PTT LNG Company Limited (the "Company" or "we") attaches great importance to data protection. Personal of you, who is a director ("You"), and the Company knows that you take into account and give importance to with how your information will be collected, used, disclosed and/or transferred to foreign countries where the Company and its affiliates The group will use the information you disclose to the company. that is used for operations on your directorship By this Privacy Policy for Human Resources Management This Privacy Policy (“Privacy Policy”) is not part of the employment contract between the Company and you.

The Company reserves the right to amend this Privacy Policy from time to time. The Company therefore urges you to periodically review the amendments to this Privacy Policy. by any amendments It will be effective immediately when the company Notice of the revised Privacy Policy on the Company's website.

1. Definition

Associated company means a company in which the Company or a subsidiary Holding shares, whether directly or indirectly, in aggregate of 20 percent but not more than 50 percent of the total voting rights of the Company. and has the power to Participate in decision-making regarding the financial and operating policies of the Company.

Personal data means information that can identify an individual or link to that individual. both directly and indirectly If can differentiate or can be traced back to that person. either alone or in combination with other information. regarded as personal information

Sensitive Personal Data means information as defined in Section 26 of the Personal Data Protection Act. and revised editions as amended from time to time and other applicable laws and regulations, including Information about a person's race, ethnicity, political, religious or philosophical opinion. sexual behavior Criminal records, health information, disability, trade union information Genetic data, biological data or any other information that similarly affects the subject of personal data.

Personal Data Controller means a person or juristic person who has the authority to make decisions about Collection, use or disclosure of personal information

Personal Data Processor means a person or legal entity who performs the collection, use or disclosure of Personal Data on the order or on behalf of the Personal Data Controller. personal information

2. Your personal information that the company collects

The Company may collect various types of your personal information directly from you (eg through documents Company website or the Company's applications) or indirectly from other sources (eg from affiliates, service providers, business partners or publicly available sources) as you communicate with the Company. and according to your requirements to enter into an employment contract with the Company, which the Company may collect, use, disclose and/or transfer abroad Your different types of personal data in accordance with your duties and responsibilities. This includes but is not limited to the following personal data

(1) Personal information and contact information such as title, first-last name, nickname, business card, photograph, nationality, gender, marital status, marriage certificate, age, date of birth, blood type, signature, language of communication. vehicle or other vehicle registration number, your shareholding information (eg number of shares held Date of holding/selling shares type of shares held), current address, e-mail address, home phone number mobile phone number Social Media Accounts (LINE ID)

(2) personally identifiable information identified in government-issued documents and/or copies of such documents, such as identification cards; government official identification card license Passport, house registration, taxpayer identification number company certificate (specifying the names of the directors of the company)

(3) Information about your work, such as information on the director's card, director's code, internal phone number, department, line of work, and affiliated agency. Director contract details Terms and Conditions of Directorship Start date and end date of directorship responsibility Various professional licenses, details of termination of directorship

(4) records of attendance such as pictures, motion pictures audio from meeting recording

(5) Information about your compensation and benefits, such as compensation records, dividends (such as meeting allowances, directors' remuneration), information on the granting of benefits, deductions information (such as taxes), information on compensation due to legal action. Legal, including bank account details, amount of debt, collateral, date of payment and method of payment. payment currency

(6) Security information such as system access information, building access, images, motion pictures and sound from closed-circuit television cameras. Entering the building with a card The software records time, internet, email and phone calls. Code for the information system and access rights to the Company's information system and electronic information generated by your use of the system.

(7) Operational and Complaint related information or litigation, such as performance appraisals

(8) Sensitive personal data, such as sensitive personal data identified in official documents, biometric data (such as facial recognition data and fingerprint data.

If you have provided personal information of a family member or other person (such as your parent, child, spouse, guarantor, emergency contact, reference, emergency reference, your dependents and beneficiaries) to the Company (such as your name surname, address and telephone number) for the purposes described in this Privacy Policy. You should ensure that you have the right and/or authority to provide such personal data. and allow the company Use such personal data in accordance with the policy. Privacy this issue. You are also responsible for informing them of the policies. This privacy statement and/or obtain their consent (if necessary) and/or rely on other legal basis or base.

