Privacy Policy

PRIVACY POLICY

The following Privacy Policy describes how we, GoPay (GOPAY VIETNAM PAYMENT SERVICES COMPANY LIMITED and/or our Affiliates (together “ We ”, “ Us ” or “ Our ”), collect, store, use, transfer, disclose and protect your Personal Information through the use of System and the Website.

Please read this Privacy Policy thoroughly to ensure that you understand our data processing and protection practices.

This Privacy Policy includes the following matters:

  1. Definitions
  2. Personal Information which We collect
  3. The use of Personal Information which We collect
  4. Sharing of Personal Information which We collect
  5. Cross-border transfers of Personal Information
  6. Period of the Personal Information Processing
  7. Access and correction of Personal Information
  8. Where We store your Personal Information
  9. Security of your Personal Information
  10. Changes to this Privacy Policy
  11. Language
  12. Acknowledgement and consent
  13. Marketing and promotional materials
  14. Anonymised data
  15. Third party Websites
  16. How to contact us

  1. DEFINITIONS

Unless otherwise defined below, all capitalised terms used in this Privacy Policy shall have the same meanings ascribed to them in the Terms of Use for the Use of GoPay .

" Personal Information " means data, whether true or not, about an individual who can be identified from that data or from that data and other information to which We have or are likely to have access, including basic data and sensitive data. This may include an individual’s name, address, date of birth, occupation, phone number, e-mail address, biometric information, bank account, credit card details, gender, vehicle information, photo, health data, financial-related information, and other information which, when taken together with other information, would enable an individual to be identified.

" Beneficiary Owner " means an individual with the ownership of one or a number of properties, has the right to dominate the customer to conduct transactions related to this individual property; As an individual has the right to dominate a legal entity or a legal agreement.

   

  1. PERSONAL INFORMATION WHICH WE COLLECT

  1. We collect certain information (which may include Personal Information) about you. The Personal Information which We collect may be provided by you directly (for example, when you register as a User, or you otherwise provide Personal Information to us) or by third parties, or be collected automatically when you use the System. We may collect information in various forms and for various purposes (including purposes permitted under Applicable Law). If you do not provide your Personal Information to us, We may not be able to facilitate or communicate with relevant parties.

Information obtained from you or from your mobile device directly

  • When you register and create an Account with us using the System, you have to provide to us certain Personal Information, including your full name, date of birth, nationality, valid ID Card/Passport with date of issuance, place of issuance; visa (if applicable); physical address, e-mail address, your phone number, and an Account ID and/or password that you will use to access the System after registration. If you register and create an Account as an enterprise, you have to provide us with certain information about your enterprise, including enterprise name and abbreviated name, enterprise code/ tax code, head office address, transaction address, phone number, and the Beneficiary Owner or the Personal Information of the legal representative of your enterprise.

  • If you have registered your Account on any prior available System, you agree that, by registering or creating your Account in the latest version of the System and continuing to use your Account, you consent to us using your Personal Information for the provision of services via the current available System in accordance with this Privacy Policy.

When you use the System, you have to provide to us such relevant information as may reasonably be required by us in order for the System to work. For example, if you are using the Services, you will need to provide us with information as to the type of Service you seek and details as to the relevant Transaction(s).

Information collected whenever you use the System or visit Our Website

  • Whenever you use the System or visit our Website, We may collect certain technical data concerning your usage such as, internet protocol (IP) address, information of web pages previously or subsequently viewed, duration of every visit/session, the internet device identity (ID), mobile advertising ID or media access control address, and also other device information regarding the manufacturer, model and operating system of the device that you use to access the System or our Website.

  • Whenever you use the System or visit our Website, certain information may also be collected on an automated basis using cookies. Cookies are small application files stored on your computer or mobile device. We use cookies to track user activity to enhance user interface and experience. Most mobile devices and internet browsers support the use of cookies; but you may adjust the settings on your mobile device or internet browser to reject several types of certain cookies or certain specific cookies. Your mobile device and/or browser would also enable you to delete at any time whatever cookies have previously been stored. However, doing so may affect the functionalities available on the System or our Website.

Information collected from third parties

  • We may also collect Your Personal Information from third parties (including our agents, vendors, suppliers, contractors, partners and any others who provide services to us, who collect your Personal Information and/or perform functions on our behalf, or whom We collaborate with). In such cases, We will only collect Your Personal Information for or in connection with the purposes for which such third parties are engaged or the purposes of our collaboration with such third parties (as the case may be), provided that We have taken reasonable steps to ensure that such third parties would undertake to us to obtain Your consent for the disclosure of Your Personal Information to us in line with this Privacy Policy and Applicable Law.

