Privacy
Draft, pending legal review. Last updated 10 October 2026.We collect your name, email and phone number so we can send your tickets and let you in. Only the MAI team and the services that host the site and send our emails see them, and we never sell them. We delete them 90 days after the event, or sooner if you ask.
1What we collect
Name, email address and phone number from checkout, the names you give to tickets, the seats you chose, and the reference, amount and time of your bank transfer, plus the name and account details the bank passes on with it. We also keep an email log (which emails we sent you and whether they arrived), a record of the changes made to your tickets, and a scrambled form of your network address used only to limit abuse. No card details: you pay from your own bank app.
2Why we collect it
To issue and email your tickets, match your payment to your order, check you in at the door, let you manage, transfer or refund tickets, contact you if the event changes, and answer support requests. We ask for your agreement to this in a separate tick box at checkout, apart from the terms. You can withdraw it by writing to us, but we then cannot keep your tickets valid.
3Who sees it
The MAI team, door staff (the name and seat of a ticket they scan) and the services we use to run the sale: our hosting and database provider, our payment provider (payOS) and bank, our email provider (Resend), an error monitoring service and a bot-check service. Our hosting and database are in Singapore, so your data leaves Vietnam. We do not sell your data or use it for advertising. We may disclose it to an authority when the law requires.
4How long we keep it
We keep buyer details until 90 days after the event. Then we delete or anonymise names, emails and phone numbers. We keep amounts and payment references as long as our accounting and tax duties require. Bank account numbers you give us for a refund are deleted as soon as the refund is sent. Sign-in and abuse-control records are deleted sooner.
5Your rights
Under Vietnamese law (Decree 356/2025 and the Personal Data Protection Law, Law 91/2025/QH15) you may ask to see, correct or delete your data, withdraw your consent, or object to how we use it. Write to us from the email on your ticket, or tell us enough about your payment to prove it is yours, and we will reply within the time the law sets. Deleting your details does not cancel tickets that are still valid, so tell us if you want those refunded first.
6Contact
Questions? Write to support@mai-show.com.