Article 1:A domain is a special resource, granted to whichever registrant registers it first. HiTechCloud provides domain registration services to customers, limited to domains that no other registrant has registered during the registration period and the completion of registration, subject to approval of the right of use by the domain registry.

For ".VN" domain names, comply with the registration requirements underCircular 24/2015/TT-BTTTTamended and supplemented byCircular 06/2019/TT-BTTTTRegulations on the management and use of internet resources issued by the Ministry of Information and Communications.

Article 2:If the domain cannot be registered because it is owned by another individual or organization, or because you do not meet the eligibility conditions set out in the domain registration rules, HiTechCloud will refund 100% of the domain registration fee to you.

Article 3:You acknowledge and agree that domain registration fees are non-refundable once a registration or renewal has been completed, or if you unilaterally terminate the service.

Article 4:Once registration is complete, you cannot change: (a) the domain name itself, or (b) the registrant name for Vietnamese domain names, except in the specific cases set out by VNNIC inCircular 24/2015/TT-BTTTTamended and supplemented byCircular 06/2019/TT-BTTTTRegulations on the management and use of internet resources issued by the Ministry of Information and Communications.

Beyond the specific cases where a name change is permitted, you may incur an additional domain support service fee (set by the provider) to amend the details, and the rules and instructions of the organization currently managing your domain still apply.

Article 5:A domain whose term expires without payment of the maintenance fee will be released for registration by others. HiTechCloud no longer holds management rights or responsibility toward the registrant of a domain that is not renewed.

Article 6:Domain renewal is carried out in accordance with Article 6 of the MBT. HiTechCloud is not responsible for the interruption or loss of a domain caused by the registrant not paying the renewal fee or paying the maintenance fee and service charges late

Article 7:Customers who are the registrant of a domain name must manage it themselves and are responsible for its use. Any expired domain name ceases to belong to its former registrant.

The registrant undertakes to comply with the laws, regulations, and court orders of the local and national jurisdiction relating to the domain registration.

Registrants are prohibited from distributing malware, operating botnets that endanger networks, phishing, impersonation, trademark infringement, fraud, or any activity contrary to law. In the event of a breach, the registry or the registrar has full authority to suspend or deactivate the domain name.

The domain registrant agrees to release, defend and hold harmless HiTechCloud, including but not limited to the domain issuing authority and related parties such as: the operator, domain registration service providers, verification staff, partners, affiliates, contractors, branches, units, shareholders, directors, employees and others, from liability for any damage, loss, cost or any other obligation or liability, determined or undetermined, including attorney, prosecution and legal fees arising from or relating to the registrant's domain registration. This indemnification obligation remains in effect even if this Agreement expires or is terminated.

Article 8:You are responsible for declaring the use of a non-.VN domain name on the websitehttp://thongbaotenmien.vnof the Ministry of Information and Communications - under Article 23 of the current Law on Information Technology, or whichever legal instrument is in force at the time.

Article 9:When registering an international domain, the rules of ICANN require you to verify the information you have declared with the Registrar, using the admin email account for the domain, within 15 days of successfully registering the international domain. The verification email is in English. Please see the instructions Here

