Privacy Policy
Effective Date: 1 April 2026
Effective Date: 1 April 2026 Last Updated: 1 April 2026
GOGO HOLDING (THAILAND) Company Limited (“GoGoCash,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, transfer, and otherwise process your personal data when you use our website, LINE Mini App, customer support channels, merchant-related services, promotions, and any other GoGoCash products or services (collectively, the “Services”).
This Privacy Policy is intended to help you understand:
- what personal data we collect,
- why we collect it,
- how we use it,
- when we share it,
- how long we keep it,
- what rights you have, and
- how you can contact us.
By using our Services, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject to your rights under applicable law.
1. Who We Are
GOGO HOLDING (THAILAND) Company Limited is the data controller for the personal data processed under this Privacy Policy, except where we expressly state otherwise.
Controller: GOGO HOLDING (THAILAND) Company Limited Company Address: 536/3 Sangkha, Surin 32150, Thailand Contact Email: info@gogocash.co Website: https://gogocash.co
If GoGoCash appoints a data protection contact or representative for privacy matters, the details should be added here.
2. Scope of This Policy
This Privacy Policy applies to personal data processed by GoGoCash in connection with:
- account registration and user management,
- cashback tracking and reward processing,
- merchant and affiliate referral tracking,
- payment, withdrawal, or settlement-related workflows,
- customer service and complaint handling,
- product improvement and analytics,
- marketing communications,
- recruitment, business development, and partnership communications,
- website and LINE Mini App usage.
This Privacy Policy does not apply to third-party websites, merchants, affiliate networks, payment providers, or platforms that GoGoCash does not control, even where they are linked from or connected to our Services. Those parties process personal data under their own privacy notices and terms.
3. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, technology, our Services, or our data processing practices. When required by law, we will provide notice of material changes through our website, app, email, LINE, or other appropriate channels.
The “Effective Date” at the top of this page shows when this version became effective.
4. Personal Data We Collect
We collect personal data depending on how you interact with our Services.
4.1 Data you provide directly
We may collect:
- full name,
- email address,
- mobile number,
- date of birth,
- gender,
- address,
- account credentials or account-related details,
- communication preferences,
- support requests and messages,
- survey responses,
- contest or campaign participation details,
- business contact information,
- recruitment and job application information,
- information you submit through forms, customer service, or other channels.
4.2 Account and transaction-related data
Where relevant to cashback and reward services, we may collect:
- account ID,
- merchant name,
- affiliate or referral identifier,
- order reference or transaction reference,
- purchase date,
- purchase amount,
- cashback amount,
- cashback status,
- reward eligibility data,
- payout or withdrawal details,
- payment method details,
- bank account or wallet details where needed for payout processing,
- fraud review or dispute handling information.
We only collect payment or payout-related information that is necessary for processing transactions, cashback, settlements, fraud prevention, compliance, or support.
4.3 Data collected automatically
When you use our Services, we may collect technical and usage data such as:
- IP address,
- device identifiers,
- browser type,
- operating system,
- app version,
- device settings,
- timestamps,
- login activity,
- pages viewed,
- clicks and navigation behavior,
- referring URLs,
- approximate location derived from IP,
- crash logs,
- performance logs,
- cookies and similar tracking identifiers.
4.4 Referral tracking and partner attribution data
When you use GoGoCash cashback, referral, or merchant-related features, we may collect data needed to determine:
- whether a merchant is supported,
- whether a click or referral originated from GoGoCash,
- whether a cashback event should be tracked,
- whether a promotion, reward, or campaign interaction succeeded,
- technical data necessary to operate, troubleshoot, and secure the Services.
4.5 Data from third parties
We may receive personal data from:
- merchants,
- affiliate networks,
- payment providers,
- analytics providers,
- advertising partners,
- identity or login providers,
- customer support tools,
- fraud prevention providers,
- social login providers,
- business partners,
- public sources, where permitted by law.
4.6 Sensitive personal data
We do not intentionally collect sensitive personal data unless:
- it is required by law,
- it is necessary for a specific service you request,
- you have given explicit consent where required, or
- another lawful basis applies.
If sensitive personal data is ever collected, we will handle it in accordance with applicable law and additional safeguards where required.
