Standard Chartered Bank (China) Limited Online Banking Privacy Policy

This Privacy Policy Effective Date: 2025/03/18.

This Policy was released on 2025/03/17.

Standard Chartered Bank (China) Limited (“we”, “us” or “SCB China”) is fully aware of the importance of personal information to you and strives at all times to respect and protect your privacy. We therefore formulate this Standard Chartered Bank (China) Limited Online Banking Privacy Policy (this “Policy”) to better explain how we collect, store, protect, use and disclose personal information and to help you understand the rights you have.

This Policy applies only to the “Standard Chartered Bank China – Online Banking” services （including Mobile Web services） operated by us via https://www.sc.com/cn/en (“Online Banking”, which excludes SC Mobile Banking, the mobile banking services provided through SCB China’s “Mobile Banking App”). We will collect, store, use and disclose your personal information (including sensitive personal information) in accordance with this Policy when you use Online Banking to, among others, manage your bank accounts, manage your credit card accounts and repayments, make payments and fund transfers, trade in foreign exchange, make time deposits, purchase structured deposits (save for services subject to a separate privacy policy or governed by any user agreement that provides otherwise). This Policy is closely related to your use of our Online Banking. We advise you to carefully read and understand this Policy in full. The provisions in this Policy which have a material bearing on your rights and interests and the sensitive personal information are IN BOLD for your special attention. Please do not use our Online Banking if you do not understand or accept this Policy in full.

In addition to this Policy, we will separately provide you with a <Consent Letter for Sensitive Personal Information>, a <Consent Letter for – Disclosure of Personal Information to Third Parties> and a <Consent Letter for Personal Information Cross-border Transfer>to make further disclosure as to how we process your sensitive personal information and how we disclose personal information to third parties. The <Consent Letter for Sensitive Personal Information> , the <Consent Letter for – Disclosure of Personal Information to Third Parties> and the <Consent Letter for Personal Information Cross-border Transfer>are in addition to this Policy and, together with this Policy, form a complete set of rules for us to process your personal information.

Should you have any question, comment or suggestion, please contact us at:

Our official website: https://www.sc.com/cn/en/contact-us/

Our customer service hotline: 956083

This Policy will help you to understand:

I. How we collect and use your personal information

II. Cookies and similar technologies

III. How we have third parties to process, and how we share, transfer and publicly disclose, your personal information

IV. Exceptions to obtaining consent

V. How we store your personal information

VI. How we protect your personal information

VII. How you could manage your personal information

VIII. How we protect the personal information of minors

IX. How we update this Policy

X. How to contact us

XI. Other provisions

I. How we collect and use your personal information

Personal information refers to any kind of information whether recorded in an electronic or other form that is associated with an identified or identifiable natural person, excluding information that has been anonymized.

(A) How we collect your personal information

When you use Online Banking, we will collect the information that you voluntarily provide in the process of using our services or that derives from your use of our services on a lawful, just and need-to basis if by doing so it allows us to provide you with the products and services in accordance with applicable laws and regulations, to improve the quality of our services, to maintain the safety of your accounts and funds, and to fulfill our legal obligations. We will collect your information under the following circumstances:

If you are a debit card user with SCB China, when you register an Online Banking account, we will first verify your registered mobile phone number with us that is used to receive one time SMS password, the card number and the transaction password of your debit card (also required to retrieve your Online Banking username and password), and the initial Online Banking username and password. After that, you need to set up a new Online Banking username and password of your own to complete the registration; we collect such personal information to verify your identity, complete the user registration process and meet our anti-money laundering obligations under laws, regulations and regulatory requirements.

If you open a Type II/III account with SCB China and register for Online Banking, according to the requirements in relation to real-name authentication under Chinese laws and regulations, we must collect your name, ID number, gender, ethnicity, date of birth, address, validity period of your ID, photo of front and back sides of your ID, and your facial image, and will send your name, ID number and facial image to a legitimate third party to verify your identity. Your registration application will be automatically approved once the verification is completed.

