Updated on 15/05/2025

This Privacy Policy (“Policy”) is part of the Terms and Conditions of Service for users of U-money application, which explains how we collect, receive, store, aggregate, process, use, disclose and share information of individuals and organizations (“Users”) when accessing and using our products and services provided through the website, U-money application and other available interactive channels.
This Privacy Policy may be adjusted and amended, Users should visit and check regularly to update the latest changes. U-money reserves the right to amend, supplement or adjust the terms of this Policy at any time by publishing updates on U-money's official website and/or displaying on U-money application.
By continuing to use our products and services after the effective date of the changes to this Privacy Policy, the User signifies his/her acceptance of the content of the revised and updated Policy.
In this Policy, “U-money”, “we”, “our” and “U-money group of companies” are understood to refer to Star Fintech SOLE Co.,Ltd, with business licnese registered under Laws of Lao PDR.
User Information: is any information, data that can be used to identify the User or from which the User is identified and related to/originating from the User's use of the Service and other information referred to in this Policy, including but not limited to data such as name, nationality, phone number, payment card and bank details, personal interests, address, location, image, ID card/CCCD information, date of birth, marital status, insurance information, criminal allegations, financial information, transaction information, access history, customer journey. In addition, some information of a sensitive nature such as race, health, religious beliefs, political views, biometric data and other information may be collected by us when necessary.
This Privacy Policy includes the following contents:
• Data and information that we collect.
• How We Use User Information
• How We Share User Information
• User Access and Choices
• Contact Information

1. Data and Information We Collect

U-money collects data and User Information necessary to ensure the provision and operation of products and services in compliance with legal regulations. Some information is optional, but if not provided, it will affect the quality and experience of the User.
1.1. Types of information we collect:
• Information provided by Users.
• Information collected automatically.
• User activities and information generated when Users interact with our Services.
• Information from other sources such as commercial partners and other third parties.
Information provided by Users
We collect any information provided by Users when registering, logging in, interacting through our or third party's available interactive channels to use our Services, including but not limited to making transactions, participating in contests, games, programs or events, using biometric features in personal identification or transaction authentication, contacting, complaining, conducting surveys, investigations...etc.
Users are responsible for ensuring that the information provided by Users is complete, accurate and always updated to ensure the rights of Users according to the regulations of using the respective Services.
In the event that the User provides third party information, the User is responsible and warrants that it has obtained full consent and approval from that third party and other approvals as required by law for the provision of information to us and for our use of such information in accordance with this Policy and relevant laws.
Automatically Collected Information

Information is automatically collected when Users perform activities during the use of our Services, including but not limited to information about the parties providing products and services to Users, information about transactions performed (type of product, service, location, time of transaction), payment method (excluding detailed card number, CVV number or other authentication code with equivalent legal value), information about the application and device used (IP address, software, operating system, location, browser type, referring or visiting website address from available interactive channels, mobile applications, number of visits, feedback, versions, advertising formats and related information if any).
The types of data and information about the application and device we collect and the time we store them will depend in part on the device and the settings and configurations of the User. For example, the User can turn on or off the location of the device through the device's settings application...etc.
Other personal information we collect will depend on the privacy settings that the User has set up with the social network provider, on his/her devices and applications.
User Activity:
We collect information through the User's activity and information generated by the User during the interaction with our Services such as search activities, videos viewed, viewing and interaction with advertising content, third parties with whom the User communicates or shares content, purchase activities...etc.
Collected through Cookies on our websites, online services, interactive applications and third parties to better understand User behavior including for security and fraud prevention purposes, to tell us which parts of the website Users have visited, to facilitate and measure the effectiveness of advertising and web searches, to remember User preferences and to help us provide a personalized User experience such as providing personalized recommendations and content, providing customized features and services. Users can manage browser Cookies through the settings according to specific instructions on web browsers. The Help feature on most browsers and devices will tell Users how to prevent their browser or device from accepting new Cookies, how to have the browser notify Users when receiving new Cookies or how to turn off the Cookies function completely.
Information collected from other sources:
In some cases, we will collect User information from publicly accessible sources, which are information available and made public on websites and social networks.
User information may also be collected from third parties, including competent state agencies or commercial partners who are service providers, partners implementing referral programs for potential customers, partners providing information to combat fraud, crime, advertising service providers, etc.
When we collect User information from other sources, we ensure that such data is transferred to us appropriately and in strict compliance with the provisions of current laws.
1.2. Children
We understand the importance of protecting the privacy of children. In particular, our websites and applications are not designed or directed at children under the age of 13, and we never knowingly collect or retain information about anyone under the age of 13, except as part of our commitment to provide professional services.
If we learn that a child's personal data has been collected without appropriate consent, it will be deleted as soon as possible.