• 9.1 Providing personal data for domain name use
  Under the Terms of Service and the domain management rules ofICANNregarding the provision of personal data, in its capacity as an ICANN-accredited Registrar, HiTechCloud will send a notice to each new or existing domain registrant about the collection of personal data as required, covering the following:
  • 9.1.1. The purposes for collecting and using the registrant's personal data;
  • 9.1.2. The recipients or categories of recipients of the data (including the registry and the parties that will receive the data from the registry);
  • 9.1.3. Which data is mandatory and which, if any, is provided voluntarily; and
  • 9.1.4. The means by which the data subject or personal data owner can access and, if necessary, correct their data.
    • The registrant consents to the data being processed as set out in the items above.
    • The registrant must ensure that the notices described in items 1-4 are sent to any third-party individuals whose data the registrant provides to the registrar, and that the registrant has obtained the consent, as described in this article, of each of those third-party individuals.
    • The registrant shall indemnify and hold harmless the registry and its directors, managers, employees, and representatives against any claim, damage, liability, or cost (including legal costs) arising from or relating to the registrant's domain name registration.
• From 28/05/2018, under the RegulationGDPR(General Data Protection Regulation) - the European Union's general regulation on data protection, applying to subjects who are European citizens, who use services provided by an organization established in Europe, or who use services from organizations outside Europe that provide services to European residents.
  The registrar treats the following information as private in the WHOIS lookup system, unless the registrant or the domain's admin, technical, or other contacts request publication and written consent is obtained from those individuals:
  • Registrant/Admin/Tech/Other ID
  • Registrant/Admin/Tech/Other Name
  • Registrant/Admin/Tech/Other Street
  • Registrant/Admin/Tech/Other City
  • Registrant/Admin/Tech/Other Postal Code
  • Registrant/Admin/Tech/Other Phone
  • Registrant/Admin/Tech/Other Phone Ext
  • Registrant/Admin/Tech/Other Fax
  • Registrant/Admin/Tech/Other Fax Ext
  • Registrant/Admin/Tech/Other Email
• Accordingly, in addition to items 1 through 4 above, the registrar will notify data subjects covered by the GDPR of the following:
  • 9.1.5. The identity and contact details of the registrar holding the personal data and, where applicable, the identity and contact details of the registrar's representative in the European Economic Area, and the contact details of the registrar's data protection officer.
  • 9.1.6. The registrar's legitimate interest in processing data allows the collected data to be used for legitimate purposes, except where that legitimate interest is overridden by the interests of protecting the data collected - for example, where the information collected relates to a minor.
  • 9.1.7. The registrar's transfer of this personal data
    • (i) to a third country or an international organization, with or without an adequacy decision from the Commission; or
    • (ii) where the transfer falls underArticle 46orArticle 47of the GDPR, or subsection (1)Article 49of the GDPR, referring to the appropriate safeguards and the means of obtaining a copy of that data or of where it was collected.
  • 9.1.8. The period for which the personal data will be stored, or the criteria used to determine that period;
  • 9.1.9. The data subject's right to request from the registrar access to, rectification of, or erasure of their personal data, or restriction of the processing of data relating to the subject or data owner, the right to object to that processing, and the right to data portability;
  • 9.1.10. Compliance with the GDPR, where the registrar relies on the data subject's consent for processing;
  • 9.1.11. The right of the data subject and data owner to lodge a complaint with a competent supervisory authority;
  • 9.1.12. The existence of automated decision-making, including profiling, as referred to inSection 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
• Any registrant intending to grant or license the use of a domain name to a third party remains the registrant of that domain name and is responsible for providing and keeping current the full contact details of itself, of the domain name's administrative contact, and of its technical contact, so that any issue arising in connection with the domain name can be resolved. A registrant who licenses the use of its domain name is liable for damage caused by wrongful use of the domain name, unless it discloses the licensee's contact details or identity within 7 days to a party providing specific evidence of wrongdoing involving the domain name.
• 9.2. Other requirements on publishing domain name data under the GDPR
  • 9.2.1. The registrar enables the registrant to consent to publication of the additional information listed insection 9.1.
  • 9.2.2. The registrar may enable the individuals listed in the domain's contacts to consent to publication of the additional information listed insection 9.1.
  • 9.2.3. By whatever means it is delivered, the registrar must ensure that the text requesting consent from the individuals named above is clear and clearly distinguishable (it must also state the legitimate interests served by processing the personal data). The request must be intelligible and easily accessible, in clear and appropriate language. In addition, the data subject has the right to withdraw consent at any time. Withdrawal does not affect the validity of consent obtained before the withdrawal request is processed.
  • 9.2.4. The registrar must publish the registrant's additional details, including name, address, and phone number, as listed insection 9.1after full consent has been obtained from the data subject.

