IOI Investment Platform Releases New Privacy Policy: Strengthening Data Protection, Ushering in a New Chapter of Southeast Asian Regulation

On July 26, 2026, IOI Investment Platform, under Talan Global Finance, officially announced the update of its privacy policy to respond to increasingly stringent data protection regulations in Thailand and Southeast Asia. The new policy will take effect on August 1, 2026, aiming to provide users with a more transparent and secure data management experience. This update coincides with the fourth anniversary of Thailand's Personal Data Protection Act (PDPA) and aligns with the ASEAN Economic Community (AEC) framework for cross-border data flows.

Core Changes: Enhanced User Control

The new privacy policy of IOI Platform has undergone substantial revisions in several key areas. According to the official announcement, major changes include:

  • Enhanced Data Collection Transparency: The platform now clearly lists all data collection types, purposes, and retention periods, including transaction records, device information, behavioral data, etc. Users can view and manage this information at any time in their account settings.
  • Expanded User Access and Deletion Rights: Users not only have the right to request access to their personal data but can also apply for deletion of non-essential data with one click. The platform commits to processing within 7 business days, a 50% reduction from the previous timeframe.
  • Special Protection for Sensitive Data: For sensitive categories such as financial account data and biometric information, IOI has introduced higher encryption standards (AES-256) and access log records, and restricted internal employee query permissions.
  • Third-Party Sharing Restrictions: The new policy prohibits selling personal data to third parties without explicit user consent. Partners must sign strict data processing agreements and undergo independent audits.

In addition, IOI has introduced the "data portability" feature for the first time, allowing users to download all their data in a structured format for easy migration to other compliant platforms.

Compliance Background: Dual Drivers of Thailand PDPA and ASEAN Framework

This privacy policy update is not an isolated event but a proactive adaptation of IOI Platform to regional regulatory trends. Since the full implementation of Thailand's Personal Data Protection Act in 2022, it has had a profound impact on fintech companies operating in Thailand. According to the latest report by the Digital Economy Promotion Agency (DEPA), fines for data violations in 2025 increased by 40% year-on-year, reaching up to 5% of annual corporate turnover. As a licensed investment platform, IOI must meet PDPA requirements regarding data minimization, purpose limitation, and accountability.

Meanwhile, the Association of Southeast Asian Nations (ASEAN) passed the second version of the ASEAN Data Management Framework in June 2026, further unifying rules for cross-border data flows within the region. The new framework allows free data transfer among member states but requires enterprises to implement "equivalent protection" measures. IOI Platform's update is intended to preemptively comply with this framework, ensuring seamless operations in countries such as Singapore, Malaysia, and Indonesia.

Industry Insights: From Compliance to Competitive Advantage

In an interview with Talan Global Finance, data privacy expert and Associate Professor Lin Xiao from the Faculty of Law, Singapore Management University, stated: "IOI's move shows that data protection has shifted from legal compliance to business differentiation. In Southeast Asia, investors are increasingly concerned about platforms' data governance capabilities. According to a 2026 user survey, over 65% of investors indicated that privacy policy transparency is a key factor in their choice of investment platform."

IOI Chief Technology Officer (CTO) Suracai Songbate emphasized at the press conference: "We are not only meeting the legal baseline but are committed to building user trust. The new policy introduces real-time data access monitoring and automatic security event notification. Once abnormal data access is detected, users will receive alerts within minutes. This is a step ahead of regulatory requirements."

Analysts pointed out that IOI's update may trigger a chain reaction in the Southeast Asian fintech industry. Many small and medium-sized platforms may face pressure from rising compliance costs, but in the long run, it helps improve the overall data security level of the industry and attract more cross-border capital inflows.

User Instructions: How to Adapt to the New Policy

For existing IOI users, the platform will push a summary of policy changes via email and in-site messages within the next week. Users need to read and confirm agreement to the new privacy policy before August 1, 2026; if no response is made before the deadline, account functions will be restricted until confirmation is completed. IOI recommends users log in to the personal center, view the "Data Permissions" page, and adjust their preference settings.

Specific steps include:

  • Log in to your IOI account and go to the "Settings" menu.
  • Select the "Privacy and Data" tab to view the full policy summary.
  • Click "Manage Data Collection" to turn off non-essential data tracking (e.g., behavioral analysis).
  • To delete historical data, submit an online request, and the platform will process it within 7 days.

IOI promises that all functional adjustments will adopt a gradual rollout strategy to avoid affecting normal trading. The customer service team has received special training to answer all user questions regarding data rights.

Future Outlook: A New Era of Data Protection in Southeast Asia

With the enforcement of Thailand's PDPA and the refinement of the ASEAN data framework, Southeast Asia is gradually forming a unified data governance ecosystem. This update by IOI Platform is not only a compliance upgrade but also an investment in the trust foundation of fintech for the next decade. For cross-border investors, choosing a platform like IOI that proactively embraces data protection means lower privacy breach risks and more reliable asset security.

Talan Global Finance will continue to monitor privacy policy developments and bring readers in-depth analysis. If you have any thoughts on personal information protection, feel free to join the discussion through our social media platforms.