In the process of your use of our Online Banking, we will collect the following information of yours on a lawful, just, and need-to basis to the extent necessary for us to provide you with the relevant Online Banking services. Please note that if you do not provide the information below, you would not be able to access and use the relevant Online Banking services.

(1) You are required to provide your Online Banking username and password and the one-time SMS password received with your registered mobile phone number to log in to Online Banking，and we will collect your Unique Device ID, IP address.

(2) When you activate your debit card through our Online Banking, we will collect the card number and expiration date of your debit card.

(3) When you need to use the basic Online Banking functions, you are required to provide certain personal information, which mainly includes:

Setting up and using the mobile phone funds transfer service: your mobile phone number, the number of the account linked to the mobile phone funds transfer service, customer name, transaction details (including the amount transferred) and the payee’s mobile phone number and the name of the receiving bank;
Making global account inquiry: details of your account(s) in any other country as provided by a Standard Chartered Bank in the relevant country;
Making internal funds transfers between your own accounts within the bank: the receiving account number, the transaction amount, the transaction currency, the time of transfer, and the agreed frequency of transfer;
Making intra-bank or inter-bank funds transfers, or international funds transfers (including international transfers, transfers via Global Link or Cross-boundary Wealth Management Connect): your account details and the account details of the payee (including the payee’s name, account number, branch or sub-branch of the bank, SWIFTCODE, the payee’s address and any other information that may be necessary pursuant to local laws and regulatory requirements of the relevant jurisdiction). Meanwhile, we will record the details of the funds transfer transaction (including the payer’s name, the payee’s name, the payer’s account number, the name of the paying bank, the banking office of the paying bank, the payee’s account number, the name of the receiving bank, the banking office of the receiving bank, the method of transfer, the amount transferred and the currency used, the time of transfer, the agreed frequency of transfer, the transaction notes, and the status, date and time of the transaction) for your inquiry. In order to confirm a fund transfer transaction, we will collect your debit card password to complete the verification. When you add a Global Link account, we need to record the country/jurisdiction in which you hold the account, your ID number in certain jurisdiction (Taiwan), and your Online Banking username and password for that particular country/jurisdiction’s account. If you choose to delete a Global Link account, you must provide the country/market in which you hold the account, and the type and number of the account;
Opening an account (Type II/III): your IP address, equipment information, name, mobile phone number, home location of your mobile number, number and photocopy of your ID card, number and photocopy of the debit card, your Online Banking username and password, location, Ethnicity information, FATCA U.S. Person information, CRS tax residency information (Country/Jurisdiction of Tax Residence and Taxpayer Identification Number), address, profile picture information, marital status, occupation, email address and any other information that may be necessary for the verification of your identity as required under local laws and regulatory requirements of the relevant jurisdiction;
Managing the bank cards bound to a Type II/III account: your name, the Type II/III account number and type, the issuer of the bound bank card, the number of the debit card bound to Type I account to which the Type II/III account will also be bound, your ID number and mobile phone number;
Opening a Renminbi savings account (Type II/III): the type of the account, your name, date of birth, country/jurisdiction of birth, city/town of birth, nationality (jurisdiction)/citizenship, ethnicity information, current residential address, mailing address, FATCA U.S. Person information and CRS tax residency information, and the debit card number;
Opening a foreign currency savings account: your identity information (including name, date of birth, country/jurisdiction of birth, city or town of birth, nationality (jurisdiction) and residential address), transaction details (including account currency and transaction account number), FATCA U.S. Person information and CRS tax residency information (Country/Jurisdiction of Tax Residence and Taxpayer Identification Number);
Using the function of managing third party payments: the number of your SCB debit card;
Activating the virtual debit card service: the number of the Type II/III account opened with us, and the number of the virtual debit card;
Applying for a credit card: your name, mobile phone number, the city in which you are located, email address, gender, and monthly income (before tax); making credit card repayments through Online Banking: your SCB payer’s account number, credit card number, type of repayment, amount of repayment, transaction notes, date of repayment;
Having or updating a client investment profile: your employment status, age, level of education, financial status, investment objectives, knowledge of the investment products and investment experience, and results of your risk appetite assessment based on such information;
Purchasing structured deposit and featured deposit products or creating Fixed Deposits, Certificates of Deposit, and other financial products: your identity information (including type of ID, ID number, name, gender, mobile phone number, residential address, annual household income, source of income, occupation, account number, transaction details (including transaction amount, transaction account number, interest, frequency of interest payment, maturity instruction), FATCA U.S. Person information and CRS tax residency information (Country/Jurisdiction of Tax Residence and Taxpayer Identification Number). When you withdraw money from Fixed Deposits or Call Deposit 2.0, we will collect the number of the account from which you withdraw money, currency, principal, term of deposit, account opening date, maturity date, account to which the money is transferred, name, customer reference number, contact number, the branch with which the account is opened, account type, and the date of the withdrawal application;
Using Online Banking for foreign exchange settlement and trading, foreign exchange trading and foreign currency conversion: your identity information (including type of ID, ID number, name, age, nationality (jurisdiction), mobile phone number, residential address, occupation, account information) and your transaction details (including the basic information of foreign exchange trading/settlement such as transaction account, transaction amount, transaction currency, time and purpose of use of the foreign currency);
Setting transaction limits through Online Banking: the type of the transaction limit, the maximum limit, the current limit and the new limit;
Setting nicknames for your current savings account, fixed deposit account and structured deposit account through Online Banking: the account name and the account nickname;
Updating your contact details/correspondence address through Online Banking: email address, mobile phone number, name, ID number, home phone number, or your correspondence address, country/jurisdiction, postal code, and nearest landmark;
Subscribing to/setting monthly eStatements through Online Banking: the email address you use to receive the eStatements, the eStatement password;
Subscribing to SMS banking: account type, account number, nickname of the current savings account, SMS alert service status, language of SMS banking;
Other information you are required to provide in using the above mentioned functions by applicable laws, regulations and regulatory requirements as amended from time to time.