Information about third parties you provide to us

  • You may provide us with Personal Information relating to other third-party individuals (such as Personal Information relating to your spouse, family members or friends). You will of course need their consent to do so – see “Acknowledgement and Consent”, below, for further information.

  1. THE USE OF PERSONAL INFORMATION WHICH WE HAVE COLLECTED

  1. We may use Personal Information collected for any of the following purposes as well as for such other purposes as are permitted by Applicable Law. For example:

  • to identify you and to register you as a User and to administer, manage or verify your Account as such;
  • to facilitate or enable any checks as We may in our discretion consider necessary before We register you as a User;
  • to enable Us to provide you with such of the services as you have requested;
  • to process and facilitate orders and payment transactions made by you, including where applicable, transactions made through any payment systems and services available over the System;
  • to communicate with you and to send you information in connection with the use of the System;
  • to notify you of any updates to the System or changes to the Services available;
  • to process and respond to enquiries and feedback received from you;
  • to maintain, develop, test, enhance and personalise the System to meet your needs and preferences as a User;
  • to monitor and analyse user activities and demographic data including trends and usage of the various Services available on the System; and
  • to send you direct marketing communications and information on special offers or promotions.

We may also use your Personal Information more generally for the following purposes (although We will in each such case always act reasonably and use no more Personal Information than what is required for the particular purpose):

  • to undertake associated business processes and functions;
  • to monitor usage of the System and administer, support and improve the performance efficiency, user experience and the functions of the System or the Services;
  • to provide assistance in relation to and to resolve any technical difficulties or operational problems with the System or the Services;
  • to generate statistical information and anonymous analytics data for the purpose of testing, research, analysis and product development;
  • to prevent, detect and investigate any prohibited, illegal, unauthorise or fraudulent activities;
  • to facilitate business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving us and/or any of our Affiliates;
  • to enable us to comply with our obligations under any Applicable Law (including but not limited to responding to regulatory enquiries, investigations or directives, complying with statutory or regulatory filing and reporting requirements) and conducting audit checks, due diligence and internal investigations;
  • for the achievement of the purpose relating to the preparation of the historical documents of the archives for public interest, or for the purpose relating to research or statistics with appropriate security measure;
  • to prevent or suppress a danger to a person’s life, body or health;
  • as necessary for the performance of a contract to which you are a party, or in order to take steps at the request of you prior to entering into a contract;
  • as necessary for the performance of a task We carried out in the public interest, or it is necessary for the exercising of official authority vested in us; and
  • as necessary for our legitimate interests or legitimate interests of any other person or legal person.

  1. SHARING OF PERSONAL INFORMATION WHICH WE COLLECT  

  1. We may disclose to or share with affiliates, our third parties and other parties (“ Processor " ) your Personal Information for any of the following purposes as well as for such other purposes as are permitted by Applicable Law (although We will in each such case always act reasonably and disclose or share no more Personal Information than what is required for the particular purpose):

  • for the purpose of enabling Us to perform or deliver the Services, which may include contacting you;
  • where instructed, requested, required or authorised by Applicable Law (including but not limited to responding to regulatory enquiries, investigations or directives, or complying with statutory or regulatory filing and reporting requirements), for the purpose so specified in that Applicable Law; or complying with any request, order, directive or other instruction from a Governmental Authority;
  • where there is any form of legal proceeding between you and us, or between you and another party, in connection with, or relating to the Services, for the purposes of that legal proceeding;
  • in an emergency concerning your health for the purposes of dealing with that emergency;
  • in a situation concerning your health or public interest, We may share your Personal Information to the government authorities and/or other institutions that may be appointed by the government authorities or have a cooperation with us, for the purposes of contact tracing, supporting government initiatives, policies or programs, public safety and any other purposes reasonably needed;
  • in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing or acquisition of all or a portion of our business by or into another company, for the purposes of such a transaction (even if the transaction is eventually not proceeded with);
  • where We share Personal Information with third parties (including but not limited our agents, vendors, suppliers, contractors, partners and any others who provide services to us, perform functions on our behalf, or whom We enter into commercial collaboration with), for or in connection with the purposes for which such third parties are engaged, to perform certain disclosure to the relevant third parties which are technically required to process your transaction or for the purposes of our collaboration with such third parties (as the case may be), which may include allowing such third parties to introduce or offer products or services to You, or other conducting activities including marketing, research, analysis and product development; and
  • where We share Personal Information with Affiliates, We will only do so for the purpose of them helping us to provide the System or to operate our business (including, where you have subscribed to our mailing list, for direct marketing purposes), or for the purpose of them conducting data processing on our behalf. For example, an Affiliate in another country may process and/or store your Personal Information on behalf of the Gojek Group Companies in your country. All of our Affiliates are committed to processing the Personal Information that they receive from us in line with this Privacy Policy and Applicable Law.

