Article 1:A domain is a special resource, granted to whichever party registers it first. Pho Tue SoftWare Solutions JSC provides domain registration services to customers for domains not already registered by another party at the time of registration, subject to completing the registration and obtaining approval from the domain management authority.
Domain allocation must comply with the registration requirements of Decree 147/2024/ND-CP (Nghị định 147/2024/NĐ-CP) of the Ministry of Information and Communications on the management, provision and use of Internet services and online information.

Article 2:If a domain cannot be registered because it belongs to another individual or organization, or because you do not meet the eligibility conditions set out in the domain registration rules, Pho Tue SoftWare Solutions JSC will refund 100% of the domain registration fee to you.

Article 3:You acknowledge and agree that domain registration fees are non-refundable once a registration or renewal has been completed, or if you unilaterally terminate the service.

Article 4:Under Government Decree 147/2024/ND-CP on the management, provision and use of Internet services and online information, and the international domain name terms of use ofICANN, you need to provide the following information when registering a domain.

a) For agencies, organizations, and businesses:The name of the agency, organization or company; the organization's electronic identifier; business registration number; tax code; full address of the head office; telephone number; email address; details of the domain administrator; details of the domain's technical contact; details of the organization or individual paying the domain registration fees and charges; the intended use of the domain where it is registered to establish an aggregated information site, a social network or an electronic newspaper — and updates to that intended use whenever it changes;

b) For individuals and household businesses:Full name of the individual; name of the business household and full name of its owner or representative; date of birth; personal identification number or passport number with place and date of issue; business household registration number; business household tax code; permanent residential address down to house number; temporary residential address down to house number; phone number; email address.

You also need to provide name server details (primary and secondary).

Pho Tue Software Solutions JSC receives and stores information relating to the registrant's personal data and discloses it to relevant parties only at the request of competent authorities.

Once registration is complete, you cannot change: (a) the domain name itself, or (b) the registrant name for Vietnamese domain names, except in the specific cases set out by VNNIC inCircular 24/2015/TT-BTTTTamended and supplemented byCircular 21/2021/TT-BTTTTthe regulations on the management and use of internet resources issued by the Ministry of Information and Communications. While using and maintaining the service, you may submit a request to Pho Tue SoftWare Solutions JSC to change the information above. If the registrant's details change, the service user must notify Pho Tue SoftWare Solutions JSC in writing within 07 days of the change, so that the information remains accurate and complete. Pho Tue SoftWare Solutions JSC accepts no legal liability, no obligation to compensate and no joint liability for any consequence or damage arising from your failure to comply with this requirement.

Article 5:A domain whose term expires without the maintenance fee being paid is released for registration by others. Pho Tue SoftWare Solutions JSC no longer has management rights over, or responsibility to, the registrant of a domain that is not renewed.

Article 6:Domain renewal is carried out in accordance with Article 6 of the PTG. Pho Tue SoftWare Solutions JSC is not responsible for the interruption or loss of a domain caused by the registrant's failure to pay renewal fees, or by late payment of maintenance fees and services.

Article 7:Customers who are the registrant of a domain name must manage it themselves and are responsible for its use. Any expired domain name ceases to belong to its former registrant.

The registrant undertakes to comply with the laws, regulations, and court orders of the local and national jurisdiction relating to the domain registration.

Registrants are prohibited from distributing malware, operating botnets that endanger networks, phishing, impersonation, trademark infringement, fraud, or any activity contrary to law. In the event of a breach, the registry or the registrar has full authority to suspend or deactivate the domain name.

The domain holder agrees to release, defend and hold harmless Pho Tue SoftWare Solutions JSC, including but not limited to the domain registry and related parties such as the registry operator, domain registration service providers, validation staff, partners, affiliates, contractors, branches, business units, shareholders, directors and employees, from any damages, losses, costs or other obligations and liabilities, whether determined or not yet determined, including attorney, prosecution and legal fees arising in connection with the holder's domain registration. This indemnity obligation survives the expiry or termination of this Agreement.

Article 8:You are obliged to submit the supplementary “Domain name registration declaration” as required by the Registrar’s regulations, in order to confirm the accuracy of the registration information you provided, within 10 days from the date the domain was registered.

