Privacy Policy

DeeMall MC Merchant App — Privacy Policy

Last Updated: August 9, 2026

DeeMall MC Merchant App (hereinafter referred to as "this App") is operated by Byte Link Technology Sole Co., Ltd (hereinafter referred to as "the Company", "we", or "DeeMall"). We understand the importance of your personal information and are committed to protecting your personal information security in accordance with relevant laws and regulations of Laos.

Please read and fully understand this Privacy Policy before using this App. By clicking "Agree" or continuing to use this App, you signify that you have fully understood and agree to all provisions of this Policy.

1. What Information We Collect

1.1 Information You Voluntarily Provide

Registration Information: Mobile phone number, verification code.
Merchant Qualification Information: Business license information, legal representative/operator name and identification documents, bank account information, store business address, etc.
Product Information: Product names, descriptions, prices, inventory, images, etc., that you upload.
Customer Service Communication Information: Information and communication content you provide when contacting our customer service team.

1.2 Information We Automatically Collect

When you use this App, we may automatically collect the following information:

Device Information: Device model, operating system version, unique device identifier (IMEI/Android ID), IP address, network operator information.
Log Information: Your usage records of this App, including login time, operational activities, browsing history, order processing records, etc.
Location Information: With your authorization, we may collect your location information for functions such as delivery address verification.

1.3 Information We Do Not Collect

This App does not actively collect your biometric information (such as fingerprints, facial recognition), racial or ethnic information, political opinions, religious beliefs, or other sensitive information.

2. How We Use Your Information

We use your personal information primarily for the following purposes:

PurposeDescriptionAccount Registration and ManagementComplete merchant account registration, login, and identity verificationQualification ReviewVerify your business license and operational qualifications to ensure compliance with platform access requirementsOrder Management and FulfillmentReceive and process customer orders, complete transaction settlementsCustomer ServiceRespond to your inquiries, complaints, or after-sales requestsPlatform Operation and OptimizationImprove App functionality, optimize user experience, conduct data analysis and statisticsLegal ComplianceFulfill obligations under Lao law, such as tax reporting, anti-money laundering checks, etc.

3. How We Share, Transfer, and Disclose Your Information

3.1 Sharing

We commit that we will not sell or rent your personal information to third parties. However, in the following circumstances, we may share your information with third parties:

Partners: For order fulfillment (e.g., logistics delivery) and payment settlement purposes, we share relevant information within the necessary scope with our partner logistics companies (e.g., HAL Express) and payment service providers (e.g., BCEL Bank), strictly limited to order fulfillment and transaction settlement.
Legal Requirements: As required by Lao law, judicial authorities, or administrative agencies, we may disclose your information in accordance with the law.
Your Consent: With your explicit consent.

3.2 Transfer

In the event of a merger, division, acquisition, or asset transfer involving the Company, your personal information may be transferred as part of the transaction. We will notify you through announcements or other means and ensure that the transferee continues to fulfill the obligations under this Privacy Policy.

3.3 Public Disclosure

Except as required by law or with your explicit consent, we will not publicly disclose your personal information.

4. Your Rights

Under the Lao Law on Electronic Data Protection and relevant regulations, you have the following rights regarding your personal information:

RightDescriptionRight to KnowYou have the right to know what personal information we collect and for what purposesRight to AccessYou have the right to access and obtain copies of your personal information held by usRight to RectifyIf you find information is inaccurate or incomplete, you have the right to request correction or supplementationRight to DeleteUnder circumstances provided by law, you have the right to request deletion of your personal informationRight to Withdraw ConsentYou have the right to withdraw your consent to data processing at any time; withdrawal does not affect the lawfulness of processing conducted prior to withdrawalRight to ComplainYou have the right to file a complaint regarding personal information processing issues with the Lao Ministry of Post and Telecommunications

To exercise the above rights, please contact us (email: bytelinklao@gmail.com). We will respond within 15 business days.

5. Data Storage and Protection

5.1 Storage Location

Your personal information will be processed and stored through cloud servers. We select only cloud service providers with robust data security capabilities and require them, through legally binding data processing agreements, to protect your personal information security at standards no less than those required by the Lao Law on Electronic Data Protection.

