Nextkt

Privacy Policy

How we collect, use, and protect your personal information.

Last Updated
Last Updated: June 17, 2026
Platform Operator
Platform Operator: Kisum Pte. Ltd.
Help Center
Help Center: https://support.nextkt.com
Support Contact
Support Contact: support@nextkt.com
Website
Website: https://www.nextkt.com

IMPORTANT NOTICE

This Privacy Policy explains how Nextkt and Kisum Pte. Ltd. collect, use, disclose, store, transfer, protect and otherwise process Personal Data when users access or use the Platform, purchase tickets, attend events, create accounts, interact with organizers, use organizer tools, contact support, receive marketing, or otherwise engage with our services.

The Platform operates as a ticketing technology platform, ticketing intermediary, marketplace, event discovery platform, payment facilitator and, where applicable, limited payment collection agent for event organizers, promoters, venues, producers, artists, agencies and other persons responsible for organizing events.

This Privacy Policy is separate from, and should be read together with, the Platform's:

This Privacy Policy is designed for a commercial ticketing business and should be reviewed by qualified legal counsel before publication, especially in relation to the laws of Singapore, Indonesia, the European Union, United Kingdom, Australia, United States, Thailand, Malaysia, and any other territory where the Platform operates, sells tickets, targets users or processes Personal Data.

TABLE OF CONTENTS

  1. Definitions
  2. Who We Are
  3. Scope of This Privacy Policy
  4. Relationship Between Platform, Organizer and User
  5. Our Role as Controller, Processor or Service Provider
  6. Acceptance of This Privacy Policy
  7. Personal Data We Collect
  8. Account and Profile Data
  9. Contact and Identity Data
  10. Transaction and Ticketing Data
  11. Payment and Financial Data
  12. Organizer and Merchant Data
  13. Event Attendance and Check-In Data
  14. Device, Technical and Usage Data
  15. Location Data
  16. Communications and Support Data
  17. Marketing, Preferences and Survey Data
  18. Social Login and Third-Party Account Data
  19. User Content and Public Information
  20. Sensitive Personal Data
  21. Children and Minors
  22. Personal Data About Other People
  23. How We Collect Personal Data
  24. Why We Use Personal Data
  25. Legal Bases for Processing
  26. Ticketing, Orders and Event Services
  27. Payments, Refunds and Chargebacks
  28. Fraud Prevention, Security and Risk Management
  29. Organizer Services and Dashboards
  30. Customer Support and Communications
  31. Marketing and Event Recommendations
  32. Advertising, Retargeting and Similar Audiences
  33. Analytics, Product Improvement and Business Intelligence
  34. Legal Compliance and Enforcement
  35. Cookies and Tracking Technologies
  36. Cookie Categories
  37. Managing Cookies and Tracking Preferences
  38. How We Share Personal Data
  39. Sharing with Organizers
  40. Sharing with Venues, Event Partners and Sponsors
  41. Sharing with Payment Providers and Financial Institutions
  42. Sharing with Service Providers
  43. Sharing with Advertising and Analytics Partners
  44. Sharing with Authorities, Regulators and Courts
  45. Sharing During Business Transfers
  46. Sharing Aggregated or De-Identified Data
  47. Organizer Use of Personal Data
  48. Payment Card Information
  49. International Data Transfers
  50. Data Storage Locations
  51. Data Retention
  52. Retention by Data Category
  53. Deletion, Anonymization and Backups
  54. Security Measures
  55. Data Breach Notification
  56. Your Privacy Rights
  57. Access Rights
  58. Correction Rights
  59. Deletion Rights
  60. Withdrawal of Consent
  61. Objection and Restriction Rights
  62. Data Portability
  63. Marketing Opt-Out Rights
  64. Push Notifications and SMS Preferences
  65. How to Exercise Your Rights
  66. Verification of Requests
  67. Limitations on Rights
  68. Automated Decision-Making and Profiling
  69. Do Not Track Signals
  70. Third-Party Websites and Services
  71. Third-Party Event Pages and Organizer Links
  72. Public Posts and User Content
  73. Email Tools and Organizer Communications
  74. CCTV, Photography and Event Recordings
  75. Sanctions, AML and Identity Verification
  76. Employment, Contractor and Business Contact Data
  77. Region-Specific Privacy Notices
  78. Singapore Privacy Notice
  79. Indonesia Privacy Notice
  80. European Economic Area and United Kingdom Notice
  81. California and United States State Privacy Notice
  82. Thailand and Malaysia Privacy Notice
  83. Changes to This Privacy Policy
  84. Language
  85. Contact Information
  86. Complaints
  87. Relationship with Terms and Conditions
  88. Interpretation

1. DEFINITIONS

In this Privacy Policy, unless the context requires otherwise:

"Account" means a user account created on or through the Platform.

"Attendee" means any person who attends or attempts to attend an Event using a Ticket.

"Buyer" means any person who purchases, receives, holds, transfers, uses or attempts to use a Ticket.

"Customer" means a Buyer, Attendee, ticket holder, registered user, visitor, guest or any person using the Platform to view, purchase, receive, manage or use Tickets.

"Event" means any concert, festival, nightclub event, private event, conference, exhibition, show, performance, attraction, experience, sporting event, cultural event or other activity listed, promoted, sold or distributed through the Platform.

"Event Page" means any webpage, checkout page, mobile page or listing page through which an Event is described, promoted, sold or made available.

"Organizer" means the event promoter, venue, producer, artist representative, agency, company, individual, charity or other entity responsible for creating, organizing, promoting, operating, managing or delivering an Event.

"Personal Data" means any information relating to an identified or identifiable individual, including information that may be called personal information, personally identifiable information, personal data or similar terms under applicable privacy laws.

"Platform" means Nextkt, including its website, mobile applications, ticketing system, checkout system, payment interfaces, dashboards, APIs, scanning tools, organizer tools, marketing tools, support tools and related technology.

"Platform Operator", "we", "us" or "our" means Kisum Pte. Ltd., together with its affiliates and subsidiaries where applicable.

"Processor" means a party that processes Personal Data on behalf of another party.

"Controller" means a party that determines the purposes and means of processing Personal Data.

"Service Provider" means a third party that provides services to us, such as hosting, payment processing, fraud prevention, analytics, communications, identity verification, customer support, advertising, storage, security or other operational services.

"Ticket" means any ticket, registration, wristband, QR code, barcode, confirmation, pass, badge, credential, digital token or other entry entitlement for an Event.

"User" means any person using the Platform, including Customers, Buyers, Attendees, Organizers, account holders, visitors and browsers.

2. WHO WE ARE

Nextkt is operated by Kisum Pte. Ltd..

We provide technology that allows Organizers to create Event Pages, sell Tickets, manage orders, communicate with Customers, process check-ins, access reporting tools and receive settlement of ticket proceeds.

We also provide Customers with tools to discover Events, purchase Tickets, receive Tickets, manage orders, request support, receive event updates and access related services.

