Privacy Policy

TOKEN2049 respects your privacy and is committed to handling your personal data responsibly. This Privacy Policy explains how BOB Group Limited, trading as TOKEN2049 (“TOKEN2049”, “we”, “us” or “our”), collects, uses, discloses and protects personal data when you visit our websites, register for or attend our events, communicate with us, or otherwise interact with our services (together, the “Services”).

For questions, requests or complaints concerning this Privacy Policy or our handling of personal data, please contact us at info@token2049.com.

1. Who we are

The controller of your personal data is:

BOB Group Limited trading as TOKEN2049. Registered address: Golden Gate Commercial Building, 136–138 Austin Road, Tsim Sha Tsui, Hong Kong. Email: info@token2049.com

Where another TOKEN2049 group company, event partner or service provider determines the purposes and means of processing your personal data, it may also be a separate controller.

2. Personal data we collect

We may collect personal data directly from you, automatically through your use of our Services, from your employer or organisation, or from third parties such as event partners, ticketing providers, sponsors, social-media platforms and publicly available sources.

The personal data we may collect includes:

• Identity and contact information, such as your name, email address, phone number, job title, company, country, postal address and social-media profile details.
• Registration and transaction information, such as ticket type, registration status, event preferences, dietary or accessibility requirements, purchase history, invoice details and payment-status information. Payment-card information is generally processed by our payment providers rather than stored by TOKEN2049.
• Professional information, such as your employer, role, industry, business interests, sponsorship requirements, speaker profile and communications with us.
• Event participation information, such as session registrations, attendee profile information, networking preferences, event-app activity, check-in information, badge scans and participation in side events, meetings or other event activities.
• Communications and marketing-preference information, such as enquiries, feedback, survey responses, consent records, email engagement data and your marketing preferences.
• Technical and usage information, such as IP address, device and browser information, cookie identifiers, pages viewed, referring URLs, approximate location, website interactions and diagnostic data.
• Images and recordings, including photographs, video, audio recordings and livestream content captured at our events or submitted to us.
• Other information you provide, including personal data contained in correspondence, forms, applications or requests submitted to us.

We do not intentionally collect special-category personal data unless it is necessary for a specific purpose, such as accommodating dietary, health or accessibility requirements, and we have a valid legal basis to do so.

3. How we use personal data

We use personal data only where we have a lawful basis under applicable data-protection law. Depending on the circumstances, this may be necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate interests, protect vital interests, or because you have given consent.

We may use your personal data to:

• Process registrations, ticket purchases, payments, refunds and related customer-service requests.
• Administer and deliver TOKEN2049 events, including attendee access, accreditation, security, networking, event applications and venue operations.
• Communicate with you about your registration, ticket, event logistics, changes to our Services, security matters, terms or policies.
• Respond to enquiries, sponsorship requests, speaker applications, media requests, partnership discussions and other communications.
• Manage our relationships with sponsors, exhibitors, speakers, suppliers, partners and attendees.
• Improve, secure and operate our websites, products, events and business operations.
• Analyse website and event usage, measure campaign performance and understand audience engagement.
• Prevent fraud, misuse, unauthorised access and other unlawful or harmful activity.
• Comply with legal, regulatory, accounting, tax, insurance, audit and record-keeping requirements.
• Establish, exercise or defend legal claims.
• Send marketing communications about TOKEN2049 events, content, products and services where permitted by law and in accordance with your preferences.
• Deliver personalised advertising or measure advertising performance, where permitted and subject to any required consent.

4. Marketing communications

Where required by applicable law, we will obtain your consent before sending you direct-marketing communications by email, SMS or similar electronic means.

Where permitted by law, we may send marketing communications based on our legitimate interests or an existing customer relationship. You may opt out at any time by using the unsubscribe link in our emails or by contacting info@token2049.com.

Opting out of marketing will not stop us from sending non-marketing communications that are necessary for your registration, transaction, event attendance, account, security or legal matters.

5. Cookies and similar technologies

We use cookies, pixels, tags, local storage and similar technologies on our websites and digital services. These may be used to:

• Enable essential website functionality and security.
• Remember preferences and improve your experience.
• Understand how our websites are used.
• Measure the effectiveness of marketing campaigns.
• Deliver or measure advertising, including through third-party advertising and social-media platforms.

Where required by law, we will request your consent before placing non-essential cookies or similar technologies on your device. You can manage your preferences through our cookie-consent tool or your browser settings. Blocking certain cookies may affect the functionality of our Services.

For more information, please see our Cookie Policy.

6. Google Tag Manager and analytics

We may use tools such as Google Tag Manager, analytics providers, advertising platforms and social-media pixels to manage website technologies, understand website use, measure conversions and improve our marketing.

We will not use such tools to collect, transmit or use personal data for marketing, profiling or advertising purposes unless the relevant processing has been appropriately disclosed and, where required, you have provided consent through our cookie-preference mechanism or another appropriate method.

We may use technical and organisational measures, including consent-management settings, tag controls and data-minimisation practices, to help ensure that non-essential marketing and analytics technologies are not activated before the required consent is obtained.

7. How we share personal data

We may disclose personal data to the following categories of recipients:

• TOKEN2049 group companies and affiliates.
• Event venues, production partners, security providers, ticketing providers, payment processors, registration providers and event-app providers.
• Technology, hosting, analytics, CRM, email, communications, customer-support, data-storage and professional-service providers.
• Sponsors, exhibitors, partners and other event participants, where this is necessary for the relevant event service, clearly disclosed to you, or otherwise permitted by law.
• Advertising and social-media partners, where you have consented or where otherwise permitted by applicable law.
• Professional advisers, insurers, auditors, banks and payment providers.
• Government authorities, regulators, law-enforcement bodies or other parties where required by law or necessary to protect our rights, safety, property or operations.
• Purchasers, investors, advisers or other parties involved in a corporate transaction, restructuring, financing, merger, acquisition or sale of assets.

We do not sell personal data in exchange for money. However, certain disclosures to advertising or analytics partners may be treated as a “sale”, “sharing” or targeted-advertising activity under some privacy laws. Where applicable, you may have the right to opt out of those activities.

8. Event photography and recordings

TOKEN2049 events may be photographed, filmed or recorded. By attending an event, you may appear in photographs, videos, livestreams or other recordings used for event operations, security, reporting, publicity, promotional activities and archival purposes.

Where legally required, we will obtain consent before using identifiable images or recordings for particular purposes. If you have a concern about photography or recording at an event, please contact an event representative or email info@token2049.com.

9. International transfers

TOKEN2049 operates internationally and may transfer personal data to countries outside the jurisdiction in which it was collected, including to service providers and group companies located in other countries.

Where required by applicable law, we will take appropriate steps to protect transferred personal data, such as using recognised contractual safeguards, adequacy decisions, transfer-impact assessments or other legally valid transfer mechanisms.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide our Services, maintain business and financial records, resolve disputes, enforce agreements, comply with legal obligations and protect our rights.

Retention periods vary depending on the nature of the information, the purpose of processing, legal requirements and operational needs. When personal data is no longer required, we will delete, anonymise or securely archive it in accordance with applicable law.

11. Security

We use reasonable technical, organisational and physical safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission, storage system or security measure is completely secure. You should take appropriate precautions when using online services and should not send us sensitive information unless necessary.

12. Your rights

Depending on where you are located and applicable law, you may have rights to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests, including processing for direct marketing.
• Withdraw consent where we rely on consent to process your personal data.
• Request portability of certain personal data.
• Opt out of targeted advertising, certain profiling, or certain data sharing where applicable.
• Lodge a complaint with a relevant data-protection authority.

To exercise any of these rights, please email info@token2049.com. We may need to verify your identity before responding to your request.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data-protection supervisory authority. In Hong Kong, you may contact the Office of the Privacy Commissioner for Personal Data.

13. Third-party links and services

Our Services may contain links to third-party websites, apps, platforms or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy notice of any third-party service before providing personal data to it.

14. Children

Our Services are not directed to children, and we do not knowingly collect personal data from individuals under the age of 18 without appropriate authorisation. If you believe that a child has provided personal data to us without appropriate consent, please contact us at info@token2049.com.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal obligations or operational requirements. We will post the updated version on our website and revise the “Last updated” date above. Where required by law, we will provide additional notice of material changes.

16. Contact us

For questions, requests, complaints or concerns about this Privacy Policy or our handling of personal data, please contact:

TOKEN2049 Email: info@token2049.com