Privacy Policy
AsiaGB.com & Billing.in.th — Injan Network
We only collect data necessary to provide services and comply with the law. We do not sell, trade, or share your personal data with third parties for marketing. You can access, correct, or request deletion of your data at any time.
01Data Controller
AsiaGB.com and Billing.in.th are operated by Injan Network, which acts as the Data Controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
| Item | Detail |
|---|---|
| Business Name | Injan Network |
| Websites | asiagb.com · billing.in.th |
| Contact Email | [email protected] |
| Line Official | @injan-network |
| Governing Law | Kingdom of Thailand · PDPA B.E. 2562 |
02Data We Collect
We collect only what is necessary to provide our services and meet legal obligations.
| Data Type | Details | Reason |
|---|---|---|
| Account Data | Full name, email, phone, billing address | Account creation and invoicing |
| Payment Data | Transaction reference, payment method, amount — card numbers are not stored directly | Payment verification and receipts |
| Service Data | Domain names, subscribed plans, server IP, DNS records | Service delivery and technical support |
| Usage Data | IP address, browser, pages visited, timestamps (via Google Analytics 4) | Website analysis and improvement |
| Cookies | Session, preference, analytics cookies (GA4) | Website functionality and analytics |
| Support Tickets | Conversation content, attachments, issue history | Support delivery and future reference |
03Purpose & Legal Basis
| Purpose | Legal Basis (PDPA) |
|---|---|
| Providing and maintaining Hosting, VPS, Domain, SSL services | Performance of contract (Section 24(3)) |
| Issuing invoices, receipts and payment history | Contract + legal obligation (Section 24(6)) |
| Renewal reminders, expiry alerts, system notifications | Legitimate interest (Section 24(5)) |
| Website analytics (GA4) | Consent (Section 19) — via Cookie Consent banner |
| Promotional emails, product updates | Consent (Section 19) — withdrawable at any time |
| Fraud prevention and security | Legitimate interest (Section 24(5)) |
04Cookies & Analytics
We use cookies for website functionality and usage analysis, managed through our own Cookie Consent system that shows a consent banner on your first visit.
| Cookie Type | Tool | Purpose | Consent Required |
|---|---|---|---|
| Necessary | Session, CSRF, consent record | Core website functionality | No |
| Analytics | Google Analytics 4 (G-KSQSPB0G7L) | Visitor count and behaviour analysis | Yes |
| Affiliate Tracking | WHMCS affiliate cookie | Referral tracking for the affiliate program | Yes |
GA4 collects anonymized usage data (anonymized IP). Data is sent to Google servers in the United States. You can decline analytics cookies via the Cookie Consent banner or install the Google Analytics Opt-out Add-on.
05Third-Party Disclosure
We do not sell, trade, or transfer your personal data to third parties for marketing purposes. Data may be shared only in the following cases:
- Payment processors — Banks, Stripe, PayPal to process transactions, under their own privacy policies
- WHMCS (billing.in.th) — Our own billing and account management system, hosted on servers in Thailand
- Domain registrars — WHOIS data required under ICANN policy when you register a domain
- Government authorities — When required by court order, subpoena, or applicable law
06Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account and order history | 5 years after account closure | Accounting and tax requirements |
| Support ticket records | 3 years | Reference and repeat issue resolution |
| System and IP access logs | 90 days | Security monitoring |
| Analytics data (GA4) | 14 months (Google default) | Usage trend analysis |
| Cookie consent records | 1 year | Proof of consent |
When the retention period expires, data is automatically deleted or anonymized.
07Your Rights (PDPA)
As a data subject, you have the following rights under Thailand's PDPA B.E. 2562:
Request a copy of personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion when there is no lawful basis to retain your data.
Request temporary suspension of processing while a request is being considered.
Receive your data in a machine-readable format to transfer to another controller.
Object to processing for direct marketing or legitimate interest purposes.
Withdraw consent (e.g. analytics, marketing emails) at any time without penalty.
Lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
Email [email protected] or message Line @injan-network with: (1) name and registered email, (2) the right you wish to exercise, (3) details of your request. We will respond within 30 days.
08Data Security
We apply technical and organisational measures to protect your personal data, including:
- HTTPS/TLS encryption on all connections to asiagb.com and billing.in.th
- Passwords are bcrypt-hashed — no one at Injan Network can view your password
- Least-privilege access controls — staff see only data required for their role
- Regular encrypted backups
- 2FA available for all billing.in.th accounts
In the event of a data breach that affects your rights, we will notify you within 72 hours as required by PDPA.
09International Transfers
Most personal data is stored on servers in Thailand. The following services may process data outside Thailand:
- Google Analytics 4 — US servers, covered by the EU-US Data Privacy Framework and Google's Privacy Policy
- Stripe / PayPal — PCI DSS-certified data centres; transactions processed under their respective privacy frameworks
- Google Fonts — Fonts loaded from Google CDN by your browser; Google may temporarily log your IP address
We only transfer data internationally to recipients with adequate data protection standards.
10Contact & DPO
For questions about this policy, exercising your PDPA rights, or privacy concerns, please contact us:
| [email protected] | |
| Line | @injan-network |
| Support Ticket | billing.in.th/submitticket.php |
| Response time | Within 3 business days (PDPA requests within 30 days) |
If we make material changes, we will notify you by email to your registered address and update the date on this page before the changes take effect. Continued use of our services after that date constitutes acceptance of the revised policy.