Terms and Conditions

Please read the terms and conditions below carefully. By using this mobile application or Weixin official account ("this service") and the materials from time to time available through this service ("these materials"), you agree to be bound by these terms and conditions. As these terms and conditions may be amended from time to time at the discretion of Bank of China (Hong Kong) Limited (the "Company") and be posted on this service, you should read them again carefully whenever using this service. You are assumed to have agreed to the revised terms and conditions if you continue to use this service following any changes to these terms and conditions.

These terms and conditions are in addition to the license agreement agreed between you and the relevant software providers (including Google Play and App Store) for use of the Service (the "License Agreement"). In case of any inconsistency or conflict between the License Agreement and these terms and conditions, the latter shall prevail.

Availability
Products and services mentioned in these materials are not available to all persons in all geographic locations. Only persons who are permitted by applicable law may browse the information and/or subscribe the services and products offered. Persons browsing these materials are required to ensure that they are aware of and observe all relevant restrictions that apply to them and are responsible for satisfying themselves that they may do so under the laws or the jurisdiction to which they are bound or located. Eligibility of any person for particular product or service is subject to the final determination of the Company.

Disclaimer
The information contained in these materials is for general information only and is provided on an "as is" basis without warranty of any kind (including without limitation, merchantability, title, fitness for particular purpose, freedom from computer virus, non-infringement, compatibility, security, accuracy and completeness) and may be withdrawn and/or changed at any time without prior notice.

This service and/or these materials may not be available at all times and there may be delays, failures, errors or omissions or loss of transmitted information.

No information contained in these materials should be regarded as an offer or solicitation to sell, to subscribe to, or provide any recommendation to any person. The information is not intended to be relied upon as the basis for any decision which may affect you or your business. All persons should consult their own professional adviser before making any investment, financial decision or purchasing any product or subscribing any service.

The viewer should be aware that any information regarding rates, indexes and stock prices available through this service is on a delayed basis. The Company will endeavour to ensure the accuracy and reliability of the information provided but do not guarantee its accuracy or reliability and accept no liability (whether in tort or contract or otherwise) for any loss or damage arising from any inaccuracies or omissions.

To the extent permitted by applicable law, the Company disclaims liability for any error, omissions or inaccuracies in the information contained in these materials and for any loss or damages, resulting from its use or reliance, or inability to use, by any party or in connection with any error, interruption, delay in operation or incomplete transmission, line or system failure or computer virus. The Company is not responsible in any manner for direct, indirect, special, incidental or consequential damages arising out of the use of this service and/or these materials.

Your use of this service and these materials is entirely at your own risk. The Company does not represent or warrant that no viruses or other destructive properties will be transmitted or that no damage will occur to your equipment or mobile phone. You are solely responsible for adequate protection and back up of data and/or equipment and for undertaking reasonable and appropriate precautions to scan for computer viruses or other destructive properties and to prevent, safeguard and ensure that no computer virus enters your equipment or mobile phone. The Company makes no representations or warranties concerning the accuracy, functionality or performance of any third party software that may be used in connection with this service.

Continued use of GPS running in the background can dramatically decrease battery life.

Security Information
The Company endeavors to ensure the security of your data transmitted via Internet Banking, Mobile Banking or Weixin official account by the use of encryption technology. To protect your privacy and assets, you should not disclose your account number, user name and password to anyone. Moreover, you are reminded not to access Internet Banking, Mobile Banking or Weixin official account through hyperlinks embedded in e-mails. The Company will never ask you for your account number, password or any personal information via e-mails or Weixin dialog box.

Mobile App provides you with one-stop banking and investment services, as well as the latest financial information, helping you manage your wealth flexibly. You can search "BOCHK" for free download of the Apps through the online App stores (Google Play and App Store). If there are suspicious App for downloading, please do not login and stop proceeding the download immediately.

Avoid using Mobile Apps via wireless network (i.e. "Wi-Fi") which is public or without password setting. We advise using configured and reliable mobile internet connection especially for financial transactions.

Please do not connect your mobile to any suspicious computer infected by virus; at the same time, it is recommended to install anti-virus and setup the firewall in your mobile. Don't use any jailbroken iPhone or rooted Android mobile to avoid any potential security loophole. Also, you can find many different mobile security apps. You can visit HKCERT website for reference: https://www.hkcert.org/mobile-security-tools, to select suitable Apps.