If the deadline for supplementing the file passes from the time stated above, the registration service will be suspended without refund.

You are also responsible for disclosing on the website the use of a domain other than the “.VN” country-code domainhttp://thongbaotenmien.vnof the Ministry of Information and Communications - under Article 23 of the current Law on Information Technology, or whichever legal instrument is in force at the time.

Article 9:When registering an international domain, the rules of ICANN require you to verify the information you have declared with the Registrar, using the admin email account for the domain, within 15 days of successfully registering the international domain. The verification email is in English. Please see the instructionsHere

• 9.1 Providing personal data for domain name use
  Pursuant toTerms of Serviceand under the domain name management rules ofICANNconcerning the provision of personal data. In its capacity as an ICANN-accredited Registrar, Pho Tue SoftWare Solutions JSC will send a notice to each new or existing domain name registrant regarding the collection of personal data as required, covering the following:
  • 9.1.1. The purposes for collecting and using the registrant's personal data;
• • 9.1.2. The recipients or categories of recipients of the data (including the registry and the parties that will receive the data from the registry);
• • 9.1.3. Which data is mandatory and which data, if any, is provided voluntarily;
• • 9.1.4. The means by which the data subject or personal data owner can access and, if necessary, correct their data.
    • The holder consents to the processing of data as described in the appendix above. The holder must ensure that notices with the content described in appendices 1–4 have been sent to any third-party individuals whose data the holder provides to the Registrar, and that the holder has obtained the consent of those third-party individuals as described in this clause. The holder must indemnify and hold harmless the domain registry and its directors, managers, employees and representatives against any allegation, damage, liability or cost (including legal costs) arising from or relating to the holder's domain registration.
  From 28/05/2018, under the RegulationGDPR(General Data Protection Regulation) - the European Union's general regulation on data protection, applying to subjects who are European citizens, who use services provided by an organization established in Europe, or who use services from organizations outside Europe that provide services to European residents.
  The registrar treats the following information as private in the WHOIS lookup system, unless the registrant or the domain's admin, technical, or other contacts request publication and written consent is obtained from those individuals:
  • Registrant/Admin/Tech/Other IDRegistrant/Admin/Tech/Other NameRegistrant/Admin/Tech/Other StreetRegistrant/Admin/Tech/Other CityRegistrant/Admin/Tech/Other Postal CodeRegistrant/Admin/Tech/Other PhoneRegistrant/Admin/Tech/Other Phone ExtRegistrant/Admin/Tech/Other FaxRegistrant/Admin/Tech/Other Fax ExtRegistrant/Admin/Tech/Other Email
  Accordingly, in addition to items 1 through 4 above, the registrar will notify data subjects covered by the GDPR of the following:
  • 9.1.5. The identity and contact details of the registrar holding the personal data and, where applicable, the identity and contact details of the registrar's representative in the European Economic Area, and the contact details of the registrar's data protection officer.
• • 9.1.6. The registrar's legitimate interest in processing data allows the collected data to be used for legitimate purposes, except where that legitimate interest is overridden by the interests of protecting the data collected - for example, where the information collected relates to a minor.
• • 9.1.7. The registrar's transfer of this personal data
    • (i) to a third country or an international organization, with or without an adequacy decision of the Commission; or (ii) where the transfer falls withinArticle 46orArticle 47of the GDPR, or subsection (1)Article 49of the GDPR, referring to the appropriate safeguards and the means of obtaining a copy of that data or of where it was collected.
• • 9.1.8. The period for which the personal data will be stored, or the criteria used to determine that period;
• • 9.1.9. The data subject's right to request from the registrar access to, rectification of, or erasure of their personal data, or restriction of the processing of data relating to the subject or data owner, the right to object to that processing, and the right to data portability;
• • 9.1.10. Compliance with the GDPR, where the registrar relies on the data subject's consent for processing;
• • 9.1.11. The right of the data subject and data owner to lodge a complaint with a competent supervisory authority;
• • 9.1.12. The existence of automated decision-making, including profiling, as referred to inSection 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
  Any registrant intending to grant or license the use of a domain name to a third party remains the registrant of that domain name and is responsible for providing and keeping current the full contact details of itself, of the domain name's administrative contact, and of its technical contact, so that any issue arising in connection with the domain name can be resolved. A registrant who licenses the use of its domain name is liable for damage caused by wrongful use of the domain name, unless it discloses the licensee's contact details or identity within 7 days to a party providing specific evidence of wrongdoing involving the domain name.
• 9.2. Other requirements on publishing domain name data under the GDPR
  • 9.2.1. The registrar enables the registrant to consent to publication of the additional information listed insection 9.1.
  • 9.2.2. The registrar may enable the individuals listed in the domain's contacts to consent to publication of the additional information listed insection 9.1.
  • 9.2.3. By whatever means it is delivered, the registrar must ensure that the text requesting consent from the individuals named above is clear and clearly distinguishable (it must also state the legitimate interests served by processing the personal data). The request must be intelligible and easily accessible, in clear and appropriate language. In addition, the data subject has the right to withdraw consent at any time. Withdrawal does not affect the validity of consent obtained before the withdrawal request is processed.
  • 9.2.4. The registrar must publish the registrant's additional details, including name, address, and phone number, as listed insection 9.1after full consent has been obtained from the data subject.