For most Platform activities, we are responsible for deciding how and why certain Personal Data is processed. For some Organizer activities, we may process Personal Data on behalf of the Organizer, depending on the circumstances and the terms agreed with the Organizer.

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies when you:

  1. Visit the Platform;
  2. Create an Account;
  3. Browse Events;
  4. Purchase or receive Tickets;
  5. Register for free Events;
  6. Attend or check in to Events using Platform tools;
  7. Contact customer support;
  8. Subscribe to marketing;
  9. Use promotional codes, vouchers or credits;
  10. Participate in surveys, competitions or promotions;
  11. Use social login or connect third-party accounts;
  12. Use Organizer dashboards or merchant tools;
  13. Communicate with Buyers through the Platform;
  14. Interact with our emails, SMS messages, push notifications, ads or social media;
  15. Otherwise provide Personal Data to us.

This Privacy Policy does not apply to third-party websites, venues, payment providers, social media platforms, Organizers or Event partners that process Personal Data under their own privacy policies, except where they process data directly on our behalf.

4. RELATIONSHIP BETWEEN PLATFORM, ORGANIZER AND USER

The Platform acts as a ticketing intermediary and technology provider.

When you purchase a Ticket, the Event is generally provided by the Organizer, not by the Platform. However, we may collect, process and share your Personal Data in order to facilitate your transaction, deliver your Ticket, process payments, support entry management, manage refunds, prevent fraud, provide customer service and comply with law.

Organizers may receive certain Personal Data about Customers and Attendees for Event-related purposes. Once an Organizer receives such data, the Organizer may act as an independent data controller or equivalent under applicable law. The Organizer is responsible for its own handling of Personal Data, including its privacy notices, security measures, marketing practices and compliance with applicable law.

5. OUR ROLE AS CONTROLLER, PROCESSOR OR SERVICE PROVIDER

Depending on the activity, we may act as:

  1. Controller when we decide why and how Personal Data is processed, such as account administration, Platform security, fraud prevention, marketing, analytics, customer support and legal compliance;
  2. Processor or Service Provider when we process Personal Data on behalf of an Organizer under a written agreement;
  3. Independent Controller together with Organizer where both the Platform and Organizer determine separate purposes for processing certain Personal Data;
  4. Limited payment collection agent for payment-related processing where applicable under our Terms and Conditions or Organizer agreement.

Where required by law, the applicable data processing role may be described in a separate Data Processing Agreement, Organizer Agreement or jurisdiction-specific notice.

6. ACCEPTANCE OF THIS PRIVACY POLICY

By using the Platform, creating an Account, purchasing a Ticket, listing an Event, using Organizer tools, submitting Personal Data or interacting with us, you acknowledge that you have read and understood this Privacy Policy.

Where consent is required by law, we will request your consent before processing Personal Data for the relevant purpose.

If you do not want us to process Personal Data as described in this Privacy Policy, you should not use the Platform. Some services cannot be provided without certain Personal Data.

7. PERSONAL DATA WE COLLECT

We may collect the following categories of Personal Data:

  1. Account and profile data;
  2. Contact and identity data;
  3. Transaction and Ticketing data;
  4. Payment and financial data;
  5. Organizer and merchant data;
  6. Event attendance and check-in data;
  7. Device, technical and usage data;
  8. Location data;
  9. Communications and support data;
  10. Marketing, preference and survey data;
  11. Social login and third-party account data;
  12. User content and public information;
  13. Sensitive Personal Data, where permitted and necessary;
  14. Personal Data about other people provided by Users.

The exact data collected depends on how you use the Platform, the Event, the Organizer's configuration, your location, applicable law, payment method and selected features.

8. ACCOUNT AND PROFILE DATA

When you create or use an Account, we may collect:

  1. Full name;
  2. Username;
  3. Email address;
  4. Phone number;
  5. Password or authentication credentials;
  6. Profile photo, if provided;
  7. Date of birth, if required or provided;
  8. Preferred city, country or language;
  9. Account settings;
  10. Marketing preferences;
  11. Saved payment method references;
  12. Order history;
  13. Login history;
  14. Device history;
  15. Account verification status;
  16. Linked social account identifiers;
  17. Customer support history.

We use Account data to operate the Platform, secure your Account, process orders, deliver Tickets, provide support, personalize services and prevent fraud.

9. CONTACT AND IDENTITY DATA

We may collect contact and identity information, including:

  1. Name;
  2. Surname;
  3. Email address;
  4. Phone number;
  5. Billing address;
  6. Country of residence;
  7. Nationality, where required;
  8. Date of birth;
  9. Identification number, where required;
  10. Passport, national ID or driver's license details, where required for verification;
  11. Selfie or image verification, where legally permitted and necessary;
  12. Signature, where applicable;
  13. Company name and business details for Organizers.

We may request identity information for age-restricted Events, fraud prevention, chargeback defense, payment verification, Organizer verification, tax compliance, sanctions screening, AML checks, refund validation or legal compliance.

10. TRANSACTION AND TICKETING DATA

When you browse, reserve, purchase, receive, transfer or use Tickets, we may collect:

  1. Event name;
  2. Organizer name;
  3. Venue;
  4. Event date and time;
  5. Ticket type;
  6. Ticket category;
  7. Seat, table, section or access zone;
  8. Ticket quantity;
  9. Ticket price;
  10. Fees and taxes;
  11. Currency;
  12. Order number;
  13. Ticket ID;
  14. QR code or barcode reference;
  15. Purchase date and time;
  16. Delivery status;
  17. Transfer status;
  18. Refund status;
  19. Cancellation status;
  20. Check-in status;
  21. Scan time and scan location;
  22. Device used for purchase;
  23. IP address used for purchase;
  24. Promo code or voucher used;
  25. Answers to Event-specific questions;
  26. Attendance history.

We use this data to process orders, deliver Tickets, prevent fraud, manage entry, support refunds, handle disputes, provide reporting to Organizers and comply with legal obligations.

11. PAYMENT AND FINANCIAL DATA

When you make or receive payments through the Platform, we and our payment providers may collect:

  1. Payment method type;
  2. Card brand;
  3. Last four digits of card number;
  4. Card expiry month and year;
  5. Payment token or processor reference;
  6. Billing name;
  7. Billing address;
  8. Transaction amount;
  9. Currency;
  10. Payment status;
  11. Payment provider response;
  12. Refund details;
  13. Chargeback details;
  14. Payment dispute records;
  15. Bank account details for Organizer payouts;
  16. Tax information for Organizers;
  17. Invoices, receipts and settlement records.

We do not intentionally store full payment card numbers unless expressly stated and legally compliant. Full card details are generally processed by third-party payment providers subject to payment security standards.

Payment providers may act as independent controllers or service providers depending on their role. You should review their privacy policies and terms.

