Privacy & Security

The United Overseas Bank Group (UOB Group) is committed to maintaining best Privacy Practices to create, as far as possible, a secure Internet banking environment for our customers. We encourage our customers to similarly observe best practices that are within their control.

Our best practices include:

1. Collection Of Customer Information
   We will not make unsolicited requests for customer information through email or the telephone, unless customers initiate contact with us. We will use any information collected as minimally as possible, mainly to assist us in customising and delivering services and products that are of interest to our customers. Under no circumstances will we ask customers to reveal their Personal Identification Numbers (PINs) or Passwords.
2. Handling Of Customer Information
   We have established strict confidentiality standards for safeguarding information on our customers.
3. Disclosure Of Customer Information
   Unless we have the customer's agreement or are required by law, we will not disclose customer information to external parties.
4. Compliance By External Parties
   External parties who, in the course of providing support services to us, may come into contact with customer information, are required to observe our privacy standards.

We understand customer concerns for security when they transact over the Internet. We have therefore built a security system for online banking that safeguards the confidentiality of our customers' account information and their banking transactions.

We employ several different methods to protect customers' account and personal information:

1. Firewalls
   We have multiple levels of firewalls in place between our internal computer systems and the Internet.
2. Encryption
   Strong encryption protects customer information as it travels over the Internet. We use the 128-bit Secure Sockets Layer (SSL) encryption to protect the confidentiality of customers' account details and transaction data. This 128-bit SSL encryption is the commercially available security protocol for encrypting or scrambling data transmitted over the Internet. It is also currently recognised internationally to be of the highest standard in encryption technology commercially available and is generally adopted by banks in Hong Kong and financial institutions worldwide.
3. Username and Password
   Only your valid Username and Password which identify you uniquely, will allow you to log in to our secure website(s). This ensures that messages from authorised users only are admitted into our secure site(s).
4. Technology Devices
   UOB may, from time to time, issue Devices and/or establish security procedures that you may need to execute in order to use certain UOB Internet Banking services related to the Devices.
   You may use the Devices (whether or not in conjunction with the Username and/or Password or otherwise):
   • To initiate, effect, perform and/or dispatch any instruction or any communication to UOB; To obtain or utilise any service that may be offered or made available by UOB through the Website or UOB Internet Banking service;
   • To access and obtain information as may be permitted by UOB (whether relating to your Account(s), service or otherwise); and
   • To effect any transaction with UOB which may be made available by UOB, subject to the terms of this Agreement and to other restrictions, limitations, terms and conditions of UOB then applicable
5. Automatic Log Out
   As an additional security measure, our system may log you out of your Internet banking session after a period of inactivity. We are committed to monitoring our Internet security system constantly for potential situations that could compromise the security or the privacy of our customers and to exploring new technology continually to enhance our Internet security system.

Your Role In Safeguarding Your Personal Data And Account Information

You are responsible for keeping your online Password confidential. Failure to do so exposes you to the risks of fraud and loss. The UOB Group will not be responsible for losses suffered by customers as a result of:

• Input errors or misuse of its Internet banking services;
• Negligent handling or sharing of Password;
• Leaving a computer unattended during an online session;
• Failure to immediately report known incidents of unauthorised account access.

We strongly recommend that you observe the following best privacy and security practices at all times:

1. Managing Your Username And Password
   • Your Username and Password identify you when you use our Internet banking services. If any of these become invalid or ceases to have effect, it is imperative that you inform us by calling the direct hotlines for the respective services.
   • Ensure that no one can see your Password when you log in to our system.
   • Ensure that you keep your Password confidential at all times and do not divulge it to anyone.
   • Do not allow anyone (without exception) to use your Username and Password, as you are responsible for all transactions undertaken with your Username and Password.
   • Do not base your Password on your Username or personal information such as your telephone number, birth date or the like.
   • Memorise your Password and do not record it anywhere.
   • Change your Password regularly.
   • Do not use the same character more than twice for your Password.
   • Do not recycle your recently used Password.
   • Change your Password IMMEDIATELY if you suspect that someone knows it.
   • The same Password should not be used for different websites, applications or services particularly when they relate to different entities.
   • Do not select the option on your browser for storing or retaining user name and password.

   Note: No staff members of the UOB Group should ever ask you for your Password for whatsoever reasons.

2. Use of Technology Devices
   • Do not allow anyone (without exception) to keep, use or tamper with your Technology Devices, as you are responsible for all transactions undertaken
   • Do not reveal the One-Time Password (OTP) generated by your Technology Devices to anyone
   • Do not divulge the serial number of your Token-OTP Device
   • Notify the Bank if your Technology Device is lost or fails to function as intended
   • Ensure that the Device is kept safely
3. Take Precautions Against Your Password Keystrokes Being Captured

   Exercise the necessary precautions to protect your personal computer against viruses and other malicious programs. Aside from damaging and/or destroying data, viruses and malicious programs can capture your Password keystrokes and other personal information and send them to another person without your consent.

   Precautions that you can take include the following:

   • Ensure that you install an effective personal firewall as well as anti-virus, anti-spyware and anti-Trojan horse software. These should be updated regularly.
   • Do not download any software from a website that is of doubtful origin.
   • Do not open any email or attachment that is from a source unknown to you. When in doubt, delete such email without opening it.
4. Log In Directly

   If you wish to access a website belonging to UOB or its subsidiaries or associates, always personally and directly enter the relevant website address in the browser address bar. Do not login via any hyperlink within emails.

   A list of the relevant website addresses is set out below for your reference. If you encounter suspicious email or fraudulent websites passing off as websites of UOB or its subsidiaries or associates, please notify us immediately at +852 2910 8888 or email us.