We do not collect personal information of minors. (under the age of majority, that is, less than 20 years of age or under the age of marriage as required by law) quasi-incompetent incompetent person and do not allow such persons to apply to use or purchase the product. our products and services without consent or without any other legal basis. However, if we know that We have accidentally collected personal information from these individuals. without consent and without any other legal basis We will proceed with deletion of such personal data as soon as we become aware of the case. and may need to stop serving these individuals. except where we may rely on the rules or Legal bases other than consent

3. Purposes and legal bases for which the Company collects, uses or discloses your personal information

3.1. Objectives that the Company Process for collecting, using or disclosing your personal information. By means of express consent

We may collect, use or disclose your sensitive personal information for purposes requiring legal consent. For various purposes for collecting, using or disclosing sensitive personal information are as follows

· Sensitive personal data in official documents for identification for verification of your identity to be a supporting document for the employment of a director

· Biological information for entering and exiting the company's area

The Company will collect, use and/or disclose sensitive personal information only with your express consent. or only when permitted by law And the company may request your consent on a case-by-case basis. If we are unable to rely on other legal bases to collect, use and disclose your personal information

3.2. Objectives that the Company Process for collecting, using or disclosing your personal information. By virtue of other legal bases

The Company may rely on or refer to (1) the basis for performance of the contract. for initiating a contract or entering into a contract or performing a contract with you; for the performance of the Company's legal duties; (3) the Company's legitimate interests and of third parties; (4) a base for preventing or suppressing harm to life, body or health of a person; and/or (5) a base of public interest. for carrying out missions in the public interest or performing duties in the exercise of state power or other legal bases as permitted by the Personal Data Protection Act. as the case may be to collect, use and/or disclose information your personal data for the following purposes

Some of the objectives are as follows: may not apply to you. Please consider the relevant objectives based on your relationship with the Company.

(1) Appointment of directors such as selection of directors The process of appointing and welcoming directors Recording of the collected information Verifying your identity, assessing your suitability and qualifications Remuneration and/or details of director contract Terms and Conditions of Directorship

(2) management, payment of compensation and welfare, such as payment of remuneration, dividends, provision of welfare Remuneration Assessment including income tax deduction and making the disbursement of various expenses for you

(3) the performance of duties in the capacity of work, such as issuing a director's card company building access card and/or other cards Assistance to directors upon request) Tracking the use of the Company's equipment issuing power of attorney Appointment of representatives Internal public relations, planning, implementing and managing relationships and contractual rights on behalf of the Company. To consider appointing, canceling or authorizing you to carry out various transactions, including your name and personal information in the relevant contract Recording the results of work performance evaluation preparation of statistical data analysis Management of recreational activities Conducting opinion/satisfaction survey results handling of complaints disciplinary action Actions related to the dismissal of directors Retirement and retirement

(4) Contact and communication such as business-related communications Calling for a meeting of directors and/or contacting in an emergency

(5) the performance of legal duties, such as for legal proceedings proceedings or orders of government agencies and/or cooperate with courts, regulators, government agencies and law enforcement agencies. in the case of the company There is reason to believe that it is required to comply with the law and/or order, or to cooperate with it, whereby the Company may need to disclose your personal data in order to comply with the provisions of the law, legal process. or the order of the said state strictly This includes to carry out internal investigation procedures. complaints or claims, investigating or preventing crime, fraud, and/or to establish legal claims;

(6) Other purposes, such as to protect the interests of us or our affiliates. When necessary and lawful (e.g. to detect, prevent and take action on any fraud, complaints of intellectual property infringement, or violation of the law) to manage and prevent loss of property risk management and internal control To monitor and supervise, including the internal audit of the Office of Internal Audit. Good corporate governance and internal organization management To ensure compliance with our terms and conditions Use of closed circuit television cameras Screening for infectious disease outbreaks, administration, preparation of reports Internal policies within the scope of our operations

Internal Audit Office Good corporate governance and internal organization management To ensure compliance with our terms and conditions Use of closed circuit television cameras Screening for infectious disease outbreaks, administration, preparation of reports Internal policies within the scope of our operations

(7) To prevent or suppress the danger to life, body or health of a person.

