IT SECURITY, CYBERSECURITY, AND PERSONAL DATA PROTECTION -

The Company places great importance on the protection of personal data and strictly complies with the Personal Data Protection Act B.E. 2562 (2019) (PDPA), as well as other applicable laws and regulations, to ensure that its business operations are conducted in accordance with legal and regulatory requirements.

To strengthen its data privacy governance, the Company has appointed a Data Protection Officer (DPO) to oversee personal data protection and information technology-related matters. The Company also provides annual training on data protection policies and practices to ensure that all employees possess the knowledge and skills necessary to safeguard customer and stakeholder information.

In addition, the Company promotes awareness of data security, information protection, and cyber risk prevention through various internal communication channels, encouraging employee participation in maintaining a strong data protection culture throughout the organization.

In 2025, the Company recorded zero incidents of personal data breaches involving customers or business partners and received no notifications or penalties from regulatory authorities related to personal data protection violations.