12. ORGANIZER AND MERCHANT DATA

If you are an Organizer, we may collect:

  1. Legal name;
  2. Trading name;
  3. Company registration number;
  4. Tax identification number;
  5. Registered address;
  6. Business address;
  7. Contact person name;
  8. Email address;
  9. Phone number;
  10. Bank account details;
  11. Beneficial ownership information;
  12. Director or representative information;
  13. Identity verification documents;
  14. Event permits, licenses or approvals;
  15. Venue agreements or confirmations;
  16. Artist or event authorization documents;
  17. Payout records;
  18. Refund and chargeback records;
  19. Dashboard usage data;
  20. Communications with Buyers;
  21. Compliance risk information.

We use Organizer data to onboard Organizers, verify legitimacy, manage Events, process payouts, prevent fraud, comply with law, manage disputes and enforce our agreements.

13. EVENT ATTENDANCE AND CHECK-IN DATA

At Events where Platform tools are used for access control, we may process:

  1. Ticket scan status;
  2. Entry time;
  3. Gate or scanning location;
  4. Scanning device;
  5. Staff user conducting scan;
  6. Re-entry status;
  7. Wristband or credential status;
  8. Attendance confirmation;
  9. Refused-entry notes, where provided;
  10. Upgrade or on-site purchase data;
  11. Incident records, where relevant and lawful.

This data may be shared with Organizers and venues for capacity management, safety, fraud prevention, reporting, customer support and dispute handling.

14. DEVICE, TECHNICAL AND USAGE DATA

When you use the Platform, we may collect technical data, including:

  1. IP address;
  2. Browser type and version;
  3. Device type;
  4. Operating system;
  5. Device identifiers;
  6. Mobile network information;
  7. Time zone;
  8. Language settings;
  9. Referring URLs;
  10. Pages viewed;
  11. Links clicked;
  12. Search terms;
  13. Session duration;
  14. Scrolls and interactions;
  15. Checkout behavior;
  16. Error logs;
  17. Crash logs;
  18. Cookie identifiers;
  19. Advertising identifiers;
  20. Fraud signals;
  21. VPN or proxy indicators;
  22. Approximate location derived from IP address.

We use this data to operate, secure, troubleshoot, analyze and improve the Platform.

15. LOCATION DATA

We may collect location data in the following ways:

  1. Approximate location from IP address;
  2. City or country selected by the User;
  3. Billing country;
  4. Event location;
  5. Device location, where you grant permission;
  6. Location inferred from usage patterns.

We may use location data to show relevant Events, detect fraud, comply with local laws, calculate taxes, enforce geographic restrictions and improve recommendations.

You can control device location permissions through your browser or device settings.

16. COMMUNICATIONS AND SUPPORT DATA

When you contact us or we contact you, we may collect:

  1. Name;
  2. Email address;
  3. Phone number;
  4. Account details;
  5. Order number;
  6. Support request content;
  7. Chat messages;
  8. Emails;
  9. Call recordings, where permitted and notified;
  10. Attachments;
  11. Screenshots;
  12. Complaint details;
  13. Resolution notes;
  14. Internal support tags;
  15. Customer satisfaction responses.

We use this data to respond to requests, provide support, investigate issues, train staff, improve service, handle disputes and keep records.

17. MARKETING, PREFERENCES AND SURVEY DATA

We may collect:

  1. Marketing opt-in and opt-out status;
  2. Email preferences;
  3. SMS preferences;
  4. Push notification preferences;
  5. Preferred cities;
  6. Event interests;
  7. Favorite genres;
  8. Survey responses;
  9. Competition entries;
  10. Referral activity;
  11. Promotion participation;
  12. Advertising interaction data;
  13. Consent records;
  14. Unsubscribe records.

We use this data to send relevant communications, recommend Events, personalize content, manage promotions and comply with marketing laws.

18. SOCIAL LOGIN AND THIRD-PARTY ACCOUNT DATA

If you sign in using a third-party account, such as Google, Facebook, Apple or another service, we may receive information permitted by your settings and the third party's policies.

This may include:

  1. Name;
  2. Email address;
  3. Profile image;
  4. Account identifier;
  5. Locale;
  6. Public profile information;
  7. Authentication token or login confirmation.

You can manage what information is shared through the privacy settings of the third-party service.

We are not responsible for the privacy practices of third-party login providers.

19. USER CONTENT AND PUBLIC INFORMATION

Users may provide content such as comments, reviews, messages, Event descriptions, images, logos, videos, social media posts, organizer bios, FAQs or public profile information.

You should not post sensitive or confidential Personal Data in public areas of the Platform.

Where you submit content to a public or semi-public area, it may be visible to other Users, Organizers, search engines or third parties.

We may use User Content in accordance with our Terms and Conditions.

20. SENSITIVE PERSONAL DATA

Sensitive Personal Data may include information such as health data, biometric data, precise location data, government identifiers, religion, race, political opinions, criminal records, disability information or other data classified as sensitive under applicable law.

We do not intentionally collect Sensitive Personal Data unless:

  1. You provide it voluntarily;
  2. It is necessary for accessibility, safety or Event accommodation;
  3. It is required for identity verification;
  4. It is required by law;
  5. It is necessary for fraud prevention or security;
  6. You have given explicit consent where required;
  7. Another legal basis applies.

We ask Users not to provide Sensitive Personal Data unless necessary.

Where Sensitive Personal Data is collected, we will handle it in accordance with applicable law.

21. CHILDREN AND MINORS

The Platform is not intended for unsupervised use by children.

Users must meet the minimum age required by applicable law and by the relevant Event.

If a child or minor uses the Platform, a parent or legal guardian must provide consent where required by law.

We do not knowingly collect Personal Data from children below the minimum legal age without appropriate consent.

If we become aware that we have collected Personal Data from a child without required consent, we may delete the data or take other appropriate action.

Parents or guardians may contact us to request deletion or correction of a child's Personal Data.

22. PERSONAL DATA ABOUT OTHER PEOPLE

You may provide Personal Data about other people when:

  1. Buying Tickets for friends or guests;
  2. Transferring Tickets;
  3. Registering attendees;
  4. Providing emergency contact information;
  5. Using group booking features;
  6. Inviting others to Events;
  7. Submitting guest lists.

If you provide Personal Data about another person, you represent that you have authority to do so and, where required, that you have informed that person of this Privacy Policy.

You are responsible for ensuring that the information is accurate and lawfully provided.

23. HOW WE COLLECT PERSONAL DATA

We collect Personal Data:

  1. Directly from you;
  2. From your use of the Platform;
  3. From Organizers;
  4. From payment providers;
  5. From fraud prevention providers;
  6. From identity verification providers;
  7. From advertising and analytics partners;
  8. From social login providers;
  9. From publicly available sources;
  10. From business partners;
  11. From customer support communications;
  12. From cookies and tracking technologies;
  13. From Event scanning and access control tools.