  1. where We share Personal Information with Processor, We will only do so for the purpose of them helping us to provide the System or to operate our business (including, where you have subscribed to our mailing list, for direct marketing purposes), or for the purpose of them conducting data processing on our behalf. For example, an Affiliate in another country may process and/or store your Personal Information on behalf of the PT GoTo Gojek Tokopedia Tbk (“ GoTo Group ”) in your country. All of our Processor are committed to processing the Personal Information that they receive from us in line with this Privacy Policy and Applicable Law.

  1. Where it is not necessary for the Personal Information disclosed or shared with other parties to be associated with you, we will use reasonable endeavours to remove the means by which the Personal Information can be associated with you as an individual before disclosing or sharing such information.

  1. We will not sell or lease Your Personal Information to any third parties.

  1. Other than as provided for in this Privacy Policy, we may disclose or share your Personal Information if We notify you of this in advance and We have obtained your consent for the disclosure or sharing.

  1. CROSS-BORDER TRANSFERS OF PERSONAL INFORMATION

Your Personal Information may be transferred to, stored, used and processed in a jurisdiction other than your home nation or otherwise in the country, state and city in which you are present while using any services provided by us (“ Alternate Country ”), to GoTo Group Companies which are located outside of your home nation or Alternate Country and/or where our servers and/or service providers and partners are located outside of your home nation or Alternate Country. You understand and consent to the transfer of your Personal Information out of your home nation or Alternate Country as described herein.

  1. PERIOD OF PERSONAL INFORMATION PROCESSING

  1. Your Personal Information will only be processed as long as it is necessary to fulfil the purpose for which it was collected. We also need to retain Your Personal Information for as long as such retention is required or authorised by Applicable Law. We shall cease to retain Personal Information or remove the means by which the Personal Information can be associated with you as an individual, as soon as it is reasonable to assume that the purpose for which that Personal Information was collected is no longer being served by retention of Personal Information and retention is no longer necessary for legal or business purposes.

  1. In the event We share your Personal Information to third parties, you agree and acknowledge that the retention of your Personal Information by the relevant institutions will follow their respective policy on data retention. Information relayed through communications you make with such third parties other than through the use of the System (such as by telephone, mobile messaging or other modes of communication or through collection of your Personal Information by our agents) may also be retained by some means. We do not authorise the retention of Personal Information by such means and We have no responsibility to you for the same. To the fullest extent permitted by Applicable Law, We shall not be liable for any such retention of your Personal Information. You agree to indemnify, defend and release us, our officers, directors, employees, agents, suppliers, contractors and Affiliates from and against any and all claims, losses, liabilities, expenses, damages and costs (including but not limited to legal costs and expenses on a full indemnity basis) resulting directly or indirectly from any unauthorised retention of your Personal Information.

  1. ACCESS AND CORRECTION OF THE PERSONAL INFORMATION

  1. You may request us for access to and/or the correction of your Personal Information in our possession and control, by contacting us at the details provided below. Subject to Applicable Law, We reserve the right to charge an administrative fee for such requests.
  2. We reserve the right to refuse your requests for access to, or to correct, some or all of your Personal Information in our possession or control, if permitted or required under any Applicable Law. This may include circumstances where the Personal Information may contain references to other individuals or where the request for access or request to correct is for reasons which We reasonably consider to be trivial, frivolous or vexatious.
  3. We will process your request, either to complete the request or refuse the request, and notify you within 72 (seventy-two) hours of receiving the request.

  1. WHERE WE STORE YOUR PERSONAL INFORMATION

  1. The Personal Information that We collect from you may be stored at, transferred to, or processed by third party service providers. We will use all reasonable endeavours to ensure that all such third-party service providers provide a level of protection that is comparable to our commitments under this Privacy Policy.

  1. Your Personal Information may also be stored or processed outside of your country by personnel who work for us in other countries, or by our third-party service providers, suppliers, contractors or Affiliates, to the extent permitted under Applicable Law. In such a case, we will ensure that such Personal Information remains subject to a level of protection comparable to what is required under the laws of your country (and, in any event, in line with our commitments in this Privacy Policy).

  1. SECURITY OF YOUR PERSONAL INFORMATION

Confidentiality of your Personal Information is of utmost importance to us. We will use all reasonable efforts to protect and secure your Personal Information against access, collection, use or disclosure by unauthorised persons and against unlawful processing, accidental loss, destruction and damage or similar risks. Unfortunately, the transmission of information via the Internet is not completely secure. Although We will do our best to protect your Personal Information, you acknowledge that We cannot guarantee the integrity and accuracy of any Personal Information which you transmit over the Internet, nor guarantee that such Personal Information would not be intercepted, accessed, disclosed, altered or destroyed by unauthorised third parties, due to factors beyond our control. You are responsible for keeping your Account details confidential and you must not share your password with anyone and you must always maintain the security of the mobile device that you use.