Please download and install updates and patches for your Mobile Apps, operating systems and browsers regularly.

Hyperlinks
Use of hyperlinks to other internet sites or resources are at the browser's own risks. The Company expressly disclaims any responsibility for the accuracy or availability of the information provided by those sites or for the safety of information which the browser may provide to any third party.

Copyright
This service and all contents in these materials are protected by copyright. No part of these materials may be modified, reproduced, transmitted and distributed in any format or by any means for commercial or public use without the Company's prior written consent.

Collection of Information
The Company focuses on its duty of confidentiality to its customers. Please refer to the "Data Policy Notice" relating to the Company's general policies on collection, use, disclosure and transfer of customer data, a copy of which is available at http://www.bochk.com.

Governing Law
These terms and conditions are governed by the laws of the Hong Kong Special Administrative Region. The parties submit to the non-exclusive jurisdiction of the Hong Kong courts.

Language
The Chinese version of these terms and conditions is for reference only. If there is any conflict or inconsistency between the Chinese and the English version, the latter shall prevail.

Risk Disclosure Statements
Investment involves risks. Terms apply. For details and relevant investment risk factors, please contact the staff of BOCHK.

Privacy Policy Statement

The purpose of this Privacy Policy Statement is to establish the policies and practices of BOC Hong Kong (Holdings) Limited and its subsidiaries, including Bank of China (Hong Kong) Limited, Nanyang Commercial Bank, Limited, Chiyu Banking Corporation Limited, BOC Credit Card (International) Limited, BOC Group Life Assurance Company Limited, Po Sang Futures Limited, BOCHK Asset Management Limited (each a "Company", for so long as such Company remains a subsidiary of BOC Hong Kong (Holdings) Limited) towards the Company's commitment in protecting personal data privacy in accordance with the provisions of the Personal Data (Privacy) Ordinance (the "Ordinance"). The Company highly values personal privacy and strives to preserve the confidentiality and security of all the personal information which the Company may collect so as to strengthen the trust and confidence between the Company and the Data Subjects, Employees, Users and Other Individuals (as hereinafter defined).

The term "Data Subject(s)", wherever mentioned in this Statement, includes the following categories of individuals:-

1. applicants for or customers, authorized signatories, insured persons, policy holders, beneficiaries and other users of financial, insurance, credit card, securities, commodities, investment, banking and related services and products and facilities and so forth provided by the Company;
2. sureties, guarantors and parties providing security, guarantee or any form of support for obligations owed to the Company; and
3. directors, shareholders, officers and managers of any corporate applicants and Data Subjects/ users.

The term "Employee(s)", wherever mentioned in this Statement, includes employees and/or applicants for any openings offered by the Company.

The term "User(s)", wherever mentioned in this Statement, includes visitors and/or users of the Company's Website, or when the visitors and/or users communicate with the Company via any electronic devices including but not limited to computer and mobile phone ("Electronic Devices").

The term "Other Individuals", wherever mentioned in this Statement, include suppliers, contractors, service providers, business partners, landlords, tenants, participants of seminars, visitors, other contractual counterparties of the Company and the employee(s) of the above mentioned parties (if applicable).

For the purposes of this Statement, the "Group" means the Company and its holding companies, branches, subsidiaries, representative offices and affiliates, wherever situated. Affiliates include branches, subsidiaries, representative offices and affiliates of the Company's holding companies, wherever situated.

The rights and obligations of each Company under this Statement are several and not joint. No Company shall be liable for any act or omission by another Company.

Kinds of Personal Data Held
There are three broad categories of personal data held in the Company. They comprise personal data contained in the following:

1. Data Subject records, which are necessary for Data Subjects to supply to the Company from time to time:
   1. in connection with the opening or continuation of accounts and the establishment or continuation of banking facilities or provision of financial, insurance, credit card, securities, commodities, investment, banking and related services and products and facilities;
   2. in the ordinary course of the continuation of the relationship between the Company and Data Subjects, for example, when Data Subjects write cheques, deposit money, effect transactions through credit cards issued or serviced by the Company or generally communicate verbally or in writing with the Company.
2. Employee records, which include but are not limited to the name, address, e-mail address, contact phone number, educational background, curriculum vitae and relevant personal data of family members of Employees.
3. Other Individuals records, which include but not limited to the name, address, e-mail address, contact phone number of suppliers, contractors, service providers, business partners, landlords, tenants, participants of seminars, visitors, other contractual counterparties of the Company and the employee(s) of the above-mentioned parties (if applicable); and other operational and administrative records that contain personal data.