5. Remember To Log Out

   Always remember to logout of your Internet banking session when you have completed your Internet banking transactions or when you need to walk away from your computer even for just a minute. Do not leave your computer unattended while Internet banking transactions are being processed.

When you use our website, we may automatically collect data from you using cookies or similar technological tools. A cookie is a small file which our web servers can store on your device. This allows our website to automatically recognise and remember you. You may find our cookie policy here.

Default files on a computer, sometimes called 'cache' files, can retain images of data sent or received over the Internet, making them a potential target for a system intruder. Therefore, we strongly advise that you clear your browser's disk cache after each Internet banking session.

For Firefox

• Launch Firefox.
• Click the menu button and choose Options.
• Select the Advanced panel.
• Click on the Network tab.
• In the Cached Web Content section, click Clear Now.
• Close the about:preferences page. Any changes you've made will automatically be saved.

For Chrome

• Open Chrome.
• On your browser toolbar, click the Chrome menu.
• Click More tools > Clear browsing data.
• In the box that appears, click the checkboxes for "Cookies and other site and plug-in data" and "Cached images and files."
• Use the menu at the top to select the amount of data that you want to delete. Choose beginning of time to delete everything.
• Click Clear browsing data.

Internet Explorer

• Select 'Tools' from the Menu bar.
• Select 'Internet Options'.
• Select the 'General' tab.
• Click the 'Delete' button and select only Temporary Internet Files and website files in 'Delete Browsing History' Dialog Box and Click 'Delete' button.
• Click 'OK' to exit the 'Internet Options' dialog box.

Avoid Sharing Personal Computers (PCs)

Avoid using shared PCs or public PCs such as those found in cyber cafes to perform Internet banking transactions. If there is a need to do so, always satisfy yourself thoroughly that the PCs are free from viruses and be sure to clear the browser's cache upon completion of your transactions.

Update Your Browsers

You should update your browsers and application software to support 128-bit SSL encryption or a higher encryption standard.

Verify The Authenticity Of The UOB Group Internet Banking/Transaction Website(s)

We provide a Secure Zone icon (as symbolised by a 'padlock' icon) within our Internet banking/transaction web pages for your verification of its authenticity.

To verify the authenticity of the UOB Group Internet banking/transaction website(s), look for the Secure Zone icon on the web page, click it, and ensure that 'United Overseas Bank Ltd' is displayed as a part of UOB's VeriSign Secure Server ID from https://digitalid.verisign.com.

There are two ways by which you can verify that you are logging in to a secure web page:

1. Check that the UOB Group Internet banking/transaction website address changes from http:// to https:// and that a security icon (as symbolised by a lock or key) appears at the bottom status bar of the browser. These indicate that the web page that you are online with uses encryption technology. You can double click the security icon to view information pertaining to the security certificate for the web page.
2. Depending on the browser that you are using, you can also verify that you are in a secure web page by doing the following:

On Internet Explorer
Point the mouse on the web page and right click the mouse. Scroll to 'Properties' and click the mouse. Ensure that the following information appears in the 'Properties' dialogue box shown on the screen:
Protocol : Hyper Text Transfer Protocol with Privacy
Connection : SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 Bit Exchange
Address (URL) : The URL should start with 'https://'

You can click the 'Certificates' button in the dialogue box to view information pertaining to the security certificate for the web page.

On Netscape
Point the mouse on the web page and right click the mouse. Scroll to 'View Frame Info' and click the mouse. Ensure that the following information appears on the display screen:
Location : The location should start with 'https://'
Security : This is a secure document that uses a high-grade encryption key for U.S. domestic use only (RC4, 128 bit)
Certificate : This Certificate belongs to... United Overseas Bank Ltd...

Inform Us Immediately Of Suspected Invasion Of Your Privacy Or Of Unauthorised Transactions

If you suspect that your privacy has been invaded or that your account(s) has/have been accessed by unauthorised persons, please change your Password immediately and contact us by calling the direct hotlines for the respective services. Check your account statements to see if any transaction has been performed without your authorisation. Should there be any unauthorised or unusual transactions, please notify us immediately.

You should check your account statements regularly and notify us promptly of any errors. At the minimum, you should check your account statements at least once at the beginning of each month.

Bank accounts
If you object to any entry or omission in your bank account statement in respect of any calendar month, you must inform the Bank in writing within 14 days of the date from which the full statement for that calendar month is made available on UOB Personal Internet Banking. Failure to do so shall imply your acceptance of the account statement and the correctness of the account statement.

Email Security

As information submitted via email is not encrypted during transmission, it is important that you do not give your account or credit card number nor convey any confidential information or banking or other instructions in your enquiries and/or comments.

If you encounter any suspicious email, passing off as an email from UOB Group, please notify us immediately.

Additional Recommended Good Practices To Safeguard Your Online Security

• Remove file and printer sharing in your computer, especially when you have Internet access via cable modem, broadband connection or a similar set-up.
• Make regular backup of critical data.
• Consider the use of encryption technology to protect highly sensitive data.
• Do not install junk software or run programs of unknown origin.
• Delete junk or chain emails.
• Do not open email attachments from strangers.
• Do not disclose personal, financial or credit card information to little-known or suspect websites.
• Do not use a computer or device which cannot be trusted.

At the UOB Group, we are committed to providing you with responsive customer service. When we receive any customer complaint, our priority is to attend to it as expeditiously as possible.

Should the UOB Group Internet banking/transaction website(s) be unavailable, customers can choose to do their banking/transactions via the following alternative channels: