Privacy Policy
Last updated: 26 July 2026
LUXURY CRANE (the 'Company') treats your personal data with care and complies with Vietnam's Personal Data Protection Decree (Nghị định 13/2023/NĐ-CP) and other applicable laws. This policy covers our app and website.
1. Data we collect
a. Account · Email, nickname, password (stored as a one-way hash) · When you sign in with Google, Facebook or Apple: the identifier and email provided by that service b. Service usage · Point top-up and spending history, payment records, play history, prize wins and in-store pickups (QR) · Coupon redemption history, membership tier c. Device and access data · Device type and OS, IP address, access logs, app version · Push notification token (only if you opt in to notifications) d. Location (optional) · Device location, used to sort stores by distance. It is read once, at the moment you explicitly grant permission in the app. We do not collect it in the background, do not track your movement, and do not store it on our servers. If you decline, every feature — including the store list — still works.
2. Why we use it
· Account management, identity verification and fraud prevention · Providing the service (play outcomes, point management, QR issuance, in-store pickup) · Payment processing and settlement, refunds and dispute handling · Service notifications (prize won, pickup deadline approaching) · Marketing messages — only to users who opted in separately · Customer support and service improvement · Meeting our legal obligations
3. Consent and withdrawal
At sign-up, agreeing to the Terms of Service, consenting to the collection and use of personal data, and confirming you are 18 or older are required. Marketing messages are optional. You can withdraw optional consent at any time: · Marketing messages: turn off 'Offers & events' in [My Page > Settings > Notifications] · Service notifications: turn off 'Service alerts' on the same screen, or revoke the OS notification permission · Location: revoke the location permission in your device settings To withdraw consent for required items, please use the account deletion process.
4. How long we keep it
As a rule, account identifiers are erased without delay when you delete your account. However, the following is retained for the period required by law or to handle disputes, and is anonymised beforehand so that you can no longer be identified: · Payment, settlement and accounting records — for the statutory period (up to 10 years under Vietnam's Accounting Law and related rules) · E-commerce transaction and dispute records — for the statutory period · Access logs kept for fraud prevention — for the statutory period Once the retention period ends, the data is destroyed in a way that cannot be reversed.
5. Sharing and processors
We do not share your personal data with third parties except where required by law or where you have given separate consent. We do engage the following processors to the extent needed to run the service: · Payment providers (ZaloPay and others) — payment processing and refunds · Expo (Expo Push Service) — sending push notifications · Google, Facebook, Apple — social sign-in authentication, if you choose that method · Cloud infrastructure providers — server operation and data storage Any change of processor will be announced through this policy.
6. International transfers
Push notifications, social sign-in and cloud infrastructure may involve transferring and storing personal data on servers located outside Vietnam (for example, in the United States). · Data transferred: push notification tokens, social sign-in identifiers, service usage logs · Purpose: sending notifications, authenticating sign-in, operating the service · Destination and recipients: United States (Expo, Google, Apple, Meta and cloud providers) · Retention: until the processing purpose is fulfilled or the contract ends If you prefer not to have data transferred, you can avoid the related features (push notifications, social sign-in) or delete your account.
7. Your rights
You may request access to, correction of, deletion of, or restriction of processing of your personal data at any time. · View and edit your profile: [My Page > Settings > Edit profile] · Review your activity: [My Page > Point history / Pickup history] · Delete your account and data: [My Page > Settings > Delete account], or the account deletion page on our website · Anything else: luxurycrane.marketing@gmail.com Requests are handled within the period set by applicable law from the date we receive them.
8. Account and data deletion
You can delete your account yourself at [My Page > Settings > Delete account]. If you do not have the app installed, you can still request deletion through the account deletion page on our website. What happens immediately when you delete your account: · Account identifiers such as email and nickname are erased · Social sign-in links and login credentials are revoked · Your entire point balance is forfeited (it is not refunded) · Unclaimed prizes expire — they can no longer be picked up in store Deletion cannot be undone. If you have points left or prizes you have not collected, please use them before deleting your account.
9. Users under 18
This service is for users aged 18 and over, and we confirm this at sign-up. We do not knowingly collect personal data from children under 18. If we learn that a user is under 18, we will terminate the account and destroy the collected data without delay.
10. Cookies and analytics
Our website uses a minimal set of cookies and local storage for basic functions such as remembering your language. You can refuse cookies in your browser settings, though some features may then be limited. The app uses on-device storage (login token, language and notification settings) only as needed to provide the service.
11. How we protect your data
· Passwords stored as one-way hashes; traffic encrypted in transit (HTTPS) · Prize pickup QR codes carry a tamper-proof signature and are single-use · Least-privilege access with separated admin roles (RBAC) and audit logging of key actions · Access control over systems that process personal data
12. Data protection contact
· Data controller (business): CÔNG TY TNHH LUXURY CRANE (MST 0319602866) · Legal representative: NGUYỄN THỊ TUYẾT TRANG · Data protection officer: LUXURY CRANE Data Protection · Email: luxurycrane.marketing@gmail.com · Phone: +84 38 484 3767 · Address: 22 Bùi Viện, Phường Bến Thành, Ho Chi Minh City, Vietnam Please send any questions, complaints or remedy requests about personal data to the contact above.
13. Changes to this policy
If this policy changes, we will announce the effective date and the changes in advance through the app or website. Significant changes that disadvantage users will be announced a reasonable time before they take effect.