Purposes of Keeping Personal Data

1. In relation to Data Subjects:
   The purposes for which the data relating to the Data Subjects may be used are as follows:
   1. assessing the merits and suitability of the Data Subjects as actual or potential applicants for financial, insurance, credit card, securities, commodities, investment, banking and related services and products and facilities and/or processing and/or approving their applications, variation, renewals, cancellations, reinstatements and claims;
   2. facilitating the daily operation of the services, credit facilities provided to and/or insurance policies issued to the Data Subjects;
   3. conducting credit checks whenever appropriate (including, without limitation, at the time of application for credit and at the time of regular or special reviews which normally will take place one or more times each year) and carrying out matching procedures (as defined in the Ordinance);
   4. creating and maintaining the Company's scoring models;
   5. providing reference;
   6. assisting other financial institutions to conduct credit checks and collect debts;
   7. ensuring ongoing credit worthiness of Data Subjects;
   8. researching, customer profiling and segmentation and/or designing financial, insurance, credit card, securities, commodities, investment, banking and related services and products and facilities for Data Subjects' use;
   9. marketing services, products and other subjects (please see further details in paragraph 10 of the Company's Data Policy Notice ("DPN"));
   10. determining amounts owed to or by the Data Subjects;
   11. enforcing Data Subjects' obligations, including without limitation the collection of amounts outstanding from Data Subjects and those providing security for Data Subjects' obligations;
   12. complying with the obligations, requirements or arrangements for disclosing and using data that apply to the Company or any of its branches or that it is expected to comply according to:
       1. any law binding or applying to it within or outside the Hong Kong Special Administrative Region existing currently and in the future;
       2. any guidelines or guidance given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside the Hong Kong Special Administrative Region existing currently and in the future;
       3. any present or future contractual or other commitment with local or foreign legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers that is assumed by or imposed on the Company or any of its branches by reason of its financial, commercial, business or other interests or activities in or related to the jurisdiction of the relevant local or foreign legal, regulatory, governmental, tax, law enforcement or other authority, or self-regulatory or industry bodies or associations;
   13. complying with any obligations, requirements, policies, procedures, measures or arrangements for sharing data and information within the Group and/or any other use of data and information in accordance with any group-wide programmes for compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
   14. enabling an actual or proposed assignee of the Company, or participant or sub-participant of the Company's rights in respect of the Data Subjects to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation;
   15. comparing data of Data Subjects or other persons for credit checking, data verification or otherwise producing or verifying data, whether or not for the purpose of taking adverse action against the Data Subjects;
   16. maintaining a credit history or otherwise, a record of Data Subjects (whether or not there exists any relationship between Data Subjects and the Company) for present and future reference; and
   17. purposes incidental, associated or relating to the abovementioned purposes.


2. In relation to Employees (as and where applicable):
   The purposes for which the data relating to the Employees may be used in connection with the employer and employee relationship and human resources management, including but not limited to the purposes as mentioned herein:
   1. processing employment application;
   2. determining and reviewing salaries, bonuses and other benefits should be employed;
   3. conducting reference check with previous employers;
   4. consideration for promotion, transfer or secondment;
   5. monitoring compliance with internal rules of the Company;
   6. any other purposes directly or indirectly relating to the compliance by the Company or any of the employment or statutory obligations; and
   7. administering any affairs or benefits relating to the retirement and insurance plan of Employees.


3. In relation to Other Individuals(as and where applicable):
   The purposes for which the data relating to the Other Individuals may be used are as follows:
   1. engaging, managing, monitoring and assessing the business relationship with the suppliers, contractors, service providers, business partners and their staff who provide services to the Company;
   2. managing, monitoring and assessing the landlord and tenant relationship with the landlords and/or tenants;
   3. organizing and delivering seminars for the Company; and
   4. facilitating the daily operation and administration of the above.