(4) In order to ensure the safe and normal operation of our Online Banking, prevent exposure to transactional and fund risks, and protect the safety of your account, we need to record your login time, browser type, login channel, Online Banking username, customer relationship number, login IP address, and other basic information of the devise you use. In addition, in order to verify the accuracy and completeness of the information you provide, we will check with the State organs, financial institutions, enterprises or public institutions that lawfully hold your information. If, for the purpose of such verification and check, we need to collect your information from any of the foregoing entities, we will request the relevant entity to specify its source of personal information and confirm the lawfulness of such source in accordance with applicable laws, regulations or regulatory requirements.

(5) In the event that you provide any feedback, make a voice/video call to, or communicate by text with, our customer service, or lodge a complaint, or take part in our marketing activities or surveys through Online Banking, we need to collect the information you submit in such process and the information relating to your operation (including voice/video call records, chat history) so as to contact you or provide follow-up responses and services.

(6) In order to enhance your experience with our services, we have made available a SMS banking function to provide you with secure and easy access to our SMS alerts. Depending on your preference, you can have SMS alerts sent to your designated mobile phone number while using our Online Banking, Mobile Banking, or other services offered by SCB China. For more details on SMS Banking, please go to https://www.sc.com/cn/en/bank-with-us/mobile-sms-banking/.

Please understand that the services we provide to you are updating and developing constantly. If you choose to use any service not specified hereinabove, and we need to collect your information in light of your use of such service, we will send you separate notices of the scope and purpose of, and obtain your consent to (if required by applicable laws and regulations), such collection by means of pop-up message, webpage prompt, agreement or an update of this Policy. We will use, store, disclose and protect your information in accordance with this Policy and the corresponding user agreement. Should you choose not to provide any of the information specified hereinabove, you may be refused certain services or parts of services, but your use of the other services provided by us would not be affected.

