Skip to content
1TRADER · Policies

Privacy Policy

1TRADER collects only the personal data needed to provide our news, tools, rebates and member system. This page explains what we collect, what we use it for, who we share it with, how long we keep it and how you can exercise your rights under the Personal Data Protection Act 2019 (PDPA).

Effective from 26 September 2026 · Latest version

1. Scope and data controller

This policy applies to all services of 1TRADER (“we”), the data controller, namely:

  • The 1trader.com website and the member website member.1trader.com
  • The 1trader app on the App Store and Google Play
  • Our official social media and messaging accounts, including the Facebook page 1trader.thailand and the YouTube channel @1Trader

This policy does not cover third-party websites or services, such as the broker you open an account with, which have their own privacy policies.

2. Data we collect

TypeExamplesSource
Contact detailsName, display name and user ID on messaging apps or Facebook, phone number and messages you send usYou contact us via Facebook, a messaging app or another channel
Member accountFull name, phone number, password (stored with one-way encryption), delivery address for rewards and bank account details for payoutsYou sign up or update your details on the member website
Trading account and rebatesBroker name, trading account number, account type, lots and commission reported by the broker, rebate balance, points, withdrawal and reward history, and participation in activities or contestsYou give us your trading account number, and brokers send us partner (IB) reports
Technical dataIP address, device and browser type, pages visited, time of visit, cookies and system logsCollected automatically when you use the website or app

What we never ask for: your trading account password, OTP codes or email password. Identity verification (KYC) and trading deposits and withdrawals are handled directly with the broker. If someone claiming to be the 1TRADER team asks for these details, do not give them and let us know on our Facebook page.

We do not intend to collect sensitive data under section 26 of the PDPA, such as health, religious or biometric data. If such data is included in documents you send us, we will delete it or not use it.

3. How we use your data and the legal basis

PurposeLegal basis
Confirm that a trading account is under our partner code, and calculate and pay rebatesPerformance of a contract
Open and manage member accounts, points, rewards and activities, including delivering rewardsPerformance of a contract
Answer questions, solve problems and notify you about your accountPerformance of a contract / legitimate interests
Prevent fraud and account takeover, and keep our systems secureLegitimate interests
Review overall usage statistics to improve the website, app and contentLegitimate interests (statistics cookies require consent)
Send news, promotions or new activities via messaging apps or the appConsent (you can withdraw at any time, for example by blocking our account or turning off notifications)
Accounting, tax and compliance with orders from government authoritiesLegal obligation

If you do not provide necessary data, such as your trading account number or payout account, we may not be able to pay rebates or deliver rewards. We will not use your data beyond the purposes above. If we want to use it for a new purpose, we will inform you or ask for your consent first.

5. Disclosure of data

We do not sell your personal data. We share data only as needed with:

  • Brokers we partner with (Exness, XM, HFM) to verify trading accounts and check the volumes used to calculate rebates
  • Service providers working for us such as website hosting and messaging providers, banks or payment channels and reward delivery companies, which may use the data only for the work we assign
  • Government agencies or legal authorities when required by an order or by law, or to prevent fraud and protect our rights

Transfers abroad: Some of our providers, such as website hosting, messaging apps and brokers, have servers in other countries. We only transfer the data that is needed and choose providers with appropriate data protection measures under sections 28 and 29 of the PDPA.

6. How long we keep data

DataRetention period
Member accounts, trading accounts, rebate history, payments and rewardsAs long as you use our services, plus up to 5 years after you stop, for accounting, tax and dispute records
General enquiries via messaging apps or Facebook not related to paymentsUp to 2 years from your last contact
Cookie consent records (random ID, choices, time, hashed IP)Up to 2 years
System logs and security dataUp to 1 year, unless needed to investigate unusual activity

After these periods, we delete or destroy the data or make it impossible to identify you.

7. Security

  • HTTPS on every page
  • Member passwords are stored with one-way encryption, so the team cannot read your password
  • Failed login attempts are limited, and cross-site request forgery (CSRF) is blocked
  • Administrator access is limited to the data each person needs for their role

If a personal data breach puts your rights at risk, we will notify the Personal Data Protection Committee within 72 hours of becoming aware of it and inform you promptly as required by law.

8. Your rights

Under the PDPA, you have the right to:

  • Access your data and get a copy
  • Correct your data so it is accurate and up to date
  • Have your data deleted, destroyed or anonymised
  • Restrict the use of your data temporarily
  • Object to the collection or use of your data, including for marketing
  • Receive your data or have it sent to another data controller
  • Withdraw consent at any time, without affecting use of your data before you withdraw
  • Complain to the Personal Data Protection Committee (PDPC)

Send your request through our Facebook page, stating what you need. We may ask for information to verify your identity first and will reply within 30 days. In some cases we may refuse a request where the law allows, for example when we must keep data for accounting or tax purposes, and we will tell you why.

9. Other matters

  • Minors: Our rebate service and member system are for adults. We do not intend to collect data from minors. If we find that someone signed up without consent from a parent or guardian, we will delete that data.
  • External links: Broker websites and other services we link to have their own privacy policies. Please read them before giving your data.
  • Changes to this policy: We may update this policy from time to time and will show the effective date at the top of the page. For significant changes, we will notify you on the website or through our official channels.

10. Contact us about personal data

For questions or to exercise your rights over personal data, contact 1TRADER through our Facebook page, our main channel, or see the other channels on our contact page.

Message us on Facebook All contact channels

See also: Cookie Policy · Terms of Use and Disclaimer · Risk disclosure · Editorial policy · About 1TRADER