5. Why We Process Your Personal Data
We may process your personal data for the following purposes:
5.1 To provide and operate the Services
- create and manage your account,
- authenticate you,
- provide cashback and rewards,
- track eligible purchases and referrals,
- process payouts, withdrawals, or settlements,
- enable merchant or promotional offers,
- provide customer support,
- maintain service functionality.
5.2 To manage our business operations
- administer our platform,
- troubleshoot issues,
- improve service performance,
- monitor product quality,
- maintain records,
- conduct reporting and analytics,
- manage complaints, disputes, or claims,
- run audits and internal reviews,
- manage partnerships and vendor relationships.
5.3 To protect users, GoGoCash, and the platform
- detect and prevent fraud,
- investigate suspicious activity,
- enforce our terms and policies,
- protect systems, accounts, and infrastructure,
- maintain backup, logging, and service resilience,
- respond to incidents and security events.
5.4 To communicate with you
- send service notifications,
- respond to support requests,
- notify you about transactions, rewards, claims, or account activity,
- send policy or terms updates,
- send marketing communications where permitted by law.
5.5 For legal and compliance purposes
- comply with applicable laws and regulations,
- respond to lawful requests,
- establish, exercise, or defend legal claims,
- maintain legally required records,
- perform checks related to fraud, abuse, or financial risk where permitted.
5.6 With your consent
Where required, we may process your personal data based on your consent, including for certain marketing, cookie, or optional feature-related activities. You may withdraw your consent at any time, subject to legal limitations.
6. Legal Bases for Processing
Depending on the applicable law and the context, we may process your personal data on one or more of the following legal bases:
- to perform a contract with you,
- to comply with a legal obligation,
- for our legitimate interests, where those interests are not overridden by your rights,
- based on your consent,
- to prevent or suppress a danger to life, body, or health,
- for the establishment, compliance, exercise, or defense of legal claims.
Where we rely on legitimate interests, these may include operating the platform, improving services, preventing fraud, maintaining security, handling business operations, and communicating with users about relevant services.
7. Cookies and Similar Technologies
We use cookies and similar technologies to operate, secure, analyze, and improve our Services.
These technologies may include:
- strictly necessary cookies,
- functional cookies,
- analytics cookies,
- advertising or personalization cookies, where permitted.
We use such technologies to:
- keep you signed in,
- maintain session security,
- remember preferences,
- measure traffic and usage,
- support cashback tracking,
- analyze service performance,
- improve user experience,
- support relevant marketing where permitted.
Where required by law, we will request consent before using non-essential cookies or similar technologies. You may manage cookies through your browser settings, device settings, or any cookie settings tool we provide.
If you publish a separate Cookie Notice, add a link here: Cookie Notice: [Insert URL]
8. Marketing and Advertising
We may send you marketing messages by email, SMS, LINE, push notification, or other channels where permitted by law. You can opt out of marketing communications at any time by using the unsubscribe function, changing your settings, or contacting us.
We may also use audience matching, retargeting, personalization, or analytics tools for marketing performance, subject to applicable law and consent requirements where required.
We do not sell personal data in the ordinary meaning of the term. If any applicable law treats certain advertising-related disclosures as a “sale” or “sharing,” we will honor any rights you may have under that law.
9. Automated Decision-Making and Profiling
We may use automation, rules, scoring, or profiling tools to operate the Services, including to:
- determine cashback eligibility,
- detect suspicious or fraudulent activity,
- personalize offers,
- prioritize support or risk review,
- improve service performance.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you unless:
- such processing is necessary for a contract,
- you have given valid consent, or
- applicable law otherwise permits it.
You may contact us if you would like more information about relevant automated processing.
10. How We Share Personal Data
We may disclose personal data only where there is a valid business, operational, legal, or contractual reason.
10.1 Service providers
We may share personal data with vendors and service providers that help us operate the Services, such as:
- hosting and infrastructure providers,
- analytics providers,
- payment or payout providers,
- customer support providers,
- communications providers,
- fraud monitoring providers,
- professional advisors,
- security or monitoring providers,
- storage and productivity providers.
These parties may process personal data on our behalf under appropriate contractual or legal controls.