Article 10:Any dispute arising from or relating to the use of a domain name will be resolved in a spirit of conciliation and negotiation. If the Parties cannot resolve the dispute through negotiation, either Party has the right to request a competent court to resolve it in accordance with the laws of Vietnam. You are responsible for indemnifying and holding harmless HiTechCloud's related parties from any claims, liabilities, costs and losses arising from or relating to the registration and use of your domain name. You are responsible for maintaining (1) the confidentiality of your account password; and (2) all activity that occurs on or through your account. In the event of any unauthorized use of your password or account, you must notify us immediately and change your password promptly to keep your information secure. HiTechCloud may consider closing your account at any time if necessary for information security reasons. HiTechCloud cannot and will not be liable for any loss, damage or other liability if you fail to comply with this provision or as a result of unauthorized access to your account.

Article 11:Rules for .bank and .insurance domains. Customers registering .BANK and/or .INSURANCE domains at HiTechCloud undertake to understand and comply with Article 3 of the Terms of Service (MBT) and the domain policy available here. You understand and agree to all requirements and policies of the top-level domain registry (fTLD) athttps://www.ftld.com/policies, including but not limited to the following terms.

• 11.1 Eligibility to register .BANK and .INSURANCE domain names.
  • 11.1.1 .BANK domain names. The following for-profit and non-profit businesses and organizations may register .BANK domain names:
    • a) Provincial, municipal, and regional banks operated and supervised by a state regulatory authority;
    • b) Savings associations operated and supervised by a state regulatory authority;
    • c) National banks operated and supervised by a state regulatory authority;
    • d) Associations whose members are drawn mainly from the entities specified in subsections (a), (b), or (c) above;
    • e) Groups of associations whose members are drawn mainly from the associations specified in subsection (d) above;
    • f) Service providers that are owned by, or that primarily support, the entities specified in subsections (a), (b), or (c) above (subject to approval by the board of the domain name registry); and
    • g) State agencies performing banking supervision, savings associations, or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
  • 11.1.2 .INSURANCE domain names. The following for-profit and non-profit businesses and organizations may register .INSURANCE domain names:
    • a) Insurance companies supervised by the competent state authority (for example licensed, certified, or authorized);
    • b) Insurance agencies, brokers, or equivalent entities (for example intermediaries or representatives) that are licensed and supervised by the competent state authority;
    • c) Associations whose members are drawn mainly from the entities specified in subsections (a) or (b) above;
    • d) Groups of associations whose members are drawn mainly from the associations specified in subsection (c) above;
    • e) Service providers that are owned by, or that primarily support, the entities specified in subsections (a) or (b) above (subject to approval by the board of the domain name registry); and
    • f) State agencies supervising companies, insurance agencies, brokers, or equivalent entities (for example intermediaries or representatives), or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
    • g) State agencies performing banking supervision, savings associations, or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
• 11.2 Security requirements. Customers registering .BANK and/or .INSURANCE domain names undertake to comply with the requirements of the top-level domain registry athttps://www.ftld.com/security/. For internet users, ensuring safety means creating a restricted, specialized and tightly controlled environment that avoids activity harmful to generic top-level domains (gTLDs). In that spirit, HiTechCloud and fTLD – the registry for the .BANK and .INSURANCE domains – work continuously to maintain security standards and to cooperate proactively with the global financial services community in order to increase trust in the online financial system. We apply consumer protection measures to reduce harmful activity such as cybersquatting, typosquatting, spoofing and phishing. The security rules below apply to all registrants eligible to register a domain name.
  • a) Mandatory verification and re-verification of charters, licenses, authorized persons, and domain names, to ensure that only members of the global banking and insurance community can be allocated domain names in these sectors.
  • b) Domain Name System Security Extensions (DNSSEC), to ensure internet users reach the intended website and are not redirected to malicious pages.
