Venue & Sub-Merchant Platform Policy

This Venue & Sub-Merchant Platform Policy ("Policy") sets out the operational, compliance, payment, data-protection, content, safety and Platform-use requirements applicable to Venues, Partners, Hosts, Sub-Merchants and their authorised personnel using the Tabu Platform.

This Policy is issued by:

• Tabu Co., Ltd.
• Company registration number: 0105569086462
• Registered address: 27/2 Sukhumvit 33 (Daeng Udom), Khlong Tan Nuea, Watthana, Krung Thep Maha Nakhon 10110, Thailand
• Website: tabu.social
• Support: support@tabubookings.com

1. Scope and Relationship With Other Agreements

1.1 Who this Policy applies to

This Policy applies to:

1. each business that has entered into a Venue Partner Agreement, Host agreement or other commercial agreement with Tabu;
2. each Venue listed or operated through the Tabu Platform;
3. each payment-enabled Venue approved or proposed to be approved as a Sub-Merchant;
4. authorised Venue, Partner and Host personnel using Tabu’s operator dashboard;
5. official Venue or Host accounts using The Scene or other social functionality; and
6. any person acting on behalf of a Venue, Partner, Host or Sub-Merchant in connection with Tabu.

In this Policy, these persons and entities may collectively be referred to as "Venue Partners."

1.2 Relationship with the Venue Partner Agreement

This Policy supplements the applicable:

1. Venue Partner Agreement;
2. Schedule identifying the applicable Venue or Venues;
3. payment or Deposit arrangement;
4. Omise / Opn Payments agreement or onboarding requirements;
5. Tabu Community Guidelines;
6. Tabu Privacy Policy; and
7. other written terms applicable to the relevant service.

For an existing signed Venue Partner Agreement, this Policy does not amend negotiated commercial terms unless incorporated into or accepted under that agreement in accordance with its amendment requirements.

1.3 Payment-provider requirements

Where a Venue uses payment functionality provided through Omise / Opn Payments, the Venue may also be subject to:

1. Omise / Opn Payments terms;
2. its separate Merchant Service Agreement;
3. Source of Fund requirements;
4. card-network or payment-method rules;
5. KYC and customer-due-diligence requirements; and
6. applicable payment laws and regulatory requirements.

Payment-provider requirements apply in addition to this Policy.

1.4 Priority

Nothing in this Policy authorises conduct prohibited by:

1. applicable law;
2. a competent authority;
3. Omise / Opn Payments;
4. a Source of Fund or payment network;
5. the applicable Venue Partner Agreement; or
6. another binding agreement applicable to the Venue.

Where different requirements apply, the Venue must comply with the requirement that is legally binding in the circumstances.

2. Definitions

For this Policy:

"Booking" means a reservation, ticket, table booking or other booking made or requested through Tabu.

"Guest Data" means personal data or other information concerning a Tabu customer or guest that a Venue receives or accesses through Tabu.

"Omise" means Omise / Opn Payments and, where relevant, its payment infrastructure and services.

"Operator Account" means an account used by Venue personnel to access Tabu’s operator application or dashboard.

"Partner" means the legal entity that has contracted with Tabu in relation to one or more Venues.

"Platform" means Tabu’s consumer application, operator application, websites, Social Features, payment functionality and related services.

"Source of Fund" includes relevant banks, card networks, financial institutions, wallet operators and other payment sources integrated through Omise.

"Sub-Merchant" means a Venue or merchant that has the required relationship with Tabu and has entered into the applicable separate merchant agreement and been approved by Omise to use the relevant payment services.

"Venue" means a restaurant, bar, club, lounge, hospitality venue, event venue or other business listed through Tabu.

"Venue Content" means information, photographs, logos, menus, descriptions, house rules, pricing, media and other content relating to a Venue.

3. General Venue Standards

A Venue Partner must:

1. operate a genuine and lawful business;
2. maintain all licences, permits, registrations and approvals required for its activities;
3. comply with applicable Thai law and regulations;
4. comply with applicable consumer-protection, food-safety, alcohol, entertainment, licensing, data-protection and payment requirements;
5. provide accurate information to Tabu, customers and payment providers;
6. deal fairly and honestly with Tabu customers;
7. honour confirmed Tabu Bookings in accordance with the applicable Booking conditions;
8. maintain appropriate security for Tabu accounts and customer information;
9. cooperate with reasonable Tabu compliance, fraud, safety and payment investigations; and
10. promptly notify Tabu of material matters affecting its ability to perform Bookings or comply with this Policy.

