This is an English translation provided for convenience. The Thai version is legally binding and prevails in case of any discrepancy.

Privacy Policy

Effective: 5 July 2026

I Pay Plus Co., Ltd. respects your privacy and collects, uses and discloses personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

1. Data we collect

Identity: full name, national ID (stored encrypted), date of birth.

Contact: phone, address, email, location.

Financial/occupation: income, occupation, income documents (slips/statements).

Device: model/IMEI of the financed or traded device.

2. Purposes

To assess credit, contract, bill installments, collect debt, prevent fraud, comply with law, and improve our services.

3. Legal basis

We process data on the basis of contract performance, consent, legitimate interest, and legal compliance.

4. Disclosure

We may disclose data to necessary service partners (e.g. e-KYC and payment providers), regulators, or under lawful orders, only as necessary.

5. Location data

Application location: when you apply for an installment plan or confirm an application in the portal, we may ask for your device’s approximate GPS position once, at that moment, for fraud prevention and identity verification of the applicant. It is requested only when you tap allow. Not sharing your location does not affect the assessment of your application.

This location is kept with the application record for the same retention period as the application (see section 6) and is accessible only to staff who review applications.

IP-derived location: we record the approximate country and city derived from your device’s IP address when an application is submitted, to support fraud checks (this is not a precise location).

“Branches near me” on the branches page: your location is used to calculate distances in your browser only. It is not sent to our servers and not stored. Map images are loaded from OpenStreetMap, which receives your device’s IP address when the images load (not your location).

You can turn off location access at any time in your browser or device settings.

6. Retention

We keep data for up to 10 years after the contractual relationship ends, or as required by law, then delete or anonymize it.

7. Your rights

You may request access, correction, erasure, portability, objection, restriction and withdrawal of consent, and to know the reason for a credit refusal and to appeal.

Exercise your rights at support@istarmobile.co.th

8. Security

We apply appropriate technical and organizational measures, e.g. encrypting ID data and restricting access.

9. Contact

I Pay Plus Co., Ltd. · Email support@istarmobile.co.th