Get member profile

Live

GET/api/v1/profile

Fetch the logged-in member's profile — contact info, member tier, the bound bank account, and impersonation status.

A non-null impersonated_by means a read-only impersonation session (staff viewing the account) — show a banner; mutations/transactions are rejected with code 1002.

Headers

Field	Type	Required	Description
Authorization	string	Yes	Used — send Bearer <member access_token>
X-Api-Key	string	Yes	Agent API key (ak_…) from the bo screen
X-Timestamp	string	Yes	Signing time in unix milliseconds (±300s skew allowed)
X-Nonce	string	Yes	Unique per-request value (UUIDv4) for replay protection
X-Signature	string	Yes	hex(HMAC-SHA256(secret, canonical)) — see the Authentication page
X-Player-IP	string	—	The player's real IP (IPv4/IPv6) — recommended (used in login history)
X-Player-UA	string	—	The player's User-Agent (optional — recorded in login history)
X-Request-Id	string	—	Your correlation id — echoed back as request_uuid (recommended)
x-lang	string	—	th (default) or en — the language of message

Response

Fields in data

Field	Type	Required	Description
id	string	—	Member id (uuid)
username	string	—	Username (agent prefix + phone)
phone	string \| null	—	Mobile number
full_name	string \| null	—	Full name
email	string \| null	—	Email
line_id	string \| null	—	LINE ID
avatar_url	string \| null	—	Avatar URL
member_tier	string \| null	—	Member tier (starts at NEW, promoted by activity)NEW \| BRONZE \| SILVER \| GOLD \| VIP
status	string	—	Account statusACTIVE \| LOCKED \| BANNED \| PENDING_VERIFICATION
selected_promotion_id	string \| null	—	Deposit bonus the member selected (null = no bonus)
agent_id	string \| null	—	Owning agent id
created_at	string (ISO 8601)	—	Signup time
last_login_at	string (ISO 8601) \| null	—	Last login time
impersonated_by	string \| null	—	Id of the admin/agent driving a read-only impersonation session — null on a normal member login
bank	object \| null	—	Bank details
└ bank_code	string	—	Bank code, e.g. KBANK
└ bank_name	string	—	Bank name (Thai)
└ account_number	string	—	Account number
└ account_name	string	—	Account holder name

Response example

{
  "success": true,
  "code": 0,
  "message": "สำเร็จ",
  "data": {
    "id": "0f1e2d3c-4b5a-6978-8796-a5b4c3d2e1f0",
    "username": "abc0812345678",
    "phone": "0812345678",
    "full_name": "สมชาย ใจดี",
    "email": "somchai@example.com",
    "line_id": "somchai_jd",
    "avatar_url": null,
    "member_tier": "BRONZE",
    "status": "ACTIVE",
    "selected_promotion_id": null,
    "agent_id": "7a6b5c4d-3e2f-4a19-b7c6-d5e4f3a2b1c0",
    "created_at": "2026-06-01T04:12:33.000Z",
    "last_login_at": "2026-07-05T02:41:07.000Z",
    "impersonated_by": null,
    "bank": {
      "bank_code": "KBANK",
      "bank_name": "ธนาคารกสิกรไทย",
      "account_number": "1234567890",
      "account_name": "สมชาย ใจดี"
    }
  },
  "request_uuid": "d17b3f82-5c40-4a96-b1e8-6f9d2c5a8e04"
}

Possible error codes

code	Name	HTTP	Message
1001	UNAUTHORIZED	401	UnauthorizedMissing Authorization: Bearer header
1007	TOKEN_INVALID	401	Token invalidInvalid/expired access token, or the session was revoked (logout)
1003	USER_NOT_FOUND	404	User not found