BigBite Company Global Pte. Ltd. and its parent, subsidiaries, and affiliated entities (collectively, "Happy Point Singapore", "Happy Point", "we", "us", or "our") are committed to protecting your personal data in accordance with applicable data protection laws, including the Personal Data Protection Act 2012 of Singapore, as amended from time to time ("PDPA").

This Privacy Policy (“Policy”) sets out the basis upon which we collect, use, disclose, process, and protect personal data obtained from users (“you” or “your”) in connection with your access to and use of the Happy Point Singapore (“App”) and related services (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understood this Policy. Happy Point collects, uses, discloses, and processes your personal data in accordance with this Policy and applicable laws. Where your consent is required under applicable law, we will obtain your consent before collecting, using, or disclosing your personal data for the relevant purpose.

1. Scope of Policy

1.1 This Policy applies to personal data collected through: Happy Point Singapore (mobile application) Websites and digital platforms operated by Happy Point Singapore Customer service interactions and physical locations (where applicable)

1.2 This Policy does not apply to third-party platforms, services, or websites that are governed by separate privacy policies. Happy Point shall not be responsible for the privacy practices of such third parties.

2. Collection of Personal Data

2.1 We may collect personal data directly from you or through your use of the Services, including but not limited to: (a) Identification and Contact Data

• Name, email address, and mobile number

(b) Account and Profile Data

• Username, account authentication credentials, date of birth, gender, nationality

(c) Transaction and Financial Data

• Payment information processed through our authorised payment service providers, transaction records, order details, order frequency, purchase history, rewards and redemption records relating to purchases made through the App or participating physical stores. Where payment card information is processed, it is handled by our authorised payment service providers in accordance with applicable security standards.
• Gift Card information, including card number, card transactions, activation, value loading, redemption and balance enquiries.

(d) Technical and Usage Data

• Device identifiers, IP address, operating system, application usage data, log files

(e) Location Data

• Real-time or approximate location information derived from your device where you have enabled location permissions for the App.
• When you use the App, Happy Point may access your device’s location information to provide location-based features, including locating nearby stores, displaying store locations on a map, and delivering relevant offers, promotions, and notifications.
• You will be asked to grant location permission through your device settings before the App accesses your location information. You may withdraw your consent for the collection of location data at any time by disabling location services for the App through your mobile device settings. Please note that doing so may limit certain location-based functionalities of the Services.
• Where applicable, Happy Point may share your location information with authorised customer engagement and messaging service providers that process such information on our behalf to facilitate location-based communications and notifications. Such providers are contractually required to process personal data in accordance with applicable data protection laws and are not permitted to sell your location information.

(f) Marketing and Communications Data

• Preferences in receiving marketing communications, survey responses, feedback, and correspondence.
• We will send marketing and promotional communications only where permitted under applicable law or where you have provided the necessary consent.
• You may opt out of receiving marketing communications at any time by adjusting your preferences within the App or by disabling notifications via your mobile device settings. Withdrawal of consent will not affect service-related communications necessary for the provision of the Services.

2.2 We may combine information we collect about you with information we receive from third parties.

2.3 Where you visit our restaurants or other physical premises, CCTV systems may operate for security, safety, and incident investigation purposes.

2.4 We may collect, use, and disclose anonymized or aggregated data that does not identify any individual.

3. Purposes of Collection, Use, and Disclosure

3.1 We may collect, use, disclose, and process your personal data for the following purposes:

(a) To provide, operate, and administer the Services, including processing transactions, managing accounts, and facilitating loyalty programme participation

(b) To communicate with you regarding your account, transactions, customer service requests, or other service-related matters

(c) To personalize your experience, including delivering location-based services, tailored content, promotions, recommendations, and notifications based on your preferences and interactions with the Services.