  • c) Email authentication, to protect the brand and reduce spoofing, phishing, and other harmful activity.
  • d) HiTechCloud and the top-level domain registry will jointly carry out multi-factor authentication (MFA) to ensure that only the users specified in Articles 3, 6 and 9 of the MBT may change or amend registration information.
  • e) Strong encryption (for example Transport Layer Security, TLS) to ensure confidentiality and integrity in transactions and communications over the network.
  • f) WHOIS privacy services are not available, to prevent bad actors from exploiting anonymity.
  • .BANK and .INSURANCE domain names must use the .BANK/.INSURANCE DNS name servers in order to meet the technical requirements.
• 11.3 Rules of the top-level domain registry.
  • 11.3.1 Powers of the top-level domain registry.
    You understand and agree that HiTechCloud is a domain registrar accredited by the fTLD domain registry, and that the domain registry has the right to deny, cancel or transfer any domain registration transaction or record, or to lock, hold or apply any other status, as the case may be, which the senior registry authority has full discretion to handle: (i) in order to comply with the technical requirements of network organizations (for example, RFCs), (ii) in order to correct errors caused by the senior registry authority, the service provider, the verification authority, the registrar and/or any third party in connection with the registered domain name, or (iii) with respect to fees that the senior registry authority is not responsible for paying. In addition, you agree that the domain registry has the right to access and use your personal information.
  • 11.3.2 Timing rules for domain name dispute resolution. In addition to the terms set out in the MBT, you agree that domain name disputes involving registration timing will be resolved according to the times shown in the registry's system.
  • 11.3.3 Operating rules. Under the rules of the domain name registry athttps://www.ftld.com/resources, https://www.ftld.com/faq-registrar, https://www.ftld.com/faq-dotbankandhttps://www.ftld.com/faq-dotinsurance, you agree that we have no obligation to notify you of changes, updates, or additions to the registry's operating rules; however, we will endeavor to notify you as early as possible.
  • 11.3.4 The domain name registrant is responsible for following the necessary and reasonable instructions of the registrar and the registry in order to comply with ICANN policies, guidelines, or requirements, and/or the registry operator has full authority to take reasonable and necessary measures to ensure the provision of domain name services and compliance with security and operational requirements, including monitoring compliance with the rules applicable to registered domain names.
• 11.4 Undertakings. You understand and agree to all of the following:
  • a) We do not act on behalf of any third party when accessing the registry's systems, including other registrars, even accredited ones.
  • b) To provide the best service to customers, we will try to notify you as early as possible; however, you agree to keep yourself up to date with all registration policies and public interest commitments of the registry (which may change over time) in order to comply with the requirements of ICANN and the registry.
  • c) Under the security requirements of the fTLD registry athttps://www.ftld.com/security, we do not provide, and do not permit any affiliate or third party to provide, WHOIS privacy services for .BANK and .INSURANCE domain names.
• 11.5 Premium domain names. The top-level domain registry may offer special domain names that cannot be registered or renewed at standard prices. Please contact us for details on these domain names. In some cases a premium domain name may still appear in quotations as a standard domain name; we will notify you of the additional fee before completing the registration or renewal.
• 11.6. Additional rules. You agree to inform yourself about, and to comply with, the rules and procedures of the fTLD registry, which may be amended from time to time and are published athttps://www.ftld.com/policies, including but not limited to the following rules:
  • Security requirements of the top-level domain registry
  • Domain name use and anti-abuse policy - domain name allocation policy
  • Domain name selection policy
  • Customer information privacy policy
  • Domain registration eligibility
  • Domain name dispute resolution policy
  • Policy on reserved domain names
  • Sunrise period dispute resolution policy
  • WHOIS information access policy

Article 12: Domain transfers

HiTechCloud performs transfers during business hours only; the process takes between 5 and 15 days depending on the domain registry. You must agree that, throughout the domain transfer, WHOIS information cannot be changed and the domain's name servers cannot be changed. Point the name servers to ns1.bnix.one and ns2.bnix.one and provide HiTechCloud with the complete set of DNS records from the previous DNS so that the new DNS can be created.