(B) How we use your personal information

We will use your information to abide by applicable laws, regulations and regulatory requirements, to provide services for you and improve the quality of the services provided for you, and to guarantee the security of your accounts and funds. In particular:

We will use your personal information in accordance with the provisions of this Policy, in particular, the purposes and functions as described in the “How we collect your personal information” section above and to achieve our other related service purposes and functions;
To ensure the stability and security of our services, your information may be used for verifying identity, safeguarding, anti- fraud monitoring (including monitoring for the purpose of preventing telecom fraud), preventing or prohibiting illegal activities, minimizing risks or for archival and backup purposes;
To invite you to take part in customer surveys on our services, products or functions;
To comply with our obligations relating to customer due diligence, anti-money laundering, and real-name system regulation, and obligations to report or file information to the relevant authorities, as well as other obligations imposed on us by laws and regulations, in accordance with applicable laws, regulations or regulatory requirements;
In order to provide you with more accurate, personalized, smooth and easy-to-access services, or to seek for your help with evaluating, improving or designing our products, services and operational activities, we may use technical means to de-identify or desensitize your information and aggregate them for analysis and processing. Such de-identified information can no longer be used to identify the personal information subjects and therefore is not personal information, which may be used by us directly as permitted by law. We also have the right to employ the results of analysis of our user database in commercial use as such results cannot be used to identify the personal information subjects either. When we aggregate data on the use of the Online Banking services or functions, as such data do not contain any of your identifiable information, we may share these data with the public or third parties to demonstrate the overall usage of the services or functions.
We will inform you and seek your prior consent (if required under applicable laws and regulations) if we need to use any information for any purpose other than the one for which it is collected.

II. Cookies and similar technologies

To ensure normal and safe operation of our Online Banking, when you use the Online Banking services, we may use Cookies to store the information required for security authentication or to help assess the security status of your account. Cookies store anonymous statistics only and do not touch on name, address, telephone, email address and other personal contact information. You may choose to erase all Cookies stored on your browser at any time by using the browser’s “Clear Browsing Data” function.

Further information on how we use cookies can be found in our Cookie Policy (https://www.sc.com/cn/en/cookie-policy/). You can also set your Cookie preferences in “Cookie Management” at the bottom of this page.

III. How we have third parties to process, and how we share, transfer, and publicly disclose, your personal information

(A) Entrusted processing

Your personal information may be processed by our affiliates and third-party service providers who provide products and/or services to us and our business partners on our behalf. For example:

It may be disclosed to professional advisors (including auditors) or insurers for risk diversification and assessment purposes;
It may be disclosed to third-party service providers, agents or independent contracted employees who provide services in support of our business;
It may be disclosed to our other suppliers, service providers and other partners.

We will sign strict non-disclosure agreements with third parties appointed by us to process personal information and require them to deal with personal information in compliance with our instructions, this Policy and any other relevant confidentiality and security measures mandated by laws and regulations.

(B) Sharing

We will only share your personal information with a company, organization or individual other than SCB China in the following circumstances:

Sharing with a separate consent: we will share your personal information with others upon obtaining your separate consent;
We will provide your personal information to payees, beneficiaries, intermediaries, correspondent and agent banks (e.g. the correspondent and agent banks in the SWIFT system), clearing houses, clearing or settlement systems, etc. to the extent required for entering into or performing our contracts with you, such as when we provide international funds transfers and related services to you;
We may disclose your personal information as required under applicable laws and regulations or in accordance with the mandatory requirements of relevant government authorities, courts, regulators, tax authorities, or any other authorities (including any authority that investigates criminal activities);
Disclosure to your legal guardian or heir upon your death or loss of legal capacity so that he/she may make payments from your account;
Sharing with our affiliates: your personal information may be shared with SCB China’s branches and sub-branches to the extent necessary and solely for the purposes stated in this Policy. We will seek your consent if there is any change in the purpose of use of your personal information by any of our affiliates.
Sharing with the functional departments of our group: we will disclose the FATCA U.S. Person information and the CRS tax residency information (Country/Jurisdiction of Tax Residence and Taxpayer Identification Number) to the relevant functional departments of the Standard Chartered Group.
Sharing with our authorized partners: for the sole purpose of serving the purposes stated in this Policy, some of our services will be provided by our authorized partners in the course of performance of our agreement with you, or your personal information has to be provided to our partners in order to fulfill the purpose of your transaction. For such purpose and to such extent, we will only share your personal information for lawful, just, necessary, particular and specific purposes, and we will only share the personal information that is necessary for the provision of services. Our partners have no right to use the personal information we share with them for any other purposes.