Collection and Use of Personal Data

1. In relation to the collection of the personal data, the Company will provide the Data Subjects with a copy of the DPN and/or (as and where applicable) the Employees with a copy of relevant Notice in connection with the collection of Employee records and/or (as and where applicable) will notify Other Individuals of the purpose of collection, classes of persons to whom the data may be transferred, their rights to access and correct the data, and other relevant information.
2. In relation to the collection of the information and personal data on-line or when the Users communicate with the Company via Electronic Devices, the following provisions shall be applicable to the Company's Website or when the Users communicate with the Company via the Electronic Devices:
   1. This section is limited to the information collected on the Company's Website, the Company's online advertisements and electronic communications. This section does not apply after the Users leave the Company's Website or when the Users visit third-party's websites where the Company's online advertisements are displayed or links to third-party websites not operated or controlled by the Company.
   2. By browsing the Company's Website, electronically responding to the Company's online advertisements, communicating with the Company via any Electronic Devices, the Users' consent to the Company's use of cookies and the Company's use of the Users' Information in the manner as set out in this section. The Users do not proceed further and do not provide the Information unless the Users' consent to the above.
   3. The Users' visit to the Company's Website and Weixin Official Account may be recorded. The Company may also provide the record of users’ visit to Weixin Official Account above to BOC Credit Card (International) Limited for statistical purpose and for analysis on the number of visitors and general usage patterns. Some of the Users' Information including Users' personalized settings information will be gathered through the use of "cookies". Cookies are small bits of information that are automatically stored in the web browser in Users' Electronic Devices that can be retrieved by the Company's Website. The information collected by "cookies" is anonymous visitor's personalized settings information and contain no name or address information or any information that will enable anyone to contact the Users via any means. No Users' personal data will be collected or stored by the Company. For Internet Banking and Mobile Banking services, a "cookie" with a unique identifier assigned by the Company will be stored in the Users' web browsers throughout the session after login. Cookies will be expired upon logging off. Should the Users wish to disable these cookies, the Users may do so by changing the setting of the browser. However, the Users will not then be able to login the Company's Internet Banking and/or Mobile Banking services.
   4. There are sections of the Company's Website and Weixin Official Account where the Company specifically asks for the Users' personal data, for example, when completing online forms to submit an enquiry, applying for a particular product or service or if registering to use the online services, such as Internet Banking and Mobile Banking services. Please refer to and read the applicable terms and conditions for these products and services as well as the DPN informing the types of data collected, purposes of collection, classes of persons to whom the Users' data may be transferred, the rights to access and correct the personal data, and other relevant information. If the Users do not consent to the same, please do not proceed further and do not provide the Users' personal data to the Company and Weixin Official Account.
   5. Personal data collected by the Company through the Company's Website in connection with an application for employment (as and where applicable) will be used to assess the suitability of the applicant to the job application. The Company may collect the applicant's basic personal data including the name, e-mail address, contact phone number, educational background and curriculum vitae. Please refer to and read the relevant Notice in connection with Employee records when making job application through the Company's Website. Failure to supply such data may result in the Company being unable to process the applicant's employment application.
   6. For the purpose of Mobile Application services, unless the context otherwise requires, references in this Statement to "the Company's Website" shall be read as reference to "the Company's Mobile Application".
   7. For Mobile Application services and "the Company's Weixin Official Account" services, the Company may access the Users' location data to search for the nearest ATM or branch or to conduct valuation of a nearby property. For Mobile Application services, the Company may access the User’s installation identification number to deliver the "Location-based Privileges" and related push notification of our respective branches through the Microphone or Bluetooth of the Users' mobile devices, and through the camera of the Users' mobile devices to scan dedicated barcode to redeem electronic coupon. For “Mortgage Expert” Mobile Application, the Company may access mobile device’s calendar for the purpose of synchronizing with the event updated by the Mortgage Expert’s Calendar. However, no location or calendar data would be stored or recorded in the database of the Company. If there is an SD card available to the Users' Electronic Devices, the Company may access the SD card for storing and retrieving encrypted application data so as to enable the operation of the Company’s Mobile Application services, in particular, the "e-Wallet" application. However, no such information would be stored or recorded in the database of the Company. Users who do not allow the Company to use the information in the above manner may at any time change the setting of the Electronic Devices or uninstall the Mobile Application or unfollow the Company’s Weixin Official Account. In such event, Users may only be able to partially use or may not be able to use the Company's Mobile Application or Weixin Official Account services.
   8. For "e-Wallet" application, the Company may collect and store the unique identifier of the Users' mobile phone (i.e. IMEI number), of mobile phone SIM card and/or of "e-Wallet" application to enable the handset matching and service eligibility checking for the purpose of operating the mobile payment services. Users who do not allow the Company to use the information in the above manner may at any time uninstall the "e-Wallet" application. In such event, Users will not be able to use the Company's "e-Wallet" application services.
   9. After the Users follow the Company's Weixin Official Account, the Company will access the Users' Open ID, Profile Photo, Nickname, Gender, Country/Region/City, Follow/binding time and status of the Users' Weixin Official Account from Weixin platform automatically for the purpose of pushing notification message, statistical and analysis purposes. The Company may also provide the information above to service provider(s) for the purposes of verifying User's identity and pushing correspondent reply message (e.g. lucky draw result), if necessary. Users who do not allow the Company to use the information in the above manner may at any time unfollow the Company's Weixin Official Account. In such event, Users may not be able to use the Company's Weixin Official Account services.
   10. Except for Internet Banking, Mobile Banking services, Commodities Internet Trading services, online forms, Mobile Application and Weixin Official Account services where the Company specifically asks for the Users' personal data, the Users can use the Company's Website without providing any of the Users' personal data.

