Player information
Privacy Policy
Last updated: 11 October 2026
Effective date: 10 August 2026
1. Who We Are
Bangkok Cuesports Festival ("we", "us", "our") is operated by 3RE (Thailand) Co., Ltd., a company registered in Thailand under registration number 0105562159448.
For the purposes of Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), we are the Data Controller of the personal data described in this policy.
If you have any questions about this policy or how we handle your personal data, contact our data protection team at support@3re.co.th.
2. Scope
This policy explains what personal data we collect when you register to play in an event, when a parent or guardian registers a junior player, when you request a free spectator ticket, or when you contact us through bangkok-cuesports.com — why we collect it, how we use and protect it, who we share it with, how long we keep it, and the rights you have over it.
3. The Personal Data We Collect
When you register to play, we collect:
Identity and contact data
- First name and last name
- Country / nationality
- Date of birth
- Email address
- Identification number (from a passport, national ID card, or driver's licence)
- Phone number (including international dialling code)
Identity documents
- A scanned copy or photograph of an identity document you upload (passport, national ID card, or driver's licence)
Playing record
- Your WNT ranking, Fargo rating, and any national titles or achievements you provide
Declarations and acknowledgements
- Your responses to the required declarations shown during registration (rules, event regulations, media release, integrity, privacy acknowledgement, and accuracy)
Spectator tickets
When you request a free spectator ticket, we collect your full name as shown on your official ID, your email address, and your phone number. We create a ticket reference and a QR code for your ticket. We do not collect or store a copy of your ID for spectator tickets — your ID is only checked in person at the entrance.
Registration records
- The status of your registration, our review notes, and a record of the emails we send you
Contact form
- Your name, email address and message when you use our contact form
Technical data
- Technical information such as your IP address and browser and device type, used to run the website securely and to protect our forms from spam and automated abuse
- When you request or re-send a spectator ticket, a scrambled (hashed) copy of your IP address and email address, used only to prevent abuse of the form and automatically deleted within 3 days
4. Why We Collect It and Our Lawful Basis
We process your personal data for the following purposes:
| Purpose | Lawful basis |
|---|---|
| To process and review your event registration | Performance of a contract |
| To verify your identity and eligibility to compete | Legitimate interest / legal obligation |
| To communicate with you about your registration and the event | Performance of a contract |
| To send you a payment link and confirm your entry | Performance of a contract |
| To produce broadcast graphics, media, and promotional content | Your consent |
| To meet the rules and integrity requirements of the relevant sanctioning body (World Nineball Tour) | Legitimate interest / legal obligation |
| To issue and manage free spectator tickets and check ticket holders' identity at the entrance | Performance of a contract / legitimate interest |
| To maintain the security and integrity of our systems, including preventing abuse of our forms | Legitimate interest |
| To comply with applicable laws and respond to lawful requests | Legal obligation |
The information marked as required on our forms is needed to process your registration or issue your ticket. If you do not provide it, we will not be able to accept your registration or issue a ticket.
5. Who We Share It With
We share your personal data only as necessary for the purposes above, with the following categories of recipient:
- Sanctioning body — the World Nineball Tour (WNT / Matchroom), for seeding, ranking, eligibility, and event sanctioning. We share player names, nationalities, and results with WNT. We do not share your uploaded identity documents with WNT.
- Service providers acting on our behalf — companies that provide our website hosting, database and secure file storage, email delivery and mailboxes, and protection against spam and automated abuse. They process personal data on our behalf to provide these services.
- Ticketing and payment partner — EventPop, used to process entry fees and ticketing under their own terms.
- Financial and tax authorities — for prize winners, where required to meet Thai tax and accounting obligations.
- Authorities, regulators, or legal advisers — where required by law or to protect our rights.
We do not sell, lease, or disclose your personal data to third-party marketing companies.
6. International Transfers
Our database and secure file storage, which hold your registration details and uploaded documents, are located in Singapore. Some of our service providers are based in the United States and may process personal data there or in other countries where they operate — for example, for website hosting, email delivery and protection against spam.
Competition information we share with the World Nineball Tour (Matchroom) is transferred to the United Kingdom. Where we transfer personal data outside Thailand, we take steps to ensure it receives an appropriate level of protection, as required by the PDPA.
7. How We Protect Your Data
We use technical and organisational measures appropriate to the risk. Information is sent over encrypted connections, uploaded identity documents are stored privately, and access to identity documents and other sensitive details is limited to authorised staff. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any incident.
8. How Long We Keep It
We keep personal data only for as long as we need it for the purposes in this policy, or for as long as the law requires:
| Information | How long we keep it |
|---|---|
| Uploaded identity documents (players who do not win prize money) | Deleted within 30 days after the festival ends |
| Identity documents and tax records of prize winners | At least 5 years, to meet Thai tax and accounting requirements |
| Registration details, including ID number, date of birth, contact details, and any guardian details and consent records | Up to 24 months after the event, so we can deal with questions, disputes and eligibility checks about your entries; then deleted or anonymised |
| Results and rankings (name, nationality and results) | Kept indefinitely as part of the historical sporting record |
| Payment and prize-payout records | At least 5 years (Thai accounting and tax law) |
| Photos, video and broadcast content | For as long as it remains in use for broadcast or archive purposes |
| Junior players' medical, allergy and support information | Only as long as reasonably necessary for the player's safety (see the Junior Participant Privacy Notice) |
| Records of emails we send you | 12 months |
| Spectator ticket details (name, email, phone and ticket reference) | Deleted within 30 days after the event ends |
| Scrambled (hashed) anti-abuse records for the spectator forms | Automatically deleted within 3 days |
| Contact form messages | As long as needed to answer your enquiry and deal with any follow-up |
| Technical and security logs | Normally no more than 30 days |
When a retention period ends, we securely delete the data or anonymise it so that it no longer identifies you. If you ask us to delete your data, we may still need to keep some records for the periods above where the law requires it.
9. Your Rights
Subject to the conditions and exceptions in the PDPA, you have the right to:
- Access the personal data we hold about you and request a copy
- Rectify inaccurate or incomplete data
- Erase your data in certain circumstances
- Restrict or object to certain processing
- Withdraw consent at any time, where processing is based on consent (this does not affect processing already carried out)
- Data portability — receive certain data in a structured, commonly used format
- Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand
To exercise any of these rights, contact us at support@3re.co.th. If you object to, or ask us to delete, the identity information we need to verify your eligibility, we may no longer be able to process your registration. Deletion requests are also subject to the retention periods in section 8.
10. Junior participants
Some of our events accept players under 18. Where guardian consent is required, a parent or legal guardian must give that consent before the player can take part. For these registrations we also collect the parent or guardian's details and, where a different adult is nominated, the details of the adult who will supervise the player at the venue, together with a record of the guardian's consent.
Any medical, allergy, medication or support information a guardian chooses to provide is sensitive personal data. It is provided with the guardian's explicit consent, used only to administer the registration and look after the player's safety, and seen only by authorised staff who need it.
Further detail on how we handle junior and guardian data, including media consent, retention and privacy rights, is set out in the Junior Participant Privacy Notice, which forms part of this Privacy Policy.
11. Cookies
We currently use only strictly necessary cookies required to operate the website and, for administrators, to keep them signed in. We do not currently use advertising or third-party tracking cookies. If we introduce analytics in future, it will load only with your consent. For details, see our Cookie Policy.
12. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be communicated where appropriate.
13. Contact
For any questions, requests, or complaints regarding this policy or your personal data, contact our data protection team at support@3re.co.th.