PRIVACY POLICY

​

1. INTRODUCTION

Lucky 2000 KTV ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of our customers, website visitors, and all individuals who interact with our services. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with Vietnamese law.

Our Commitment:

• We respect your privacy and data protection rights

• We are transparent about our data practices

• We implement robust security measures

• We comply with all applicable Vietnamese data protection laws

• We give you control over your personal data

This Privacy Policy applies to:

• Our physical premises at 171 Chợ Lớn, Phường 11, Quận 6, Thành phố Hồ Chí Minh

• Our website: karaokelucky.com

• Our mobile applications (if applicable)

• All services provided by Lucky 2000 KTV

Legal Framework: This Privacy Policy is designed to comply with:

• Law No. 91/2025/QH15 on Personal Data Protection (effective January 1, 2026)

• Decree No. 13/2023/ND-CP on Personal Data Protection (effective July 1, 2023)

• Law No. 19/2023/QH15 on Protection of Consumers' Rights (effective July 1, 2024)

• Law No. 24/2018/QH14 on Cybersecurity

• Civil Code of Vietnam (2015)

• Other relevant Vietnamese laws and regulations

By using our services, visiting our premises, making a reservation, or accessing our website, you acknowledge that you have read, understood, and agree to this Privacy Policy.

2. DEFINITIONS

For the purposes of this Privacy Policy:

"Personal Data" refers to information in the form of symbols, letters, numbers, images, sounds, or similar forms in electronic format, attached to or associated with a specific natural person, or that helps identify a specific natural person, including basic personal data and sensitive personal data.

"Basic Personal Data" includes:

• Full name

• Date of birth, place of birth

• Nationality

• Gender

• Contact information (phone number, email, address)

• Identification documents (ID card, passport numbers)

• Payment information

• Booking history

• Images and videos from security cameras

"Sensitive Personal Data" includes (when applicable):

• Biometric data for identification purposes

• Health information (if disclosed for special dietary requirements)

• Location data

• Financial account information

"Data Subject" means you, the individual whose personal data we process.

"Processing" means any action performed on personal data, including collection, recording, storage, modification, use, disclosure, transfer, deletion, and destruction.

"Data Controller" means Lucky 2000 KTV, as we determine the purposes and means of processing your personal data.

"Consent" means your voluntary, specific, informed, and unambiguous indication of agreement to the processing of your personal data.

3. DATA CONTROLLER INFORMATION

Legal Entity Name: Lucky 2000 KTV
Business Address: 171 Chợ Lớn, Phường 11, Quận 6, Thành phố Hồ Chí Minh, Vietnam
Contact Person: Louis (Founder)
Phone/Hotline: +84 8888 2468 1
WhatsApp: +84 8888 2468 1
WeChat: @louisthinhle
Email: [To be added - recommended: privacy@karaokelucky.com]
Website: karaokelucky.com

Data Protection Contact: For all privacy-related inquiries, data subject rights requests, or complaints, please contact us using the information above. We will respond to your request within the timeframes required by Vietnamese law.

4. WHAT PERSONAL DATA WE COLLECT

We collect personal data that is necessary to provide our karaoke entertainment services, process reservations, ensure safety and security, and improve our customer experience.

4.1. Information You Provide Directly

Booking and Reservation Information:

• Full name

• Phone number

• Email address (optional)

• WeChat ID or WhatsApp number

• Preferred date and time

• Number of guests

• Special requests or requirements (dietary restrictions, accessibility needs)

• Payment information (credit card details, payment method)

On-Site Information:

• Name and contact details for the bill

• Room preferences

• Food and beverage orders

• Feedback and complaints

• Loyalty program information (if applicable)

Communication Information:

• Messages sent via phone, WhatsApp, WeChat, email

• Customer service interactions

• Survey responses

• Marketing preference selections

Identity Verification Information:

• Government-issued ID (for age verification when required)

• Passport information (for international guests)

4.2. Information We Collect Automatically

Security Camera Footage:

• Video recordings from CCTV cameras in public areas (lobbies, hallways, parking areas, entrances/exits)

• Timestamp and location data associated with recordings

• Note: Private karaoke rooms are NOT monitored by cameras

Website Usage Information:

• IP address

• Browser type and version

• Device information

• Pages visited and time spent

• Referral source

• Cookies and similar technologies (see Section 12)

Transaction Records:

• Booking confirmations

• Payment records

• Receipts and invoices

• Service usage history

4.3. Information from Third Parties

Social Media Platforms:

• If you contact us via WeChat, WhatsApp, or social media, we may collect your profile information to the extent you make it available

Payment Processors:

• Transaction confirmation and payment status information from our payment partners

Business Partners:

• Referral information if you were recommended by hotels, travel agencies, or tour operators

5. HOW WE USE YOUR PERSONAL DATA

We process your personal data only for specific, explicit, and legitimate purposes. We do not use your data for purposes incompatible with those for which it was collected.

5.1. Primary Purposes (With Your Consent)

Reservation and Service Delivery:

• Processing and confirming bookings

• Managing room assignments

• Providing food and beverage services

• Accommodating special requests

• Sending booking confirmations and reminders

Customer Communication:

• Responding to inquiries and requests

• Providing customer support

• Handling complaints and feedback

• Sending transactional messages (booking confirmations, changes, cancellations)

Payment Processing:

• Processing payments and refunds

• Generating invoices and receipts

• Preventing fraud and unauthorized transactions

• Maintaining financial records as required by law

Marketing and Promotions (With Explicit Consent):

• Sending promotional offers and special deals

• Announcing new services or events

• Sharing loyalty program benefits

• Conducting customer satisfaction surveys

• Note: You can opt-out of marketing communications at any time

5.2. Legitimate Business Purposes (Without Consent Where Permitted by Law)

Security and Safety:

• Operating CCTV cameras in public areas for safety and crime prevention

• Investigating incidents, accidents, or violations of house rules

• Protecting our staff, customers, and property

• Complying with safety regulations

Legal Compliance:

• Complying with Vietnamese laws and regulations

• Responding to lawful requests from government authorities

• Maintaining records as required by tax and accounting laws

• Defending legal claims

Business Operations:

• Analyzing customer preferences and trends

• Improving service quality

• Training staff

• Managing inventory and supplies

• Business planning and development

Website Functionality:

• Ensuring website security and functionality

• Troubleshooting technical issues

• Improving user experience

• Analyzing website traffic and performance

6. LEGAL BASIS FOR PROCESSING YOUR DATA

Under Vietnamese law, we process your personal data based on the following legal grounds:

6.1. Consent

Most of our data processing activities are based on your explicit, informed, and voluntary consent. When we request consent:

• We clearly explain what data we collect

• We specify the purposes of processing

• We inform you of your rights

• We provide easy ways to withdraw consent

6.2. Contract Performance

Processing is necessary to fulfill our service agreement with you, including:

• Processing your reservation

• Providing karaoke services

• Processing payments

6.3. Legal Obligations

Processing is required to comply with Vietnamese laws, including:

• Tax and accounting regulations

• Safety and security requirements

• Government authority requests

• Consumer protection laws

6.4. Legitimate Interests

In limited circumstances, we process data based on our legitimate business interests, such as:

• Preventing fraud

• Ensuring network and information security

• Improving services based on aggregated, anonymized data

7. HOW WE SHARE YOUR PERSONAL DATA

We respect the confidentiality of your personal data and do not sell, rent, or trade your information to third parties for their marketing purposes. We may share your data only in the following limited circumstances:

7.1. Service Providers (Data Processors)

We may share your data with trusted third-party service providers who assist us in operating our business:

Payment Processors:

• Credit card processing companies

• Payment gateway providers

• Purpose: Processing payments securely

• Data Shared: Payment card information, transaction amounts

Technology Service Providers:

• Website hosting companies

• Cloud storage providers

• IT support and maintenance

• Purpose: Maintaining our digital infrastructure

• Data Shared: Contact information, usage data

Marketing Service Providers (With Your Consent):

• Email marketing platforms

• SMS service providers

• Purpose: Sending promotional communications

• Data Shared: Name, contact information, marketing preferences

Note: All service providers are contractually required to:

• Process data only for specified purposes

• Implement appropriate security measures

• Not use data for their own purposes

• Comply with Vietnamese data protection laws

7.2. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the new entity. We will notify you of any such change and your rights regarding your data.