24. WHY WE USE PERSONAL DATA

We use Personal Data to:

  1. Provide and operate the Platform;
  2. Create and manage Accounts;
  3. Process Ticket purchases;
  4. Deliver Tickets;
  5. Verify identity;
  6. Process payments;
  7. Process refunds;
  8. Manage chargebacks;
  9. Prevent fraud;
  10. Provide customer support;
  11. Enable Organizer tools;
  12. Support Event entry management;
  13. Send Event updates;
  14. Send service communications;
  15. Send marketing communications;
  16. Recommend Events;
  17. Personalize the Platform;
  18. Analyze Platform usage;
  19. Improve products and services;
  20. Comply with law;
  21. Enforce Terms;
  22. Protect Users and the Platform;
  23. Manage legal claims and disputes;
  24. Conduct business operations.

Where applicable law requires a legal basis, we rely on one or more of the following:

  1. Contractual necessity: to provide services requested by you, such as ticket purchases, account access and customer support;
  2. Legitimate interests: to operate, secure, improve and promote the Platform, prevent fraud, manage business risks and enforce our rights;
  3. Consent: where you have given permission, such as certain marketing, cookies, precise location or sensitive data processing;
  4. Legal obligation: to comply with tax, accounting, consumer protection, payment, sanctions, AML, safety, court or regulatory requirements;
  5. Vital interests: where processing is necessary to protect health or safety;
  6. Public interest: where applicable under law.

If you do not provide Personal Data needed for contractual or legal purposes, we may be unable to provide the relevant service.

26. TICKETING, ORDERS AND EVENT SERVICES

We process Personal Data to:

  1. Display Events;
  2. Process orders;
  3. Confirm purchases;
  4. Issue Tickets;
  5. Deliver QR codes and barcodes;
  6. Manage Ticket transfers;
  7. Process upgrades;
  8. Provide receipts;
  9. Provide Event updates;
  10. Support entry scanning;
  11. Confirm attendance;
  12. Provide Organizer reporting;
  13. Manage refunds and exchanges;
  14. Handle Event changes;
  15. Prevent duplicate use of Tickets.

Without this processing, we may not be able to provide Ticketing services.

27. PAYMENTS, REFUNDS AND CHARGEBACKS

We process Personal Data for payment-related purposes, including:

  1. Payment authorization;
  2. Fraud screening;
  3. Transaction completion;
  4. Receipt generation;
  5. Refund processing;
  6. Chargeback response;
  7. Payment dispute evidence;
  8. Payment reconciliation;
  9. Organizer payout calculation;
  10. Tax and accounting records;
  11. Compliance with payment provider rules.

We may share payment-related data with payment processors, banks, card schemes, fraud prevention providers, Organizers and authorities where necessary.

28. FRAUD PREVENTION, SECURITY AND RISK MANAGEMENT

We process Personal Data to detect, prevent, investigate and respond to:

  1. Fraudulent purchases;
  2. Stolen payment methods;
  3. Account takeover;
  4. Bot activity;
  5. Ticket scalping;
  6. Unauthorized resale;
  7. Chargeback abuse;
  8. Fake accounts;
  9. Suspicious Organizer activity;
  10. Event scams;
  11. Payment laundering;
  12. Security incidents;
  13. Policy violations;
  14. Abuse of promotions;
  15. Misuse of refunds.

This may involve automated tools, manual review, risk scoring, identity verification, device analysis, IP analysis and sharing data with fraud prevention providers.

We may decline transactions, delay Ticket delivery, suspend Accounts, withhold payouts or require verification where risk is identified.

29. ORGANIZER SERVICES AND DASHBOARDS

We process Personal Data to provide Organizer tools, including:

  1. Event creation;
  2. Ticket inventory management;
  3. Order management;
  4. Customer lists;
  5. Attendance reports;
  6. Refund tools;
  7. Marketing tools;
  8. Guest list tools;
  9. Check-in tools;
  10. Payout dashboards;
  11. Sales analytics;
  12. Tax reports;
  13. Fraud alerts;
  14. Customer communications.

Organizers must use Personal Data available through the Platform only for lawful Event-related purposes and in accordance with applicable law, our Terms and any Organizer agreement.

30. CUSTOMER SUPPORT AND COMMUNICATIONS

We process Personal Data to:

  1. Respond to inquiries;
  2. Verify identity;
  3. Investigate order issues;
  4. Reissue Tickets;
  5. Handle refund requests;
  6. Handle complaints;
  7. Provide Event information;
  8. Investigate fraud;
  9. Train support teams;
  10. Improve service quality;
  11. Maintain support records.

We may communicate through email, SMS, phone, push notification, in-app messages, chat tools or other channels.

31. MARKETING AND EVENT RECOMMENDATIONS

Where permitted by law, we may use Personal Data to send marketing communications and recommend Events.

Marketing may include:

  1. New Events;
  2. Similar Events;
  3. Promotional offers;
  4. Discounts;
  5. Venue announcements;
  6. Organizer announcements;
  7. Platform updates;
  8. Membership benefits;
  9. Newsletters;
  10. Personalized recommendations.

We may personalize marketing based on:

  1. Location;
  2. Past purchases;
  3. Browsing activity;
  4. Event interests;
  5. Favorite genres;
  6. Search history;
  7. Interaction with emails;
  8. Similar user behavior;
  9. Platform preferences.

Where consent is required, we will request consent before sending marketing.

You can opt out of marketing at any time.

32. ADVERTISING, RETARGETING AND SIMILAR AUDIENCES

We may use advertising technologies to promote Events and Platform services.

This may include:

  1. Retargeting ads;
  2. Lookalike or similar audiences;
  3. Custom audience matching;
  4. Conversion tracking;
  5. Ad performance measurement;
  6. Social media advertising;
  7. Search engine advertising;
  8. Affiliate tracking;
  9. Pixel tracking.

We may share limited identifiers, such as hashed email addresses or device identifiers, with advertising platforms to show relevant ads or measure campaigns, where permitted by law.

Advertising partners may process data under their own privacy policies.

You may be able to manage advertising preferences through our cookie tools, account settings, device settings or advertising platform controls.

33. ANALYTICS, PRODUCT IMPROVEMENT AND BUSINESS INTELLIGENCE

We use Personal Data and de-identified data to:

  1. Understand Platform usage;
  2. Improve checkout conversion;
  3. Detect errors;
  4. Measure Event performance;
  5. Build sales reports;
  6. Improve recommendations;
  7. Develop new features;
  8. Test user experience;
  9. Measure marketing effectiveness;
  10. Forecast demand;
  11. Improve fraud detection;
  12. Improve customer support.

We may share aggregated or de-identified insights with Organizers, partners, investors, advertisers or other third parties, provided individuals are not reasonably identifiable.

We process Personal Data where necessary to:

  1. Comply with applicable laws;
  2. Respond to court orders;
  3. Respond to regulators;
  4. Cooperate with law enforcement;
  5. Enforce Terms and Conditions;
  6. Protect legal rights;
  7. Defend claims;
  8. Collect debts;
  9. Investigate fraud;
  10. Comply with tax and accounting obligations;
  11. Comply with sanctions and AML requirements;
  12. Protect the safety of Users and the public.

35. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, pixels, tags, SDKs, local storage, device identifiers and similar technologies.

These technologies may help us:

  1. Keep you logged in;
  2. Remember cart contents;
  3. Process checkout;
  4. Prevent fraud;
  5. Measure traffic;
  6. Analyze Platform usage;
  7. Personalize content;
  8. Remember preferences;
  9. Deliver ads;
  10. Measure ad performance;
  11. Improve security;
  12. Troubleshoot errors.

Some cookies are necessary for the Platform to function. Others may require consent depending on applicable law.

We may use the following cookie categories:

36.1 Strictly Necessary Cookies

These are required for Platform operation, including login, checkout, Ticket delivery, security and fraud prevention.

36.2 Functional Cookies

These remember settings such as language, city, currency, preferences and saved choices.

36.3 Analytics Cookies

These help us understand how Users interact with the Platform and improve performance.

36.4 Advertising Cookies

These help us deliver, personalize and measure advertising campaigns.

36.5 Social Media Cookies

These may allow sharing, social login, embedded content and social media advertising.

37. MANAGING COOKIES AND TRACKING PREFERENCES

You may manage cookies through:

  1. Browser settings;
  2. Device settings;
  3. Platform cookie tools, where available;
  4. Advertising industry opt-out tools;
  5. Account preferences;
  6. Consent banners, where required.

If you disable cookies, some Platform features may not work properly. You may still be able to browse some parts of the Platform, but checkout, login, fraud prevention or personalization may be affected.

38. HOW WE SHARE PERSONAL DATA

We may share Personal Data with:

  1. Organizers;
  2. Venues;
  3. Event partners;
  4. Sponsors, where permitted;
  5. Payment providers;
  6. Banks and card schemes;
  7. Fraud prevention providers;
  8. Identity verification providers;
  9. Cloud hosting providers;
  10. IT service providers;
  11. Email, SMS and push notification providers;
  12. Customer support providers;
  13. Analytics providers;
  14. Advertising platforms;
  15. Professional advisers;
  16. Insurance providers;
  17. Regulators and authorities;
  18. Courts and law enforcement;
  19. Business transfer recipients;
  20. Affiliates and group companies.

We share Personal Data only where we have a business, contractual, legal or legitimate reason to do so, or where you have consented where required.

39. SHARING WITH ORGANIZERS

We may share Customer and Attendee Personal Data with the Organizer of the relevant Event.

This may include:

  1. Name;
  2. Email address;
  3. Phone number;
  4. Ticket type;
  5. Ticket quantity;
  6. Order number;
  7. Transaction status;
  8. Check-in status;
  9. Answers to Event questions;
  10. Guest names;
  11. Seating or table information;
  12. Refund request information;
  13. Support notes relevant to the Event;
  14. Special access or accessibility requests, where provided;
  15. Marketing consent status, where applicable.

Organizers may use this data for:

  1. Event operation;
  2. Entry management;
  3. Customer service;
  4. Safety and security;
  5. Fraud prevention;
  6. Guest list management;
  7. Refund handling;
  8. Event updates;
  9. Legal compliance;
  10. Marketing, only where legally permitted and consented where required.

The Organizer is responsible for its own handling of Personal Data once received.

40. SHARING WITH VENUES, EVENT PARTNERS AND SPONSORS

We may share Personal Data with venues, production companies, access control providers, security providers, sponsors, hospitality partners or other Event partners where necessary for Event operation or where permitted by law.

This may include data necessary for:

  1. Entry management;
  2. Seating;
  3. VIP access;
  4. Guest lists;
  5. Safety;
  6. Accessibility;
  7. Food and beverage packages;
  8. Hospitality benefits;
  9. Sponsor activations;
  10. Customer service;
  11. Legal compliance.

Where Personal Data is shared for third-party marketing, we will seek consent where required by law.

41. SHARING WITH PAYMENT PROVIDERS AND FINANCIAL INSTITUTIONS

We share Personal Data with payment providers, banks, card schemes, wallet providers, fraud screening providers and financial institutions to:

  1. Process payments;
  2. Authorize transactions;
  3. Prevent fraud;
  4. Process refunds;
  5. Manage chargebacks;
  6. Comply with payment rules;
  7. Perform identity checks;
  8. Conduct risk screening;
  9. Resolve payment disputes.

Payment providers may process Personal Data under their own privacy policies and legal obligations.

42. SHARING WITH SERVICE PROVIDERS

We use Service Providers to operate the Platform.

Service Providers may process Personal Data for:

  1. Cloud hosting;
  2. Data storage;
  3. Email delivery;
  4. SMS delivery;
  5. Push notifications;
  6. Customer support;
  7. Analytics;
  8. Advertising;
  9. Fraud prevention;
  10. Identity verification;
  11. Payment processing;
  12. Ticket scanning;
  13. CRM;
  14. Accounting;
  15. Legal services;
  16. Security monitoring;
  17. Product testing;
  18. Data backup.

We require Service Providers to protect Personal Data and process it only for authorized purposes, where required by law and contract.

43. SHARING WITH ADVERTISING AND ANALYTICS PARTNERS

We may share or allow collection of technical, usage, cookie, device, advertising and event interaction data with analytics and advertising partners.

This may include:

  1. Google Analytics;
  2. Google Ads;
  3. Meta/Facebook tools;
  4. TikTok tools;
  5. Search engine advertising tools;
  6. Social media platforms;
  7. Affiliate networks;
  8. Attribution providers;
  9. Marketing automation tools;
  10. Data clean rooms, where used.

These partners may use cookies, pixels or similar technologies.

Purchase information sent from our servers. If you accept advertising cookies (Meta, TikTok) or analytics cookies (Google Analytics) and then buy a Ticket, our servers may send that purchase to the account of the Organizer who sold it at the matching platform: the order number, the order value and currency, the Ticket types and quantities, and, for Meta and TikTok, your email address and customer number in hashed (one-way encrypted) form. For Google Analytics we send only the order number, the order value and currency, the Ticket types and quantities, and a pseudonymous visitor identifier (the identifier of your browser's Google Analytics cookie, or a code derived from your customer number); no email address. The platform uses this to match the purchase to an advertisement or a visit. Nothing is sent for a purchase made without accepting the matching cookie category.

Where required by law, we will request consent before using non-essential cookies or sharing data for targeted advertising.

44. SHARING WITH AUTHORITIES, REGULATORS AND COURTS

We may share Personal Data where we believe disclosure is necessary or appropriate to:

  1. Comply with law;
  2. Respond to legal process;
  3. Cooperate with regulators;
  4. Cooperate with law enforcement;
  5. Investigate fraud;
  6. Protect safety;
  7. Enforce our Terms;
  8. Recover debts;
  9. Defend legal claims;
  10. Protect the rights, property or security of the Platform, Users, Organizers or the public.