We will sign strict non-disclosure agreements with the companies, organizations and individuals that we share personal information with and require them to deal with personal information in compliance with our instructions, this Policy and any other relevant confidentiality and security measures.

We will not transfer your personal information to any companies, organizations or individuals, except:

We may transfer your personal information to others after obtaining your separate consent;
In the case of mergers, acquisitions, bankruptcy, liquidation, transfer of assets or other similar transactions where transfer of personal information is required, we will request the succeeding company or organization holding your personal information to be bound by this Policy; otherwise, we will require such company or organization to seek separate consent from you.

(D) Public Disclosure

We will only disclose your personal information to the public in the following circumstances:

After obtaining your separate consent;
To the extent required by laws, regulations, judicial or legal proceedings, or mandatory administrative enforcement by government authorities, we may disclose your personal information to the public to the extent and in the manner required. In such cases, we will request reasonable documentation from the requesting authority to ensure that the request has a lawful basis and that the requesting authority has the lawful power and a legitimate purpose to obtain your personal information;

IV. Exceptions to obtaining consent

According to the relevant laws and regulations, regulatory requirements and national standards, we may collect, use or disclose your personal information without otherwise obtaining your authorization and consent under the following circumstances:

to the extent necessary to enter into or perform a contract with you;
to the extent necessary to fulfill statutory duties and responsibilities or statutory obligations;
to the extent necessary to respond to public health emergencies, or to protect the life, health and security of property of natural persons under emergency conditions;
where personal information is processed to the extent reasonable in order to report news, supervise public opinion and perform such other acts in the interest of the public;
where the personal information in question is collected from information that you have disclosed to the public by yourself or other information that has been lawfully disclosed to the public, and is processed to the extent reasonable; and
other circumstances provided for under laws and administrative regulations.

V. How we store your personal information

(A) Location of storage

We will store your personal information collected within the territory of the People’s Republic of China in accordance with the requirements of applicable Chinese laws and regulations.

We may transfer certain personal information (such as paying account numbers, information regarding the receipt of funds, etc.) outside of China for the purposes outlined in this Policy, including to enable our affiliates and/or business partners outside of China to assist us in providing products and/or services to you or in processing your personal information; in such cases, we will take appropriate, necessary and effective measures (such as having the transfer encrypted) to keep your information safe. The data protection laws applicable in these countries may differ from those in China, but we have taken the appropriate measures to ensure that your personal information is protected in accordance with the requirements of this Policy.

(B) Retention Period

We will take all reasonably practicable steps to ensure that no irrelevant personal information is collected.

Unless otherwise required by laws or regulations, we will retain your personal information for the following periods:

We will retain your personal information to meet our legitimate business needs (e.g. to provide services to you or to meet relevant legal, tax, and financial requirements).
When we do not have a legitimate business need to use your personal information, or the retention period specified under Chinese laws and regulations has expired, we will either delete or anonymize your personal information or, if neither option is feasible (e.g. if your personal information is already stored in a backup), we will store it securely and keep it separate from other data to be processed.

VI. How we protect your personal information

(A) We have used safety measures up to industry standards to protect the personal information you provide and to prevent the data from unauthorized access, disclosure, use, modification, damage or loss. We will take all reasonably practical measures to protect your personal information. For example, we will perform safety scans on our Online Banking and safety penetration tests on a regular basis, and we have put in place a series of identity and access management, encryption, safety risk management and other rules and systems to ensure that your information is processed safely. In addition, your browser is protected by SSL/HTTPS standard protocol encryption when exchanging data with our Online Banking. We will deploy an access control mechanism based on minimum access and behavior traceability requirements to make sure that only authorized persons have access to your personal information. We will organize security and privacy protection training courses to enhance our employees’ awareness of the importance of protecting personal information.

