Third-Party Service Providers

• Platform/Store Providers — Includes distribution Platforms such as Google Play and the Apple App Store for Mobile applications, together with related Platform mechanisms.
• Payment Providers — May include banks, payment gateways, Card/QR processors, or payment partners required to complete transactions.
• Electronic Invoice Providers — May participate in issuing, transmitting, or storing electronic-invoice data under applicable requirements and integration models.
• Infrastructure Providers — May provide Hosting, Cloud, CDN, Object Storage, Monitoring, Logging, or other technical services supporting system operation.
• Security Providers — May support Security Monitoring, vulnerability management, anti-fraud, threat detection, or other security functions.
• Analytics Providers — Where Vietnam Office uses third-party Analytics services, data is processed within the scope disclosed in the Privacy/Cookie Policy and applicable user choices.
• Customer Support Providers — Certain Ticket, Support, communication, or CRM services may be provided by third parties.
• Professional Advisors — Where necessary, data may be provided to auditors, legal advisors, accountants, or other professional advisers under appropriate confidentiality obligations.
• Limited-sharing principle — Third parties receive only the data necessary for the assigned service or applicable legitimate purpose.
• Contracts and data protection — Where appropriate, Vietnam Office applies contractual terms, confidentiality obligations, and data-protection requirements to service providers processing data.
• No automatic transfer of data ownership — Using a service provider does not automatically transfer ownership of customer data to that provider.
• Providers may change — Specific providers may change according to operational needs. Vietnam Office may publish updated information in the Privacy Policy, Subprocessor Notice, or equivalent documentation where applicable.

Third-Party Processing principle: use only where necessary → define purpose → limit data → apply confidentiality obligations → provide appropriate oversight → maintain user transparency under applicable policy.