Privacy policy

VuiHub respects your privacy. This page explains what data we collect, what we use it for, who we share it with, how long we keep it and what rights you have.

Version 1.0Effective: 06/11/2026Under Personal Data Protection Law 91/2025/QH15 and Decree 356/2025/NĐ-CP

1. Operator and scope

Operator: Code4Change, Da Nang, Vietnam (the full legal name, registered address and enterprise code are published in the website footer).
Website: sukienvui.vn. Privacy contact: privacy@sukienvui.vn.
This policy applies to website visitors, players, event organisers and customers using VuiHub services.
This policy is based on Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/NĐ-CP (effective from 01/01/2026, replacing Decree 13/2023/NĐ-CP), together with related regulations on cybersecurity, electronic transactions and consumer protection.

2. Roles and responsibilities

VuiHub accounts: Code4Change decides the purposes and means of processing data for registration, operating the service, payment, support and security, and processes that data directly.
Company campaigns: the company running the event is the controller of personal data and decides what to collect, the purposes, who may access it and how long it is kept.
VuiHub's role: VuiHub is the processor of campaign participants' data under the contract and lawful instructions of the company.
The company is responsible for informing participants about privacy, establishing a lawful basis and managing data after exporting it from VuiHub.
Detailed responsibilities are set out in the service contract or data processing agreement (DPA) between the parties.

3. Player data

Players join regular rooms without creating an account, only entering a display name or nickname.
Data generated while playing includes the room code, display name, choices, answers, scores, ranks, participation and prize results.
For company campaigns, forms may ask for a phone number (verified by OTP), email, employee ID, company name or other fields set by the company.
Required fields are clearly marked before the player submits; unnecessary fields are optional.
Display names, scores or results may appear on leaderboards, the event screen or winner lists under the announced rules.

4. Customer account and payment data

When you register, we collect your name, email, sign-in information and what is needed to manage the account, organisation and plan.
Email sign-in: handled directly by the VuiHub server; passwords are hashed one-way and VuiHub never stores them in plain text. Google sign-in: authenticated through Google Firebase Authentication; VuiHub receives your name, email and Google account identifier, never your Google password.
When you pay or request a VAT invoice, we collect the organisation name, address, tax code, invoice email and contact details.
VuiHub accepts payment by bank transfer, VietQR and PayPal; transaction data is processed according to each method.
VuiHub does not store full card numbers or card security codes (CVV/CVC); we only keep the transaction ID, amount, status and necessary reconciliation data.

5. Technical data, cookies and on-device storage

The system records IP address, browser type, operating system, device information, access time, error logs and usage activity.
Cookies and localStorage are used to keep you signed in, remember rooms, interface and sound settings, and participation state.
Technical data is used to keep the service stable, detect unusual access, prevent fraud and improve the experience.
Measurement cookies (Google Tag Manager, Google Analytics 4) are only enabled after you agree in the cookie bar; you can change your choice at any time with the “Cookie settings” link in the footer.
You can delete cookies and site data in your browser; some features such as staying signed in or restoring a game session may then be affected.

6. Purposes of use

Providing and operating rooms, mini games, leaderboards, participant verification and results.
Letting companies manage campaigns, run prize draws, reconcile results and export reports within their permissions.
Managing accounts, plans, payments, invoices, customer support and legal obligations.
Detecting fraud, preventing unauthorised access, investigating incidents and protecting the integrity of results.
Sending transactional notices, OTP codes and service information; marketing content is only sent with a lawful basis.

7. Legal basis and your choices

VuiHub processes data on the basis of valid consent or another basis permitted by law, for each specific purpose.
Data needed to play or to transact is kept separate from data used for marketing.
The “I agree to receive promotional information” box is always shown separately and never pre-ticked; silence is not consent.
You can withdraw marketing consent through the unsubscribe link, your preference settings or by emailing privacy@sukienvui.vn.
Declining marketing does not affect your use of the games.

8. Campaign data and company access

The organising company can view, filter and download lists of players, answers, scores, results and winners according to the permissions granted.
Exports may contain personal data; the company must protect them, limit recipients and only use them for the announced purpose.
VuiHub does not use campaign participants' phone numbers, emails or lists to market VuiHub or Luck4You products.
Company administrators are responsible for setting appropriate fields, staff permissions and managing exported copies.
When a request concerns campaign data, VuiHub works with the company to verify and handle it.

