To ensure that you receive the full benefits of our services, and to enable the Company to provide services to you effectively and efficiently, the Company intends to process your personal data as described below.

Purposes	Types of Personal Data	Lawful Basis
To register and manage Big Point membership accounts, including identity verification, entitlement validation, maintaining and updating membership status, providing access to the membership system and related features, and managing necessary data required for the Company’s membership program services.	- Identity Data - Identification Document - Contact Data	- Necessary for the Performance of a Contract - Legitimate Interest
To manage and process point accumulation, calculation, balance verification, redemption of benefits, and all point related transactions, including recording, processing, and updating members’ transaction histories, to ensure that the Company can accurately and fully provide benefits under the Big Point program.	- Identity Data - Contact Data - Transaction Data	- Necessary for the Performance of a Contract - Legitimate Interest
To contact and provide Big Point services to customers, including notifying them of available benefits and entitlements	- Identity Data - Contact Data	- Compliance with Legal Obligations - Necessary for the Performance of Contract - Legitimate Interest
To identify and verify customers’ identities for the provision and/or utilization of various customer benefits.	- Identity Data - Identification Document - Contact Data - Transaction Data	- Necessary for the Performance of Contract - Legitimate Interest
To identify and verify customers’ identities for the provision and/or utilization of various customer benefits.	- Identity Data - Identification Document - Contact Data	- Compliance with Legal Obligations - Necessary for the Performance of Contract - Legitimate Interest
To ensure the safety and security of service usage, and to disclose relevant information to legally authorized agencies for the purpose of monitoring, preventing, and protecting against fraud, criminal activities, or misuse of services.	- Identity Data - Identification Document - Contact Data - Transaction Data - Communication Data	- Compliance with Legal Obligations - Necessary for the Performance of Contract - Legitimate Interest
To analyze data and study user behavior, including contacting users for feedback regarding the Company’s services and products, for research purposes, public marketing activities, promotional campaigns, and for improving the efficiency and quality of the Company’s products and services.	- Aggregated Data - Transaction Data - Communication Data	- Legitimate Interest
To create and deliver information, special offers, promotions, or direct marketing communications regarding our products and services to you through various channels such as email, SMS, social media, mobile applications, or other communication methods, including analyzing data to personalize offers tailored to your preferences (Direct Marketing).	- Identity Data - Contact Data - Transaction Data - Usage Data - Location Data	- Given Consent
To disclose necessary personal data to the Company’s affiliates, including but not limited to non life insurance companies, life insurance companies, non life insurance brokers, life insurance brokers, financial institutions, non bank financial service providers, payment system operators, payment service providers, and the Company’s business partners, so that they may contact you and provide information, updates, special offers, or promotions regarding their products or services.	- Identity Data - Contact Data	- Given Consent
To disclose necessary personal data to Call Center service providers for the purpose of contacting and providing services to users through the Call Center system.	- Identity Data - Transaction Data - Communication Data	- Necessary for the Performance of Contract - Legitimate Interest
To use the information for organizing promotional activities, marketing campaigns, and prize draws, as well as for contacting and verifying the identity of users in order to notify them of available benefits and/or deliver prizes or other entitlements.	- Identity Data - Contact Data - Transaction Data	- Given Consent - Necessary for the Performance of Contract - Legitimate Interest
To contact, identify, and verify users’ identities in order to confirm the provision and/or utilization of various benefits and entitlements.	- Identity Data - Identification Document - Contact Data - Transaction Data	- Legitimate Interest

 

In general, the Company does not intend to collect or use information relating to your religion and/or blood type that may appear on a copy of your national identification card. If you submit a copy of your identification card to the Company, please ensure that these details are redacted in advance. However, if you do not redact such information, it will be deemed that you allow to the Company redacting it on your behalf, and the document will remain valid and legally effective even after redaction. In the event that the Company is unable to redact such information due to technical limitations, the Company will collect and use this specific portion of the data solely for the purpose of verifying your identity.