However, your failure to provide personal information to us may affect you, i.e. we are unable to perform the actions you have requested. or you may not be comfortable or did not receive the performance of the contract and may be damaged/lost opportunity, and in some cases, we may not be able to agree to hire you or continue employment with you. Your failure to provide such information may also affect compliance with any laws that we or you are obligated to comply with. and may have relevant penalties

4. The Company may disclose or transfer your personal information to any person or entity.

The Company may disclose or transfer your personal information to third parties as follows: which collects, uses or discloses personal information For the purposes stated in this Privacy Policy, you may also fall under the privacy policies of those third parties. We therefore recommend that you read the privacy policies of those third parties as follows. said to learn more about how such third parties collect them. also use or disclose your personal information

4.1. Affiliates

The Company may need to disclose or transfer your personal information to companies in the group affiliates or allow that affiliated company to access your personal information for the purposes described in this Privacy Policy.

4.2. The Company's service providers

The Company may employ other companies, agents or contractors to provide services on behalf of the Company. or facilitating the provision of products and services to you. The Company may disclose your personal information to third party service providers or distributors as follows, including but not limited to: (1) Infrastructure Developers, Internet, Web Sites and Information Technology Service Providers (2) Logistics and Freight Service Providers (3) Data Analytics Providers (4) Storage and Service Providers Cloud (5) Seminar / Lecturer Provider (6) Financial Service Provider for Director Remuneration (7) Director Welfare Service Provider (8) Storage Service Provider and/ or Document Shredding (9) Printing or Email Delivery Service Providers (10) Recruitment and HR Service Providers (11) Recruitment Background Check Service Providers (12) Service Providers for work permits and visas; (13) venue operators; (14) opinion/satisfaction survey providers; and/or (15) banks and financial institutions.

4.3. Business partners of the Company

The Company may disclose and/or transfer your personal information to its business partners. Personal information disclosed or transferred in this manner is subject to the policy. Third Party Privacy not under this Privacy Policy

4.4. Third parties as required by law

In some cases, the Company may be required to disclose and/or transfer your personal information to government agencies. Law enforcement agencies, courts, officials, government agencies, law enforcers or other person In the event that the company have reason to believe that it is necessary to perform duties according to the law or legal regulation or to protect the rights of the company rights of others or for the safety of persons or to investigate, prevent, or deal with problems, fraud, or security or safety issues.

4.5. Consultants, experts

The Company may be required to disclose personal information to its expert advisors. This may include, but is not limited to: (1) independent consultants such as project consultants; financial advisor accounting consultant Marketing consultants (2) Legal advisors who provide Assistance in the Company's business operations and provide litigation services Whether litigation or litigation. (3) an auditor who provides accounting services. or auditing accounts for the Company and/or (4) other auditors or auditors.

4.6. Assignee of rights and/or duties

In the case of organizational restructuring Mergers and Acquisitions, Sales, Acquisitions, Joint Ventures, Transfers of Rights, Changes in Ownership or the disposal of a business, property or stock, or a similar transaction. either partially or completely Transferee of rights and/or duties of the Company will comply with this Privacy Policy. To respect your personal information

4.7. Other recipients of personal data

The Company may disclose your personal information to any other person or entity. For the purposes of this Privacy Policy which the recipient of such personal data may include, but is not limited to, customers Individuals or legal entities that may become customers the person or entity you request The applicant examines the record from the closed-circuit television camera, the media and/or the public disclosure.