4. Operator Dashboard Conduct

4.1 Authorised access only

Operator Accounts may be used only by personnel who are authorised by the Venue Partner.

A Venue Partner must not:

1. give an Operator Account to an unauthorised person;
2. publish or share login credentials;
3. share passwords, security credentials or API keys insecurely;
4. allow former employees or contractors to retain unnecessary access;
5. use another Venue’s credentials; or
6. attempt to obtain access to information belonging to another Venue.

4.2 Staff access

Venue Partners must:

1. give staff only the level of access reasonably required for their role;
2. promptly remove or restrict access when a staff member no longer requires it;
3. maintain reasonable internal controls over dashboard use;
4. ensure staff comply with this Policy; and
5. notify Tabu promptly if an Operator Account may have been compromised.

The Partner is responsible for conduct carried out through authorised Operator Accounts subject to applicable law.

4.3 Prohibited dashboard use

A Venue Partner must not use the operator dashboard to:

1. scrape or systematically extract Platform data;
2. create an unauthorised customer database;
3. access Guest Data for curiosity or unrelated purposes;
4. export Guest Data except where reasonably necessary for an authorised operational purpose;
5. manipulate Booking information;
6. falsify attendance;
7. manipulate cover counts;
8. falsely mark a guest as a No-Show;
9. manufacture fake Bookings;
10. create fraudulent refunds or charges;
11. interfere with another Venue;
12. bypass Platform security;
13. introduce malware or harmful code;
14. use unauthorised bots or automated tools; or
15. otherwise misuse Tabu systems.

5. Booking and Capacity Obligations

5.1 Capacity accuracy

Each Venue must keep its:

1. available capacity;
2. table inventory;
3. seating inventory;
4. opening times;
5. Booking availability; and
6. applicable Event capacity

reasonably accurate within the Tabu operator system.

The Venue is responsible for blocking or updating capacity to account for reservations or sales obtained through other channels.

5.2 Honouring confirmed Bookings

Each Venue must honour confirmed Tabu Bookings as agreed with Tabu.

A Tabu guest must not be arbitrarily:

1. refused;
2. downgraded;
3. deprioritised; or
4. treated materially worse

merely because the Booking was made through Tabu.

Legitimate operational and legal conditions may still apply, including:

1. age requirements;
2. lawful dress codes;
3. safety rules;
4. conduct requirements;
5. identification requirements;
6. intoxication or safety concerns where lawfully applied; and
7. genuine emergencies.

5.3 Venue cancellation

A Venue must promptly notify Tabu if it cannot honour a confirmed Booking.

Where a Venue cancels a Booking for reasons for which it is responsible, the Venue remains subject to the applicable:

1. Venue Partner Agreement;
2. customer Refund & Cancellation Policy;
3. payment adjustments; and
4. reimbursement or settlement obligations.

Existing Venue agreements already require accurate capacity and confirmed reservations to be honoured, with limited exceptions for legitimate operational reasons or matters beyond the Venue’s control.

5.4 Force majeure and emergencies

Where a Booking cannot be honoured because of circumstances genuinely beyond the Venue’s reasonable control, the Venue must notify Tabu as soon as reasonably practicable.

This may include circumstances such as:

1. natural disaster;
2. flood;
3. fire;
4. major utility failure;
5. genuine emergency;
6. serious system failure; or
7. other comparable circumstances outside the Venue’s reasonable control.

6. Venue Information and Accuracy

6.1 Accurate Venue page

Venue Partners must ensure that Venue information supplied to or displayed through Tabu is accurate and reasonably current.

This includes, where applicable:

1. Venue name;
2. address;
3. opening hours;
4. menus;
5. prices;
6. photographs;
7. Venue category;
8. table or seating information;
9. age requirements;
10. house rules;
11. dress code;
12. Deposit requirements;
13. minimum spends;
14. cancellation cut-offs;
15. No-Show Charges;
16. Event details; and
17. other material conditions.

6.2 Material changes

The Venue must promptly update or notify Tabu of material changes that could affect customers or Bookings.