10.2 Merchants, affiliate networks, and partners
To provide cashback, referral attribution, and merchant-related services, we may share limited data with merchants, affiliate networks, or related partners, such as:
- referral or click identifiers,
- transaction attribution identifiers,
- campaign identifiers,
- order-related references,
- data needed to validate or reconcile cashback.
These third parties process your data under their own terms and privacy notices where they act as independent controllers.
10.3 Group companies and affiliates
We may share data with affiliated entities for internal administration, service support, risk management, governance, or other legitimate business purposes, subject to applicable law.
10.4 Legal and protective disclosures
We may disclose personal data where necessary to:
- comply with law,
- respond to lawful requests,
- protect users, GoGoCash, or others,
- investigate fraud, abuse, or security incidents,
- enforce our terms, contracts, or policies,
- protect legal rights.
10.5 Corporate transactions
We may disclose personal data in connection with a merger, financing, acquisition, restructuring, asset sale, due diligence process, or similar corporate transaction, subject to appropriate confidentiality and legal controls.
11. International Transfers
Your personal data may be transferred to or accessed from countries outside your jurisdiction, including where our vendors, partners, systems, or support providers operate.
Where required by applicable law, we will implement appropriate safeguards for cross-border transfers, such as:
- contractual safeguards,
- intra-group protections,
- access restrictions,
- security controls,
- transfer risk assessments where appropriate.
By using our Services, you acknowledge that your personal data may be processed in jurisdictions that may have different data protection laws than your home jurisdiction, subject to applicable safeguards.
12. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
- providing the Services,
- maintaining your account,
- processing rewards or cashback,
- handling claims, disputes, complaints, and investigations,
- complying with legal, tax, accounting, contractual, or regulatory obligations,
- maintaining security logs and business records,
- establishing or defending legal claims,
- preventing fraud and abuse.
Retention periods may vary depending on the type of data and the reason we collected it. When personal data is no longer required, we will delete, anonymize, or securely archive it as required by law and our retention standards.
13. Data Security
We maintain administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, use, disclosure, alteration, or destruction.
These safeguards may include:
- role-based access controls,
- authentication controls,
- logging and monitoring,
- encryption or secure transmission where appropriate,
- backup and recovery controls,
- change management,
- vendor review,
- incident response processes,
- employee access restrictions,
- periodic review of security practices.
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work to protect personal data using measures appropriate to the nature of the data and the risks involved.
14. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal data,
- request a copy of your personal data,
- request correction of inaccurate or incomplete data,
- request deletion of your personal data,
- request restriction of processing,
- object to certain processing,
- withdraw consent where processing is based on consent,
- request portability where applicable,
- lodge a complaint with a competent authority.
We may need to verify your identity before processing your request. We may also decline or limit a request where permitted by law.
To exercise your rights, contact us at: info@gogocash.co
If you create an intake form, add: Privacy Request Form: [Insert URL]
15. Communications Preferences
You can opt out of certain communications as follows:
- email marketing: use the unsubscribe link,
- SMS or LINE marketing: follow the instructions in the message,
- push notifications: update your app or device settings,
- cookies: use the cookie controls or browser settings where available.
Please note that service, security, legal, transactional, or account-related communications may still be sent where necessary.
16. Children’s Data
Our Services are not directed to children, and we do not knowingly collect personal data from children in violation of applicable law.
If you believe a child has provided personal data to us without proper authorization, please contact us. We will take reasonable steps to investigate and, where required, delete the data or take other appropriate action.
If you want Thailand-specific wording, you may add: “In Thailand, this may include persons below the age of legal capacity unless valid consent is provided by a parent, guardian, or other lawful representative where required.”
17. Third-Party Services
Our Services may link to third-party websites, merchant sites, apps, or services. We do not control those third parties and are not responsible for their privacy practices.
We encourage you to review the privacy notices of any third-party service before providing your personal data.
18. Data Breach and Incident Communications
If we become aware of a personal data breach, we will assess the incident promptly and take action as required by applicable law, which may include containment, investigation, remediation, and notification to affected individuals or regulators where legally required.
19. Contact Us
If you have questions, complaints, or requests regarding this Privacy Policy or our privacy practices, please contact:
GOGO HOLDING (THAILAND) Company Limited Company Address: 536/3 Sangkha, Surin 32150, Thailand Email: info@gogocash.co Website: https://gogocash.co