7.3. Legal Requirements

We may disclose your personal data when required by Vietnamese law or in response to valid legal processes:

• Court orders or subpoenas

• Requests from law enforcement or government authorities

• Tax audits or investigations

• Compliance with regulatory requirements

We will verify the legitimacy of such requests and disclose only the minimum data necessary.

7.4. Protection of Rights

We may disclose data when necessary to:

• Enforce our Terms and Conditions

• Protect our legal rights and property

• Prevent fraud or criminal activity

• Ensure the safety of our customers and staff

7.5. With Your Explicit Consent

We may share your data with other parties if you have given us explicit permission to do so.

8. CROSS-BORDER DATA TRANSFERS

Lucky 2000 KTV primarily stores and processes your personal data within Vietnam. However, in certain circumstances, your data may be transferred to or accessed from locations outside Vietnam:

Potential International Transfers:

• Cloud storage services with servers outside Vietnam

• International payment processors

• Technology service providers based overseas

Safeguards for International Transfers: When we transfer data internationally, we ensure appropriate protections:

• We conduct Cross-border Transfer Impact Assessments (CTIA) as required by Vietnamese law

• We use standard contractual clauses or other legal mechanisms

• We ensure the receiving party implements adequate security measures

• We comply with Law No. 91/2025/QH15 requirements for cross-border transfers

Your Rights: You have the right to be informed of any cross-border transfers of your data and the safeguards in place. You may contact us for more information about specific transfers.

9. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations.

9.1. Retention Periods

Active Customer Data:

• Booking and transaction records: 5 years from the date of service (for tax and accounting compliance)

• Marketing communications: Until you withdraw consent or opt-out

• Customer service records: 3 years after the last interaction

Security Camera Footage:

• Retention period: 30 days from recording date

• Extension: May be retained longer if related to an incident, investigation, or legal proceeding

Website Usage Data:

• Cookies and analytics: 2 years or until you clear your browser data

• Server logs: 12 months

Payment Information:

• Credit card details: Not stored; processed and deleted immediately after transaction

• Payment records: 10 years (as required by Vietnamese accounting laws)

9.2. Deletion and Anonymization

After the retention period expires:

• Personal data is securely deleted or destroyed

• Alternatively, data may be anonymized for statistical purposes (no longer considered personal data)

• You may request earlier deletion subject to legal and contractual obligations

10. DATA SECURITY

We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction.

10.1. Technical Security Measures

Access Controls:

• Role-based access control (RBAC) - employees access only data necessary for their role

• Strong password policies and multi-factor authentication

• Regular access reviews and audit logs

Data Protection:

• Encryption of data in transit (SSL/TLS)

• Encryption of sensitive data at rest

• Secure backup systems with encryption

• Regular security updates and patches

Network Security:

• Firewalls and intrusion detection systems

• Network segmentation

• Regular security assessments and penetration testing

• Anti-malware and antivirus protection

Physical Security:

• Secure server rooms with restricted access

• CCTV monitoring of IT infrastructure areas

• Visitor access logs and security protocols

10.2. Organizational Security Measures

Policies and Procedures:

• Comprehensive data protection policies

• Incident response and breach notification procedures

• Data retention and destruction policies

• Third-party vendor security requirements

Staff Training:

• Regular data protection training for all employees

• Confidentiality agreements with staff and contractors

• Clear data handling protocols

• Awareness of social engineering and phishing threats

Data Protection Governance:

• Designated personnel responsible for data protection

• Regular compliance audits and reviews

• Continuous improvement of security practices

10.3. Security Incident Response

In the event of a data breach or security incident:

• We will investigate and contain the incident immediately

• We will assess the risk to affected individuals

• We will notify affected data subjects within 72 hours (as required by Vietnamese law)

• We will notify the relevant Vietnamese authorities if required

• We will take steps to prevent future incidents

To Report a Security Concern: If you believe your data has been compromised or you notice suspicious activity, please contact us immediately at +84 8888 2468 1 or via WhatsApp/WeChat.

