The One Club respects privacy and strives to protect the User’s personal data to comply with the provisions of Vietnamese laws. The Privacy Policy governs and regulates The One Club’s collection and processing practices of personal data of the Users during the Users’ access or interaction with the Website. The One Club takes the privacy of information of Users seriously. This Privacy Policy applies to all data collected by The One Club or provided by Users in relation to using the Website.

The Privacy Policy is set out in accordance with Decree No. 13/2023/ND-CP prescribing personal data protection and relevant laws (the “Decree No. 13”). The Users are required and responsible for reading these contents carefully and regularly checking back for updates on any changes set out in the Privacy Policy. By accessing the Website or by agreeing to allow The One Club to collect and process the personal data of the Users in a manner of compliance with the laws, the Users accept the policies and regulations described in this Privacy Policy without any limitation or reservation. If Users refuse or disagree with any provisions of the Privacy Policy, please stop accessing the Website.

For clarification, The One Club reserves the right to suspend or terminate the access of Users at the time the Users refuse to accept these terms without any notice. The use of the Website will be provided to the Users once The One Club obtains the Users’ consent to the collection and processing of personal data in accordance with this Privacy Policy.

1. “Personal data” means information in the form of symbols, scripts, digits, images, sounds, or similar forms in the electronic environment that is associated with a specific person or helps identify a specific person. Personal data includes basic personal data and sensitive personal data.
2. “Basic personal data” include:
   1. Full name, middle, and birth name, and other names (if any);
   2. Date, month, year of birth; date, month, year of death or disappearance;
   3. Gender;
   4. Place of birth, place of birth registration, permanent residence, temporary residence, current residence, hometown, contact address;
   5. Nationality;
   6. Images of individuals;
   7. Phone number, identity card number, personal identification number, passport number, driver’s license number, license plate number, personal tax, identification number, social insurance number, health insurance card number;
   8. Marital status;
   9. Information about family relationships (parents, children);
   10. Information about the individual’s digital account; personal data reflecting activities and history of activities in cyberspace;
   11. Other information that relates to a specific person or helps identify a specific person that does not fall under the category of sensitive personal data.
3. “Sensitive personal data” means personal data associated with individual privacy that, when infringed, will directly affect the legitimate rights and interests of individuals, including:
   1. Political views, religious views;
   2. Health and personal status are recorded in the medical record, excluding information about blood type;
   3. Information related to racial and ethnic origin;
   4. Information about inherited or acquired genetic characteristics of individuals;
   5. Information about individual physical properties, biological characteristics;
   6. Information about the sex life, sexual orientation of the individuals;
   7. Data on crimes and offenses collected and stored by law enforcement authorities;
   8. Information on customers of credit institutions, foreign bank branches, payment service providers and other licensed institutions, including: customer identification as prescribed by laws, accounts, deposits, deposited assets, transactions, organizations and individuals that are guarantors at credit institutions, bank branches, and payment service providers;
   9. Data about the individual’s location determined through location services;
   10. Other personal data provided by laws is specific and requires necessary security measures.
4. “Processing of personal data” is one or more activities affecting personal data, such as collection, recording, analysis, confirmation, storage, modification, publicity, combination, access, retrieval, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction of personal data or other related actions.

The One Club may collect directly or indirectly personal data of the Users in the course of accessing and using the Website of Users.

1. Notification is given once prior to the processing of personal data by The One Club.
2. Contents of notification to Users regarding the processing of personal data include:
   1. Purpose of processing;
   2. Type of personal data used related to the purposes of processing specified in section 4.2(a) of this Privacy Policy;
   3. Method of processing;
   4. Information about other organizations and individuals related to the purposes of processing specified in section 4.2(a) of this Privacy Policy;
   5. Possible unexpected consequences and damages;
   6. Start time and end time of data processing.
3. Notification to Users will be presented by The One Club in a format that can be printed, and copied in writing, including in electronic or verifiable format
4. The One Club does not need to provide a personal data processing notification to Users in the following cases:
   1. Users are aware of and fully consent to the contents of sections 4.1 and 4.2 of this Privacy Policy before consenting to the collection of personal data by T he One Club, in accordance with the provisions of section 11 of this Privacy Policy;
   2. Personal data processed by competent state authorities for the purpose of serving the operation of state authorities in accordance with laws.

1. In case of emergency, relevant personal data needs to be immediately processed to protect the life and health of Users or others. The One Club is responsible for proving this case.
2. The disclosure of personal data in accordance with the laws.
3. The processing of personal data by competent state authorities in case of an emergency of national defense and security emergency, social order and safety, major disasters, or dangerous epidemics; when there is a threat to national security or defense but not to the extent of declaring a state of emergency; preventing and combating riots, terrorism, preventing and combating crimes and violations of laws in accordance with the provisions of laws.
4. Performing the obligations under the User’s contract with relevant agencies, organizations, and individuals in accordance with the provisions of laws.
5. Serving the operation of state authorities prescribed by specialized laws