Before initiating a domain transfer to HiTechCloud, note that you need to complete the following:

• Unlock the domain and provide its authorization code.
• If the domain's WHOIS details are hidden, you must unhide them to proceed.
• The domain's WHOIS email address must be an address you actively use.

Article 13: Transferring domain names covered by the GDPR

• Transfers to individuals covered by the GDPR do not require ICANN's standard Form of Authorization (FOA) confirmation.
• The registrant must resubmit the domain's WHOIS information held at the previous registrar. In that case the gaining registrar does not need to follow the "change of registrant" process set out in the transfer policy ofICANN.

Rules on domain name dispute resolution

Domain name disputes are resolved under current Vietnamese law and ICANN rules. To protect your lawful rights, you should be aware of and follow the requirements below:

Article 1:For international domain names: you undertake to inform yourself about and comply with the relevant ICANN rules and policies, including the ICANN Uniform Domain-Name Dispute-Resolution Policy (UDRP), when you register an international domain name (seehttp://archive.icann.org/en/udrp/udrp-policy-24oct99.htm).

Customers must submit and maintain complete and accurate registration details, including contact information (email and phone), so that registration, contact, and notification can proceed smoothly if a dispute with a third party arises.

For domain names covered by the GDPR, in the event of a dispute:

• The registrar must still provide complete and accurate details of the registrant of the disputed domain name.
• A complainant's complaint will not be rejected where the disputed domain name's details are redacted and the complaint cannot state the respondent's exact name.

Article 2:For Vietnamese domain names: you undertake to inform yourself about and comply with the relevant VNNIC policies, including the domain name dispute resolution rules under Article 16 of Decree 72/2013/ND-CP and Circular 24/2015/TT-BTTTT as amended byCircular 06/2019/TT-BTTTTof the Ministry of Information and Communications on the management and use of internet resources. You must ensure that your registration details, including the contact information used for registration and other correspondence, are complete and accurate in accordance withCircular 24/2015/TT-BTTTTamended and supplemented byCircular 06/2019/TT-BTTTTof the Ministry of Information and Communications on the management and use of internet resources, or whichever legal instrument is in force at the time.

Rules for country-code domain names (other than Vietnam)

When you register a domain name under a given country's TLD, you must comply with all of that country's requirements.

You are responsible for complying with any changes or updates that country makes concerning the domain name you registered.

Country-code domain names may be checked, verified, and cross-referenced at any time, depending on the working procedures of that country's domain registry. You are therefore required to check your email regularly and keep related information up to date, to ensure the domain remains compliant.

HiTechCloud advises that if you have registered a country-code domain and, during use, cannot meet that country's verification requirements, you should plan to move to a different domain so that your business operations are not disrupted when the domain is taken offline.

Some country-code domain extensions and their rules are listed here

Rules for using the DNS service at HiTechCloud:

When using the DNS service at HiTechCloud, you must comply with the following rules (including, but not limited to):

• You get one default pair of name servers on HiTechCloud's DNS resolution system.
• Each domain name corresponds to one DNS zone.
• Each DNS zone is limited to 200 DNS records. If you need more than 200 records, contact our sales team and we will advise you on an alternative DNS solution (chargeable).
• We may intervene and block DNS resolution for a domain if we detect that the domain is being used in breach of the Terms of Service, or in attacks that congest the network, or in website/email spoofing.
• If a domain name expires and you do not renew it in time, our system automatically stops providing DNS service and the domain's name server pair is changed. At that point, visiting the domain in a web browser may redirect to a default page designated by our DNS system.

Updated: 02/06/2023