Privacy Policy

01

Who is responsible

Gemmy Tuệ An controls and processes the personal data collected on gemmypoker.com. Send any data request to the email at the bottom of this page.

02

Data Gemmy collects

• Student accounts: name, email, password (stored only as a one-way hash), last sign-in time.
• Course purchases: courses bought, amount, transfer code, payment time, study progress and quiz results. Gemmy never receives or stores card numbers; bank data is limited to the transfer note, amount and transaction ID used to match payments.
• Collaboration form: name, brand, email, collaboration type, budget, timeline and your message.
• Comments: name, email, text, IP address and browser details (to fight spam).
• Poker tools: results tied to a random browser ID and your IP address. Usage counts use a hashed IP; the original IP is not kept for counting.
• Analytics: Gemmy uses Plausible, which sets no cookies and does not identify individuals. Gemmy does not use Google Analytics, the Facebook Pixel or ad-tracking tools.

03

How Gemmy uses data

• Create and secure your account, sign you in and reset passwords.
• Confirm payments, unlock courses and save your progress.
• Send essential emails: sign-up, order confirmation, password reset.
• Reply to collaboration requests and moderate comments.
• Prevent spam, fraud and abuse.
• Understand which pages help readers, using aggregated, anonymous numbers.

04

Cookies and browser storage

• Student sign-in cookie: set only when you sign in and keeps you signed in for 30 days. It is httpOnly, so scripts on the page cannot read it.
• Local storage: your Push/Fold history, practice stats and liked comments. This stays on your device and is gone when you clear browser data.
• Gemmy uses no advertising or tracking cookies.

05

Third parties that process data

Gemmy only shares the data each task needs:

• Lark Mail: sends account and order emails from gemmy@gemmypoker.com (receives your email and name), and forwards new collaboration requests to the Gemmy team’s internal inbox.
• Casso: reads incoming transactions on Gemmy’s bank account to match payments automatically.
• VietQR: generates the transfer QR code (receives the amount and transfer code, no personal details).
• Bunny Stream: streams lesson videos.
• Facebook: when you watch an embedded reel, Facebook may record the view under its own policy.
• Plausible: anonymous analytics.
• Telegram and Lark: internal alerts to the Gemmy team about new collaboration requests.
• The hosting provider where the site and database run.

06

How long data is kept

Account data is kept until you ask for deletion. Order data is kept for as long as accounting and tax law requires. Collaboration requests and rejected comments are deleted once no longer needed.

07

Your rights

Under Vietnamese personal data protection law, you can:

• Find out what data Gemmy holds about you and get a copy.
• Ask for incorrect data to be corrected.
• Ask for your account and data to be deleted, except what the law requires Gemmy to keep.
• Withdraw consent, object to or ask to restrict processing.

08

How Gemmy protects data

The whole site runs over HTTPS. Passwords and reset tokens are stored only as one-way hashes. Only Gemmy’s operators can access the admin area. If a data breach happens, Gemmy will notify affected people and the authorities as required.

09

People under 18

Gemmy is not meant for people under 18 and does not knowingly collect their data. Such accounts will be deleted when found.

10

Changes to this policy

When Gemmy changes how data is collected or used, this page will be updated with a new date at the top.