(B) We will take all reasonably practical measures to ensure that no irrelevant personal information is collected. We will only store and retain your personal information for a period as minimum as necessary to fulfill the purposes stated in this Policy unless we need to extend the retention period or where laws and regulations permit.

(C) The Internet is not an absolutely safe place. E-mails, instant messages, and your communications with other Online Banking users are not encrypted; therefore, we strongly recommend that you do not send any personal information through these ways. Please use complex passwords to help us keep your account safe.

(D) We will regularly/irregularly assess safety risks and personal information safety implications.

(E) The Internet is not absolutely safe, and we will take every effort to guarantee the security of the information you send us. We will take responsibility in accordance with the law if your information suffers from unauthorised access, public disclosure, erasure or damage as a result of any damage to our physical, technical or management protection facilities and your lawful rights and interests are so impaired.

(F) If unfortunately a personal information security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of the type of personal information that has or may have been leaked, tampered with or lost, the cause of the incident and the possible harm that this could bring; the remedial measures that we have taken; the measures that you can take to mitigate the harm, and our contact details. We will promptly inform you about the incident by email, SMS, letter, call or other means. Where it is difficult to inform each personal information subject, we will give a public notice in a reasonable and effective way.

Meanwhile, we will report the handling of such personal information security incident on our initiative in accordance with the requirements of regulatory authorities.

VII. How you could manage your personal information

In accordance with the relevant laws, regulations and standards of the People’s Republic of China as well as the common practices in other countries and regions, we guarantee that you may exercise the following rights in relation to your personal information:

(A) Access and correct your personal information

You may view or update your personal information by logging in to our Online Banking or through telephone banking services or at any of our counters, unless otherwise provided by laws, regulations or regulatory policies.

You have the right and obligation to update your personal information in a timely manner to ensure that such information is accurate. To protect the safety of your account, you may need to access and correct certain personal information through Online Banking and/or at our counters.

When you change any of your information through Online Banking, we will send a one-time SMS password to the mobile number you register with SCB China for the safety of your account.

(B) Obtain a copy of your personal information

If you wish to obtain a copy of your personal information, please contact us through the contact details provided at the bottom of this Policy.

You may log in as an Online Banking user on http://www.sc.com/cn/en, click “To a Local Account” or “To Overseas” on the “Transfer Money” page and select the information that you wish to delete.

If you find that our collection or use of your personal information is in violation of laws and regulations or the agreement between you and us, you may request us to delete your personal information in accordance with the law. We will delete your personal information to the extent permitted by laws or regulations (e.g. upon expiration of the legal retention period).

When you delete information from our Online Banking, we may not immediately delete the information from our backup system, but we will delete such information at the time of next update of our backup.

(D) Withdraw your authorization and change the scope of your authorization and consent

You may withdraw your authorization by deleting certain information. However, your decision to withdraw your consent will not affect any collection of personal information based on your consent prior to such withdrawal.

(E) Transfer your personal information

You have the right to request that we transfer the personal information you provide to us to a third party of your choice. However, this right may only be exercised in certain circumstances as specified under Chinese laws. For further information on your rights in this regard, please reach out to us through the contact details at the bottom of this Policy.

(F) Opt out of receiving marketing information

We may, in the future, send you marketing information at a moderate frequency through this Online Banking service or other channels in order to advise you about products or services that might be of interest to you. You may opt out of receiving such marketing information by selecting “skip”, “reject”, or replying to unsubscribe, etc. For further information on your rights in this regard, please reach out to us through the contact details at the bottom of this Policy.

(G) Cancel your account

If you wish to cancel your Online Banking account, you may do so at a branch or sub-branch of SCB China or by calling our customer service hotline (956083). Please follow the instructions to complete the verification of your identity at the branch or sub-branch or in the service call and, after the verification is completed, you may submit an application for cancelling your SCB online banking account. We will verify and process your application within 15 working days after receiving it.