6.3 No misleading information

Venue Partners must not:

1. provide materially false information;
2. advertise unavailable services as available;
3. misstate prices;
4. misrepresent seating or capacity;
5. create fake scarcity;
6. falsely represent an Event line-up or offering; or
7. otherwise materially mislead users.

7. Venue Content and Intellectual Property

7.1 Rights to Venue Content

A Venue Partner must have all rights, licences, consents and permissions necessary for Venue Content it provides to Tabu.

This includes rights relating to:

1. logos;
2. trade names;
3. photographs;
4. videos;
5. menus;
6. descriptions;
7. artwork;
8. music-related promotional material;
9. images of staff, guests or performers; and
10. other third-party material.

7.2 Accuracy and legality

Venue Content must:

1. be materially accurate;
2. not infringe third-party intellectual-property rights;
3. not violate privacy or image rights;
4. comply with applicable advertising law; and
5. comply with the Community Guidelines and this Policy where published through Social Features.

7.3 Tabu use of Venue Content

Tabu may use Venue Content in accordance with the licence and marketing provisions of the applicable Venue Partner Agreement.

The existing Venue Partner Agreement grants Tabu rights to use Venue Content for operating Venue pages and promoting the Venue and Tabu, subject to the agreed approval framework.

8. Prohibited Products and Services

8.1 General rule

A Venue Partner must not use Tabu or Omise payment functionality to offer, promote, book, sell or process any goods or services that:

1. are illegal;
2. arise from illegal activity;
3. violate applicable law;
4. violate applicable Source of Fund rules;
5. are contrary to public order or good morality where such restriction applies;
6. are prohibited or restricted by Omise;
7. are outside the Venue’s declared and approved business activities;
8. require a licence, approval or authorisation that the Venue does not hold; or
9. are supplied by an undisclosed third party where Omise or Tabu approval is required.

Omise’s signed agreement expressly requires goods/services processed through its service to have been declared and approved during KYC or afterwards and to comply with Omise’s current prohibited-goods/services list, applicable law and Source of Fund rules.

8.2 Omise prohibited-goods and services list

Payment-enabled Venue Partners must comply with Omise’s then-current list of prohibited and restricted goods and services.

Because Omise may amend that list from time to time, this Policy does not reproduce or freeze that external list.

If Omise classifies a Venue’s activity as prohibited, restricted or requiring further approval, the Venue must stop processing the relevant activity through Omise unless and until the required approval is obtained.

8.3 Regulated products

Where a Venue lawfully provides regulated products or services, the Venue remains responsible for all applicable:

1. licences;
2. age restrictions;
3. advertising restrictions;
4. sale restrictions;
5. consumption restrictions;
6. operating-hour restrictions; and
7. other regulatory requirements.

8.4 Alcohol

Tabu operates in the hospitality and nightlife sector and does not prohibit lawful incidental depiction of alcoholic beverages merely because alcohol appears in genuine Venue or nightlife content.

However, Venue Partners must comply with current Thai alcohol-control and advertising law.

Venue or commercial accounts must not use Tabu to publish unlawful alcohol advertising, promotions or inducements.

Content presenting alcohol prices, discounts, promotional purchase calls, sponsored alcohol-brand material or other commercial alcohol promotion may be withheld, rejected or referred for specialist review where necessary.

Tabu’s internal moderation framework applies stricter review to Venue/commercial alcohol promotion than to incidental ordinary dining or nightlife imagery.

9. Payment and Sub-Merchant Compliance

9.1 Omise approval

A Venue may use Omise Sub-Merchant payment services only after satisfying the applicable onboarding and approval requirements.

Under Tabu’s Omise structure, a Sub-Merchant is expected to:

1. have a legal relationship with Tabu;
2. enter into the applicable separate Merchant Service Agreement with Omise; and
3. be approved by Omise.

9.2 Approved business only

A Sub-Merchant must use payment services only for goods and services that have been:

1. properly disclosed;
2. approved during Omise KYC or subsequently approved; and
3. permitted by applicable law and payment rules.

9.3 No illegal or fraudulent payment activity

A Venue Partner must not use Tabu or Omise for:

1. illegal transactions;
2. fraudulent transactions;
3. sham transactions;
4. transactions without a genuine underlying Booking, Event or service;
5. issuing receipts without an actual sale;
6. disguising the true nature of a transaction;
7. processing another business’s transactions without approval;
8. unauthorised cash-advance activity; or
9. another activity prohibited by Omise, a Source of Fund or applicable law.

Omise expressly prohibits use of its service for illegal/fraudulent transactions and receipts without actual sales.

9.4 Transaction splitting

A Venue must not artificially divide one transaction into multiple transactions for the purpose of:

1. avoiding limits;
2. avoiding payment rules;
3. reducing scrutiny;
4. confusing customers;
5. avoiding disputes; or
6. circumventing applicable fees or controls.

9.5 Payment-method treatment

Venue Partners must not unlawfully discriminate against customers merely because they use a payment method made available through the authorised Tabu payment flow.

Any payment-method conditions must comply with:

1. Omise requirements;
2. Source of Fund rules;
3. Tabu’s agreed payment model; and
4. applicable law.

9.6 Payment-processing fees

A Venue Partner must not impose an unauthorised surcharge on a customer merely to pass through Omise’s payment-processing Service Fee or MDR where that fee-shifting is prohibited.

This does not prevent Tabu or a Venue from charging a separate and properly disclosed lawful commercial, Booking, service or Venue charge that is permitted under the relevant agreements and applicable law.

9.7 Direct debit

Where a Venue uses a payment method requiring express customer authorisation, including Online Direct Debit where applicable, the Venue must comply with all applicable consent and recordkeeping requirements.

The Omise agreement specifically requires explicit customer consent for direct-debit deductions and retention of authorisation records.

10. Deposits, Card Holds, No-Shows and Customer Charges

Venue Partners must ensure that any:

1. Deposit;
2. prepayment;
3. minimum-spend prepayment;
4. card-secured reservation;
5. Late Cancellation Charge;
6. No-Show Charge; or
7. other Booking charge

is accurately configured and disclosed through Tabu before the customer confirms the Booking, where required.

A Venue must not:

1. charge an undisclosed amount;
2. increase a disclosed charge after Booking without a lawful basis;
3. falsely record a customer as a No-Show;
4. charge a No-Show amount where the applicable conditions were not satisfied;
5. duplicate-charge a customer; or
6. manipulate payment records.

Venue Partners must cooperate promptly with Tabu concerning disputed charges.

11. Fraud, Suspicious Activity and Chargebacks

11.1 Fraud prevention

Venue Partners must take reasonable steps to prevent and identify:

1. fraudulent Bookings;
2. stolen payment credentials;
3. fake transactions;
4. refund abuse;
5. unusual payment activity;
6. account compromise; and
7. other suspicious activity.

11.2 Reporting suspicious activity

A Venue Partner must promptly notify Tabu of suspected:

1. fraud;
2. illegal transactions;
3. unauthorised payments;
4. suspicious payment patterns;
5. serious account compromise; or
6. other activity that may expose Tabu, Omise or customers to risk.

Where payment services are involved, the Venue must cooperate with any required Omise investigation.

Omise requires illegal, suspicious or fraudulent transactions to be reported and requires cooperation with investigations.

11.3 Chargebacks and disputes

A Venue Partner must provide reasonable supporting information when requested in relation to:

1. chargebacks;
2. payment disputes;
3. refunds;
4. authorisation disputes;
5. fraud claims; or
6. customer complaints.

This may include relevant Booking, attendance and transaction evidence.

11.4 Excessive payment risk

Tabu may restrict payment functionality where there is:

1. excessive fraud;
2. excessive chargebacks;
3. excessive refunds;
4. repeated negative balances;
5. materially suspicious transactions;
6. unexplained high-value activity; or
7. another payment risk identified by Tabu, Omise or a Source of Fund.

Omise’s agreement itself permits intervention where there are unacceptable negative balances, excessive refunds/disputes or suspected illegal, fraudulent or unusual transactions.

12. Transaction Records

Venue Partners must maintain accurate records required by:

1. applicable law;
2. Tabu;
3. Omise;
4. a Source of Fund; and
5. relevant tax or accounting requirements.

For Omise payment transactions, the applicable agreement requires transactional records to be retained for not less than 12 months and contemplates records including customer/contact details, transaction details, delivery or service status, refunds, payment results, receipts/vouchers and relevant correspondence.

Longer retention may apply where required by:

1. Thai tax law;
2. accounting requirements;
3. payment disputes;
4. chargebacks;
5. fraud investigations; or
6. other legal obligations.

13. KYC and Business Verification

13.1 Accurate information

Venue Partners must provide accurate, complete and current:

1. corporate information;
2. ownership information;
3. director information;
4. bank information;
5. licences;
6. business activity information;
7. Venue information; and
8. other KYC information requested by Tabu or Omise.

13.2 Updates

A Venue Partner must promptly notify Tabu and, where required, Omise of material changes to information supplied during KYC.

13.3 Re-verification

Payment-enabled Venue Partners must cooperate with lawful:

1. ongoing KYC;
2. customer due diligence;
3. enhanced due diligence;
4. sanctions or risk checks; and
5. re-verification.

The Omise agreement expressly treats KYC as including checks before acceptance and re-checking during the term.

13.4 Lawful business

Each Sub-Merchant represents that it operates a lawful business and holds the licences legally required for the goods and services it supplies.

The Omise agreement requires the relevant merchant to operate lawfully, be duly licensed and not be involved in illegal business or organised crime.

14. Guest Data and Personal Data

14.1 Permitted use

Tabu may provide Guest Data reasonably necessary to fulfil and service a Booking.

A Venue Partner may use Guest Data only for lawful and authorised purposes including:

1. administering the Booking;
2. preparing for the customer’s arrival;
3. fulfilling special requests;
4. providing the booked Venue or Event service;
5. handling legitimate Booking support;
6. dealing with payment or refund issues; and
7. complying with legal obligations.

14.2 Prohibited data use

A Venue Partner must not use Tabu Guest Data to:

1. solicit customers to move Bookings away from Tabu;
2. divert Tabu users to another reservation channel in circumvention of its obligations to Tabu;
3. sell Guest Data;
4. rent Guest Data;
5. disclose Guest Data to an unrelated third party;
6. create an unrelated marketing database;
7. add customers to marketing lists merely because they made a Tabu Booking;
8. scrape customer information;
9. conduct unrelated profiling; or
10. use Guest Data for a purpose incompatible with the purpose for which it was supplied.

The signed Venue Partner framework already restricts Guest Data to reservation/service purposes and prohibits solicitation/diversion, sale, rental and third-party disclosure.

14.3 Independent Venue marketing

If a Venue wishes to send its own independent marketing to a Tabu customer, the Venue is responsible for establishing its own lawful basis and obtaining any consent required by applicable law.

A Tabu Booking does not by itself constitute marketing consent to the Venue.

14.4 Sensitive information

Guest special requests may contain information concerning:

1. allergies;
2. health;
3. disability or accessibility;
4. religious requirements; or
5. other sensitive circumstances.

Venue personnel must:

1. use such information only as necessary to fulfil the relevant request;
2. restrict access appropriately;
3. avoid unnecessary copying;
4. not use it for marketing or profiling; and
5. protect it in accordance with the PDPA.

15. Data Security

Venue Partners must maintain reasonable technical and organisational security measures appropriate to the Guest Data and Platform access they receive.

At minimum, Venue Partners should:

1. restrict Guest Data to authorised personnel;
2. use secure Operator Accounts;
3. protect passwords;
4. remove former staff access;
5. avoid sending Guest Data through insecure or unnecessary channels;
6. protect exported Booking files;
7. prevent unauthorised disclosure;
8. maintain appropriate device security; and
9. comply with applicable PDPA security obligations.

15.1 Data breaches

A Venue Partner must notify Tabu without undue delay if it becomes aware of an actual or reasonably suspected personal-data breach affecting Tabu Guest Data or Platform credentials.

The notice should include available information concerning:

1. what happened;
2. when it occurred;
3. data affected;
4. number or categories of affected persons where known;
5. containment action; and
6. Venue contact for the incident.

The Venue Partner Agreement already requires reasonable security measures and breach notification without undue delay for shared data.

16. Social Features and Official Venue Accounts

16.1 Community Guidelines apply

Where a Venue or Host uses:

1. an official Tabu profile;
2. The Scene;
3. posts;
4. stories;
5. comments;
6. messages;
7. Reactions;
8. social promotions; or
9. other Social Features,

the Tabu Community Guidelines apply in addition to this Policy.

16.2 Venue content standards

Venue and commercial accounts must not publish content involving:

1. harassment or threats;
2. hate or discriminatory abuse;
3. sexually exploitative or prohibited explicit content;
4. child exploitation or endangerment;
5. serious violence or dangerous conduct;
6. illegal goods or services;
7. unlawful regulated-product promotion;
8. doxxing or privacy violations;
9. impersonation;
10. scams;
11. spam;
12. intellectual-property infringement; or
13. other unlawful content.