Article 10:Any dispute arising from or relating to the use of a domain name will be resolved through conciliation and negotiation. If the Parties cannot resolve the dispute through negotiation, either Party may refer it to a competent court under Vietnamese law. You are responsible for indemnifying and holding harmless the relevant parties of Pho Tue SoftWare Solutions JSC against any claims, liabilities, costs and losses arising from or relating to the registration and use of your domain name. You are responsible for maintaining (1) the confidentiality of your account password, and (2) all activity that occurs on or through your account. If your password or account is used without authorization, you must notify us immediately and change your password promptly to protect your information. Pho Tue SoftWare Solutions JSC may close your account at any time if necessary for information security reasons. Pho Tue SoftWare Solutions JSC cannot and will not be liable for any loss, damage or other liability arising from your failure to comply with this provision or from unauthorized access to your account.

Article 11:Rules on .bank and .insurance domain names. Customers registering .BANK and/or .INSURANCE domain names with Pho Tue SoftWare Solutions JSC undertake that they understand and will comply with Clause 3 of the Terms of Service (PTG) and the domain name policy available here. You understand and agree to all requirements and policies of the top-level domain registry operator (fTLD) athttps://www.ftld.com/policies, including but not limited to the following terms.

• 11.1 Eligibility to register .BANK and .INSURANCE domain names.
  • 11.1.1 .BANK domain names. The following for-profit and non-profit businesses and organizations may register .BANK domain names:
    • a) Provincial, municipal, and regional banks operated and supervised by a state regulatory authority;
    • b) Savings associations operated and supervised by a state regulatory authority;
    • c) National banks operated and supervised by a state regulatory authority;
    • d) Associations whose members are drawn mainly from the entities specified in subsections (a), (b), or (c) above;
    • e) Groups of associations whose members are drawn mainly from the associations specified in subsection (d) above;
    • f) Service providers that are owned by, or that primarily support, the entities specified in subsections (a), (b), or (c) above (subject to approval by the board of the domain name registry); and
    • g) State agencies performing banking supervision, savings associations, or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
  • 11.1.2 .INSURANCE domain names. The following for-profit and non-profit businesses and organizations may register .INSURANCE domain names:
    • a) Insurance companies supervised by the competent state authority (for example licensed, certified, or authorized);
    • b) Insurance agencies, brokers, or equivalent entities (for example intermediaries or representatives) that are licensed and supervised by the competent state authority;
    • c) Associations whose members are drawn mainly from the entities specified in subsections (a) or (b) above;
    • d) Groups of associations whose members are drawn mainly from the associations specified in subsection (c) above;
    • e) Service providers that are owned by, or that primarily support, the entities specified in subsections (a) or (b) above (subject to approval by the board of the domain name registry); and
    • f) State agencies supervising companies, insurance agencies, brokers, or equivalent entities (for example intermediaries or representatives), or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
    • g) State agencies performing banking supervision, savings associations, or organizations whose members are drawn mainly from those state agencies (subject to approval by the board of the domain name registry).
• 11.2 Security requirements. Customers registering .BANK and/or .INSURANCE domain names undertake to comply with the requirements of the top-level domain registry athttps://www.ftld.com/security/. For internet users, safety means a restricted, purpose-built and closely controlled environment that keeps harmful activity away from generic top-level domains (gTLDs). In that spirit, Pho Tue SoftWare Solutions JSC and fTLD — the registry for .BANK and .INSURANCE — work to maintain high security standards and cooperate actively with the global financial services community to strengthen trust in online financial systems. We apply consumer protection measures that reduce harmful activity such as cybersquatting, typosquatting, spoofing and phishing. The security requirements below apply to every entity eligible to register a domain.
