電子銀行服務個人資料收集及私隱政策聲明
Electronic Banking Services Personal Data Collection and Privacy Policy Statement
本版發佈日期：2026年07月31日
生效日期：2026年07月31日
工銀澳門電子銀行（以下簡稱“手機銀行”）是由中國工商銀行（澳門）股份有限公司（以下簡稱“我行”）提供的專業線上金融服務平台，按照服務管道分為桌面端（個人網上銀行，網址：https://myebank.icbc.com.cn/icbc/perbank/index.jsp?areaCode=0119））和（個人手機銀行，App名稱：ICBC Mobile Banking）。為說明手機銀行如何收集、使用、存儲、提供、轉移、公開和刪除您的個人資料以及您享有何種權利，我行將通過本政策向您闡述相關事宜，其中要點如下：
Ⅰ.我行將說明收集您的個人資料類型及其用途，以便您瞭解我行針對某一特定功能收集個人資料的目的、方式、範圍及可能的後果等。
Ⅱ.當您使用某些功能時，我行會在獲得您的明示同意後，收集您的某些敏感個人資料，例如您的通訊錄、生物識別資料等，拒絕提供這些資料會影響您正常使用相關功能。
Ⅲ.手機銀行不會主動提供或轉移您的個人資料予第三方，如存在其他提供或轉移您的個人資料情形，我行會徵得您的明示同意。明示同意是指您通過書面、口頭等方式主動作出紙質或電子形式的聲明，或者自主作出肯定性動作，對您的個人資料進行特定處理作出明確授權的行為（注：肯定性動作包括您主動勾選、主動點擊“確定”“同意”“註冊”“發送”“撥打”、主動填寫或提供等）。
對本政策中我行認為與您的權益存在重大關係的條款和敏感個人資料，如您就本政策點擊或勾選“同意”並確認提交，即視為您同意本政策，並同意我行將按照本政策來收集、使用、存儲、提供、轉移、公開和刪除您的個人資料。
我行深知個人資料對您的重要性，會盡力保護您的個人資料安全。我行致力於維護您對我行的信任，恪守以下原則保護您的個人資料：權責一致原則、目的明確原則、選擇同意原則、最小必要原則、確保安全原則、主體參與原則、公開透明原則等。同時，我行承諾依法採取相應的安全保護措施來保護您的個人資料。
若您想瞭解本政策更詳細的資料，請按如下索引閱讀相應章節：
一、我行如何收集和使用您的個人資料
二、我行如何使用Cookie技術
三、我行如何存儲和保護您的個人資料
四、我行如何提供、轉移和公開披露您的個人資料
五、您如何管理您的個人資料
六、我行如何處理未成年人資料
七、本政策的適用以及更新
八、如何聯繫我行
一、我行如何收集和使用您的個人資料
個人資料是以電子或者其他方式記錄的與已識別或者可識別的自然人有關的各種資料，不包括匿名化處理後的資料。敏感個人資料是一旦洩露或者非法使用，容易導致自然人的人格尊嚴受到侵害或者人身、財產安全受到危害的個人資料，包括但不限於生物識別、宗教信仰、特定身份、醫療健康、金融賬戶、行蹤軌跡等資料，以及未滿十八周歲的未成年人的個人資料。
（一）我行如何收集您的個人資料
為向您提供服務並確保您的手機銀行賬戶安全，在您使用手機銀行服務過程中，我行會收集您在使用服務過程中主動輸入或因使用服務而產生的資料：
1.當您註冊手機銀行時，依據法律法規及監管要求，您需要向我行提供或授權我行收集必要的個人資料。如您拒絕提供，您將無法使用相應功能或服務。