16.3 Commercial authenticity

Venue accounts must not:

1. impersonate ordinary customers;
2. create fake customer testimonials;
3. manufacture fake user engagement;
4. buy or coordinate deceptive engagement;
5. post false ratings;
6. manipulate Platform metrics;
7. misrepresent paid content as independent user content; or
8. make materially misleading promotional claims.

16.4 Moderation

Venue Content submitted through Social Features may be:

1. automatically screened;
2. reviewed by human moderators;
3. held pending review;
4. restricted;
5. removed; or
6. referred for legal or specialist review.

The internal moderation framework provides for pre-publication moderation and audit trails for relevant Scene content.

16.5 Reports and cooperation

Venue Partners must cooperate reasonably with Tabu where:

1. Venue Content is reported;
2. a Venue account is accused of abuse;
3. customer safety concerns arise;
4. intellectual-property complaints are received; or
5. Tabu requires information to assess a moderation issue.

17. Customer Treatment and Non-Discrimination

Venue Partners must treat Tabu customers fairly and in accordance with applicable law.

A Venue must not discriminate unlawfully against a customer based on a protected characteristic.

Nothing prevents a Venue from applying legitimate, lawful and consistently applied requirements concerning matters such as:

1. age;
2. identification;
3. safety;
4. lawful dress rules;
5. capacity; or
6. conduct.

A Venue must not punish or provide a materially inferior service to a customer merely because the reservation originated through Tabu.

18. Venue Licensing, Food Safety and Onsite Responsibility

Each Venue remains responsible for:

1. Venue operating licences;
2. food safety;
3. food hygiene;
4. lawful alcohol service;
5. entertainment permissions;
6. building and occupancy requirements;
7. staff conduct;
8. onsite security;
9. admission decisions;
10. local licences and permits;
11. taxes applicable to its own business; and
12. the quality and lawful provision of its underlying hospitality services.

The Venue Partner Agreement expressly leaves each Venue responsible for its own food safety, licensing and service.

19. Complaints, Refunds and Customer Disputes

Venue Partners must cooperate reasonably with Tabu in resolving customer matters involving:

1. Venue cancellations;
2. incorrect Booking information;
3. incorrect No-Show designations;
4. payment errors;
5. refunds;
6. admission disputes materially connected with a Booking;
7. Event cancellation;
8. customer-data concerns; and
9. other matters relating to Tabu Bookings.

A Venue must not obstruct an eligible refund or payment correction required under:

1. the applicable customer Refund & Cancellation Policy;
2. the Venue Partner Agreement;
3. payment rules; or
4. applicable law.

Disputes concerning additional amounts incurred and paid directly at the Venue remain primarily between the Venue and the customer unless otherwise required by law or the applicable agreements.

20. Anti-Diversion and Platform Circumvention

Unless expressly permitted by the applicable Venue Partner Agreement, a Venue Partner must not deliberately use Tabu Guest Data or Booking relationships to circumvent Tabu.

Prohibited conduct includes:

1. contacting a Tabu customer to cancel and rebook directly solely to avoid Tabu fees;
2. using Guest Data to solicit future direct Bookings in breach of the applicable agreement;
3. moving a confirmed Tabu Booking off-platform to avoid reporting or fees;
4. falsifying Booking status to reduce amounts payable to Tabu; or
5. encouraging customers to misrepresent how a Booking arose.

This does not prevent a customer from independently choosing to interact with the Venue outside Tabu where no prohibited solicitation or contractual circumvention occurs.

21. Fees, Reporting and Arrived Covers

Venue Partners must provide accurate information used to calculate fees.

A Venue must not:

1. under-report Arrived Covers;
2. falsely mark customers as not having attended;
3. create fake No-Shows;
4. manipulate Booking records to avoid fees;
5. conceal payment-enabled Bookings; or
6. otherwise falsify information relevant to amounts owed to Tabu.

Tabu may audit or review relevant Booking information where permitted under the Venue Partner Agreement.

22. Marketing and Promotional Placement

22.1 Venue promotions

Venue Partners may participate in:

1. featured placement;
2. sponsored placement;
3. Tabu campaigns;
4. Event promotion;
5. editorial features; and
6. other commercial opportunities

subject to the relevant agreement.

