Vietnam (Việt Nam) - International privacy rights
If the law where you live provides additional rights, identify them in your request.
Vietnam Ministry of Public SecurityDecree 356/2025 implementing the Personal Data Protection LawDecree 147/2024 on Internet services and online informationDecree 53/2022 implementing the Cybersecurity LawMinistry of Public Security: online and child-data protection requirementsData and content requestsLegal noticeViệt NamVietnam (Việt Nam)PrivacyTermsDelete dataSupportInternational privacy rightsLegal noticeOpen app
Vietnamese controller, purposes and current configuration
Alexander Goytom, established in Italy, is the data controller and can be contacted at ertalex@hotmail.it. NerdScore processes profile, invited private-group, physical-game, match, optional-media and technical-security data only to provide, protect and support the current Free service.
NerdScore does not sell personal data, show advertising, request precise location, create biometric identification templates or make decisions with legal or similarly significant effects. Photos, notes and taunts are optional. Analytics is unavailable when Vietnam is selected, and an old consent record cannot reactivate Firebase Analytics.
Processing and cross-border impact dossiers
Law 91/2025 and Decree 356/2025 require the applicable personal-data processing impact dossier and cross-border transfer impact dossier. The project records the controller, processors, purposes, data, people, recipients, safeguards, retention, rights, incidents and transfers to the core service in Frankfurt, Germany.
The prescribed original dossiers must be filed with the specialist personal-data protection authority within 60 days after the covered processing or transfer begins unless the authority confirms an applicable exemption. Relevant records are reviewed every six months and specified organisational, service or contact changes are updated within 10 days. NerdScore does not publish or invent a filing receipt or exemption.
Decree 147 and the cross-border service threshold
NerdScore has no hosting in Vietnam. Its server records a privacy-preserving monthly count for the explicitly selected Vietnamese legal market and reports the completed six-month average. The current project gate is reopened before Vietnamese hosting is used or the average reaches 100,000 visits from Vietnam per month over six consecutive months.
The foreign-service contact, account-verification, local-phone or personal-identifier, under-16 guardian and authority-cooperation duties listed in Article 23 are treated as threshold-triggered controls for the current foreign service. A public feed, open discovery, direct chat, materially different social function or threshold approach requires a fresh classification before release; the traffic threshold is not used to disregard a lawful content-removal order.
Decree 53 and lawful authority orders
The current foreign service is not subject to immediate Vietnamese data localisation or establishment solely because it is accessible in Vietnam. Under Decree 53, the listed local-storage and branch or representative-office duties arise only after use of the service for a cybersecurity-law violation, a written cooperation and handling request from the competent Ministry of Public Security authority, failure or obstruction, and a formal ministerial decision. The decision then provides a 12-month compliance period.
NerdScore records and authenticates every authority request, preserves only necessary evidence, obtains a Vietnamese legal review where required and documents the response, disclosure, restriction or challenge. A qualifying written request or decision immediately blocks release expansion and opens the localisation and establishment runbook.
Vietnamese data-subject requests and deadlines
Through Support, the export and deletion tools, or ertalex@hotmail.it, a person may ask to know and access processing, obtain a copy, correct, provide, delete or restrict data, object, withdraw consent, complain, sue, seek compensation and request protective measures where the law applies. Receipt is acknowledged and the applicable decision path starts within two working days.
Access, correction and provision are completed within 10 days, or 15 days where a third party is involved. Deletion is completed within 20 days, or 30 days where a third party is involved. Restriction, objection and protective measures use the applicable 15-day path, or 20 days where specified. Only one documented statutory extension is used, identity checks remain proportionate and other private-group members' data is protected.
Vietnamese security-incident response
Every suspected unauthorised access, disclosure, alteration, destruction or loss is recorded, contained and assessed immediately. Where the incident is capable of harming national defence, national security, public order or a person's life, health, honour, dignity or property, NerdScore notifies the specialist personal-data protection authority no later than 72 hours after discovery. A processor must notify the controller promptly.
The protected incident record preserves discovery time, affected data and people, risk, containment, mitigation, notifications, cooperation and the reason for every decision. The special 72-hour data-subject notice for location or biometric data is applied only if those sensitive categories are actually involved. Because the controller is established in Italy, the GDPR branch runs in parallel and the shorter or additional applicable duty is followed.
Adult-only Vietnamese Store offer
The Vietnamese Store offer accepts only people who confirm that they are at least 18. Permission from a parent or legal representative does not replace this market-specific product rule. The versioned confirmation is required before protected writes and is recorded with the explicitly selected legal market.
The declaration is not identity or age verification. It keeps children and 16- or 17-year-olds outside the current Vietnamese offer instead of operating a guardian-consent programme. Lowering the age limit, adding age assurance, payments, prizes, a public feed or other child-facing functions reopens the assessment before release.
Private-group content, reports and removal orders
NerdScore provides invited private groups for in-person games. It has no anonymous or random chat, direct one-to-one chat, public feed, follower discovery or content amplification. Users and non-users can report unlawful or harmful photos, names, notes and taunts; the service records triage, removal or preservation, a reasoned decision and review.
A valid Vietnamese authority request is authenticated and handled through the authority-order workflow, including any applicable 24-hour removal deadline. The private-group design and current traffic remain monitored facts, not a promise that future public-social functionality or higher scale will remain outside additional platform duties.
Current Free offer and Vietnamese release gate
The current release is free: no Billing, subscription, in-app purchase, advertising, wager, prize, marketplace or sale of personal data. NerdScore records scores for physical tabletop games and is not itself an electronic game or payment service. The interface, legal pages and support material are available in Vietnamese, with English as the legal fallback.
Language and legal market remain independent. Selecting Vietnam shows this notice in Vietnamese or English without changing the interface language. No Vietnamese Play track may be enabled until an official exemption or filing receipts for the required processing and cross-border dossiers are recorded and the final Store-installed, rights, incident and traffic-monitor checks pass.
Your rights
You may request access, a machine-readable export, correction, deletion, restriction or portability, and may object where processing relies on legitimate interests. Write to ertalex@hotmail.it; identity checks may be required to protect other users.
You may withdraw analytics consent in the app at any time. You may also complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.
International privacy rights
We provide every user, regardless of country, a way to request access, a copy, correction, and deletion of their data. We do not discriminate against anyone who exercises a privacy right, and we do not sell or share personal data for money or targeted behavioral advertising.
Changing NerdScore's language changes only the translation you read. It does not change your country, the law that applies, the competent authority, or any mandatory rights you have where you live.
Data controller
The data controller is Alexander Goytom. For privacy, access, export, correction, deletion or removal requests, write to ertalex@hotmail.it.
NerdScore is a scorekeeping service for private board game groups. It does not require an email account and does not sell personal data.