on our website and via the QR code at our partner Establishments.