  • a) Mandatory verification and re-verification of charters, licenses, authorized persons, and domain names, to ensure that only members of the global banking and insurance community can be allocated domain names in these sectors.
  • b) Domain Name System Security Extensions (DNSSEC), to ensure internet users reach the intended website and are not redirected to malicious pages.
  • c) Email authentication, to protect the brand and reduce spoofing, phishing, and other harmful activity.
  • d) Pho Tue SoftWare Solutions JSC and the top-level domain registry will jointly carry out multi-factor authentication (MFA) to ensure that only the users specified in Articles 3, 6 and 9 of the MBT may change or amend registration information.
  • e) Strong encryption (for example Transport Layer Security, TLS) to ensure confidentiality and integrity in transactions and communications over the network.
  • f) WHOIS privacy services are not available, to prevent bad actors from exploiting anonymity.
  • .BANK and .INSURANCE domain names must use the .BANK/.INSURANCE DNS name servers in order to meet the technical requirements.
• 11.3 Rules of the top-level domain registry.
  • 11.3.1 Powers of the top-level domain registry.
    You understand and agree that Pho Tue SoftWare Solutions JSC is a domain registrar accredited by the fTLD registry, and that the registry may refuse, cancel or transfer any domain registration transaction or record, or lock, hold or apply another status, as the case may be, entirely at the registry's discretion: (i) to comply with the technical requirements of internet standards bodies (for example, RFCs), (ii) to correct errors caused by the registry, the service provider, the validation authority, the registrar and/or any third party in connection with the registered domain, or (iii) in respect of fees the registry is not responsible for paying. You also agree that the registry may access and use your personal information.
  • 11.3.2 Timing rules for resolving domain disputes. In addition to the terms set out in the PTG Terms, you agree that domain dispute cases involving registration timing shall follow the time shown in the Domain Registry's system.
  • 11.3.3 Operating rules. Under the rules of the domain name registry athttps://www.ftld.com/resources, https://www.ftld.com/faq-registrar, https://www.ftld.com/faq-dotbankandhttps://www.ftld.com/faq-dotinsurance, you agree that we have no obligation to notify you of changes, updates, or additions to the registry's operating rules; however, we will endeavor to notify you as early as possible.
  • 11.3.4 The domain name registrant is responsible for following the necessary and reasonable instructions of the registrar and the registry in order to comply with ICANN policies, guidelines, or requirements, and/or the registry operator has full authority to take reasonable and necessary measures to ensure the provision of domain name services and compliance with security and operational requirements, including monitoring compliance with the rules applicable to registered domain names.
• 11.4 Undertakings. You understand and agree to all of the following:
  • a) We do not act on behalf of any third party when accessing the registry's systems, including other registrars, even accredited ones.
  • b) To provide the best service to customers, we will try to notify you as early as possible; however, you agree to keep yourself up to date with all registration policies and public interest commitments of the registry (which may change over time) in order to comply with the requirements of ICANN and the registry.
  • c) Under the security requirements of the fTLD registry athttps://www.ftld.com/security, we do not provide, and do not permit any affiliate or third party to provide, WHOIS privacy services for .BANK and .INSURANCE domain names.
• 11.5 Premium domain names. The top-level domain registry may offer special domain names that cannot be registered or renewed at standard prices. Please contact us for details on these domain names. In some cases a premium domain name may still appear in quotations as a standard domain name; we will notify you of the additional fee before completing the registration or renewal.
• 11.6. Additional rules. You agree to inform yourself about, and to comply with, the rules and procedures of the fTLD registry, which may be amended from time to time and are published athttps://www.ftld.com/policies, including but not limited to the following rules:
  • Security requirements of the top-level domain registry
  • Domain name use and anti-abuse policy - domain name allocation policy
  • Domain name selection policy
  • Customer information privacy policy
  • Domain registration eligibility
  • Domain name dispute resolution policy
  • Policy on reserved domain names
  • Sunrise period dispute resolution policy
  • WHOIS information access policy