（1）當您使用工行卡註冊手機銀行時，我行會收集您的手機號碼、身份證資料、銀行卡號，並驗證您的銀行卡密碼，以説明您完成手機銀行註冊。若您已是工銀澳門電子銀行註冊客戶或工銀澳門手機銀行客戶，您可以使用電子銀行註冊手機號/用戶名/卡（賬）號直接登錄手機銀行，我行會收集您提供的登錄資料並對資料進行驗證核對。
（2）當您註冊手機銀行時，我行會採集您的人臉資料進行身份認證，如為澳門永久/非永久居民，會將您的人臉資料發送至澳門特別行政區政府行政公職局的一戶通系統進行核驗並接收驗證結果。如為中華人民共和國居民身份，會將您的人臉資料發送至公安部系統進行核驗並接收驗證結果。如您拒絕授權我行採集您的人臉資料，我行將可能無法為您註冊手機銀行。
2.當您使用手機銀行功能或服務時，您可能需要向我行提供或授權我行收集相應服務所需的個人資料。如您拒絕提供，您可能將無法使用相應功能或服務。
（1）當您登錄手機銀行時，我行將對登錄手機號碼、登錄密碼或手勢密碼進行有效性核驗，首次登錄使用櫃面預留初始密碼及客戶證件號來修改新密碼，並用新密碼登錄。如您忘記登錄密碼需要重置時，我行將根據您所選擇場景的需要驗證您的身份資料，包括手機號碼、姓名、證件類型、證件號碼、銀行卡號、銀行卡取款密碼、人臉資料。我行還會收集設備唯一識別碼、作業系統版本用於硬體綁定和登錄安全加固。如您不提供以上資料，您將無法登錄或者找回密碼，但這不影響您正常使用未登錄情況下可用的功能或服務。
（2）為了讓您更安全、便捷地使用登錄服務，如您的設備與手機銀行版本均支持指紋/iOS面容ID/HarmonyOS人臉識別功能，您可以選擇通過指紋/iOS面容ID/HarmonyOS人臉識別功能登錄手機銀行。您需在您的設備上錄入您的指紋/面容資料，在您進行指紋/iOS面容ID/HarmonyOS人臉識別登錄手機銀行時，您需在您的設備上完成指紋/iOS面容ID/HarmonyOS人臉識別驗證。我行僅接收驗證結果，並不收集您的指紋/面容資料，其資料僅在您授權採集指紋/面容資料的設備上保存和處理。如您不想使用指紋/iOS面容ID/HarmonyOS人臉識別登錄，仍可通過其他方式進行登錄。您可以通過手機銀行“我-登錄管理-指紋/刷臉登錄”開啟或關閉指紋/iOS面容ID/HarmonyOS人臉識別登錄功能。為保證您的個人資料和賬戶資金安全，您不要在設備中留存他人指紋或面容資料。
（3）當您在註冊、登錄、登出電子銀行，或在功能開通、查詢、變更交易需核實身份或輔助認證場景時，出於維護您的資料、賬戶、資金安全及風險控制等原因，或法律法規、監管規定要求必須開展客戶身份核實的場景時，我行會要求您通過人臉識別進行身份核驗。如您是未成年人，需要由您的監護人通過人臉識別完成驗證。如您拒絕授權我行採集您的人臉資料，我行將可能無法向您提供需完成人臉識別認證後方可使用的產品或服務。
在人臉識別時，我行會採集您的人臉資料，通過活體檢測和人臉比對等技術，核驗您的真實身份，我行會使用您在我行電子銀行、自助終端、網點櫃面等管道授權留存的人臉資料，或通過有權機關（包括但不限於澳門特別行政區政府、中國人民銀行及其授權機構）查詢及使用您的身份資料及人臉照片資料。在必要時，我行會將您的人臉資料發送至上述機構進行核驗並接收驗證結果。人臉識別驗證後，您本次的人臉資料將被歸檔存儲於我行系統，以作為交易留證資料（您本次的人臉資料自存儲日起，保存期限3年，超過保存期限時將被我行系統自動刪除）。如果您不提供人臉資料進行採集驗證，我行將無法為您提供根據業務性質及風險控制等原因必需進行人臉識別驗證的產品或服務。您仍可以選擇我行提供的其他認證方式完成身份驗證，或通過我行網點櫃面、智慧終端機等其他管道諮詢辦理業務。
您可以授權我行將您的人臉資料保存至我行資料庫，可實現7*24小時人臉識別認證服務。經過您的明示同意和身份認證後，您的人臉資料將被加密存儲于我行人臉識別資料庫。您可以登錄手機銀行，在“手機銀行“我的-登錄管理-刷臉登錄服務”開通、終止人臉識別服務或更新您的人臉資料。
（4）為了讓您更安全、便捷地使用轉賬、支付服務，如您的設備與手機銀行版本均支持指紋/面容功能，對於某些品牌或型號的設備，您可選擇開通指紋/刷臉支付功能。您需在您的設備上錄入您的指紋/面容資料，在您進行指紋/刷臉支付時，您需在您的設備上完成指紋/面容驗證。我行僅接收驗證結果，並不收集您的指紋/面容資料，其資料僅在您授權採集指紋/面容資料的設備上保存和處理。如您不想使用指紋/刷臉支付，仍可通過其他方式進行轉賬、支付。您可以通過手機銀行“工銀e支付-安全管理-指紋支付/刷臉支付”開啟或關閉指紋/刷臉支付功能。
（5）當您使用手機銀行提供的實名認證服務時，我行將根據您所選擇場景的需要驗證您的姓名、證件類型（身份證、護照）、證件號碼、銀行卡號/賬號、短信驗證碼、人臉資料，並可能通過驗證賬號/卡密碼方式對有關資料進行有效性核驗。如您不提供上述資料，我行將無法向您提供需完成實名認證後方可使用的產品或服務，但這不影響您正常使用工銀澳門手機銀行的其他功能。
（6）當您使用信差服務、手機銀行消息服務時，我行會收集您的賬戶資料及交易資料，以便及時向您發送賬戶資金變動及相關交易通知；我行也可能會向我行的合作夥伴收集其合法留存並經您授權可以提供使用的資料，以便為您提供相應消息通知服務。
（7）當您使用手機銀行提供的搜索服務時，我行會收集您的搜索關鍵字和歷史搜索記錄，如果您使用語音搜索功能，我行會收集您的語音資料並轉換為文字搜索。我行會保留或統計您的搜索關鍵字和點擊資料，在搜索框下方展示以方便您重複輸入或統計您的搜索關鍵字和點擊資料，或為您展示與您搜索內容相關聯的產品功能或活動資料。請您注意，您的搜索關鍵字資料無法單獨識別您的個人身份，不屬於您的個人資料，我行可以對其加以其他目的使用；只有當您的搜索關鍵字資料與您的其他資料相互結合使用並可以準確識別您的個人身份時，則在結合使用期間，我行會將您的搜索關鍵字資料作為您的個人資料，對其加以保護處理。
（8）當您使用手機銀行提供的網點預約、網點查詢、遠端辦音視頻服務、第三方位置資料服務以及我行用於網路金融交易風控時，我行會收集您的地理位置資料。如您拒絕提供該資料，您將無法使用上述服務中基於定位的相關功能，但這不影響您正常使用手機銀行的其他功能。
（9）當您使用手機號轉賬、匯款短信通知時，為便於您從手機通訊錄快速選擇辦理業務的連絡人資料，在您授權同意我行獲取通訊錄許可權後，我行會收集您從通訊錄中點選的連絡人姓名或手機號資料，自動填入業務辦理頁面，無需您手動輸入。如您拒絕我行收集上述資料，您可以選擇手動輸入連絡人資料繼續使用上述功能，這不會影響您正常使用手機銀行的其他功能。
（10）當您使用轉賬匯款、工銀e支付時，您需要提供收款方的姓名、銀行卡卡號/賬號或手機號碼，並可能需要提供您的姓名、手機號碼、證件類型及證件號碼，以便於驗證身份及使用上述功能的支付服務。此外，我行還會收集您的相關收付款交易記錄以便於您查詢。有關具體事項按您添加銀行卡時同意簽署的《中國工商銀行電子銀行個人客戶服務協定》執行。上述資料屬於敏感個人資料，如您拒絕提供該資料，僅會使您無法使用上述功能，但不影響您正常使用手機銀行的其他功能。