9. Sharing with third parties

Cloud infrastructure: Amazon Web Services (AWS), Singapore region: servers, databases, storage, backups and security.
Email service: Amazon SES sends account verification, password reset, invoice and system emails.
Google sign-in: Google Firebase Authentication, only when you choose to sign in with a Google account.
Measurement: Google Tag Manager and Google Analytics 4, only when you accept measurement cookies; your email, phone number or name are never sent.
SMS / Zalo ZNS: sending OTPs or transactional notices to phone numbers when a campaign turns on phone verification.
Banks and payment gateways: processing payments, verification, refunds and reconciliation; these parties apply their own policies as independent processors.
Luck4You: when a customer buys a combo or activates linked benefits, VuiHub shares the account, order, activation code and benefit status needed within the ecosystem operated by Code4Change.
Competent authorities: on lawful request. VuiHub does not buy or sell personal data.

10. Transfers of personal data abroad

Service data is stored on AWS infrastructure in Singapore; emails sent through Amazon SES and Google sign-in through Firebase may be processed on servers outside Vietnam.
Cross-border transfers only take place for defined lawful purposes and to the extent necessary.
Code4Change fulfils the legal obligations on impact assessments, cross-border transfer dossiers, contracts and security measures, unless exempt.
Recipients must apply appropriate safeguards and must not pass data on to others beyond the agreed scope.
You can contact privacy@sukienvui.vn to learn more about transfers concerning you.

11. Retention and deletion

Regular rooms: rooms and game data are deleted automatically 7 days after the room ends, unless they must be kept for legal obligations or incident handling.
Company campaigns: kept for the period set by the company, in line with the contract and the law; when it ends, the system deletes or de-identifies the data.
Contact requests: information you send through the Contact page is kept for 12 months, then deleted.
Customer accounts: kept while the account is active and for the time needed to handle requests, disputes or legal obligations after the account is closed.
Invoices and accounting records: kept for the period required by the Accounting Law.
Technical logs and backups: kept per operating cycle; data deleted from the main system may remain temporarily in backups until the cycle ends.
Exported data: copies downloaded by companies are outside VuiHub's automatic deletion; the company manages and deletes them.

12. Security and breach notification

VuiHub uses HTTPS/TLS encryption, protects credentials, applies access control, logging and data backups.
Access to personal data is limited by role; staff with access are bound by confidentiality.
We maintain processes to prevent, monitor, detect, respond to and recover from security incidents.
When a data breach is found, VuiHub assesses the impact, works with the controller and notifies the competent authority within the legal deadline.
Affected users are notified when the law requires it or when needed to prevent harm, including the data affected, the risks, remedies and a contact point.
Please protect your sign-in details and OTP codes and do not share room admin rights.

13. Your rights and how to exercise them

You have the right to be informed, to consent or refuse, to withdraw consent, to access, obtain, correct, delete or restrict processing of your personal data.
You have the right to object to processing, request protective measures, complain, report, sue or claim compensation under the law.
To exercise your rights, email privacy@sukienvui.vn with your request, contact details and information that helps identify the account or session. Never send passwords or OTPs.
VuiHub may verify your identity to the minimum extent needed. For campaign data, we forward the request to the controlling company and work together to resolve it.
We confirm receipt within 2 business days and handle the request within the legal deadline for each type.
Some requests may be limited on legal grounds, such as record-keeping obligations or protecting the rights of others; we will explain why.

14. Children's data, updates and effect

VuiHub is designed for adults and company events. Minors need the consent and supervision of a parent or legal representative as required by law.
Companies running events with children must set up suitable forms, limit data collection and avoid publishing unnecessary identifying information.
Parents or representatives can ask to review, correct, restrict or delete a child's data via privacy@sukienvui.vn.
VuiHub may update this policy when features, providers or laws change. Important changes are announced on the website or through your registered contact channel.
The policy is effective from the date at the top of this page. The latest version is always published here.

Questions about your data?Email privacy@sukienvui.vn. We confirm within 2 business days.

Contact page