Player information
Privacy Policy
Last updated: 27 August 2026
Effective date: 10 August 2026
1. Who We Are
Bangkok Cuesports Festival ("we", "us", "our") is operated by 3RE (Thailand) Co., Ltd., a company registered in Thailand under registration number 0105562159448.
For the purposes of Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), we are the Data Controller of the personal data described in this policy.
If you have any questions about this policy or how we handle your personal data, contact our data protection team at support@3re.co.th.
2. Scope
This policy explains what personal data we collect when you register for an event through bangkok-cuesports.com, why we collect it, how we use and protect it, who we share it with, how long we keep it, and the rights you have over it.
3. The Personal Data We Collect
When you register for an event, we collect:
Identity and contact data
- First name and last name
- Country / nationality
- Date of birth
- Email address
- Identification number (from a passport, national ID card, or driver's licence)
- Phone number (including international dialling code)
Identity documents
- A scanned copy or photograph of an identity document you upload (passport, national ID card, or driver's licence)
Playing record
- Your WNT ranking, Fargo rating, and any national titles or achievements you provide
Declarations and consents
- Your responses to the mandatory acknowledgements shown during registration (rules, event regulations, media release, integrity, data privacy, and accuracy)
Technical data
- IP address, browser type, device information, and usage data necessary to operate and secure the website
4. Why We Collect It and Our Lawful Basis
We process your personal data for the following purposes:
| Purpose | Lawful basis |
|---|---|
| To process and review your event registration | Performance of a contract / your consent |
| To verify your identity and eligibility to compete | Legitimate interest / legal obligation / consent |
| To communicate with you about your registration and the event | Performance of a contract / your consent |
| To send you a payment link and confirm your entry | Performance of a contract |
| To produce broadcast graphics, media, and promotional content | Your consent |
| To meet the rules and integrity requirements of the relevant sanctioning body (World Nineball Tour) | Legitimate interest / legal obligation |
| To maintain the security and integrity of our systems | Legitimate interest |
| To comply with applicable laws and respond to lawful requests | Legal obligation |
5. Who We Share It With
We share your personal data only as necessary for the purposes above, with the following categories of recipient:
- Sanctioning body — the World Nineball Tour (WNT / Matchroom), for seeding, ranking, eligibility, and event sanctioning. We share player names, nationalities, and results with WNT. We do not share your uploaded identity documents with WNT.
- Service providers acting on our behalf — our website hosting provider (Vercel), database and secure storage provider (Supabase), email delivery provider (Resend), and network/security provider (Cloudflare).
- Ticketing and payment partner — EventPop, used to process entry fees and ticketing under their own terms.
- Financial and tax authorities — for prize winners, where required to meet Thai tax and accounting obligations.
- Authorities, regulators, or legal advisers — where required by law or to protect our rights.
We do not sell, lease, or disclose your personal data to third-party marketing companies.
6. International Transfers
Some recipients above (including the World Nineball Tour and certain technology providers) are located outside Thailand. Where we transfer your personal data internationally, we take steps to ensure an appropriate level of protection as required by the PDPA, relying on appropriate safeguards and, where applicable, your consent.
7. How We Protect Your Data
We apply technical and organisational measures appropriate to the risk, including:
- Encrypted (HTTPS) connections across the website
- Storage of uploaded identity documents in a private, access-restricted location
- Access to identity documents and identification details limited to authorised administrators only
- Authentication controls on administrative access
- Logging of administrative actions on registration records
No method of transmission or storage is completely secure, but we work to protect your data and to address any incident appropriately.
8. How Long We Keep It
We keep your personal data only as long as necessary for the purposes set out in this policy. Identity documents and records are governed by a structured three-tier retention framework:
- Tier 1 — Identity documents (participants who do not win prize money): identity documents and images collected solely for verification are securely and permanently deleted within thirty (30) days after the festival concludes.
- Tier 2 — Sporting records (all participants): basic player metrics, match scores, brackets, and WNT player IDs are retained indefinitely as historical sporting records and to maintain accurate global ranking data. These are not identity documents.
- Tier 3 — Prize winners: identity and tax-related documents for players who win prize money are securely archived for at least five (5) years to meet Thai tax and corporate auditing obligations.
