1. Commitment to Security

The card payment system is provided by authorized Payment Gateway Partners, who have been legally licensed to operate in Vietnam. Accordingly, the card payment security standards on the website https://eggyolk.vn/ comply with industry security regulations.

2. Security Regulations

The transaction policy for payments via international cards and domestic cards (internet banking) ensures compliance with the security standards of Payment Gateway Partners, including:

• Customer financial information is protected during transactions using SSL (Secure Sockets Layer) encryption.

• Payment data security standards are PCI DSS certified by Trustwave.

• One-Time Password (OTP) is sent via SMS to verify account access.

• MD5 128-bit encryption ensures secure data encoding.

• Compliance with banking security regulations as required by the State Bank of Vietnam.

Transaction Security Policy for Customers on https://eggyolk.vn/:

• The company provides a token storage utility, which only stores encrypted strings provided by the Payment Gateway Partner. The company does not directly store customer card details. Payment security is ensured by the licensed Payment Gateway Partner.

• For international cards, customer payment details that could be used to process transactions are not stored on the website’s system. Instead, they are securely stored and managed by the Payment Gateway Partner.

• For domestic cards (internet banking), the company only stores the order ID, transaction ID, and bank name.

The company is committed to implementing strict security measures for all transactions conducted on the e-commerce platform https://eggyolk.vn/.