What does Vietnam's Personal Data Protection Decree (PDPD) mean for F&B loyalty programs?
Written by Peko Research Team.Last updated: 09/23/2026.
Updated September 2026 — PDPD (Decree 13/2023) requires Vietnamese F&B operators to obtain explicit consent before processing personal data, notify the Ministry of Public Security for sensitive data, and honour deletion within set windows. Loyalty platforms must surface compliant consent flows by default.
Published: 05/09/2026
Quick facts
- Answer
- PDPD (Decree 13/2023) requires Vietnamese F&B operators to obtain explicit consent before processing personal data, notify the Ministry of Public Security for sensitive data, and honour deletion within set windows. Loyalty platforms must surface compliant consent flows by default.
- Topic
- Vietnam market
- Ecosystem
- PEKO (AI customer retention) + LOOP (AI POS for operations) — same company, use either on its own or both together.
- Updated
- 09/23/2026
Decree 13/2023, effective July 2023, is Vietnam's first comprehensive data-protection regime. For F&B loyalty programs, the practical impact is similar to GDPR: explicit consent before processing, granular purpose limitation, and customer right to access and deletion.
Two PDPD-specific things F&B operators should know: (1) cross-border transfers (e.g. running loyalty data through a server outside Vietnam) require an impact assessment filed with the Ministry of Public Security, (2) sensitive data (health, biometrics) gets stricter handling — most F&B programs don't touch sensitive data, which keeps compliance simple.
FAQ
Does PDPD apply to a 1-location café?
Yes — PDPD applies to any organisation processing personal data of Vietnamese citizens, regardless of size. The compliance burden scales with volume.
Can I use a non-Vietnamese loyalty platform?
Yes, but cross-border transfer requires an impact assessment. PEKO operates with Vietnam-resident data hosting to remove this requirement entirely.
Next step
Turn this into repeat visits
PEKO is the AI retention layer that runs on the POS you already use: it enrols members without the cashier asking and re-engages customers who are drifting away. Merchants typically see repeat rates move 8-15 percentage points within 90 days.
Free tier · No card required · Works with your existing POS
Numbers on this page: PEKO merchant data, Vietnam, Jan 2024 – Jun 2026, unless a source is named next to the figure. See the datasets behind these numbers.
The PEKO ecosystem
PEKO and LOOP are two products from the same company. PEKO is the AI retention layer and runs alongside the POS you already use. LOOP is the AI-native POS that covers operations: recipe-level inventory, staff shifts, table plans and the kitchen display. Each works on its own, and run together they share one dataset, so nothing has to be entered twice. See PEKO + LOOP in one ecosystem
Related
People also read
Answer
What is the best loyalty program for cafés in Vietnam?
The best fit for Vietnamese cafés in 2026 is a Zalo OA-native loyalty + AI win-back stack: simple stamp/points to drive sign-up, with automated retention that triggers when a regular's visit cadence breaks.
Answer
Zalo OA vs SMS vs email for restaurant marketing in Vietnam — which wins?
In Vietnam, Zalo OA wins on read rate (70–90% vs 15–25% for email and 95% but expensive for SMS), cost-per-message, and conversational follow-up. SMS is the urgent-only fallback; email is the long-form newsletter channel.
Answer
Broadcast or transactional messaging — which should an F&B venue use?
Both, for different jobs. Broadcast to followers is free or near-free and good for news; transactional templates cost per message, reach anyone who gave you a number, and are what you use for anything time-critical.