2. How we use User Information

User Information will be used by us in accordance with this Privacy Policy and for the specific purpose. We will only use User Information where we have a valid legal basis to do so, depending on the circumstances, we may rely on the User's consent or on the basis that the processing is necessary to perform our contract with the User, protect the vital interests of the User or others, or to comply with the law.
We may also process User Information where we believe that it is in our or another person's legitimate interests, taking into account the rights, interests and expectations of the User.
It is not our policy to provide User Information to any third party for their direct marketing purposes or any other purpose, unless we have complied with the procedures permitted under the data protection laws to do so lawfully.
User Information is used by us to operate, provide and improve the Services, for the purposes of:
Providing, personalizing, maintaining and improving our Services, including:
Providing Services to Users, introducing new Services of ours or our partners based on the needs and habits of Users during the interaction and/or use of the Services.
Process User transactions and/or requests related to the use of the Service such as creating, managing and updating User accounts; verifying and assessing information provided by Users, authenticating identities and performing customer identification procedures in accordance with the law; managing, operating, providing and administering the use and activities of Users when using the Service; confirming transactions and making payments; processing and managing User rewards/prizes/incentives.
Perform activities necessary to provide the Service, including fixing software errors, attempt to operate.
Conduct data analysis, testing and research, monitor and analyze trends in the use and activity of Users on our platforms; display features that personalize the User experience such as preference recognition, lists of favorite applications and information of interest, Service recommendations; enable interactions between Users, between Users and us or with affiliated partners, allow our partners to manage and allocate resources to provide services; propose, obtain, provide or facilitate insurance or financial solutions.
Conduct surveys, market research, analyze data related to the types of services, measure usage, analyze performance, find ways to improve and develop the Services;
Support for processing requests and assisting Users: Calls, messages and/or other forms of contact from and/or to us will be stored in the form including but not limited to audio recording, video recording, automatically or proactively, to support resolving valid requests from Users, monitor and improve the response from the customer support department, update the information system, improve service quality.
Research and development: conduct research, analysis, testing and development activities including but not limited to data analysis, surveys, product and service development and/or customer profiling, to analyze how Users conduct activities on our platforms, improve the Services to enhance the User experience, develop new features, products and services and facilitate financial and insurance solutions while protecting data, improving and enhancing safety, security, confidentiality.
Marketing and promotion: we may contact Users in various forms such as email, phone calls, messaging services, sending online messages for the purpose of marketing and advertising our services (not excluding products and services of partners developed and provided to Users through the U-money application platform).
Ensure and enhance safety and security: take actions to prevent fraud, criminal acts, ensure system security, perform storage, management, backup for disaster recovery or similar purposes. Protect the security or integrity of the Service and any means/devices used to provide the Service
Fraud prevention and risk management: take actions to detect, prevent activities of impersonating Users or any fraudulent, illegal acts related to the use of the Service and prosecute criminals; detect, prevent wrongful acts, fraud or omissions in connection with the Service or any other activities arising from or related to the relationship between us and Users or partners in the provision, use of the Service; use scoring methods to assess and manage risks.
Comply with legal obligations and regulations, for example, making reports as prescribed by law, storing transaction data information.
Other legitimate purposes consistent with the objectives of the Service.
In some cases related to the use of some specific Services, and for the purposes of using User Information not mentioned above and/or requiring specific consent from the User, we will ask for the User's permission to use User Information and it will only be done after such permission is obtained.

3. How we share User Information

In the event of transferring User Information to a company within the U-money group of companies, a third party or a law enforcement agency, we ensure that this transfer complies with data protection laws. Where necessary, we will review the data recipient's privacy and security policies to ensure that they are applying or are committed to strictly complying with standards equivalent to the principles of this Policy and the provisions of relevant laws.
3.1 Sharing information within the network of companies within the U-money group of companies
We exchange, provide and share User Information with companies within the U-money group of companies as part of commitments or to meet the requirements of their respective legal obligations.
3.2 Sharing information with third parties
We do not share User personal information with third parties, unless necessary for our legitimate business needs and those of U-money's partners to provide products and services to Users or conduct research to understand the needs of Users to use products and services, to fulfill User requests and/or as required or permitted by law, specifically:
Following the requests of competent state agencies or as prescribed by law.
Sharing User Information with Other In the event that the User uses interactive tools on available interactive channels; publicly disclose information in the event that the User uses the features of available interactive channels.
Provide and share User Information with partners upon request or confirmation of the User, through any form of electronic means on interactive channels or other forms. For example, when the User requests a service through our partner or uses a promotion program provided by the partner, the User also agrees that we may share User Information with those partners and the User Information shared with the partner may be transferred to parties in connection with the Service used by the User. Our partners include partners who integrate with our application or our application integrates with a partner's system, delivery service partners, financial partners, or business partners with whom we work to provide promotions, competitive services, or other specialized services.
We may provide User Information to vendors, consultants, marketing partners, research firms, and other service providers or business partners, including payment processors and support services; anti-money laundering services; hosting providers, information technology services, cloud storage providers; advertising partners and advertising platform providers; data analytics providers; research partners, including those conducting surveys or research projects with us or on our behalf; insurance, financial, and banking partners;
Exchange, provide, share User Information with third parties who are our consultants, experts, agents or service providers, subcontractors to implement work, services suitable for the purpose of use.
Disclose account and User Information when we believe it is appropriate to comply with the law, to enforce or apply our other terms and agreements, or to protect the rights, property or security of us, Users, or any other person. The above work may include exchanging information with other companies and organizations to prevent and detect fraud and reduce risks.
In other cases, Users will receive notice when User Information may be shared with third parties and Users will have the right to refuse to share information.