45. SHARING DURING BUSINESS TRANSFERS

If we are involved in a merger, acquisition, investment, financing, restructuring, sale of assets, insolvency, reorganization or transfer of business, Personal Data may be transferred as part of that transaction.

The receiving party may continue to process Personal Data in accordance with this Privacy Policy or a replacement privacy notice.

46. SHARING AGGREGATED OR DE-IDENTIFIED DATA

We may create and share aggregated, anonymized or de-identified data that does not reasonably identify individuals.

This may include:

  1. Sales trends;
  2. Attendance rates;
  3. Demographic insights;
  4. Market research;
  5. Event performance reports;
  6. Campaign performance;
  7. Demand forecasting;
  8. Venue analytics;
  9. Platform usage statistics.

We may use such data for any lawful business purpose.

47. ORGANIZER USE OF PERSONAL DATA

Organizers who receive Personal Data through the Platform must:

  1. Use the data only for lawful purposes;
  2. Use the data only for the relevant Event or as otherwise permitted;
  3. Protect the data using reasonable security measures;
  4. Comply with data protection laws;
  5. Not sell Personal Data unless legally permitted and disclosed;
  6. Not send marketing unless legally permitted and consented where required;
  7. Delete or return data when required;
  8. Assist with privacy rights requests where required;
  9. Notify the Platform of suspected data breaches involving Platform data.

The Platform is not responsible for Organizer use of Personal Data after disclosure, except to the extent required by applicable law.

48. PAYMENT CARD INFORMATION

Full payment card information is generally collected and processed directly by third-party payment providers.

We may receive limited payment information, such as:

  1. Payment method type;
  2. Card brand;
  3. Last four digits;
  4. Payment token;
  5. Payment status;
  6. Authorization code;
  7. Refund status;
  8. Chargeback status.

We do not ask Users to send full card details by email, chat or support ticket.

Users should not provide full payment card details through unsecured channels.

49. INTERNATIONAL DATA TRANSFERS

We may transfer, store or process Personal Data in countries other than your country of residence.

This may include countries where:

  1. We are established;
  2. Our affiliates are located;
  3. Service Providers are located;
  4. Cloud infrastructure is hosted;
  5. Organizers are located;
  6. Payment providers process transactions;
  7. Support teams operate.

Some countries may have data protection laws that differ from those in your jurisdiction.

Where required by law, we use appropriate safeguards for international transfers, such as contractual clauses, data processing agreements, adequacy mechanisms, consent, necessity for contract performance or other lawful transfer mechanisms.

50. DATA STORAGE LOCATIONS

Personal Data may be stored in:

  1. Cloud infrastructure;
  2. Data centers;
  3. Payment provider systems;
  4. Customer support tools;
  5. Analytics tools;
  6. Email systems;
  7. Backup systems;
  8. Organizer dashboards;
  9. Compliance databases.

Storage locations may include Singapore, Indonesia, the United States, the European Union, the United Kingdom, Australia or other countries where our Service Providers operate.

The exact storage location may change from time to time.

51. DATA RETENTION

We retain Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on:

  1. Type of data;
  2. Nature of the relationship;
  3. Legal requirements;
  4. Tax and accounting obligations;
  5. Fraud prevention needs;
  6. Chargeback risk periods;
  7. Dispute limitation periods;
  8. Organizer obligations;
  9. Security requirements;
  10. User requests;
  11. Platform backup cycles.

We may retain data longer where required or permitted by law.

52. RETENTION BY DATA CATEGORY

Subject to applicable law, we may retain data as follows:

Data CategoryTypical Retention Purpose
Account dataWhile Account is active and for a reasonable period after closure
Order and Ticket dataFor accounting, refunds, disputes, fraud prevention and legal compliance
Payment recordsFor tax, audit, chargeback and payment compliance
Support recordsFor customer service history, disputes and quality control
Marketing preferencesUntil changed or withdrawn, plus records needed to honor opt-outs
Fraud and security recordsAs long as necessary to protect the Platform and Users
Organizer recordsDuring the Organizer relationship and for legal, tax and risk purposes after termination
Identity verification recordsFor the period necessary to complete verification and meet legal or fraud prevention requirements
Cookie dataBased on cookie type, browser settings and consent tools
Backup dataUntil overwritten or deleted through normal backup cycles

Specific retention periods may vary by jurisdiction and operational need.

53. DELETION, ANONYMIZATION AND BACKUPS

When Personal Data is no longer required, we may delete, anonymize, de-identify or securely archive it.

Deletion may not be immediate where data is stored in backups, logs or disaster recovery systems. Backup data will be deleted or overwritten in accordance with normal backup cycles.

We may retain certain data even after deletion requests where necessary for:

  1. Legal compliance;
  2. Tax records;
  3. Accounting;
  4. Fraud prevention;
  5. Security;
  6. Chargebacks;
  7. Dispute resolution;
  8. Enforcement of Terms;
  9. Establishing, exercising or defending legal claims.

54. SECURITY MEASURES

We use administrative, technical and physical safeguards designed to protect Personal Data.

Measures may include:

  1. Encryption in transit;
  2. Access controls;
  3. Password protection;
  4. Multi-factor authentication for internal systems where appropriate;
  5. Logging and monitoring;
  6. Role-based permissions;
  7. Secure cloud infrastructure;
  8. Security reviews;
  9. Fraud monitoring;
  10. Data minimization;
  11. Staff confidentiality obligations;
  12. Vendor security reviews;
  13. Incident response procedures;
  14. Backup and recovery processes.

No system is completely secure. We cannot guarantee absolute security of Personal Data.

Users are responsible for protecting their own devices, passwords, email accounts and Ticket access.

55. DATA BREACH NOTIFICATION

If we become aware of a Personal Data breach, we will assess the risk and take appropriate steps.

Where required by law, we may notify:

  1. Affected Users;
  2. Data protection authorities;
  3. Regulators;
  4. Organizers;
  5. Service Providers;
  6. Law enforcement.

Notifications may be made by email, Platform notice, SMS, phone, website notice or other legally acceptable method.

We may delay notification where permitted or required by law, such as to investigate the incident or cooperate with authorities.

56. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights to:

  1. Access Personal Data;
  2. Correct Personal Data;
  3. Delete Personal Data;
  4. Withdraw consent;
  5. Object to processing;
  6. Restrict processing;
  7. Request data portability;
  8. Opt out of marketing;
  9. Opt out of certain targeted advertising;
  10. Lodge a complaint with a regulator;
  11. Request information about data sharing;
  12. Appeal certain decisions, where applicable.

Rights may be subject to limitations, exceptions and verification requirements.

57. ACCESS RIGHTS

You may request confirmation of whether we process your Personal Data and request access to that data.

We may provide access through your Account, downloadable files, support response or another reasonable method.