(d) To send marketing and promotional communications (where you have provided consent or as otherwise permitted by law)

(e) To conduct analytics, research, testing, and service improvements

(f) To ensure security, prevent fraud, and enforce our terms and policies

(g) To comply with legal, regulatory, and compliance obligations

(h) To protect the rights, property, or safety of Happy Point, our users, employees, and the public

3.2 Where required under applicable law, we will obtain your consent before collecting, using, or disclosing your personal data for specific purposes.

4. Disclosure of Personal Data

4.1 We may disclose your personal data to the following categories of recipients:

(a) Our parent companies, subsidiaries, and affiliated entities

(b) Third-party service providers and agents engaged by us, including but not limited to payment processors, logistics providers, IT service providers, customer engagement and messaging providers, marketing partners, and customer support vendors

(c) Professional advisers, including legal, financial, and audit professionals

(d) Relevant regulatory authorities, government agencies, or law enforcement bodies where required or permitted by law

(e) Third parties involved in business transactions such as mergers, acquisitions, or asset sales

4.2 All third parties are required to process personal data in accordance with applicable data protection laws and contractual obligations.

4.3 We may also disclose personal data where such disclosure is necessary to:

• Comply with legal obligations or regulatory requirements
• Enforce contractual rights or policies
• Detect, prevent, or investigate unlawful activities

5. Cross-Border Data Transfers

5.1 Your personal data may be transferred to, stored, and processed in jurisdictions outside Singapore.

5.2 Where such transfers occur, Happy Point Singapore will ensure that appropriate safeguards are implemented to provide a standard of protection comparable to that under the PDPA.

6. Data Retention

6.1 Happy Point will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required or permitted under applicable laws.

6.2 Without prejudice to the generality of the foregoing:

(a) where a user account remains inactive for a continuous period of twelve (12) months, the account will be considered an "Inactive Account". Any stored value, rewards, or benefits, including but not limited to Happy Dollars, may expire in accordance with the applicable programme terms. Happy Point may cease using the personal data associated with the Inactive Account for operational purposes and retain such data only where necessary to comply with legal, regulatory, or legitimate business requirements.

(b)Where an Inactive Account remains inactive for a continuous period of three (3) years, Happy Point reserves the right to delete or anonymise the associated personal data, subject to applicable legal or regulatory retention requirements.

6.3 For the purposes of this Policy, an "Inactive Account" means a Happy Point Account that has not recorded any login, purchase transaction, reward redemption, or other account activity for a continuous period of twelve (12) months.

6.4 Upon deletion or anonymization, such data may no longer be recoverable, and you acknowledge that this may result in the loss of account history, rewards, or other associated benefits.

7. Your Rights

7.1 Subject to applicable laws, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to the collection, use, or disclosure of your personal data
• Withdraw consent for marketing communications and location data collection, where applicable

7.2 Requests may be made through the App or ‘Contact US’ using the details set out below.

7.3 Please note that withdrawal of consent may affect your ability to continue using certain features of the Services.

8. Cookies, SDKs and Similar Technologies

8.1 We use cookies, SDKs, and similar technologies to collect and store information when you interact with our Services, including through the App and digital platforms.

8.2 These technologies enable us to:

• Improve functionality and performance
• Understand user behavior
• Deliver personalized content, promotions, and recommendations.

8.3 You may manage or disable cookies through your browser or device settings. However, this may impact the functionality of the Services.

9. Security of Personal Data

9.1 We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks.

9.2 Where personal data is disclosed to third parties, we require such parties to implement appropriate security measures.

9.3 Notwithstanding the foregoing, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Privacy Policy Updates

10.1 We may update this privacy policy from time to time. When we do so, we will post the new privacy policy on this page and change the date at the top of the policy.

10.2 We encourage you to check the date of our privacy policy when you visit this page for any updates or changes. We will notify you of any modified version of privacy policy that might materially affect the way we use or disclose personal data.

Contact Information

If you have any questions, requests, or complaints regarding this Policy or our handling of your personal data, please contact:

Data Protection Officer

BigBite Company Global Pte. Ltd.

Email: dpo@bigbitecompany.com