HSBC's privacy principles

Our business has been built on trust between our customers and ourselves. To preserve the confidentiapty of all information you provide to us, we maintain the following privacy principles:

i. We only collect personal information that we bepeve to be relevant and required to understand your financial needs and to conduct our business.

ii. We use your personal information to provide you with better customer services and products.

iii. We may pass your personal information to other HSBC Group companies or agents, as permitted by law.

iv. We will not disclose your personal information to any external organisation unless we have your consent or are required by law.

v. We may be required from time to time to disclose your personal information to Governmental or judicial bodies or agencies or our regulators, but we will only do so under proper authority.

vi. We aim to keep your personal information on our records accurate and up-to-date.

vii. We maintain strict security systems designed to prevent unauthorised access to your personal information by anyone, including our staff.

viii. All HSBC Group companies, all our staff and all third parties with permitted access to your information are specifically required to observe our confidentiapty obpgations.

By maintaining our commitment to these principles, we at HSBC will ensure that we respect the inherent trust that you place in us.

This section provides specific details of how we treat any personal information you might wish to provide us when you visit this site.

https://www.hsbc.com.mo/misc/data-privacy-notice/

Your data is important to us. Read this notice to find out how we collect, store, use and share your personal data.

• Security is our top priority. The "The Hongkong and Shanghai Banking Corporation Limited" ('the Bank') will strive at all times to ensure that your personal data will be protected against unauthorised or accidental access, processing or erasure. We maintain this commitment to data security by implementing appropriate physical, electronic and managerial measures to safeguard and secure your personal data.
• The secure area of our website supports the use of Secure Socket Layer (SSL) protocol and 128-encryption technology - an industry standard for encryption over the Internet to protect data. When you provide sensitive information such as credit card details, it will be automatically converted into codes before being securely dispatched over the Internet.
• Our web servers are protected behind "firewalls" and our systems are monitored to prevent any unauthorized access. We will not send personal information to you by ordinary email. As the security of ordinary email cannot be guaranteed, you should only send email to us using the secure email facility on our website.
• All practical steps will be taken to ensure that personal data will not be kept longer than necessary and that the Bank will comply with all statutory and regulatory requirements concerning the retention of personally identifiable information.

• Both you and HSBC play an important role in protecting against online fraud. You should be careful that your bank account details including your User ID and/or Password are not compromised by ensuring that you do not knowingly or accidentally share, provide or facilitate unauthorised use of it. Do not share your User ID and/or password or allow access or use of it by others. We endeavor to put in place high standards of security to protect your interests
• You should safeguard your unique User ID and Password by keeping it secret and confidential. Never write them down or share these details with anyone. HSBC will never ask you for your Internet Banking Password, in order to ensure that you are the only person who knows this information. When choosing your unique User ID and Password for the first time, do not create it using easily identifiable information such as your birthday, telephone number or a recognisable part of your name. If you think your User ID and/or password has been disclosed to a third party, is lost or stolen and unauthorised transactions may have been conducted, you are responsible to inform us immediately.

Use of "cookies" Your visit to this site may be recorded for analysis on the number of visitors to the site and general usage patterns. Some of this information will be gathered through the use of "cookies". Cookies are small bits of information that are automatically stored on a person's web browser in their computer that can be retrieved by this site. Cookies can make the site more useful by storing information about your preferences on particular sites, thus enabling website owners to provide more useful features for their users. The information collected by "cookies" is anonymous aggregated research data, and contain no name or address information or any information that will enable anyone to contact you via telephone, e-mail or any other means. Most browsers are initially set to accept cookies. If you would prefer, you can set your browser to disable cookies or inform you when they are set. However, by disabling them, you may not be able to take full advantage of our website, including HSBC Internet Banking.