(A) Compliance Assurance Measures

We commit to the following measures to ensure your data security:

Contractual Safeguards: We have entered into legally binding Data Processing Agreements (DPA) with our cloud service providers, prohibiting them from using data for any purpose other than those specified in the agreements and requiring them to provide protection no less than the standards set by Lao law.
Security Standards: The selected cloud servers have obtained internationally recognized security certifications (such as ISO 27001, SOC 2, etc.) and feature comprehensive technical protection systems, including encrypted data transmission (TLS 1.2+), static data encryption (AES-256), access control, and real-time security monitoring.
Data Subject Rights Protection: Regardless of where data is stored, all rights you enjoy under Section 4 of this Policy (access, rectification, deletion, withdrawal of consent, etc.) remain unaffected, and we will ensure the realization of your rights through a unified response mechanism.

(B) Important Notice

Should Laos enact new laws or judicial interpretations regarding data storage and transfer in the future, we will adjust our strategies accordingly and notify you in a timely manner.

If you have any concerns about data storage or wish to know the specific cloud service provider information, please contact us (email: bytelinklao@gmail.com). We will provide you with relevant explanations within 7 business days.

5.2 Retention Period

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, as specified below:

Data TypeRetention PeriodRegistration Information and Qualification Materials3 years from the date of account cancellation (to meet tax, legal regulatory, and civil litigation statute of limitations requirements)Transaction Records and Order Information3 years from the date of transaction completionSystem Log Information180 days from the date of generation (for security auditing and anomaly investigation)

Upon expiration of the retention period, we will delete or anonymize the relevant data.

5.3 Security Measures

We adopt industry-standard technical and administrative measures to protect your personal information from data leakage, destruction, or loss:

Transport Layer Security: All data is transmitted between your device and our servers using TLS 1.2 or higher encryption protocols;
Storage Encryption: Personally sensitive information stored in databases (ID numbers, bank account numbers, etc.) is encrypted using AES-256 algorithm;
Access Control: Only authorized personnel with business needs may access user data, and all access logs are recorded;
Incident Response: We have established data security incident emergency response plans. In the event of a data breach, we will initiate an investigation within 72 hours and notify affected users and regulatory authorities in accordance with the law.

Please note that no network transmission or storage method can guarantee 100% absolute security. We will continuously enhance our security capabilities to address potential risks.

6. Protection of Minors' Information

This App is intended for adults with full civil capacity. We do not actively collect personal information from individuals under 18 years of age. If you are a guardian, please supervise the minor's use of this App. If we discover that a minor has used this App and submitted personal information without guardian consent, we will delete such information in accordance with the law.

7. Cookies and Similar Technologies

This App may use Cookies or similar technologies (such as local storage) to improve your user experience, such as saving login status, preference settings, etc. You can manage or disable Cookies through your device settings, but this may affect the use of certain features.

8. Updates to This Privacy Policy

We reserve the right to revise this Privacy Policy at any time. In the event of material changes (such as changes to the scope of information collection, methods of use, sharing rules, etc.), we will notify you through:

In-app pop-ups or announcements;
Push notifications or in-app messages;
Email (if provided)

and will require you to re-click the "Agree" button before continuing to use this App. Material changes will take effect 15 days after the date of announcement. Your continued use of this App constitutes your acceptance of the updated Privacy Policy.

9. Legal Liability

If the Company violates the Lao Law on Electronic Data Protection or relevant regulations in processing your personal information, you have the right to seek:

Civil Compensation: Compensation for losses incurred by you as a result;
Administrative Penalties: File a complaint with the Ministry of Post and Telecommunications; violations may result in warnings, re-education, or a fine of up to 15,000,000 Lao Kip;
Criminal Liability: The Lao Penal Code prescribes corresponding imprisonment and fines for illegal access, interception, or interference with computer data.

10. Contact Us

If you have any questions, comments, or complaints about this Privacy Policy, or need to exercise your data rights, please contact us through the following channels:

Email: bytelinklao@gmail.com
Phone: 02092583623
Address: JiXiang GongGuan, Ban Sikeut, Naxaithong District, Vientiane Capital
Business Hours: Monday – Saturday 9:00 – 18:00 (Lao Time)