Other categories are retained as follows:
| Data category | Retention period |
|---|---|
| Registration contact details (name, country, DOB, email, phone) | Up to 24 months after the event, then deleted or anonymised, except where retained as Tier 2 or Tier 3 records |
| Media and broadcast content | For as long as the media remains in use for broadcast or archival purposes |
| Payment and prize-payout confirmation records | At least 5 years (Thai accounting and tax law) |
| Email and communication logs | 12 months |
When a retention period expires, data is securely deleted or irreversibly anonymised. Uploaded identity documents are a priority for prompt deletion once they are no longer needed for verification.
9. Your Rights
Subject to the conditions and exceptions in the PDPA, you have the right to:
- Access the personal data we hold about you and request a copy
- Rectify inaccurate or incomplete data
- Erase your data in certain circumstances
- Restrict or object to certain processing
- Withdraw consent at any time, where processing is based on consent (this does not affect processing already carried out)
- Data portability — receive certain data in a structured, commonly used format
- Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand
To exercise any of these rights, contact us at support@3re.co.th. Note that withdrawing consent for the processing of your identity documents may mean we can no longer process your event registration, and that erasure remains subject to the retention obligations in section 8.
10. Junior participants
Some of our events accept participants under 18, including junior events specifically open to competitors aged 16 and under. Where a participant uses our junior or guardian registration process, we may collect and process personal data relating to the player, their parent or legal guardian, and, where a different person is nominated, the responsible adult who will supervise the player at the venue.
For junior registrations we may collect the player's full legal name, date of birth, nationality, identification document and identification number, and playing record; the parent or legal guardian's full legal name, relationship to the player, email address and telephone number; where a different on-site guardian is nominated, that person's full legal name, role or relationship, email address and telephone number; any medical, allergy, medication or support information the guardian chooses to provide for the player's safety; and a record of the guardian's consent, including the name entered as an electronic signature, the version of the consent wording accepted, and the date, time and relevant technical details of the submission.
Where guardian consent is required, a parent or legal guardian must provide that consent before the player can take part. We use this information to verify the player's eligibility and identity, obtain and evidence guardian consent, communicate about the registration, administer the competition, meet safeguarding requirements, respond to emergencies, maintain sporting results and rankings, and process prizes where applicable. We may share relevant competition information with World Nineball Tour / Matchroom for event sanctioning, administration, results and rankings.
Any medical or health information provided is treated as sensitive personal data. Access is limited to authorised administrators and event personnel who require it for registration administration, the player's safety, safeguarding, first aid or emergency assistance. Identification documents are stored in a private, access-restricted location and are accessible only to authorised administrators.
Further detail on how we handle junior and guardian data, including media consent, retention and privacy rights, is set out in the Junior Participant Privacy Notice, which forms part of this Privacy Policy.
11. Cookies
We currently use only strictly necessary cookies required to operate the website and, for administrators, to keep them signed in. We do not currently use advertising or third-party tracking cookies. If we introduce analytics in future, it will load only with your consent. For details, see our Cookie Policy.
12. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be communicated where appropriate.
13. Contact
For any questions, requests, or complaints regarding this policy or your personal data, contact our data protection team at support@3re.co.th.
Data Retention Summary
This section restates, in one place, how long we keep each category of personal data.
| Data category | Retention period | Rationale |
|---|---|---|
| Identity documents — Tier 1 (non-prize-winners) | Deleted within 30 days after the festival | Minimise retention of high-risk data once identity is verified |
| Sporting records — Tier 2 (all participants) | Indefinite | Historical results and global ranking accuracy |
| Identity & tax documents — Tier 3 (prize winners) | At least 5 years | Thai tax and auditing obligations |
| Registration contact details | Up to 24 months | Player history and event communication |
| Media / broadcast content | While in use | Broadcast and promotional rights granted by the player |
| Payment / payout records | At least 5 years | Legal and accounting obligations |
| Email / communication logs | 12 months | Support and audit |
Deletion practice
- When a retention period expires, data is securely deleted or irreversibly anonymised.
- Uploaded identity documents are a priority for prompt deletion once no longer needed for verification.
- Where a player withdraws consent or requests erasure, we action the request in line with section 9 and the retention framework in section 8.