After you meet all the conditions for cancellation according to law and your online banking account is cancelled, you will no longer have access to the SCB online banking account and the SCB mobile banking application. Unless otherwise provided in laws, regulations, regulatory requirements or special agreements or for the purpose of settling certain specific debtor-creditor relationships, the information relating to your Online Banking account will also be deleted. We will no longer collect or use the personal information relating to such account through Online Banking. In addition, we still need to retain the information provided by you or generated during the term of your use of our Online Banking for a period of time as required by regulatory authorities and to cooperate with inquiries or other requirements of relevant authorities in accordance with law during such retention period.

(H) Response to your requests above

For your security, you may need to submit a written request or identify yourself through other ways. We may ask you to verify your identity before processing your request. Unless otherwise specifically provided in laws and regulations, we will, in principle, review and process your requests for correcting your personal information, deleting or cancelling your Online Banking account submitted in accordance with the procedures described in this Policy within 15 working days:

According to the requirements of applicable laws and regulations, we will not be able to respond to your request under the following circumstances:

Where it relates to the performance of our obligations under laws and regulations;
Where it directly relates to national security and national defence security;
Where it directly relates to public security, public health or major public interest;
Where it directly relates to criminal investigations, prosecutions, trials or execution of rulings, etc.;
Where we have sufficient evidence showing that you are intentionally malicious or abuse your rights;
Where it is for the purpose of protecting your own or another individual’s life, property, or other material legal rights and interests, but where it is difficult to obtain your consent;
Where responding to your request will cause serious damage to the legitimate rights and interests of yours or of other individuals or organizations.
Where the request involves any trade secret.

VIII. How we protect the personal information of minors

We expect parents or guardians to guide the minors in their use of our services. We will protect the confidentiality and security of the minors’ information in accordance with applicable laws and regulations of the People’s Republic of China. For minors under the age of 14 who use our services, we will process their personal information with the consent of their parents or guardians in accordance with the requirements of laws and regulations.

If you are a minor, we suggest that you read this Policy together with your parent(s) or guardian(s). For the personal information we collect with the consent of your parent(s) or guardian(s), we will only use such information to the extent permitted by law or necessary for protecting you or with the express consent of your parent(s) or guardian(s). If your parent or guardian does not agree you to use our services or provide information to us in accordance with this Policy, please stop using our services immediately.

IX. How we update this Policy

Our Privacy Policy may be updated from time to time. Once it is updated, we will notify you about the latest version of our Privacy Policy through pop-ups.

We will not reduce your rights under this Policy without your explicit consent. You can read the Standard Chartered Bank (China) Limited Online Banking Privacy Policy as updated from time to time at the bottom of the official website of SCB China at https://www.sc.com/cn/en. If you do not agree with any or all of the terms of this Policy, please stop using our Online Banking services.

X. How to contact us

If you have any question, comment or suggestion about our Online Banking, especially those regarding personal information or this Policy, please contact us through the means set forth below and we will in principle respond within 15 days of receiving your question (could be extended to a maximum of 60 days depending on the complexity of the situation), comment or suggestion:

Company Name: Standard Chartered Bank (China) Limited

Address: 201 Century Avenue, Pudong New Area, China

Customer Service Hotline: 956083

If you are not satisfied with our reply, and in particular consider that our processing of personal information has caused harm to your legitimate rights and interests, you may also lodge a complaint or report to authorities with personal information protection duties, or resort to a people’s court of competent jurisdiction in accordance with the laws of the People’s Republic of China or seek solutions through other means as provided in applicable laws and regulations.

XI. Other provisions

(A) In the event that this Policy conflicts in any way with the Terms and Conditions of Bank Accounts and Services and/or the Private Online Banking Terms and Conditions of SCB China, the Standard Chartered Bank (China) Limited Credit Cards (Personal Cards) Charters, or the Standard Chartered Bank (China) Limited Credit Cards (Personal Cards) Agreement, this Policy shall prevail insofar as it concerns SCB China’s personal information processing rules for personal online banking.

(B) If this Policy is translated into English, the English version is for reference only. The Chinese version of this Policy shall prevail in the case of any inconsistency between the two language versions.