StayGold Privacy Notice 1.0

Privacy Notice for StayGold Application User

Bitkub Longevity Co., Ltd.

Bitkub Longevity Co., Ltd. (the “Company”) respects and recognizes the importance of your right

of privacy and protection of your personal data and to ensure that your personal data is protected

in accordance with the Personal Data Protection Act B.E. 2562, the Company has created this

privacy notice to inform the details and purposes of how the Company collects, uses, and discloses

(collectively called “Processes” “Processed” or “Processing”) of personal data for person who

use or will use StayGold Application (“Application”), or contact for information, or receive the

information related to the Application (hereinafter collectively referred to as the “User”) as

follows.

1. The personal data which the Company Process

The Company processes various types of your personal data which including but not limited

to these personal data as follows:

(a) Identity data such as name, surname, date of birth, gender, height, and weight

(b) Contact data such as mobile phone number, address, and email

picture, leaderboard data, and the number of StayGold points.

(d) Social media account data such as Google account, Facebook account, Bitkub

Exchange account, and Bitkub NEXT account.

(e) Health data such as active calories burning, steps counting, BMI data, StayGold Coach

feature usage, and sleeping data.

2. Source of your personal data

The Company collects your personal data for the necessary for compliance with a performance

of the contract, legal obligation, and for the purpose of legitimate interest pursued by the

Company or by other stakeholders. In this regard, the Company collects your personal data

from various sources as follows:

1) the Company collects your personal data directly from you when you register the

account in Application;

2) the Company collects your personal data from social media account when you login

with social media account; and

3) the Company collects your personal data from health application on your mobile phone

device when you connect the health data.

3. Processing of personal data

The Company processes your personal data under the legal bases or exceptions of the Personal

Data Protection Act B.E. 2562 including obtained your consent, for the performance of the

contract in using the Application, legal obligation, and for the purpose of legitimate interest

pursued by the Company or by other stakeholders. Using the Application, the Company may

disclose some of your personal data to the third party for service operation. The Company shall

StayGold Privacy Notice 1.0

take the necessary measures to ensure that your personal data is disclosed and/or transferred

only to the extent necessity and in accordance with the law. In this regard, the Company

Processes your personal data regarding these legal bases as follows:

For the performance with the contract

1) Application’s account registration

2) Sending OTP to User, in this regard, the Company sends your mobile phone number to

the SMS sending service provider

3) Setting new password in the event that you forget your password

4) Logging in with social media account

5) Setting User’s profile

6) Using Feed feature in the Application

7) Using the Event feature in the Application

8) Using the Marketplace feature in the Application

9) Using the Top Navigation feature in the Application

10) Displaying the leaderboard data

Obtained your consent

1) Connecting the health data from the health application on your mobile phone device

2) BMI calculating

3) StayGold Point calculating from health data

4) Using the Challenge feature in the Application

5) Using the StayGold Coach feature in the Application

4. Sending or transferring your personal data to foreign country

4.1. The Company may transmit or transfer your personal data to foreign country only with

your explicit consent or where it is necessary for the Company to comply with the legal

obligation, or for the performance of the contract which you are a party, or the

performance of a contract between the Company and another person or juristic person for

the benefit of you.

4.2. The Company stores your personal data on servers or cloud computing provided by third

party located abroad. In this regard, the Company undertakes to ensure that the service

provider has adequate personal data security safeguards.

4.3. The Company shall comply with the persona data protection laws and take necessary

actions to ensure that your personal data which is sent or transferred to foreign country is

adequately protected.

5. Personal data retention period

The Company stores your personal data only for the period necessary to achieve with the

purposes notified above, to comply with the contract and founding laws, or to exercise legal

claims and for the legitimate interests of the Company or other stakeholders as set out in the

Company’s personal data retention policy. The Company shall delete or destroy your personal

data or make it anonymous when it is no longer necessary in relation to the purpose for which

it was processed or when the period specified in the retention policy ends.

StayGold Privacy Notice 1.0

6. Security measures

The Company values the security of your personal data. In this regard, the Company has put

in place appropriate security, technical, and administrative measures to ensure that your

personal data is not accessed, modified, changed, deleted, or destroyed by any unauthorized

person. A review of such measures is organized when necessary or when the technology

changes to ensure that information security is always effective.

7. Exercising your rights as a data subject

You can e xer cise the ri ght whic h y ou have und er the l ega l basis set ou t in th e Pe rso n al Data

Protection Act B.E. 2562, relevant law, notice, and regulation including:

7.1. Right to withdraw consent: You have the right to withdraw the consent to personal data

Processing which you have given to the Company at any time as long as your personal

data is stored with the Company unless there is a legal limitation or there is a contract

between you and the Company that benefit you.

7.2. Right to access your personal data and request to disclose the source of your

personal data: Yo u ha ve t he righ t t o ac ces s yo ur personal data which the Company

collected, used, and disclosed and have the right to request the Company to disclose the

source of your personal data.

7.3. Right to ratification: You have the right to request the Company to rectify your personal

data if it is inaccurate or incomplete.

7.4. Right to erasure your personal data or anonymize data: You have th e ri ght to requ est

the Company to erase, destruct, or anonymize your personal data if your personal data is

no longer necessary in relation to the purposes in which it was collected.

7.5. Right to restriction of Processing your personal data: You have the right to request the

Company to restrict the Processing of your personal data temporarily when the Company

is in the process of investigating your request to ratification and/or objection or any other

event where your personal data is no longer necessary in use and the Company must

erase or destruct your personal data in accordance with the relevant law but you oppose

such erasure and request the restriction of the use instead.

7.6. Right to data portability in the form of automated mean: You have the right to request

the Comoany to transmit your personal data to another data controller if the Processing is

carried out by automated means unless technical conditions do not allow. However, the

Company does not yet have a system to support the exercise of such right.

7.7. Right to object the processing: You ha ve the rig h t t o o b jec t th e d ata Processing in some

event.

However, you may not be able to exercise your rights or some exercise may appear to cost

you if your request is in the scope of the following:

1) It is contrary to or inconsistent with the right set forth in Personal Data Protection

Act B.E. 2562, applicable law, or relevant notice;

2) It is contrary to law or the court order;

3) It effects to the right and freedom of other people;

4) It is the dishonest, redundant, or unreasonable exercise of right; or

5) It influences the investigation exercise of judicial rights or court proceedings, etc.

You can exercise your right by sending the request to email: staygold@bitkub.com

StayGold Privacy Notice 1.0

8. Notification of changes

The Company values the respect of your privacy and the accuracy of your personal data. If

your Personal Data has changed, please inform the Company immediately.

9. Right to investigate and file a claim

In the event that you find that the the Company has incorrectly Processed your personal data

or that the personal data breach has occurred, you have the right to complain to the committee

which is responsible for considering the complaint under the Personal Data Protection Act

B.E.2562 or claim a lawsuit and request to investigate the action that violates personal data

according to the rights that you have according to the law.

10. Contact details

• Bitkub Longevity Co., Ltd., 2525 FYI Center Building 2, 11

Floor, 2/1101-2/1107

Units, Rama IV Road, Klong Toei Sub-district, Klong Toei District, Bangkok 10110

email: staygold@bitkub.com

• Data Protection Officer 2525 FYI Center Building 2, 11

Floor, 2/1101-2/1107 Units,

Rama IV Road, Klong Toei Sub-district, Klong Toei District, Bangkok 10110

email: dpo_bl@bitkub.com

This privacy notice was updated in October 2025