11. YOUR DATA PROTECTION RIGHTS

Under Vietnamese data protection laws, you have comprehensive rights regarding your personal data. We are committed to facilitating the exercise of these rights.

11.1. Right to Information and Transparency

• You have the right to clear information about how we process your data

• This Privacy Policy provides that transparency

• You may request additional details about specific processing activities

11.2. Right of Access

• You have the right to know what personal data we hold about you

• You may request a copy of your data in a commonly used format

• We will provide this information free of charge within 30 days

11.3. Right to Rectification

• You have the right to correct inaccurate or incomplete personal data

• You may update your information by contacting us

• We will verify your identity before making changes

11.4. Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes collected

• You withdraw consent (and no other legal basis applies)

• You object to processing and no overriding legitimate grounds exist

• The data was processed unlawfully

• Deletion is required by Vietnamese law

Limitations: We may retain data if required by law or necessary for:

• Legal compliance (tax records, accounting)

• Establishment, exercise, or defense of legal claims

• Fulfilling contractual obligations

11.5. Right to Restrict Processing

You may request that we limit how we use your data in certain circumstances:

• While we verify the accuracy of disputed data

• When processing is unlawful but you prefer restriction over deletion

• When we no longer need the data but you need it for legal claims

• While we verify your objection to processing

11.6. Right to Object

• You have the right to object to processing based on legitimate interests

• You have an absolute right to object to direct marketing at any time

• We will cease processing unless we have compelling legitimate grounds

11.7. Right to Data Portability

• You may request your data in a structured, commonly used, machine-readable format

• You may request direct transfer to another controller where technically feasible

11.8. Right to Withdraw Consent

• You may withdraw your consent to data processing at any time

• Withdrawal does not affect the lawfulness of processing before withdrawal

• To withdraw consent for marketing: click "unsubscribe" in our emails or contact us

11.9. Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to:

• Complain directly to us (we will respond within 30 days)

• Lodge a complaint with Vietnamese data protection authorities

• Seek remedies through Vietnamese courts

How to Exercise Your Rights: To exercise any of these rights, please contact us:

• Phone/WhatsApp: +84 8888 2468 1

• WeChat: @louisthinhle

• In person at: 171 Chợ Lớn, Phường 11, Quận 6, TP. Hồ Chí Minh

• Email: [privacy@karaokelucky.com - recommended to set up]

Verification: To protect your privacy, we will verify your identity before processing requests. You may be asked to provide:

• Government-issued ID

• Proof of reservation or past service

• Answers to security questions

Response Time: We will respond to your request within 30 days. If we need more time, we will inform you and provide a reason for the delay.

12. COOKIES AND TRACKING TECHNOLOGIES

Our website karaokelucky.com uses cookies and similar technologies to enhance your browsing experience and analyze website performance.

12.1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences and track your interactions.

12.2. Types of Cookies We Use

Essential Cookies (Necessary):

• Required for website functionality

• Enable core features like security and accessibility

• Cannot be disabled without affecting website operation

• Examples: Session management, security features

Analytical/Performance Cookies:

• Help us understand how visitors use our website

• Collect anonymous information about page visits and navigation

• Used to improve website performance and user experience

• Examples: Google Analytics, page load time tracking

Functionality Cookies:

• Remember your preferences and choices

• Provide enhanced features and personalization

• Examples: Language preferences, booking form data

Marketing/Advertising Cookies (With Your Consent):

• Used to deliver relevant advertisements

• Track advertising campaign effectiveness

• May be set by third-party advertising networks

• Examples: Social media pixels, retargeting cookies

12.3. Third-Party Cookies

Our website may include third-party cookies from:

• Google Analytics (website analytics)

• Facebook Pixel (social media marketing)

• Payment processors (transaction security)

These third parties have their own privacy policies governing their use of cookies.