22.2 Accuracy

Commercial content must be accurate and must not materially mislead customers.

22.3 Identification of paid promotion

Tabu may identify paid or non-organic promotional placements using a proportionate indicator such as:

1. "Sponsored";
2. "Promoted"; or
3. an equivalent indicator

where required by applicable law or Tabu’s compliance framework.

22.4 Venue cooperation

Venue Partners must provide information reasonably necessary for Tabu to comply with disclosure requirements relating to sponsored or commercial content.

23. Reviews, Ratings and Testimonials

Tabu does not currently operate a public Venue-review feature.

A Venue Partner must not present:

1. comments;
2. Reactions;
3. social posts; or
4. other Scene activity

as a verified Tabu Venue rating or review unless Tabu introduces and identifies such a feature.

Where Tabu later introduces reviews, additional review rules may apply.

24. Security, Platform Integrity and Technical Abuse

Venue Partners must not:

1. attack Tabu systems;
2. probe vulnerabilities without authorisation;
3. interfere with Platform operation;
4. bypass access controls;
5. misuse APIs;
6. reverse engineer protected Platform systems except where legally permitted;
7. scrape or harvest Platform data;
8. distribute malware;
9. use bots for unauthorised manipulation;
10. attempt to access another customer or Venue account; or
11. manipulate rankings, availability, Bookings, payments or metrics.

Good-faith security concerns should be reported to Tabu rather than exploited.

25. Audit, Monitoring and Cooperation

Tabu may reasonably monitor Platform activity to protect:

1. customers;
2. payment integrity;
3. Platform security;
4. Guest Data;
5. the accuracy of Bookings;
6. compliance with the Venue Partner Agreement; and
7. compliance with this Policy.

Venue Partners must reasonably cooperate with:

1. compliance reviews;
2. payment investigations;
3. fraud investigations;
4. KYC reviews;
5. chargeback investigations;
6. security investigations; and
7. lawful regulatory enquiries.

Omise may also inspect or monitor Platform activity for payment-network and brand-risk requirements.

26. Restrictions and Suspension

26.1 Types of action

Depending on the issue, Tabu may:

1. issue guidance;
2. require corrective action;
3. warn the Venue;
4. restrict Venue Content;
5. remove Venue Content;
6. suspend Social Features;
7. restrict particular Operator Accounts;
8. temporarily suspend new Bookings;
9. restrict payment functionality;
10. temporarily suspend a Venue listing; or
11. exercise termination rights under the applicable Venue Partner Agreement.

26.2 Grounds for restriction

Action may be taken where reasonably justified by matters including:

1. non-payment;
2. fraud;
3. suspected illegal activity;
4. payment-provider direction;
5. Source of Fund requirements;
6. failure or refusal to complete KYC;
7. serious Guest Data misuse;
8. personal-data breach;
9. serious security issues;
10. repeated failure to honour Bookings;
11. material capacity manipulation;
12. false Venue information;
13. prohibited goods or services;
14. serious Community Guidelines violations;
15. material licensing failures;
16. excessive chargebacks or payment risk;
17. deliberate fee avoidance;
18. repeated serious customer complaints;
19. breach of the Venue Partner Agreement; or
20. a legal or regulatory requirement.

26.3 Immediate restrictions

Tabu may impose immediate temporary restrictions where reasonably necessary to address:

1. active fraud;
2. serious safety risks;
3. security compromise;
4. unlawful activity;
5. Guest Data misuse;
6. payment-network intervention;
7. regulator or authority requirements; or
8. other urgent material risk.

26.4 Non-payment

Where the applicable Venue Partner Agreement provides a specific notice and cure period for unpaid undisputed amounts, Tabu will apply that contractual process.

For example, the existing restaurant master agreement permits suspension of listings/new reservations after an undisputed amount remains unpaid for more than 14 days following written notice, without prejudicing existing confirmed reservations.

26.5 Existing Bookings

Where reasonably possible, suspension of new Bookings should not by itself invalidate existing confirmed Bookings.

Existing confirmed reservations must continue to be honoured where required under the applicable Venue Partner Agreement, unless:

1. performance would be unlawful;
2. safety makes performance inappropriate;
3. payment functionality cannot lawfully operate;
4. the Venue has ceased operating; or
5. another exceptional circumstance prevents performance.

The existing Venue Partner Agreement expressly requires confirmed Bookings to remain honoured following termination/removal of a Venue.

27. Review of Platform Enforcement

A Venue Partner may contact Tabu to request review of a material restriction imposed directly by Tabu.

The request should identify:

1. the affected Venue/account;
2. the relevant restriction;
3. why the Venue believes the restriction should be reconsidered; and
4. any supporting information.

Tabu may:

1. maintain the restriction;
2. reduce it;
3. remove it;
4. substitute another measure; or
5. require specified corrective action.

Tabu cannot guarantee reversal of a restriction imposed independently by:

1. Omise;
2. a Source of Fund;
3. a card network;
4. a bank;
5. a regulator; or
6. another competent authority.

28. Corrective Action

Where appropriate, Tabu may require a Venue Partner to take corrective action such as:

1. correcting Venue information;
2. updating capacity;
3. removing unlawful content;
4. retraining Venue staff;
5. removing unauthorised Operator access;
6. improving security controls;
7. deleting improperly retained Guest Data;
8. completing KYC;
9. obtaining a required licence;
10. resolving payment issues;
11. addressing excessive disputes or chargebacks; or
12. implementing another reasonable compliance measure.

Failure to implement required corrective action may lead to further restriction or contractual remedies.

29. Changes in Ownership, Business or Operations

A Venue Partner must promptly notify Tabu of material changes including:

1. legal entity name;
2. ownership;
3. beneficial ownership where relevant;
4. directors or authorised signatories where relevant;
5. Venue operator;
6. bank account;
7. Venue address;
8. business activity;
9. licences;
10. payment activity;
11. closure;
12. insolvency; or
13. another change material to the Partner relationship or KYC.

Payment-enabled Venues must also update Omise where required.

30. Termination and Post-Termination Obligations

Termination of the Venue relationship does not automatically extinguish obligations that accrued before termination.

Depending on the applicable agreement:

1. confirmed existing Bookings may still need to be honoured;
2. accrued fees remain payable;
3. outstanding payment disputes must be resolved;
4. Guest Data may only be retained where there is a continuing lawful need;
5. confidential information remains protected;
6. Venue Content use is governed by the applicable termination provisions; and
7. legal, tax, accounting and dispute records may continue to be retained as required.

31. Responsibility of the Partner

Where a Partner operates multiple Venues or authorises multiple staff accounts, the Partner is responsible for ensuring that the relevant Venues and personnel comply with this Policy to the extent provided by the applicable agreement.

The Partner must not knowingly permit a Venue or staff member to use Tabu in a manner prohibited by this Policy.

32. Relationship of the Parties

Tabu and the Venue Partner are independent contractors unless a specific written agreement expressly states otherwise.

Nothing in this Policy creates:

1. a partnership;
2. joint venture;
3. employment relationship; or
4. general agency relationship

between Tabu and a Venue.

33. Applicable Law

This Policy is governed by the laws of the Kingdom of Thailand to the extent it forms part of or is incorporated into the applicable Venue Partner relationship.

Nothing in this Policy limits any mandatory rights, duties or obligations imposed by applicable law.

34. Changes to This Policy

Tabu may update this Policy to reflect changes in:

1. Platform functionality;
2. security requirements;
3. payment-provider rules;
4. Community standards;
5. legal or regulatory requirements; or
6. operational practices.

Where this Policy has been contractually incorporated into a Venue Partner Agreement, changes will be handled in accordance with the applicable amendment provisions and mandatory law.

Tabu may immediately implement technical or operational restrictions that are reasonably necessary to comply with:

1. applicable law;
2. a regulator;
3. Omise;
4. a Source of Fund;
5. a payment network; or
6. an urgent security or safety requirement,

even where a corresponding written policy update follows afterwards.

35. Contact

Questions concerning this Policy should be directed to:

• Tabu Support Team
• Email: support@tabubookings.com

• Tabu Co., Ltd.
• Company registration number: 0105569086462
• 27/2 Sukhumvit 33 (Daeng Udom), Khlong Tan Nuea, Watthana, Krung Thep Maha Nakhon 10110, Thailand
• Website: tabu.social

This Policy should be read together with the applicable Venue Partner Agreement, Omise / Opn Payments requirements, Tabu Privacy Policy and Tabu Community Guidelines. Nothing in this Policy permits conduct prohibited by those documents or by applicable law