  1. CHANGES TO THIS PRIVACY POLICY

We may review and amend this Privacy Policy at our sole discretion from time to time, to ensure that it is consistent with our future developments, and/or changes in legal or regulatory requirements. If We decide to amend this Privacy Policy, we will notify you of any such amendments by means of a general notice published via the System, or otherwise to your e-mail address set out in your Account. You agree that it is your responsibility to review this Privacy Policy regularly for the latest information on our data processing and data protection practices, and that your continued use of the System, communications with us, or access to and use of the Services following any amendments to this Privacy Policy will constitute your acceptance to the amendments.

  1. LANGUAGE

If there is any inconsistency between the Vietnamese, English and other language versions of this Privacy Policy (if any), the Vietnamese version shall prevail.

  1. ACKNOWLEDGEMENT AND CONSENT

  1. By accepting the Privacy Policy, you acknowledge that you have read and understood this Privacy Policy and you accept all of its terms. In particular, you agree and consent to us collecting, using, disclosing, storing, transferring, or otherwise processing your Personal Information in accordance with this Privacy Policy.

  1. In circumstances where you provide us with Personal Information relating to other individuals (such as Personal Information relating to your spouse, family members or friends), you represent and warrant that you have obtained such individual’s consent for, and hereby consent on behalf of such individual to, the collection, use, disclosure and processing of his/her Personal Information by us.

  1. You may withdraw your consent to any or all collection, use or disclosure of your Personal Information at any time by giving us reasonable notice in writing using the contact details stated below. You may also withdraw your consent for us to send you certain communications and information via any “opt-out” or “unsubscribe” facility contained in our messages to you. Depending on the circumstances and the nature of the consent which you are withdrawing, you must understand and acknowledge that after such withdrawal of consent, you may no longer be able to use the System or certain Services. A withdrawal of consent by you may result in the termination of your Account or of your contractual relationship with us, with all accrued rights and obligations remaining fully reserved. Upon receipt of your notice to withdraw consent for any collection, use or disclosure of your Personal Information, We will inform you of the likely consequences of such withdrawal so that you can decide if indeed you wish to withdraw consent.

  1. You agree and understand that as regulated by Applicable Law, a withdrawal of consent by you shall not affect the legality of data collecting, using, disclosing, storing, transferring or otherwise processing that have been consented by you before withdrawing the consent.

  1. MARKETING AND PROMOTIONAL MATERIAL

  1. We may send you marketing and promotional communications via post, telephone call, short message service (SMS), e-mail, online messaging, or push notifications via the System to notify you about special privileges, promotions, or events offered or organised by us, our partners, sponsors, or advertisers, or to provide updates on our System and/or the products and services offered therein (" Marketing Material "), if you have agreed to subscribe to our mailing list and/or consented to receive such Marketing Material from us.

  1. You may opt out from receiving such marketing communications at any time by clicking on any “unsubscribe” facility embedded in the relevant message or otherwise contacting us using the contact details stated below. Please note that if you opt out, We may still send you non-promotional messages, such as ride receipts, or information about your Account or System.

  1. ANONYMISED DATA

We may create, use, license or disclose Personal Information, provided, however, (i) that all identifiers have been removed such that the data, alone or in combination with other available data, cannot be attributed to or associated with or cannot identify any person, and (ii) that has been combined with similar data such that the original data forms a part of a larger data set.

  1. THIRD PARTY WEBSITES

  1. The System and Website may contain links to Websites that are operated by third parties. We do not control nor accept liability or responsibility for these Websites and for the collection, use, maintenance, sharing, or disclosure of data and information by such third parties. Please consult the terms and conditions and privacy policies of those third party websites to find out how they collect and use your Personal Information.

  1. When you are using our System and enable the fingerprints and/or facial recognition features in your mobile device for authentication purposes, please note that We do not store such biometric data. Unless otherwise notified to you, such data is stored in your mobile device and may also be stored by third parties, such as your device’s manufacturer. You agree and acknowledge that We are not responsible for any unauthorized access or loss towards such biometric data stored in your device.

  1. Advertisements contained on our System operate as links to the advertiser’s Website and as such any information they collect by virtue of your clicking on that link will be collected and used by the relevant advertiser in accordance with the privacy policy of that advertiser.

  1. HOW TO CONTACT US

If you have any questions regarding this Privacy Policy or you would like to obtain access and/or make corrections to your Personal Information or make a complaint about this Privacy Policy, please contact to Our head office or Our Branches or Our hotline at 1900636153 or mailing us at email at supportpayx@payx.com.vn .