Online Security Measures of Bank of Communications Macau Branch

In order to protect the customers’ interests, the Bank adopts the following security measures to strengthen the safety of the online banking:

1.Encryption Technology
 　　In order to ensure all the information of the accounts and transactions which is transmitted through the Internet are kept in confidential when you are using our online banking , we adopt the international acknowledged Secure Socket Layer﹝SSL﹞128-bit encryption technology to encrypt the information you have sent in order to prevent the information from being stolen by third parties.
2.Auto Logout
　　Our online banking offers auto logout function. If the system receives no instruction within 15 minutes, it will automatically log out even though the customers haven’t finished their transaction instruction yet, in order to reduce the risk which the accounts will be misappropriated by the others.
3.Private Password
　　(i) Any person must have a valid online banking account number and password to log in our online banking. If the password is inputted incorrectly for six times consecutively, the system will immediately disable the online banking services and temporarily suspend the user from logging in online banking or mobile banking, thus to ensure the security of online transactions which shall be performed by the customers.
　　(ii) The Bank and the consignees/affiliated organizations of the Bank will never ask you to provide personal information through email or by any other means, including but not limited to account number, password, account balance, ID card number, etc. Please don't access your online banking account via any hyperlink embedded in emails or other search engines. In order to ensure the security of your personal information, you should input directly the Bank’s url into the address field of the Internet Explorer. If you have any question, please don’t hesitate to contact the bank via the hotline at 88095559 .

4. Two-factor Authentication Tool
　　In order to enhance the security level of our online banking, a two-factor authentication tool “Security Device”, is adopted to reinforce the safety of performing transactions.
　　 Two-factor authentication means two different kinds of information are used, that is, the information you already knew (such as account number and password), and the tool you have (for example, Security Device), to authenticate the user’s identity.
　　 (i)How to use “Security Device”?
　　 When you apply for the use of online banking service, you should tell the Bank you need to use the two-factor authentication tool. “Security Device” is a two-factor authentication tool prepared by the Bank for you. At your request, you may have to input a Security Code which is generated by the “Security Device” in addition to the login password in order to login the online banking system. In this way, your assets will be better protected. For some high-risk transactions, such as credit transfer, it is required to input the Security Code for confirmation and to ensure the safety of your capital.
　　 (ii) What is a “Security Code”?
　　 “Security Code” is a password comprised of several digits that is valid within a period and can only be used once. This password is provided by the “Security Device” in order to verify the users’ identity on the online banking. When you are performing a transaction online that requires two-factor authentication, the “Security Device” will generate a six-bit password based on some of your transaction information. This is the Security Code.
　　 (iii) Is the “Security Code” valid forever?
　　 Every “Security Code” is only valid within a very short period of time. It will become invalid upon timeout, and can only be used for the current credit transfer transaction. If the transaction information, such as the account number and the amount, are altered in the course of transmission through the Internet, the Security Code will also become invalidin order to ensure the safety of users’ capital.
　　 (iv) How to maintain the “Security Device”?
　　 The customers who apply for the use of two-factor authentication will get a “Security Device” and have to pay for the cost. You will be required to pay for the cost of this toolif you request spontaneously for the replacement of the tool, or because of the damages caused by misuse, or because of the replacement after the expiration date. Please follow the instructions below in order to help you to maintain the “Security Device” for normal operations：
　　 1. Keep the “Security Device” in some safe places which prevents loss or taking away by others.
　　 2. Keep the “Security Device” in some dry and clean places under normal and stable temperature.
　　 3. Don’t expose the “Security Device” to extreme temperatures. If it is placed under unusual high or low temperature (for example, in car boot, dryer, places which are directly exposed under the sun), the plastic case may be damaged and the electronic parts may become malfunctioned and failure may occur to the”Security Device”.
　　 4. Don’t immerse the “Security Device” into the water.
　　 5. Don’t step on the “Security Device”, or throw it down from a high place or put it under great pressure. The “Security Device” is designed to bear normal pressure only. Excessive vibration and pressure may cause damage to it.
　　 6. Don’t open the “Security Device”. It has multiple anti-alteration features. Open it by force may cause malfunction of the device.
　　 (v) If the “Security Device” is invalid or lost, what am I supposed to do?
　　 If it is lost, please report the loss immediately and come to the Bank to apply for a new one as soon as possible (it is required to pay for the cost).
　　 If you are unable to come to the Bank in person for replacing or applying for a new “Security Device”, or if you have any question, please contact the bank's service staff via the hotline 88095559 .
　　 Note:
　　 If you have found your “Security Device” is lost or stolen, but did not inform the Bank immediately, you shall assume any legal responsibility for any loss incurred.
　　 (vi) Safekeeping your “Security Device”
　　 In order to provide safe online banking services, please keep the following instructions in mind:
　　 1. Don’t add any personal information to the “Security Device”, such as login user name or password, and ensure to keep the password and Security Device separately.
　　 2. Don’t leave the “Security Device” anywhere carelessly or lend it to somebody else.
　　 If you feel suspicious that your online banking account might be misappropriated or find any exceptional transaction, please come to the Bank in person or dial our service hotline 88095559 immediately for help.

Your Preventive Security Measures

 To further ensure the security of the online banking , please keep the following issues in mind in the course of usage:
1. How to handle/change password
　　(i) It is advisable that you use a combination of alphabets and digits as your password. Never use a password which is identical to your user name. Never use a password which is easy to guess, such as your phone number, date of birth, ID card number or any other numbers related to you in some way.
　　(ii) Please safekeep your password carefully. Don’t write it down or record it in any other form without covering it in order to prevent the disclosure of the information.
　　(iii) Don't use any password which you have registered for other online services as the password for the online banking services.
　　(iv) Don’t disclose your online banking account and password to any person(including staffs of the bank or the police), and don’t disclose your personal information to any person, such as ID card number, date of birth, etc.
　　(v) Please change your password regularly. If you suspect that someone may have known your password, you should change it immediately. If you cannot change your password through the internet, you may call the bank to do it. If you suspect your password is misappropriated, please contact the Bank immediately.
2. Instructions for use of online banking
　　(i) If you want to log out “Online Banking Services”, please don’t close the explorer directly. Instead, please click the Logout button in the upper right corner to exit, in order to ensure the online banking services are well protected.
　　(ii) Don’t provide your personal information to any person whose identity is not verified or to any suspicious website.
　　(iii) Don’t log in your online banking account via some hyperlink in an email.
　　(iv) Check the transactions and balance on your accounts regularly in order to ensure the information of the account is free from error.
　　(v) Don’t download or install applications from unknown websites.
3. Place of Accessing Internet
　　(i) Since the tricksters may install hacker applications on public computers to steel customers’ personal information, please never use online banking services on public computers in public places (net bar, shopping mall, etc.).
　　 　　(ii) When you input the account number, private password or other important information, please be aware of your surrounding and make sure that no one is peeking at you.
4. Protection of Computers
　　(i) Install “firewall software” on your personal PC. The “firewall software” can prevent unauthorized persons from intruding upon your PC to steal or download information through the network.
　 　　(ii) The Bank suggests you to install antivirus software on your PC and update virus definition file and scan for viruses regularly.
　　(iii) Please avoid downloading and installing unknown programs, and don’t open suspicious files or emails, in order to prevent hacker programs or viruses from stealing your personal information.