Privacy & Cookie Policy

Privacy & Cookie Policy

Compliant with Vietnam Decree 13/2023/ND-CP on personal data protection · GDPR compatible for EU customers · Last updated: 25/05/2026

Quick Contents: 1. Data Collected · 2. Purpose · 3. Third-Party Sharing · 4. Your Rights · 5. Technical Security · 6. Cookies · 7. Contact DPO

1. Information Go365 Collects

• Contact Information: full name, phone number, email, address.
• Booking Information: ID/Passport (only when required for international tours or hotel check-in), companion details.
• Payment Information: via 9pay gateway — Go365 does NOT store card numbers.
• Cookies & Behavior: for personalization and measuring website performance (details in section 6).
• AI Chatbot Chat History: saved to improve quality — details at AI Policy.

2. Purpose of Use

• Process orders and send confirmations via email/Zalo/SMS/WhatsApp/Telegram.
• 24/7 customer support (inquiries, modifications, cancellations) — including AI chatbot and staff.
• Send promotional information (only with your consent — can be unsubscribed anytime via Unsubscribe button).
• Analyze behavior to improve products (AI assists with analysis — does not make final decisions).

3. Sharing with Third Parties

Go365 shares data only when necessary to complete the service you booked:

• Product Operation Partners (tour operators, hotels, transportation) — to confirm availability and serve your trip.
• 9pay payment gateway to process transactions.
• eSIM provider (Gigago) to activate SIM numbers.
• Third-Party AI Providers (e.g., OpenAI, Anthropic, Google) to run recommendations/chatbot — only sharing necessary data, excluding ID/Passport/card numbers.
• Government agencies when legally required.

Go365 does not sell personal data to third parties for advertising or commercial AI model training purposes.

4. Your Rights

• Access and edit personal information at Account page.
• Request data deletion (except mandatory accounting records kept for 10 years) — see Data Deletion Policy.
• Withdraw consent for promotional emails via Unsubscribe link in each email.
• Change cookie preferences via "🍪 Manage Cookies" button at footer.
• Request human staff support instead of AI chatbot (see AI Policy).
• File complaints via ad@go365.vn or hotline.

5. Technical Security

• All connections via HTTPS/TLS.
• Passwords hashed with PBKDF2 + unique salt per account, no plaintext stored.
• Daily database backups, admin access via strict RBAC.
• IP addresses encrypted to irreversible hash before logging.

6. Cookie Policy

6.1. What are Cookies? Small text files that websites place in your browser to remember information like login, language, and privacy preferences. Go365 uses cookies to operate the website, remember preferences, and (if you consent) measure performance.

6.2. Essential Cookies — always enabled, required for website operation. No consent needed under Article 13 of Decree 13/2023.

Name	Purpose	Duration
go365-cookie-consent	Records your cookie banner choice (essential / accept_all)	1 year
sl_token	Login session + tracks referral source when booking via short link	24 hours
.AspNetCore.Antiforgery.*	Prevents CSRF attacks on form submission	Session
.AspNetCore.Culture	Display language (VI / EN / KO / zh-Hant / RU)	1 year
go365_ref	Affiliate referral code when entering via ?ref= link	7 days
g_oauth_*, fb_oauth_*, z_oauth_*	Temporary for Google / Facebook / Zalo login flow (deleted immediately after login)	~10 minutes

6.3. Analytics Cookies — only activated when you choose "Accept All" on the banner. You can change your mind anytime via "🍪 Manage Cookies" button at footer.

Currently Go365 has not installed any third-party analytics tools. If we integrate Google Analytics, Meta Pixel, or similar in the future, the list will be updated here and you will be asked for consent again.

6.4. Third-Party Cookies During Payment & Login

• When you proceed to 9pay for payment, 9pay sets their session cookies. Please see 9pay Privacy Policy.
• When logging in via Facebook / Google / Zalo / Telegram, these providers have their own cookie policies.

6.5. How Do You Control Cookies?

• Consent Banner: When visiting go365.vn for the first time, you'll see a banner at the bottom — choose "Essential Only" if you don't want analytics cookies.
• Manage Cookies: Click the "🍪 Manage Cookies" button at footer to reopen the banner and change your choice.
• Browser: Delete all cookies via Settings in Chrome / Firefox / Safari. Note: deleting essential cookies will log you out.

6.6. Storing Your Choice

When you click "Accept All" or "Essential Only", Go365 logs: your choice, display language, hashed IP (irreversible, cannot be converted back to original IP), abbreviated browser, and timestamp. The sole purpose is legal compliance — not used for advertising, not sold to third parties.

7. Data Contact

Data Protection Officer (DPO): ad@go365.vn · Hotline: 0789.9000.99

Version 2.0 replaces separate "Privacy Policy" and "Cookie Policy" from 25/05/2026. Accessing /page/chinh-sach-cookies now automatically redirects to the Cookie section above.