You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 23, 2024

Thailand SEC Amends Supervisory Framework for Ready-to-Use Utility Tokens

Subscribe to Updates

Thailand’s Securities and Exchange Commission (SEC) amended its utility token supervisory framework by issuing seven notifications that came into effect on August 13, 2024. Ready-to-use utility tokens (tokens that can be used immediately to acquire specific goods or services), which were previously unregulated, are now subject to the supervisory scheme set forth by the seven new notifications in both primary and secondary markets. This is intended to provide an investor protection mechanism that responds to the characteristics, risks, and usage of the different types of ready-to-use utility tokens.

Under the new notifications, ready-to-use utility tokens are categorized into two groups. These are detailed below.

Group 1 Utility Tokens

Group 1 utility tokens include ready-to-use utility tokens issued for consumption purposes or as a digital representation of a certificate. Examples include loyalty points, digital movie or concert tickets, NFTs, and carbon credits, among others.

Principally, there is no change in the regulation of group 1 utility tokens under the new notifications. In the primary market, issuance of this type of token is not subject to the initial coin offering (ICO) requirements.

In the secondary market, providing services related to group 1 utility tokens is not considered to be the same as operating a digital asset business with licensing requirements under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018). Licensed digital asset operators (including exchanges, brokers, and dealers) are not permitted to list or trade group 1 utility tokens.

To provide services in relation to group 1 utility tokens, these licensed digital asset operators must establish a separate entity to provide those services and must not use names or messages that could cause the public to misunderstand that the separate entity is engaged in a digital asset business under SEC supervision.

Group 2 Utility Tokens

Group 2 utility tokens include other ready-to-use utility tokens besides those specified as group 1 utility tokens. Examples include native coins, governance tokens, DeFi/Cefi projects, and exchange tokens, among others.

For group 2 utility tokens, the new notifications impose more stringent regulations, including an ICO requirement if the tokens will be listed on a licensed digital asset exchange.

In the secondary market, providing services related to group 2 utility tokens is considered to be operating a digital asset business that requires a license under the Emergency Decree on Digital Asset Businesses. Therefore, only the licensed digital asset operators mentioned above can list, trade, or provide services in relation to these tokens.

Additional Requirements

The new notifications also emphasize that issuers must not issue tokens to be used as a means of payment (MOP) and must not accept tokens for staking purposes except as a verification mechanism, a voting method, or for joining events for sharing benefits from ecosystem activities. The new notifications further prescribe the characteristics of utility tokens that do not constitute MOP. These include a variety of common utility tokens, such as those that are specially created for loyalty programs or marketing promotion purposes, to purchase in-game items, to pay gas fees for digital transactions, and so on.

Various oversight mechanisms on digital asset exchange supervision were also strengthened, especially in relation to price speculation. These changes include revising minimum requirements for listing rules and trading rules, requiring signposting to inform investors about potential risks from investing in a certain token, and imposing disclosure requirements on issuers when tokens are to be listed on an exchange.

The governance of not-ready-to-use utility tokens remains unchanged under the new notifications, with the issuance of not-ready-to-use utility tokens subject to the ICO requirements.

For more information on these new notifications, or on any aspect of digital assets and cryptocurrency in Thailand, please contact Kobkit Thienpreecha at [email protected], Pornpan Wichawut at [email protected], Napassorn Lertussavavivat at [email protected], or Rujaporn Paritsantik at [email protected].

Related Professionals

Industries

Fintech

Technology

Location

RELATED INSIGHTS​ 

November 7, 2025
Tilleke & Gibbins has contributed the Thailand chapter to the latest edition of the Global FinTech Guide published by Multilaw. The guide offers an overview of the legal and regulatory environment for financial technology across key jurisdictions worldwide. Prepared by leading experts from Multilaw member firms, the Global FinTech Guide explores how innovation is reshaping the financial sector and how governments and regulators are responding to emerging technologies such as digital payment services, cryptocurrencies, and online financial advisory platforms. The publication enables quick comparison of regulatory frameworks and provides detailed country-level insights for investors, startups, and established financial institutions engaging in FinTech activities. The Thailand chapter, authored by lawyers in Tilleke & Gibbins’ technology and financial services teams, outlines the country’s evolving regulatory landscape for fintech operations. It addresses the following topics: Payment services Asset and portfolio management Financial advisory and broking services (including robo-advisory and auto-trading) Trading platforms, social trading platforms, and signal following Crowdfunding, crowdinvesting, and crowdlending DLT and cryptocurrencies Loan services, factoring, loan broking, and finetrading Identification Online banking services Initial coin offerings (ICOs) and token sales Insurtech Regtech and compliance management Know-your-customer (KYC) requirements Tilleke & Gibbins also contributed the Vietnam chapter to the Global FinTech Guide. The full guide is available on the Multilaw website.
Read More
October 31, 2025
On September 29, 2025, Thailand’s Office of the Personal Data Protection Committee (PDPC Office) published its Regulations on the Review and Certification of Binding Corporate Rules B.E. 2568 (2025) (the Regulations). The Regulations provide clarity on the PDPC Office’s approach to reviewing and certifying binding corporate rules (BCRs) under Section 29 of the Personal Data Protection Act B.E. 2562 (2019) (PDPA), and aim to facilitate international data transfers within a group of undertakings or enterprises (a “corporate group”). In conjunction with this development, the PDPC Office also approved BCRs for two companies operating in Thailand on September 30, 2025. This milestone represents the first concrete progress since the PDPC’s Notification on Criteria for the Protection of Personal Data Sent or Transferred to a Foreign Country pursuant to Section 29 of the PDPA B.E. 2566 (2023) came into effect in March 2024. Some key features of the Regulations are set out below. Categorization of BCRs BCRs are classified into two types: (1) BCRs for Controllers (BCR-C) and (2) BCRs for Processors (BCR-P). The category must be clearly specified when submitting the BCRs to the PDPC Office. Documentation Requirement The applicant must prepare and submit the application (a standard template may be provided by the PDPC Office in the future) along with supporting documents for review and certification in the Thai language. If the supporting documents are in a foreign language, a certified Thai translation should be provided. The translation must be notarized by a notary public or qualified person. Supporting documents may include, among others, a binding instrument such as an intra-group agreement, or a list of entities subject to the BCRs. Expedited Process Requirement Organizations with existing BCR approvals under the EU or UK GDPR, or from countries announced by the PDPC under Section 28, may apply through an
Read More
October 26, 2025
AI-generated songs are now making waves in Vietnam on platforms like TikTok, with tracks such as “Say mot doi vi em” quickly gaining popularity and sparking widespread attention. This phenomenon raises a host of legal and ethical questions: Who is the author of these songs? Can they be protected by copyright? Who is responsible if there is an infringement? These questions are becoming increasingly urgent as AI music becomes more mainstream in Vietnam. Copyright Protection for AI-Generated Music in Vietnam Under current Vietnamese law, copyright protection is reserved for works that bear the mark of human creativity. The 2022 amendments to Vietnam’s Intellectual Property Law reaffirm that only works created by humans are eligible for copyright. In practice, if a human meaningfully contributes to the creative process—by providing prompts, making selections, editing, or arranging—their contribution may be protected. However, if a song is generated entirely by AI without significant human input, it is unlikely to qualify for copyright protection. When an AI-generated song does not qualify for copyright protection, the question arises as to whether the person who writes the prompts, edits, or compiles the work can still be considered the owner of an asset under the Vietnamese Civil Code. According to Article 105 of the Civil Code 2015, assets include objects, money, valuable papers, and property rights. While AI-generated music that is not protected by copyright is not considered money or valuable papers, it may be regarded as an object (in the form of a digital file or recording) or as a property right if it can be possessed, used, transferred, or exploited for value. Use of AI-Generated Works Without Copyright Protection If a song is not protected by copyright, does that mean anyone can use it freely? Not necessarily. The absence of copyright does not mean the
Read More
October 3, 2025
On September 26, 2025, the Contract Committee under Thailand’s Consumer Protection Board issued a regulation that aims to standardize contracts and enhance consumer protection within the beauty and wellness industry. The Notification on Prescribing the Beauty Service Business as a Contract-Controlled Business B.E. 2568 (2025), which takes effect on January 24, 2026, requires business operators to use a prescribed standard contract in Thai and adhere to strict mandatory provisions and prohibitions. These regulations apply to operators across all in-person and online service channels, including via digital platforms. “Beauty services business” is defined as the provision of services under an agreement allowing consumers to receive a series of treatments, either over a set number of sessions or within a set period. This includes massage, spa, other methods for cleanliness, beauty, or care of facial or body skin, and weight control and body shaping—including services offered electronically. The law excludes surgery, liposuction, and medical treatments performed by licensed practitioners. The notification establishes the following key requirements: Mandatory contract and formatting. All contracts with consumers must use the standard contract form, in Thai, with clear, readable text (minimum font size of 2 millimeters, no more than 11 characters per inch), and include all essential terms from the annexed form. Contract execution. Contracts must be made in duplicate, with one copy given to the consumer at signing. For agreements concluded through electronic channels, the process must comply with the Electronic Transactions Act and use the same required terms. Digital platforms. Business operators who provide services facilitated through a digital platform as an intermediary are ultimately responsible for ensuring the consumer receives a compliant contract. Prohibited clauses. The law prohibits clauses that limit or exclude liability for damages to life, body, health, mind, or property resulting from breach of contract or a wrongful act;
Read More