We may refuse or limit access where permitted by law, including where disclosure would affect the rights of others, reveal confidential information, compromise security or interfere with legal obligations.

58. CORRECTION RIGHTS

You may request correction of inaccurate or incomplete Personal Data.

You may update certain information directly through your Account.

We may request evidence before correcting identity, payment, tax, Organizer or transaction-related data.

59. DELETION RIGHTS

You may request deletion of Personal Data where applicable law allows.

Deletion may not apply where we need to retain data for:

  1. Ticket delivery;
  2. Event attendance records;
  3. Payment processing;
  4. Refunds;
  5. Chargebacks;
  6. Fraud prevention;
  7. Legal compliance;
  8. Tax and accounting;
  9. Security;
  10. Dispute resolution;
  11. Enforcement of Terms.

If deletion is not possible, we may restrict, anonymize or de-identify data where appropriate.

Where we rely on consent, you may withdraw consent at any time.

Withdrawal does not affect processing carried out before withdrawal.

If you withdraw consent for necessary processing, some Platform features may no longer be available.

61. OBJECTION AND RESTRICTION RIGHTS

Where applicable law provides, you may object to or request restriction of certain processing, including processing based on legitimate interests or direct marketing.

We may continue processing where we have compelling legitimate grounds or legal obligations.

62. DATA PORTABILITY

Where applicable law provides, you may request a copy of certain Personal Data in a structured, commonly used and machine-readable format.

This right may apply only to data processed by automated means and based on consent or contract.

63. MARKETING OPT-OUT RIGHTS

You may opt out of marketing communications by:

  1. Clicking unsubscribe links in emails;
  2. Updating Account preferences;
  3. Adjusting push notification settings;
  4. Replying STOP to SMS where supported;
  5. Contacting us.

Even if you opt out of marketing, we may continue to send service-related communications, including Ticket confirmations, Event updates, refund notices, security alerts, legal notices and Account messages.

64. PUSH NOTIFICATIONS AND SMS PREFERENCES

If you allow push notifications, we may send Event reminders, Ticket updates, security alerts, promotional messages and service notifications.

You can disable push notifications through your device settings.

SMS messages may include transactional or marketing content depending on your preferences and applicable law.

Carrier charges may apply.

65. HOW TO EXERCISE YOUR RIGHTS

To exercise privacy rights, contact us at:

Privacy Email: legal@nextkt.com Support Email: support@nextkt.com

Your request should include:

  1. Full name;
  2. Email address associated with your Account;
  3. Order number, where relevant;
  4. Country of residence;
  5. Right you wish to exercise;
  6. Details of the request;
  7. Verification information, if requested.

We will respond within the period required by applicable law.

66. VERIFICATION OF REQUESTS

Before fulfilling a privacy request, we may verify your identity.

Verification may include:

  1. Email confirmation;
  2. Account login;
  3. Order details;
  4. Phone verification;
  5. Identity document review;
  6. Payment method confirmation;
  7. Organizer authorization confirmation.

We may refuse requests where we cannot verify identity or authority.

Authorized agents may submit requests where allowed by law, but we may require proof of authorization.

67. LIMITATIONS ON RIGHTS

Privacy rights are not absolute.

We may refuse, limit or delay a request where permitted by law, including where necessary to:

  1. Comply with legal obligations;
  2. Complete transactions;
  3. Provide Tickets;
  4. Process refunds;
  5. Manage chargebacks;
  6. Prevent fraud;
  7. Protect security;
  8. Protect rights of others;
  9. Keep tax or accounting records;
  10. Establish, exercise or defend legal claims;
  11. Comply with Organizer obligations;
  12. Preserve evidence.

If we refuse a request, we will explain why where required by law.

68. AUTOMATED DECISION-MAKING AND PROFILING

We may use automated tools and profiling for:

  1. Fraud detection;
  2. Risk scoring;
  3. Payment screening;
  4. Bot detection;
  5. Ticket purchase limits;
  6. Account security;
  7. Personalized recommendations;
  8. Marketing segmentation;
  9. Advertising audiences;
  10. Demand forecasting.

Automated tools may affect whether a transaction is approved, delayed, cancelled, verified or reviewed.

Where required by law, you may have rights to request human review or object to certain automated decisions.

We do not intentionally use automated decision-making in a way that produces legal or similarly significant effects unless permitted by law or necessary to protect the Platform and Users.

69. DO NOT TRACK SIGNALS

Some browsers transmit "Do Not Track" signals.

Because there is no uniform industry standard for responding to such signals, the Platform may not respond to all Do Not Track signals.

You can manage cookies and tracking through browser settings and Platform preference tools where available.

70. THIRD-PARTY WEBSITES AND SERVICES

The Platform may link to third-party websites, payment pages, Organizer websites, venue pages, social media platforms, advertising partners or external services.

We are not responsible for third-party privacy practices, security, content or policies.

You should review third-party privacy policies before providing Personal Data.

Organizers may include links, embedded content, external forms, social media links, maps, venue websites, waiver forms or third-party checkout services.

If you leave the Platform or provide data directly to an Organizer or third party, that data is governed by the third party's privacy policy.

The Platform is not responsible for Personal Data you provide outside the Platform.

72. PUBLIC POSTS AND USER CONTENT

If you post content publicly or submit content intended for publication, the content may be visible to others.

Public content may be copied, shared, indexed by search engines or used by third parties.

Do not post personal, sensitive, confidential or financial information in public areas.

We are not responsible for third-party use of information you make public.

73. EMAIL TOOLS AND ORGANIZER COMMUNICATIONS

The Platform may allow Organizers to send Event-related communications to Customers.

Organizers using communication tools must:

  1. Send only lawful communications;
  2. Use Personal Data only for permitted purposes;
  3. Comply with anti-spam laws;
  4. Respect opt-outs;
  5. Not mislead recipients;
  6. Not upload unlawful contact lists;
  7. Not use Platform tools for unrelated marketing without permission.

We may monitor, limit or suspend Organizer communications to protect Users, comply with law or prevent abuse.

74. CCTV, PHOTOGRAPHY AND EVENT RECORDINGS

Events may involve CCTV, photography, filming, livestreaming, audio recording, media coverage, promotional recording or security recording.

Such recording may be conducted by Organizers, venues, media partners, sponsors, authorities or the Platform.

Recordings may capture your image, voice or likeness.

Use of such recordings may be governed by Event Terms, venue policies, Organizer privacy policies and applicable law.

Where the Platform controls recording for its own purposes, we process such data in accordance with this Privacy Policy.

75. SANCTIONS, AML AND IDENTITY VERIFICATION

We may process Personal Data to comply with sanctions, anti-money laundering, anti-bribery, counter-terrorist financing, fraud prevention, tax and financial crime requirements.

This may include screening against public or private databases and requesting additional information from Buyers or Organizers.

We may refuse, freeze, cancel, refund, delay, report or block transactions where compliance risk is identified.

We may retain compliance records as required or permitted by law.

