Personal Data Protection Policy - TeeB Nexus

1. Data Controller and Processor

2. Scope of Application

3. Categories of Data That May Be Collected

• Full name, account name, email address, phone number;
• Protected login credentials, account verification status, and security history;
• IP address, device type, browser, operating system, access times, and technical logs;
• Order information, service plans, purchase history, wallet transactions, and payment reconciliation;
• Referral codes, collaborator relationships, and data used for fraud prevention;
• The content of support requests, complaints, and communications with our customer service team;
• Cookies, session tokens, and data necessary to maintain the operation of the website;
• Other data voluntarily provided by users or permitted to be collected by law.

4. Purposes of Data Processing

• Create, verify, and manage accounts;
• Provide Proxy, VPS, accounts, software, and other purchased services;
• Process orders, payments, refunds, renewals, and customer support;
• Send verification emails, OTP codes, login alerts, and transaction notifications;
• Prevent fraud, abuse, unauthorized access, and violations of our terms;
• Manage the collaborator program, commissions, and reconciliation;
• Improve the quality, stability, and security of the system;
• Fulfill accounting, tax, and record-keeping obligations and requests from competent authorities;
• Resolve disputes and complaints and protect the lawful rights and interests of the parties;
• Send marketing communications where users have consented or where permitted by law.

5. Legal Bases for Processing and Consent

• The valid consent of the data subject;
• The performance of a contract or a user's request prior to entering into a contract;
• Obligations under applicable law;
• Protection of the lawful rights and interests of users or of TeeB Nexus;
• Fraud prevention and ensuring system safety and information security;
• Other circumstances permitted by law.

6. Data Sharing

• Infrastructure, storage, email, security and system monitoring partners;
• Payment partners, banks, and reconciliation service providers;
• Technical partners, data centers and network infrastructure used to provision and operate the Proxy/VPS for your order;
• Legal, accounting, auditing, or technical advisors bound by confidentiality obligations;
• Competent state authorities upon lawful request;
• Lawful transferees in the event of a restructuring, merger, or transfer of business operations.

7. Cross-Border Data Processing

8. Retention Period

• Maintain accounts and provide services;
• Complete transactions, complaints, and warranty claims;
• Meet accounting, tax, audit, and legal obligations;
• Prevent fraud and protect the system;
• Fulfill the purposes disclosed.

9. Protection Measures

• Encryption of sensitive data and data in transit;
• Role-based access control;
• Multi-factor authentication for critical functions;
• Access logging and anomaly alerts;
• Backup, recovery, and change control;
• Limited validity periods for tokens and login sessions;
• Security testing, software updates, and incident response;
• Masking or removing sensitive data from interfaces, APIs, and logs.

10. Rights of the Data Subject

• Be informed about data processing activities;
• Give or withdraw consent;
• Access and request a copy of their data;
• Request correction of inaccurate data;
• Request deletion or restriction of processing;
• Object to processing activities;
• Lodge complaints, file reports, or claim compensation when their rights are infringed;
• Other lawful rights under the laws of Vietnam.

11. Cookie

• Maintain login state and sessions;
• Protect accounts;
• Remember user preferences;
• Analyze errors and performance;
• Prevent fraud.

12. Data of Minors

13. Third-Party Services

14. Changes to This Policy

15. Contact