Retention of Personal Data
The personal data and information provided by Data Subjects and/or the Employees and/or the Users and/or Other Individuals will not be kept longer than necessary for the fulfillment of the purposes for which the personal data and information are or are to be used at the time of the collection and for compliance with the legal, regulatory and accounting requirements from time to time.

Disclosure of Personal Data
The personal data and information would not be disclosed to other parties unless such disclosure is made in accordance with DPN and/or (as and where applicable) the relevant Notice in connection with the collection of Employee records and/or the Data Subjects and/or the Employees and/or the Users and/or Other Individuals have been previously consented to and/or the disclosure is permitted or required by any law binding on the Company.

Security of Personal Data
The personal data and information provided to the Company are secured with restricted access by authorized personnel. Encryption technology is employed for sensitive data to protect the privacy of the Data Subjects, the Employees, the Users and Other Individuals during data transmission.

If the Company engages service providers to handle or process personal data (whether within or outside Hong Kong) on the Company's behalf, the Company would adopt contractual or other means to prevent unauthorized or accidental access, processing, erasure, loss or use of the data transferred to the service providers for processing.

Changes to the Privacy Policy Statement
The contents of this Statement may be amended from time to time. Please approach the Company and/or visit the Company's Website regularly for the Company's latest privacy policy.

Data Access Requests and Data Correction Requests
The Company would comply with and process all data access and correction requests in accordance with the provisions of the Ordinance.

The Company may impose a reasonable fee for complying with a data access request in accordance with the Ordinance.

Contact Details
The persons to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be addressed are as follows: -

Bank of China (Hong Kong) Limited
The Data Protection Officer
Bank of China (Hong Kong) Limited
Bank of China Tower
1 Garden Road Hong Kong
Facsimile: +852 2826 6860

Nanyang Commercial Bank, Limited
The Data Protection Officer
Nanyang Commercial Bank, Limited
151 Des Voeux Road Central Hong Kong
Facsimile: +852 2815 3333

Chiyu Banking Corporation Limited
The Data Protection Officer
Chiyu Banking Corporation Limited
78 Des Voeux Road Central Hong Kong
Facsimile: +852 2810 4207

BOC Credit Card (International) Limited
The Data Protection Officer
BOC Credit Card (International) Limited
20/F, BOC Credit Card Centre 68 Connaught Road West Hong Kong
Facsimile: +852 2541 5415

BOC Group Life Assurance Company Limited
The Data Protection Officer
BOC Group Life Assurance Company Limited
13/F, Cityplaza One, 1111 King's Road,
Taikoo Shing, Hong Kong
Facsimile: +852 2522 1219

Po Sang Futures Limited
The Data Protection Officer
Po Sang Futures Limited
1/F, Wing On House 71 Des Voeux Road Central Hong Kong
Facsimile: +852 2854 1955

BOCHK Asset Management Limited
The Data Protection Officer
BOCHK Asset Management Limited
32/F, Bank of China Tower 1 Garden Road, Hong Kong
Facsimile: +852 2532 8216

If there is any inconsistency between the English version and the Chinese version of this Statement, the Chinese version shall prevail in relation to any matters arising in the Mainland China exclusive of Hong Kong Special Administrative Region, the English version shall prevail in relation to any matters arising in Hong Kong Special Administrative Region and elsewhere.

Dec 2015