PRIVACY POLICY

This policy has the version 2.1 code, is made and issued on 01/10/2012 at Ngan Luong Intermediate Payment Gateway Joint Stock Company which is the legal representative of NganLuong.vn online payment gateway.

You are a user who opened an account at NganLuong.vn, tacitly accept the contents of this policy with the following specific conditions.

Article 1: Gatherinformation

NganLuong.vn collects IP addresses and website standard information such as the type of browser, the pages you visited in the course of using the service, information about the computer & network equipment etc ... for security purposes & secure transaction.

If you open an account on NganLuong.vn, we will ask you to provide honestly and accurately the following information:

+ Personal information & personal contacts (for organizations & individuals) such as name, date of birth, gender, address, phone, email, legal documents (such as ID card, business licenses, DK MST) etc …

+ Thông tin tài chính như số tài khoản ngân hàng, số thẻ ghi nợ hoặc thẻ tín dụng v.v…

Financial information such as bank account number, debit card number or credit card etc ... In some cases, we may collect additional information about you from third party such as banks, credit institutions & services billing, network service providers and so on ...

We also may collect additional information about you from various sources & by other methods to ensure the quality of service and better serve for you.

Article 2: Set Cookies

When you visit NganLuong.vn, we (or the third party is hired to track or statistic the website activity) will set some small data files called cookies on your hard drive or your computer's memory.

One of these cookies can last long to convenient for you while you're in using process, such as: save your email in login page that help you do not have to enter it again and so on ...

We will encrypt the files cookies for security, you can prohibit cookies on your browser, but this could affect the process of using NganLuong service.

Article 3: Storage & Information Protection

We store and handle your personal information on servers located in Vietnam.

We protect this information by various means of physical protection (for example, enter control to the building that was put the main server), technology (eg, firewalls, data encryption) and work process of the operating staff.

Article 4: Use of Information

Our highest goal is that providing a online payment environment that is safety, convenience, efficiency and continuous improvement . So we will use your personal information to:

+ Provide support services & customer care.

+ Make payment transactions & send messages in the transaction process.

+ Handling of complaints, charges & solve the problem.

+ Prevent the actions that may be harmful, banned or illegal and ensure policy compliance with "User Agreement".

+ Measure, customize & improve services, content and form of the website.

+ Send your the information about marketing programs, announcements & promotions.

+ Comparison of the accuracy of your personal information in the course of checking with third party.

Article 5: Share information with other users

To perform payment transactions, we must share some of your personal information to individuals or organizations that you are trading, including: contact information, date of registration, the number of successful transactions in the past, verify account status ...

+ In case you buy the product or service and pay via NganLuong.vn, in the case of need, we can provide your information to seller for delivery purpose. Sellers are not allowed to offer additional products without your agreement.

+ In case you sell a product or service and pay by NganLuong.vn, in case of need, we can provide your contact information to buyer for the transaction or complaints.

We have provided means of accepting payment via NganLuong.vn for merchants on the Internet the, so that merchants could share information about you to us, such as email address, phone number when you want to pay for them. We checked this information with user database to confirm that you are our customer or not in order that merchants can open payment via Ngan Luong mode for you.

We will not reveal your financial information to anyone unless we has agreement from you or when we are required to comply with the law or upon request from the public authorities that have authorization.

Article 6: Share information with third party

We may share or receive your personal information to / from:

The products of PeaceSoft company members (eg ChoDienTu.vn, eBay.vn ...) to provide content & collaboration services, detect & prevent behaviors that are illegal or contrary to our policies, and support these products in improving products, services and content;

Contractors contracted for our services within NganLuong.vn activity (eg, fraud prevention, marketing, technology). Our contract stipulates that the contractors are not accepted to use your personal information for purposes that are out of scope of the contract, or for their own benefit;

The companies that we tend to merger or acquisition. In that case, we will require a new legal entity comply with this privacy policy. If your personal information is used out of the scope of this policy, you will receive prior notification;

The law enforcement agencies or competent public authorities, or other third parties in the following cases:

+ There's request from the court or other similar legal proceedings;

+ We must do that to comply with the law;

+ We are cooperating with an investigation by law enforcement agencies;

+ We believe that the disclosure of your personal information is necessary to prevent the damage of physical or financial loss, to report any suspicious behavior is illegal, or investigate violate the " user agreement " policy ;

Any other third party if you're agree to share your information.

In addition to the range described above, NganLuong.vn will not sell or rent your personal information to any other third party!

Article 7: Change Information

You can change your personal information at any time of using the corresponding functions. However, we will save the altered information to combat acts of deleting traces of fraud.

NganLuong.vn has rights to change this policy and is responsible for announcing to you one the website and / or email 7 days before the official application is applied.

Article 8: How Data And Personal Information Are Processed, Used, And Stored.

Ngan Luong does not collect personal data and information. We are not interested in receiving and knowing the identities of individuals with scannable identification documents. However, the application needs to process personal information displayed on identification documents through Ngan Luong's Optical Character Recognition (OCR) technology, including:

- Sensitive privacy information such as Portrait Photo, Full Name, Nationality, Gender, ID Number, Date of Birth, Issue Date, Expiry Date, Address, Place of Birth, Father's Full Name, Mother's Full Name, Spouse's Full Name

- Special categories – Nationality and biometric data such as facial recognition for the purpose of uniquely identifying a natural person and anti-spoofing.

The application processes this information locally on the smartphone and then sends that information to the server for processing. After personal information is processed on the server, the information is returned to the phone. Personal information processed is not stored on the server and/or on the smartphone or within the application. Moreover, this information is not shared with any third party

Ngan Luong uses servers under its own control. In case you withdraw your consent or definitively revoke consent for Ngan Luong to use your information for electronic identification, we will cease all identification processes and delete all your data generated during the electronic identification process.

The application displays identity verification through Ngan Luong OCR. We do not process, use, and/or store non-personal information such as location, device type, or any other usage information.

Article 9 . How Your Personal Data Is Processed And Used

By using the application, you agree and allow your personal data and information to be sent to Ngan Luong servers where they are processed to verify your identity. However, your personal information, including information generated during the authentication process (information read from MRTD documents, facial data used for matching and anti-spoofing), is not stored on the server, on the smartphone, or within the application. Ngan Luong does not collect or store any data for any purpose on the server or in the application.

9.1 The personal data we collect will be processed for the following purposes:

We process personal information based on legal grounds and solely for the purpose of personal identity verification according to ICAO 9303. Your entire personal information is not stored before, during, and after this process.

9.2 Disclosure

Ngan Luong will not transfer your personal data to a third party without your prior consent. Please note that Ngan Luong does not share personal information with a third party for marketing or any other purposes.

9.3 Data Transmission

Ngan Luong does not store your personal information processed and used through or by Ngan Luong. Therefore, your personal data is not stored on the cloud or on our servers.

Article 10 : Collection and Use of Facial Data

Our app utilizes the TrueDepth API to collect facial data, including facial geometry and expressions. This data is used for the following purposes:

- Facial Recognition: To verify the identity of the user by comparing the collected facial data with the user's photo on a chip-embedded ID card according to the ICAO9303 standard.

- Anti-Spoofing: To prevent unauthorized access by detecting and preventing attempts to use photos, videos, or masks to spoof facial recognition.

- Anti-Deepfake Measures: To detect and prevent the use of deepfake technology for fraudulent purposes.

- Matching Process: To accurately match the user's facial data with their photo ID for authentication.

10.1: Data Storage and Deletion

All facial data collected is used solely for the purposes described above and is promptly deleted upon completion of the matching process. We do not store any customer data beyond the duration of the authentication session.

10.2: Data Sharing

We do not share facial data with any third parties. The data is processed and deleted on-device, ensuring that no external entities have access to this sensitive information.

10.3: Data Protection Measures

We implement industry-standard security measures to protect facial data during its collection, processing, and deletion. This includes encryption and secure handling practices to prevent unauthorized access or data breaches.

10.4 : User Rights

Users have the right to know how their facial data is used and to request the deletion of their data at any time. Since we do not store facial data, deletion occurs immediately after the authentication session.

10.5: Legal Basis

Our collection and use of facial data are conducted in compliance with relevant privacy laws and regulations. We ensure that users are informed of the purposes and handling of their data, and we obtain user consent where required.