HSBC may also work with third parties (such as Doubleclick, Yahoo!, Nielsen//NetRatings and WebTrends) to research certain usage and activities on parts of our web site on our behalf. Doubleclick, Yahoo!, Nielsen//NetRatings and WebTrends use technologies such as spotlight monitoring, web beacons and "cookies" etc to conduct this research. The information collected through technologies such as cookies, spotlight tags and web beacons etc are used to find out more about our users, including user demographics and behaviour and usage patterns, for more accurate reporting and to improve the effectiveness of our marketing. Information recorded through the use of these devices are aggregated and then shared with us. No personally identifiable information about you is collected or shared by Doubleclick, Yahoo!, Nielsen//NetRatings and WebTrends with HSBC as a result of this research. Should you wish to disable the cookies associated with these technologies such as spotlight tags and/or web beacons etc, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website, including HSBC Internet Banking.

To find out more about the use of cookies and the information-gathering practices and opt-out procedures of Doubleclick, Yahoo!, Nielsen//NetRatings and WebTrends, please visit Doubleclick's website at www.doubleclick.net and/or Yahoo!'s website at http://privacy.yahoo.com/privacy/us/pixels/details.html and/or Nielsen//NetRatings website at https://www.nielsen.com/us/en/legal/privacy-statement/digital-measurement and /or WebTrends' website at http://ondemand.webtrends.com/privacypolicy.asp#PSFV

Marketing Promotions Occasionally we may collect personal information from visitors to this site and those individuals that participate in a contest or promotion (online or over the telephone, or at one of our branches). Such information is only collected from individuals who voluntarily provide us with their personal information. We may use this information to advise them of products, services and other marketing materials, which we think, may be of interest to them. We may also invite visitors to this site to participate in market research and surveys and other similar activities.

You can choose to receive marketing and other promotional materials by e-mail. If you do receive email or promotional direct mailings, you will always have an opportunity to opt-out.

If at any time you would like us to cease sending you direct mailings, please contact our representatives at our Direct Financial Services Centre by calling (853) 8599 2256.

If we do ask you to provide personal information, we will always specify the purpose for which such personal information is collected and ensure that it is only used for the purpose specified at the time of collection.

The Statement is intended to notify you why personal data is collected, how it will be used and to whom data access requests are to be addressed.

1. Why we collect your data and how your data may be used - we collect and use your personal information for purposes including the following, and without such data the Bank may be unable to open or continue accounts or establish or continue banking facilities or provide banking services.

1. facilitate the application and daily operation of the services and credit facilities provided to customers;
2. conduct credit checks;
3. creating and maintaining the Bank’s credit and risk related models;
4. assist other financial institutions to conduct credit checks and collect debts;
5. ensure ongoing credit worthiness of customers or security providers;
6. design financial services or related products for customers' use;
7. market financial services or related products;
8. determine the amount of indebtedness owed to or by customers;
9. collect amounts outstanding from customers and those providing security for customers' obligations;
10. meet the obligations, requirements or arrangements, whether compulsory or voluntary, of the Bank or any of its branches or any member of the HSBC Group to comply with, or in connection with:
    1. any law, regulation, judgment, court order, voluntary code, sanctions regime, within or outside Macau Special Administrative Region ("Macau") existing currently and in the future ("Laws");
    2. any guidelines, guidance or requests given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside of Macau existing currently and in the future and any international guidance, internal policies or procedures;
    3. any present or future contractual or other commitment with or request from local or foreign legal, regulatory, judicial, administrative, public or law enforcement body, or governmental, tax, revenue, monetary, securities or futures exchange, court, central bank or other authorities, or self-regulatory or industry bodies associations of financial service providers or any of their agents with jurisdiction over all or any part of the HSBC Group (together the "Authorities" and each an "Authority") that is assumed by, imposed on or applicable to the Bank or any of its branches or any member of the HSBC Group;
    4. any agreement or treaty between Authorities; or
    5. any internal guidance, policy, procedures and arrangements within and requirements of any member of the the HSBC Group. These may include operational requirements, arrangements for sharing data and information within or outside of the HSBC Group and compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
11. enforcing or defending the rights of Bank or any member of the HSBC Group;
12. enable an actual or proposed assignee of the Bank, or participant or sub-participant of the Bank's rights in respect of the customer to evaluate the transaction intended to be the subject of the assignment, participation or sub-participation; and
13. to fulfill any other purposes relating thereto.

