You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 14, 2021

New Digital Asset Business Requirements for Businesses in Thailand

On November 26, 2020, the Notification of the Ministry of Finance Re: Addition to Other Business Relating to Digital Assets B.E. 2563 (2020) (the Digital Asset Business Notification) and the Notification of the Ministry of Finance Re: Licensing of Digital Asset Business No. 2 B.E. 2563 (2020) (the Digital Asset Business Licensing Notification) were published in the Thai Government Gazette.

Additional Digital Asset Businesses

The new Digital Assets Business Notification adds two new categories of digital assets business to the list prescribed in the Royal Decree on Digital Asset Businesses B.E. 2561 (2018).

  • Digital Asset Fund Manager is defined as a person who manages funds from digital assets for another person for benefits, or holds themselves out to the general public as being ready to do so, in the ordinary course of business. It does not include the management of digital assets as prescribed by the Securities and Exchange Commission (SEC).
  • Digital Asset Advisory Service is defined as a person who provides consultations to other people, directly or indirectly, regarding the value of digital assets; the suitability of investment in digital assets; or the buying, selling, or exchanging of any digital assets in the ordinary course of business in return for service fees or other compensation. However, this does not include consultations as a part of or relating to a digital asset exchange, digital asset broker, digital asset dealer, digital asset fund manager, or other personal consultation as prescribed by the SEC.

Additional Digital Asset Licensing Requirements

The Digital Asset Business Licensing Notification amends the definition of “License Applicant” to include cryptocurrency exchanges, digital token exchanges, cryptocurrency brokers, digital token brokers, cryptocurrency dealers, digital token dealers, cryptocurrency fund managers, digital token fund managers, cryptocurrency advisory services, and digital token advisory services.

Additional requirements for granting licenses have also been added in the new Digital Asset Business Licensing Notification, including:

  • the licensee must never have been denied a license or had a license revoked in the last six months from the date of the application submission;
  • the licensee’s application must not be a replacement of a previous application that has been withdraw by the licensee; and,
  • the licensee must not currently be under any legal proceedings for any violation of law.

The digital assets business must commence within 180 days after receiving licensing approval.

Digital Asset Fund Managers and Digital Asset Advisory Services already in operation are required to apply for a license from the SEC within 90 days after this Digital Asset Business Licensing Notification comes into force (i.e. by February 25, 2021). Once an application has been filed with the SEC, the applicant is allowed to continue operating their business until the SEC issues an order to decline the application.

The Digital Asset Business Licensing Notification also updates the application fees.

For more details on these notifications, or on any aspect of Thai law relating to digital assets or currencies, please contact Charuwan Charoonchitsathian at [email protected], Nopparat Lalitkomon at [email protected] or Teelada Rujirawanichtep at [email protected].

 

RELATED INSIGHTS​ 

February 6, 2025
The Thai government has proposed amendments to the Gambling Act B.E. 2478 (1935), aiming to address the growing influence of online gambling activities and strengthen regulatory oversight. These amendments, if enacted, would introduce significant changes, particularly concerning online gambling operators, participants, and related advertising activities. The draft amendment is currently in the public hearing process, which is scheduled to conclude on February 14, 2025. Key highlights of the proposed amendments are discussed below. Online Gambling In the proposed amendment, “online gambling” refers to gambling via a computer system or electronic system either through the internet or through remote communication. Organizing, participating in, or engaging in any type of online gambling is prohibited unless authorized by the competent authority. This opens the door for the authorization of casino-style online gambling in Thailand. However, the proposed amendment also imposes strict penalties on both operators and gamblers engaging in unauthorized online gambling: Anyone who organizes unauthorized online gambling is subject to imprisonment for 7–12 years. This penalty also applies to those responsible for managing electronic systems or tools used to facilitate gambling, as well as anyone involved in advertising, promoting, or deceiving others, either directly or indirectly, to engage in online gambling without proper authorization. Any person who engages in unauthorized online gambling is subject to imprisonment for 1–3 years. Dealers, supervisors of gambling or gambling activities, runners conveying wagers or other betting information, and owners of premises who knowingly permit such unauthorized activities are subject to imprisonment for 5–7 years. Penalties for Unauthorized Offline Gambling Operators The proposed amendment revokes the previous penalties under the Gambling Act and proposes stronger penalties. Both the original penalties and the proposed replacements depend on the type of gambling activity under the law, which classifies gambling activities into two types—list A and list B. List
February 3, 2025
On January 28, 2025, the Office of the Personal Data Protection Committee (PDPC) hosted Data Privacy Day 2025, bringing together over 1,000 participants from both the public and private sectors. The event underscored the importance of personal data protection and aimed to raise nationwide awareness while fostering a culture of compliance. During the event, the PDPC reaffirmed its commitment to strengthening Thailand’s data protection framework to align with international standards. The initiative also emphasized the collective goal of achieving zero data breaches. During the first session of the event, Mr. Prasert Jantararuangtong, deputy prime minister and minister of digital economy and society, delivered a speech highlighting the role of personal data protection in fostering Thailand’s digital economy. He emphasized that strong data protection measures enhance business credibility, build consumer trust, and attract foreign investment. He also addressed the PDPC’s “zero data breach” policy and the ongoing issue of data leaks, which have been exploited by call-center scam operations to deceive the public and cause financial harm. Additionally, Mr. Prasert announced that the Thai cabinet has approved a draft amendment to the Emergency Decree on Cyber Crime Prevention and Suppression B.E. 2566 (2023), commonly referred to as the “Cyber Crime Decree.” The draft will now proceed to the Council of State for review before its official enactment. Key provisions of the amendment include holding financial institutions, telecom providers, and social media platforms accountable for technology-related crimes; requiring compensation for victims; and enforcing stricter security measures. Cyber offenses, including personal data trading, face harsher penalties of up to THB 5 million in fines or five years of imprisonment. Authorities are also empowered to suspend suspicious SIM cards for committing illegal activities and expedite monetary refunds for victims without court approval. In the second session, the Office of the PDPC presented its
January 30, 2025
The Thai cabinet has approved a draft amendment of the Emergency Decree on Measures for the Prevention and Suppression of Technological Crimes as proposed by the Ministry of Digital Economy and Society to strengthen measures against technological crimes, particularly targeting call center scams and cyber fraud. Following the Council of State’s review, the emergency decree will be become effective immediately upon its enactment and publication in the Government Gazette. While the draft amendment is not yet publicly available, the government recently indicated that the emergency decree aims to empower authorities with decisive measures to combat cybercrime effectively. It underscores the shared responsibility among various sectors, including banking, telecommunications, and online platforms, in safeguarding against technological crimes. Key provisions of the draft amendment of the emergency decree include: Telecommunications provider obligations: Telecommunications service providers must suspend SIM cards associated with criminal activities. The National Broadcasting and Telecommunications Commission and mobile service providers themselves are authorized to temporarily suspend mobile phone numbers if there is reasonable suspicion of involvement in criminal activities. Banking responsibilities: Financial institutions are required to promptly report mule accounts to the Anti-Money Laundering Office to facilitate quick restitution to victims. The Anti-Money Laundering Transaction Committee is empowered to order the return of funds to victims without requiring a final court ruling. Penalties for noncompliance: The amended emergency decree introduces penalties for noncompliance by regulated entities that fail to prevent criminal activities for offenses related to technology crimes in the following cases: Digital asset services: Those engaged in the buying, selling, or exchanging of digital assets, such as cryptocurrencies and digital tokens, as well as digital asset businesses that launder money obtained from online crimes by converting it into digital currency, will be subject to imprisonment for up to one year, a fine of up to THB 100,000,
January 24, 2025
Following Vietnam’s adoption of the new Law on Data (“Data Law”) on November 30, 2024, there remained uncertainty as to what impact the new framework would have on businesses in Vietnam and abroad. The government has now released a package of four draft legal documents aimed at guiding the implementation of the Data Law: (1) a decree on the National Data Development Fund (“NDDF Decree”), (2) a decree related to regulations on scientific, technological, and innovation activities and data products and services (“Decree on Specific Activities”), (3) a decree detailing a number of articles and measures to implement the Data Law (“Implementation Decree”), and (4) a decision on the lists of important data and core data. This article will provide an overview of the draft legislation. 1. NDDF Decree The draft NDDF Decree relates to the establishment, management and use of a National Data Development Fund (“NDDF”), which is a non-profit and non-budgetary state financial fund established and managed by the Minister of the Ministry of Public Security (MPS). The NDDF has legal personality and is fully state owned, operating similarly to a single-member limited liability company. Its main objectives are to support, promote, and invest in artificial intelligence (AI), the Internet of Things (IoT), and other new technologies and innovation. The NDDF may lend to, invest in, or otherwise support eligible organizations. The draft NDDF Decree also proposes a series of regulations on donations to the NDDF and from the NDDF (through expense support), the lending activities of the NDDF to commercial banks, which will in turn lend to eligible organizations, the investment activities in data products and services innovative start-ups, and other kinds of support. The government commits to provide VND 1 trillion (approx. USD 40 million) to the NDDF, evidencing the importance the government places on