1. Security Commitment
The card payment system provided by payment intermediary partners ("Payment Intermediary Partner") is legally licensed to operate in Vietnam. Accordingly, the card payment security standards at Hoayeuthuong.com ensure compliance with industry security standards.
2.1. Policy on payment transactions by international and domestic cards (internet banking) to ensure compliance with security standards of Payment Intermediary Partners including:
- Customer's financial information will be protected during transactions using SSL (Secure Sockets Layer) protocol.
- Payment Information Data Security Standard (PCI DSS) Certification provided by Trustwave.
- Tokenization of international card numbers.
- Principles and regulations on information confidentiality in the banking and finance industry in accordance with the State Bank of Vietnam regulations.
- Hoayeuthuong.com provides a token storage facility that only stores the chain encrypted by the Payment Intermediary Partner for Hoayeuthuong.com.
- Hoayeuthuong.com does not directly store customer card information. The security of Customer's payment card information is done by a licensed Payment Intermediary Partner.
- For international cards: the Customer's payment card information which is capable of using to establish transactions is not stored on Hoayeuthuong.com's system that the Payment Intermediary Partner will keep and secure.
- For domestic cards (internet banking), Hoayeuthuong.com only stores order codes, transaction codes and bank names.
- Hoayeuthuong.com commits to ensure strictly implementing necessary security measures for all payments made on Hoayeuthuong.com.