Article 12: Domain transfers
Pho Tue SoftWare Solutions JSC processes these requests during business hours only; completion takes between 5 and 15 days, depending on the domain registry. You must accept that during a domain transfer, WHOIS information cannot be changed and the domain's nameservers cannot be modified. Change the nameservers to ns1.photuesoftware.vn and ns2.photuesoftware.vn, and supply Pho Tue SoftWare Solutions JSC with the full set of DNS records from the previous DNS so that we can build the new zone.
Before initiating a domain transfer to Pho Tue SoftWare Solutions JSC, please make sure you have done the following:

• Unlock the domain and provide its authorization code.
• If the domain's WHOIS details are hidden, you must unhide them to proceed.
• The domain's WHOIS email address must be an address you actively use.

Article 13: Transferring domain names covered by the GDPR

• Transfers to individuals covered by the GDPR do not require ICANN's standard Form of Authorization (FOA) confirmation.
• The registrant must resubmit the domain's WHOIS information held at the previous registrar. In that case the gaining registrar does not need to follow the "change of registrant" process set out in the transfer policy ofICANN.

Rules on domain name dispute resolution

Domain name disputes are resolved under current Vietnamese law and ICANN rules. To protect your lawful rights, you should be aware of and follow the requirements below:

Article 1:For international domain names: you undertake to inform yourself about and comply with the relevant ICANN rules and policies, including the ICANN Uniform Domain-Name Dispute-Resolution Policy (UDRP), when you register an international domain name (seehttp://archive.icann.org/en/udrp/udrp-policy-24oct99.htm).

Customers must submit and maintain complete and accurate registration details, including contact information (email and phone), so that registration, contact, and notification can proceed smoothly if a dispute with a third party arises.

For domain names covered by the GDPR, in the event of a dispute:

• The registrar must still provide complete and accurate details of the registrant of the disputed domain name.
• A complainant's complaint will not be rejected where the disputed domain name's details are redacted and the complaint cannot state the respondent's exact name.

Article 2:For Vietnamese domains: you undertake to review and comply with VNNIC's relevant policies, including the rules on domain dispute resolution under Article 16 of Decree 147/2024/NĐ-CP on the management and provision of internet services and online information, and any other applicable legal instruments. You must ensure that your registration information, including the contact details used for registration and other correspondence, is complete and accurate at all times.

Rules for country-code domain names (other than Vietnam)

When you register a domain name under a given country's TLD, you must comply with all of that country's requirements.

You are responsible for complying with any changes or updates that country makes concerning the domain name you registered.

Country-code domain names may be checked, verified, and reconciled at any time, depending on how the registry in that country operates. You are therefore asked to check your email regularly and apply any related updates, so that the domain name remains compliant.

Pho Tue SoftWare Solutions JSC advises that if you have registered a country-code domain and, during use, fail to meet that country's verification requirements, you should have a plan to switch to a different domain so your business is not affected if the domain is suspended.

Selected country domain extensions and their ruleshere

Rules for using the DNS service at Pho Tue SoftWare Solutions JSC:

When using DNS services from Pho Tue SoftWare Solutions JSC, you must comply with the following rules (including but not limited to):

• By default you may use one pair of name servers on the Pho Tue SoftWare Solutions JSC DNS resolution system.
• Each domain name corresponds to one DNS zone.
• Each DNS zone is limited to 200 DNS records. If you need more than 200 records, contact our sales team and we will advise you on an alternative DNS solution (chargeable).
• We may intervene and block DNS resolution for a domain name if we find it is being used in breach of the terms of service, is being used in an attack that congests the network, or is being used to spoof a website or email.
• If a domain name expires and you do not renew it in time, our system automatically stops providing DNS service and the domain's name server pair is changed. At that point, visiting the domain in a web browser may redirect to a default page designated by our DNS system.

Updated: 20/01/2025