12.4. Managing Cookies

Browser Controls: You can control cookies through your browser settings:

• Block all cookies

• Accept only first-party cookies

• Delete cookies after each session

• Receive notifications before cookies are stored

Note: Blocking essential cookies may affect website functionality.

Opt-Out Tools:

• Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout

• Network Advertising Initiative: http://www.networkadvertising.org/choices/

12.5. Do Not Track (DNT)

Our website does not currently respond to Do Not Track signals. We may update our policy if industry standards are established.

13. SPECIAL CATEGORIES OF DATA SUBJECTS

13.1. Children's Privacy

Lucky 2000 KTV's services are intended for adults (18+) and minors accompanied by adults. We do not knowingly collect personal data from children under 18 without parental consent.

For Minors (Under 18):

• Parents or legal guardians must provide consent

• Parents control their child's personal data rights

• We limit data collection to what is necessary for service delivery

• Marketing communications are not sent to minors

If you believe we have inadvertently collected data from a child without proper consent, please contact us immediately so we can delete it.

13.2. International Guests

We welcome guests from around the world, particularly Chinese-speaking visitors. For international guests:

Language Support:

• Privacy information available in Vietnamese, English, and Chinese (Simplified)

• Customer service in multiple languages

Data Transfers:

• Your data may be processed in Vietnam

• Cross-border transfers comply with Vietnamese law

• We ensure appropriate safeguards for international data flows

Currency and Payment:

• We process multiple currencies (VND, USD, RMB)

• International payment processing complies with applicable regulations

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices

• New legal or regulatory requirements

• Technological developments

• Service enhancements

Notification of Changes:

• Material changes will be posted on our website with a new "Last Updated" date

• We will notify you via email if you have subscribed to our communications

• Significant changes may require your renewed consent

• The effective date will be updated accordingly

Your Continued Use: By continuing to use our services after changes become effective, you acknowledge and accept the updated Privacy Policy.

Version History: We maintain records of previous versions. You may request past versions by contacting us.

15. CONTACT US AND COMPLAINTS

We are committed to addressing your privacy concerns and resolving any issues promptly.

15.1. Privacy Contact Information

Lucky 2000 KTV - Data Protection Contact:

Address: 171 Chợ Lớn, Phường 11, Quận 6, Thành phố Hồ Chí Minh, Vietnam
Phone/Hotline: +84 8888 2468 1
WhatsApp: +84 8888 2468 1
WeChat: @louisthinhle
Email: [Recommended: privacy@karaokelucky.com]
Website: karaokelucky.com

Business Hours: Daily 6:00 PM - 2:00 AM (or as posted)

Contact Person: Louis (Founder)

15.2. How to Submit a Privacy Complaint

If you have concerns about how we handle your personal data:

Step 1: Contact Us

• Describe your concern in detail

• Provide relevant documentation

• Include your contact information for follow-up

Step 2: We Investigate

• We will acknowledge your complaint within 3 business days

• We will investigate thoroughly and fairly

• We will provide a written response within 30 days

Step 3: Resolution

• If satisfied with our response, the matter is resolved

• If not satisfied, you may escalate to Vietnamese authorities

15.3. Escalation to Authorities

If you are not satisfied with our response, you may lodge a complaint with:

Vietnamese Data Protection Authorities:

• Ministry of Public Security (MPS) - Department of Cybersecurity and High-tech Crime Prevention

• Ministry of Information and Communications (MIC)

• Vietnam Consumer Protection Agency

Legal Remedies: You also have the right to seek remedies through Vietnamese courts under:

• Law No. 91/2025/QH15 on Personal Data Protection

• Law No. 19/2023/QH15 on Protection of Consumers' Rights

• Civil Code of Vietnam (2015)

16. ADDITIONAL INFORMATION

16.1. Automated Decision-Making

We do not currently use automated decision-making or profiling that produces legal effects or significantly affects you without human involvement. If this changes in the future, we will:

• Inform you clearly

• Obtain your explicit consent where required

• Provide information about the logic involved

• Allow you to contest automated decisions

16.2. Marketing Communications

Opt-In: We send marketing communications only with your explicit consent. When you provide consent, you may receive:

• Special offers and promotions

• Event announcements

• Loyalty program updates

• Customer surveys

Opt-Out: You may withdraw consent at any time by:

• Clicking "unsubscribe" in our emails

• Contacting us via phone, WhatsApp, or WeChat

• Updating your preferences in your account (if applicable)

Frequency: We respect your inbox and limit marketing communications to avoid spam.

16.3. Third-Party Links

Our website may contain links to third-party websites, including:

• Social media platforms (Facebook, WeChat)

• Partner businesses

• Review platforms

Important Notice:

• We are not responsible for the privacy practices of third-party websites

• We encourage you to read their privacy policies

• Our Privacy Policy applies only to Lucky 2000 KTV

16.4. Data Protection Impact Assessments

As required by Law No. 91/2025/QH15, we conduct Data Processing Impact Assessments (DPIA) for high-risk processing activities. These assessments evaluate:

• The necessity and proportionality of processing

• Risks to data subjects' rights

• Security measures and safeguards

• Compliance with legal requirements

17. ACKNOWLEDGMENT AND CONSENT

By using Lucky 2000 KTV's services, you acknowledge that you have:

• Read and understood this Privacy Policy

• Been informed of your data protection rights

• Consented to the processing of your personal data as described

• Had the opportunity to ask questions and seek clarification

For Marketing Communications: If you wish to receive promotional offers and updates, please provide explicit consent by:

• Checking the opt-in box on our booking form

• Responding "Yes" when asked by our staff

• Subscribing via our website

Withdrawal of Consent: You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

SUMMARY OF KEY POINTS (QUICK REFERENCE)

What Data We Collect:

• Booking information (name, phone, email)

• Payment details

• Security camera footage (public areas only)

• Website usage data

How We Use Your Data:

• Process reservations and provide services

• Ensure safety and security

• Improve customer experience

• Send marketing (with your consent)

• Comply with legal obligations

Your Rights:

• Access your data

• Correct inaccurate data

• Request deletion

• Withdraw consent

• Object to processing

• Lodge complaints

Data Security:

• Strong encryption

• Access controls

• Regular security audits

• Staff training

• Incident response procedures

Data Retention:

• Booking records: 5 years

• CCTV footage: 30 days

• Marketing data: Until opt-out

Contact Us:

• Phone/WhatsApp: +84 8888 2468 1

• WeChat: @louisthinhle

• Address: 171 Chợ Lớn, Quận 6, TP. HCM

Thank you for trusting Lucky 2000 KTV with your personal data. Your privacy is our priority.
 

我们重视您的隐私 | We value your privacy | Chúng tôi trân trọng quyền riêng tư của bạn

• Policy Name: Lucky 2000 KTV Privacy Policy

• Version: 1.0

• Effective Date: January 1, 2026

• Last Updated: February 4, 2026

• Next Review Date: January 1, 2027

• Approved By: Louis (Founder)

This Privacy Policy has been drafted in accordance with Vietnamese data protection laws as of February 2026. While we have made every effort to ensure accuracy and compliance, we recommend having this policy reviewed by a licensed Vietnamese attorney specializing in data protection law before publication.
 

Recommended Legal Review Areas:

• Compliance with Law No. 91/2025/QH15 (Personal Data Protection Law)

• Cross-border data transfer requirements

• Data Processing Impact Assessment (DPIA) obligations

• Industry-specific regulations (entertainment, hospitality)

• Consumer protection law alignment