4. User Access and Choices

Users are not required to provide any information to us, however, we will ask Users to provide certain information so that Users can receive information about our products, services and events as well as to be able to use our products and services.
Users can view, update and delete certain information about their account and their interactions with the Service. In the event that Users are unable to access or update their information themselves, Users can always contact us for support. However, before granting access or providing information to Users, we may request proof of identity and complete information about Users' interactions with us in accordance with our data protection and privacy policy.
Users have many choices about the collection and use of their User Information. Many Services provide features that allow Users to choose how their information is used. Users can choose not to provide certain information, but then Users may not be able to take advantage of some Services. Please follow the specific instructions on our website and applications from time to time.
Users can request that we stop using or sending information for promotional purposes at any time and at any time, please unsubscribe or adjust your preferences according to the specific instructions on our website and applications from time to time. If Users do not want to receive in-app notifications from us, please adjust the notification settings in the application or on your device.
If a User decides to unsubscribe from the Service or withdraws his/her consent or requests that we correct or delete information, we will attempt to delete the User's information as soon as possible or within the time limit required by law, although we may need to request additional information before we can process the User's request. In this case, we will usually keep a copy of the previous version.
If a User decides to decline to provide information or withdraws his/her consent, please note that in many cases we will not be able to provide the Service to the User or respond to the User's requests.

5. User's Contact List

Not disclosed: During the use of the Service
we provide, the User has the right to choose to provide the User's Contact List to us for the most effective experience using the Service. And at any time, the User also has the full right to decide to stop providing access to the User's Contact List information by following the specific instructions on our website and application at each time.
By storing, securing and keeping data intact, we commit not to disclose the User's Contact List to any party and in any case without the prior consent of the User.
Non-disclosure of use: The User's Contact List is only used when the User needs the information of the person in the User's Contact List to perform one or some Services, Activities on our application or website.
The use of the User's Contact List will be done solely by the User. We will not disclose the use of the User's Contact List to any third party, for any purpose, without the prior consent of the User.

6. Storage, Security and Data Integrity

Security is our top priority, our system is designed to take into account the ability to ensure the safety and privacy of User information, all User Information arising from and/or related to the Service will be stored, secured and ensured by our system or our service provider in accordance with the law and this Policy.
We will make every effort within the permitted scope to ensure that User Information is protected and not subject to unauthorized or accidental access, processing or deletion. We have appropriate technical and security measures in place and will maintain reasonable security standards, ensuring that only certain people have access to the data we are processing, are authorized to delete or destroy this information.
User Information will be stored by us for the period necessary to fulfill the purposes of using the information as mentioned in this Policy, ensuring the User's ability to continuously use the Services unless required or prescribed by law for a longer storage period. We will take all reasonable steps to ensure that User Information is not kept longer than necessary and that we will always comply with the requirements of Vietnamese laws and regulations regarding the storage of personally identifiable information.
Some User Information may be stored, accessed from or transferred to countries outside of Vietnam or transferred to foreign partners for the purposes described in this Policy. In such cases, User Information will continue to be protected through contracts that we enter into with partners or service providers, ensuring that there are personal data protection terms in accordance with the standards and regulations of Vietnamese law. We will also review the privacy and information security policies of these third parties to ensure that they are applying standards equivalent to the principles in this Policy.
Users are responsible for protecting their account information and not providing any information related to their accounts, passwords or authentication methods (such as OTP codes) to access websites, applications, software and other tools (if any). In the event that an account password needs to be recovered, the User agrees to proactively select and allow the third party that the User has chosen to receive the one-time password (OTP). Accordingly, the User agrees to share his/her account information with that third party and is solely responsible for this sharing.
We are not responsible for any problems that arise when Users use the Service from tools, interfaces other than the official website, application, software, which are not allowed to be used within the scope of the Service. In addition, the Service may contain links to and from the services of partner networks, advertising companies or their affiliates. Please note that each party will have its own privacy policy and the storage, security, and use of information provided to these parties are beyond our control. Therefore, we will not bear any responsibility or liability for the storage, security and use of this information. Please check the privacy policy, security policy or similar policies of these entities before submitting any personal data to them.

7. Contact

We are committed to protecting the privacy of the information collected. If you have any questions or requests regarding your data, please contact us at any time following the specific instructions on our website and application.
We will process the User's request within 14 days and seek to resolve the issue within one month.