TRANSACTION AND PAYMENT SECURITY POLICY

Safeguarding payment information on bumatech.vn

Code: CS-CCO-08 · Version 1.0 · Effective: 01/09/2026

Article 1. Scope

This Policy applies to all payment transactions arising from orders placed through the website bumatech.vn or the Company's other sales channels.

Article 2. Accepted payment methods

2.1. Bank transfer directly to the account of BUMATECH COMPANY LIMITED stated on the quotation, contract or invoice.

2.2. Payment through an online payment gateway or e-wallet (where integrated on the website) operated by a payment intermediary licensed by the State Bank of Viet Nam.

2.3. Cash at the factory or office for small orders, subject to the law on business payments.

IMPORTANT WARNING: The Company ONLY accepts payment into accounts in the name of BUMATECH COMPANY LIMITED. The Company NEVER asks customers to transfer money to a staff member's personal account. Please check the account holder's name before transferring and call the hotline 0979 793 804 to verify if in doubt.

Article 3. Payment information security

3.1. The Company does NOT store customers' bank card numbers, card security codes (CVV/CVC), banking passwords or OTP codes in any form.

3.2. For payments through a payment gateway, all card details are entered and processed on the intermediary's system; the Company receives only the result of the transaction (successful or failed).

3.3. The website connection is encrypted; order data is subject to role-based access control under the Company's IT and Information Security Policy.

Article 4. Customer responsibilities

4.1. Keep website login credentials and personal banking information confidential.

4.2. Never provide OTP codes or passwords to anyone, including persons claiming to be Company staff.

4.3. Carefully check the recipient name, account number and transfer description before making a transaction.

4.4. Retain payment records for reconciliation when needed.

Article 5. Handling irregular transactions

5.1. When a transaction is suspected to be fraudulent, the Company suspends order processing and contacts the customer for verification before proceeding.

5.2. Customers who detect signs of fraud impersonating BUMATECH (unfamiliar accounts, fake websites, persons claiming to be staff and requesting transfers) are asked to report immediately via the hotline 0979 793 804 or email support@bumatech.com.vn so that the Company can act and warn the public.

5.3. In the event of a discrepancy or transaction error, the Company works with the bank and the payment intermediary to investigate; investigation times follow the bank's rules, typically 5–15 working days.

Article 6. Refunds

Refunds are made under the Return and Refund Policy, to the account from which payment was made or as otherwise agreed in writing with the customer.