2. Disclosure of your personal information - Information held by the Bank relating to a customer will be kept confidential but the Bank may provide such information to the following parties (whether inside or outside of Macau) for the purposes set out in paragraph (3):

1. any agents, contractors, sub-contractors, service providers or associates of the HSBC Group (including their employees, directors, officers, agents, contractors, service providers, and professional advisers);
2. any third party service provider who provides administrative, telecommunications, computer, payment or securities clearing or other services to the Bank in connection with the operation of its business (including their employees, directors and officers);
3. any Authorities;
4. any other person under a duty of confidentiality to the Bank including a group company of the Bank which has undertaken to keep such information confidential;
5. the drawee bank providing a copy of a paid cheque (which may contain information about the payee) to the drawer;
6. any persons acting on behalf of an individual whose data are provided, payment recipients, beneficiaries, account nominees, intermediary, correspondent and agent banks, clearing houses, clearing or settlement systems, market counterparties, upstream withholding agents, swap or trade repositories, stock exchanges, companies in which the customer has an interest in securities (where such securities are held by the Bank or any member of the HSBC Group) or a person making any payment into the customer’s account;
7. credit reference agencies, and, in the event of default, to debt collection agencies;
8. any person to whom the Bank or any of its branches or any member of the HSBC Group is under an obligation or required or expected to make disclosure for the purposes set out in, or in connection with:
   1. any law, regulation, judgment, court order, voluntary code, sanctions regime, within or outside Macau Special Administrative Region ("Macau") existing currently and in the future ("Laws");
   2. any guidelines, guidance or requests given or issued by any legal, regulatory, governmental, tax, law enforcement or other authorities, or self-regulatory or industry bodies or associations of financial services providers within or outside of Macau existing currently and in the future and any international guidance, internal policies or procedures;
   3. any present or future contractual or other commitment with or request from local or foreign legal, regulatory, judicial, administrative, public or law enforcement body, or governmental, tax, revenue, monetary, securities or futures exchange, court, central bank or other authorities, or self-regulatory or industry bodies associations of financial service providers or any of their agents with jurisdiction over all or any part of the HSBC Group (together the "Authorities" and each an "Authority") that is assumed by, imposed on or applicable to the Bank or any of its branches or any member of the HSBC Group;
   4. any agreement or treaty between Authorities; or
   5. any internal guidance, policy, procedures and arrangements within and requirements of any member of the the HSBC Group. These may include operational requirements, arrangements for sharing data and information within or outside of the HSBC Group and compliance with sanctions or prevention or detection of money laundering, terrorist financing or other unlawful activities;
9. any member of the HSBC Group;
10. third party financial institutions, insurers, credit card companies, securities, investment services providers, asset management fund managers and introducing brokers;
11. third party reward, loyalty, co-branding and privileges programme providers, co-branding partners of the Bank or any member of the HSBC Group (the names of such co-branding partners will be provided during the application process for the relevant services and products, as the case may be);
12. charitable or non-profit making organisations;
13. any person who acquire an interest in or assuming risk in or relating to any of the services of the Bank;
14. any person involved in any business transfer, disposal, merger or acquisition by the Bank of any member of the HSBC Group; and
15. any actual or proposed assignee of the Bank or participant or sub-participant or transferee of the Bank's rights in respect of the customer.

Please refer to the applicable terms and conditions provided to you for further details of the purposes and scope of disclosure.

3. Data access requests -any individual has the right:

1. to check whether the Bank holds data about them and of access to such data;
2. to require the Bank to correct any data relating to them which is inaccurate; and
3. to request the data not to be used for direct marketing purpose.

Requests for access to data , correction of data or data not to be used for direct marketing purpose should be addressed to:

Manager Operations
The Hongkong and Shanghai Banking Corporation Limited
Avenida da Praia Grande
PO Box 476
Macau SAR
Facsimile: (853) 2832 2831

IMPORTANT: By accessing this web site and any of its pages you are agreeing to the terms set out above. Thank you for choosing HSBC.