Transaction Safety

1. Transaction Authentication

1. Users must use a valid payment account to carry out transactions.
2. Transactions are authenticated using the security mechanisms applied by the payment service provider, including but not limited to passwords, biometric authentication, OTP codes or other valid authentication methods.
3. Pebbles does not collect or store Users' sensitive authentication information, including but not limited to passwords, OTP codes or bank account details.

In addition:

• Pebbles will contact the Service Provider to sign a Contract and issue a Service Provider account.
• Pebbles requires service providers to submit their business licence (business household registration or enterprise registration) together with any conditional business licences, if applicable.
• Pebbles verifies the accuracy of service provider information at the online lookup address of the Tax Department — Ministry of Finance: https://tracuunnt.gdt.gov.vn/tcnnt/mstdn.jsp

2. Data Security and System Safety

1. Transaction data is encrypted during transmission in accordance with appropriate security standards.
2. Information relating to Users and transactions is stored and protected using appropriate technical and organisational measures to ensure information security.
3. Pebbles applies the necessary measures to: (i) prevent unauthorised access to the system; (ii) protect Users' personal data; and (iii) ensure the integrity and confidentiality of transaction information.

3. Transaction Control and Recording

1. Each transaction is assigned a transaction code and a clear status.
2. Pebbles records and stores transaction history in order to support reconciliation and the handling of complaints.
3. Pebbles may carry out transaction reconciliation with the payment service provider to ensure the accuracy of the data.