76. EMPLOYMENT, CONTRACTOR AND BUSINESS CONTACT DATA

This Privacy Policy may also apply to limited Personal Data collected from vendors, contractors, business partners, job applicants or professional contacts.

Such data may include:

  1. Name;
  2. Work email;
  3. Phone number;
  4. Company;
  5. Role;
  6. Communications;
  7. Contract records;
  8. Payment details;
  9. Compliance documents.

Additional privacy notices may apply to employees, contractors or applicants.

77. REGION-SPECIFIC PRIVACY NOTICES

Certain jurisdictions provide additional privacy rights.

If a region-specific notice applies to you, it supplements this Privacy Policy.

If there is a conflict between this Privacy Policy and a mandatory local legal requirement, the mandatory local legal requirement will apply.

78. SINGAPORE PRIVACY NOTICE

Where Singapore's Personal Data Protection Act 2012 applies, we collect, use and disclose Personal Data for purposes that a reasonable person would consider appropriate in the circumstances, as described in this Privacy Policy.

You may contact our Data Protection Officer or privacy contact to request access or correction of your Personal Data.

We may charge a reasonable fee for access requests where permitted by law.

We may refuse requests where permitted under Singapore law.

79. INDONESIA PRIVACY NOTICE

Where Indonesian personal data protection law applies, we process Personal Data in accordance with applicable requirements.

This may include obtaining consent where required, notifying Users of processing purposes, protecting Personal Data, supporting applicable data subject rights and managing cross-border transfers in accordance with applicable law.

Users located in Indonesia may contact us to exercise applicable rights, including access, correction, deletion and withdrawal of consent, subject to legal limitations.

80. EUROPEAN ECONOMIC AREA AND UNITED KINGDOM NOTICE

Where the GDPR or UK GDPR applies, the following additional information applies.

80.1 Controller

The controller is Kisum Pte. Ltd., unless another entity is identified in a specific notice.

We rely on contract, legitimate interests, consent, legal obligation, vital interests and public interest as described in this Privacy Policy.

80.3 Rights

You may have the right to access, rectify, erase, restrict, object, port data and lodge a complaint with a supervisory authority.

80.4 International Transfers

Where Personal Data is transferred outside the EEA or UK, we use appropriate safeguards where required, such as Standard Contractual Clauses or equivalent mechanisms.

80.5 Legitimate Interests

Our legitimate interests include operating the Platform, preventing fraud, improving services, securing systems, marketing similar services, enforcing agreements and managing legal claims.

81. CALIFORNIA AND UNITED STATES STATE PRIVACY NOTICE

Where applicable US state privacy laws apply, residents may have rights to:

  1. Know what Personal Information is collected;
  2. Access Personal Information;
  3. Delete Personal Information;
  4. Correct inaccurate Personal Information;
  5. Opt out of certain targeted advertising;
  6. Opt out of certain sales or sharing of Personal Information;
  7. Limit use of sensitive Personal Information, where applicable;
  8. Not be discriminated against for exercising rights.

We do not knowingly sell Personal Information in the traditional sense. However, certain advertising or analytics activities may be considered "sharing" or "sale" under some laws. Where required, we will provide appropriate opt-out mechanisms.

82. THAILAND AND MALAYSIA PRIVACY NOTICE

Where Thai or Malaysian personal data protection laws apply, Users may have rights to access, correct, delete, object, withdraw consent, restrict processing, request portability or lodge complaints, subject to legal limitations.

We may process Personal Data for contractual necessity, consent, legitimate interests, legal obligations and other lawful bases permitted by applicable law.

Sensitive Personal Data will be processed only where permitted by law, including with explicit consent where required.

83. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

Changes may be posted on the Platform, sent by email, shown through in-app notice or otherwise communicated where required.

The "Last Updated" date indicates when the Privacy Policy was last revised.

Continued use of the Platform after updates means you acknowledge the updated Privacy Policy.

Where required by law, we will request consent for material changes affecting consent-based processing.

84. LANGUAGE

This Privacy Policy may be translated into other languages.

If there is a conflict between the English version and a translated version, the English version shall prevail unless applicable law requires otherwise.

85. CONTACT INFORMATION

For privacy questions, requests or complaints, contact:

Privacy & Support Contact: support@nextkt.com Company: Kisum Pte. Ltd.

If required by law, we may appoint a Data Protection Officer or local representative. Details will be provided here:

Data Protection Officer / Privacy Representative: [Insert Name or Contact, if applicable]

86. COMPLAINTS

If you believe your Personal Data has been processed unlawfully or in breach of this Privacy Policy, you may contact us first so we can try to resolve the issue.

Depending on your location, you may also have the right to complain to a data protection authority or regulator.

We encourage you to contact us before filing a complaint so we can address your concern.

87. RELATIONSHIP WITH TERMS AND CONDITIONS

This Privacy Policy should be read together with:

If there is a conflict between this Privacy Policy and the Terms and Conditions regarding privacy matters, this Privacy Policy will generally apply, unless the Terms and Conditions impose additional lawful obligations.

88. INTERPRETATION

In this Privacy Policy:

  1. "Including" means "including without limitation";
  2. Singular includes plural and plural includes singular;
  3. References to law include amendments and replacements;
  4. Headings are for convenience only;
  5. References to "Personal Data" include equivalent legal terms such as personal information or personally identifiable information;
  6. Any rights or obligations apply only to the extent required or permitted by applicable law.

OPTIONAL SHORT PRIVACY NOTICE FOR CHECKOUT

The following short notice may be displayed at checkout:

By completing your purchase, you acknowledge that Nextkt will collect and process your Personal Data to process your order, deliver your Tickets, manage Event access, prevent fraud, process payments, handle refunds and chargebacks, provide support and comply with law. Your Personal Data may be shared with the Organizer, venue, payment providers and service providers for Event-related and Platform-related purposes. Please review our Privacy Policy for more information.

OPTIONAL ORGANIZER DASHBOARD PRIVACY NOTICE

The following short notice may be displayed in the Organizer dashboard:

By using Nextkt, you acknowledge that Customer and Attendee Personal Data made available to you must be used only for lawful Event-related purposes and in accordance with applicable privacy laws, Platform Terms, Organizer agreements and this Privacy Policy. You are responsible for your own use, storage, security and deletion of Personal Data accessed through the Platform.

OPTIONAL MARKETING CONSENT TEXT

The following optional text may be used for marketing opt-in boxes:

I agree to receive marketing communications from Nextkt about events, offers, promotions and recommendations. I understand I can unsubscribe at any time.

OPTIONAL ORGANIZER MARKETING CONSENT TEXT

The following optional text may be used when sharing data with Organizers for marketing:

I agree that my name, email address and ticket purchase details may be shared with the Event Organizer so the Organizer can send me marketing communications about its future events, offers and updates. I understand I can unsubscribe from Organizer marketing at any time.

END OF DOCUMENT

Questions? Visit the Help Center or contact us.