[operator name] (“we”) runs CMC LIVE, a website for watching Muay Thai live and on demand. This policy explains what personal data we collect, what we use it for, who we share it with and the rights you have under Thailand’s Personal Data Protection Act B.E. 2562 (2019).
1Who we are
The data controller is [operator name], [address]. For anything about your personal data, write to [contact email].
2What we collect
- Account — email, phone number, display name and preferred language. Passwords are stored as a one-way hash that cannot be read back.
- If you sign in with LINE or Google — your account ID there, your name and your email (when the provider shares it). We never receive your LINE or Google password.
- Purchases — what you bought, the amount, the payment method and its status. Card, PromptPay and TrueMoney payments are handled by Opn Payments; we never see or store card numbers.
- Bank transfers — the slip image, the amount and time of the transfer and the account it was paid into.
- Usage — IP address, device and browser, sign-in times, what you watch and how many screens are playing at once.
3How we use it
- To create your account, sign you in and give you access to what you bought.
- To take payments, check slips and refund when needed.
- To limit how many screens play at once and to prevent account sharing and fraud.
- To contact you about your account and orders, such as password reset links.
- To meet legal duties such as accounting and tax.
We rely on performing our contract with you, our legal obligations, and our legitimate interest in preventing fraud.
4Who receives it
We do not sell your data. We share it only with the services we need to run CMC LIVE:
- Opn Payments — card, PromptPay and TrueMoney payments.
- Slip verification service — when automatic checking is on, the slip and its details are sent to be checked with the bank.
- LINE and Google — only when you choose to sign in with them.
- Email, hosting and network providers such as Brevo, DigitalOcean and Cloudflare.
- Authorities, when the law requires it.
Some of these providers keep data outside Thailand; we only use ones with adequate data protection safeguards.
5Peer-to-peer playback
Some shows let viewers pass video to each other directly so playback is smoother. While you watch such a show, your IP address is visible to other viewers of the same show — your name and account are not.
6Cookies
We only use the cookies and browser storage the site needs: keeping you signed in (cmc_at, cmc_rt, cmc_in), remembering your language (cmc_lang) and light or dark mode. No advertising or cross-site tracking cookies. Cloudflare may set cookies for network security.
7How long we keep it
- Account data — until you ask us to delete your account.
- Orders and payment records — [period required by accounting and tax law].
- Sign-in and usage logs — [period].
8Your rights
You can ask to see or get a copy of your data, correct it, delete it, restrict or object to its use, move it elsewhere, and withdraw consent. Send requests to [contact email]; we answer within 30 days. You can edit your name and phone number yourself on My account, and you may complain to Thailand’s Personal Data Protection Committee.
9Security
Every connection uses HTTPS, passwords are hashed, keys for outside services are stored encrypted, and staff reach data only as their role needs, with two-factor sign-in.
10Minors
If you are under 20, get a parent’s or guardian’s consent before signing up or buying.
11Changes
When this policy changes we update this page and its effective date. For significant changes we tell you on the site or by email first.