5. Transfer of your personal information to foreign countries

The Company may disclose or transfer your personal information to third parties. or service provider a foreign address which the destination country may have Standards for personal data protection that are higher or lower than Thailand. The protection of personal data is lower, the Company will take steps and measures to ensure that you have an adequate level of protection for the personal data that is transferred. and the person receiving the data transfer Individuals have appropriate personal data protection standards or as required by law. And if necessary, the Company may request your consent to transfer your personal data abroad. If the law requires consent

6. Duration of retention of your personal information

The Company will keep your personal information for as long as is reasonably necessary to use it. according to the objectives of the Company notify you in accordance with this Privacy Policy. And to comply with various laws and regulations, the Company may keep your personal data longer if necessary and/or can do so in accordance with applicable law.

7. Your rights as the subject of personal data

Subject to the provisions of the law and the relevant legal exemptions You may have the rights set forth below.

(1) Access You may have the right to request access to or obtain a copy of the personal information the Company collects, uses or discloses about you.

(2) Correction You may have the right to request that the personal data be corrected by the Company. have collected Use or disclose about you to be accurate, current, complete and not misleading.

(3) Transfer of personal information You may have the right to obtain personal information that the Company contains about you in an organized and readable electronic format; and to transmit or transfer such personal data to another personal data controller, where it is (a) the personal data that you to the Company and (b) in the event that the Company Obtain your consent to collect, use or disclose your personal information or to perform the contract the company has with you. your person for the public interest or to comply with the law. The Company, at its sole discretion, may refuse your request.

(4) Objection You may have the right to object to the collection. Use or disclose personal information of yours as required by applicable law

(5) Suspension of use You may have the right to request that the use of your personal data be suspended in certain circumstances.

(6) Withdrawal of Consent For the purposes you have given your consent to the company collecting, using or disclosing your personal information. You may have the right to withdraw your consent in certain circumstances, however, withdrawing your consent may result in our inability to perform our duties. according to the contract with you in certain If you wish to understand further about the effect of withdrawing your consent or wishing to exercise the right to withdraw consent please contact us with the contact details given below

(7) deletion or destruction You may have the right to ask the Company to delete, destroy or otherwise render the information. Your personal data that the Company collects, uses or discloses It is personal information that cannot identify you. except for the retention of such personal information of the Company that is for compliance with the law or to establish legal claims for the use or protection of legal claims

(8) Complaints You have the right to complain to government agencies related to the protection of personal data. If you believe that the company Failure to comply with personal data protection laws Before we process your request to exercise your rights For the sake of privacy and data security, we may need to verify and verify the identity of users. your personal For this reason We may ask you to provide/notify Your identity verification information (such as a copy of your ID card that does not include any sensitive personal data) when we have completed your identity verification We will act on your word asap. but in any case, it shall not exceed 30 days from the date of receipt of such request. In the event that we determine that the request is manifestly unfounded or excessively extravagant, a fee may be charged to comply with the request.

8. Security Measures

The Company has put in place appropriate measures to maintain the security of personal data. which covers management preventive measures Technical precautions and physical protective measures in regards to accessing or controlling access to personal data to maintain a secret completeness and the availability of personal data To prevent the loss, access, use, alteration, correction or disclosure of personal information without authorization or misuse, as required by applicable law.

It is safe and appropriate for the collection, use and disclosure of personal information. The Company has also put in place measures to limit access to personal information and the use of devices for storing and processing personal information. by specifying the right to access the user's data The right to grant access to information to the designated person(s) and user responsibilities To prevent unauthorized access to personal information, disclosure, foreshadowing or hacking. make a copy of personal information or theft of devices for storing or processing personal data. In addition, the Company has put in place measures for retrospective review of access, change, deletion or transfer of personal data. To be consistent with the methods and media used to collect, use or disclose personal information.

9. Contact us

If you wish to exercise your rights in relation to your personal data or have questions about your personal information under this Privacy Policy Please contact the company

PTT LNG Company Limited

555/1 Energy Complex, Building A, 3rd Floor, Vibhavadi Rangsit Road, Chatuchak, Bangkok 10900

Call +66(0) 2140 1555

Email : pdpa@pttlng.com

Announced on 19 May 2022

(Mr. Rattikoon Piyawongvanich)

Acting President