當您通過手機銀行開通e支付，我行會驗證您的支付密碼。您可以通過手機銀行“工銀e支付-安全管理”修改您的支付密碼。為保證您的賬戶資金安全，當您進入安全管理功能修改支付密碼時需要驗證您的使用者身份，並提供原支付密碼。
（11）當您啟動手機銀行時，我行會有條件地讀取您手機剪切板內容，在手機剪切板上出現連續數位並由系統判斷為銀行賬號時會讀取數字部分，用於詢問您是否需要向此銀行賬號轉賬，如您確認轉賬並登錄手機銀行後，頁面會跳轉至轉賬匯款功能並自動將讀取的數位部分填寫至收款賬號輸入框中，簡化您的操作。在您複製了產品分享口令時，會讀取手機剪切板內容並展現彈框，如您點擊查看會跳轉至對應的產品頁面。為切實保障您的個人資料安全，讀取的內容僅存儲在用戶端本地（僅存儲最新的一條，不留存歷史記錄），不上傳至我行伺服器。
（12）當您使用手機銀行賬戶密碼重置、解除借記卡掛失、修改手機號、調整限額、簽訂人臉協議為確保本人辦理，我行需收集您提供的銀行卡、手機號、身份證件、相關證明材料、手寫簽名資料、人臉資料以作為交易留證資料。
（13）當您使用手機銀行即時活動通知（設備系統推送）功能時，為了通過手機系統提供的即時活動通知功能向您展示您使用工銀澳門預約取號服務的訂單狀態，我們會將您的訂單資料（預約時間、預約網點、排隊號碼）發送至手機系統。訂單相關的即時活動狀態會在手機主螢幕或活躍App頂部以及手機鎖屏頁面展示，您可以通過手機系統通知許可權開關或即時活動通知功能選擇是否接收該通知。當您同意接收並使用上述功能時，我行會收集和使用您的作業系統版本。此類資料屬於上述功能的必要資料，若您不同意提供該資料，您可能無法正常使用即時活動通知功能。
（14）當您使用手機銀行風險能力測評功能時，我行需要收集您提供的年齡、投資目標、期望回報、流動性要求、風險承受能力、收入來源、可支配年收入、金融投資比例、大額債務情況、投資知識、投資經驗、投資期限、投資品種、風險偏好、可承受最大投資損失資料，測評您的風險承受能力，保障您的財產安全。
（15）當您使用手機銀行辦理證件有效期維護時，我們會收集您的身份證件資料，以便核驗相關資料及您身份真實性，我行將同步保存相關資料，作為交易留存資料。
3.當您使用手機銀行服務時，為了維護服務的正常運行，優化我行的服務體驗及保障您的賬戶安全，我行可能會收集以下基礎資料，包括您的設備型號、作業系統、設備唯一標識（安卓為Android ID、iOS為IDFV、HarmonyOS為serial）、手機銀行版本號、登錄IP地址、設備MAC地址、接入網路的方式、類型和狀態、網路質量數據、設備感應資料、操作日誌、系統參數、應用許可權、安裝的應用資料或正在運行的進程資料、服務日誌資料（您在手機銀行搜索、查看的資料、引薦網址、服務故障資料），這些資料是為您提供服務必需收集的基礎資料，以保障您正常使用我行的服務。
4.為向您提供更加準確、個性和便捷的服務，提升服務體驗、改進服務品質，或為防範風險，我行會收集您回饋意見建議或舉報時提供的資料，收集您參與問卷調查時向我行回饋的資料，收集您使用手機銀行功能或服務的類別、方式和操作資料，及您在我行的個人資料，我行會對這些資料進行統計、分析，並會根據上述資料向您提供相應服務或產品。
5.當您在手機銀行中使用第三方提供的服務時，第三方可能會通過手機銀行收集您的昵稱、頭像；如您已明示同意該第三方可以收集您的地理位置資料，我行將授予該第三方獲得終端地理位置資料介面，其可以通過該介面獲得您的具體位置資料；在經過您的明示同意後，第三方可收集您的手機號資料；對於您在使用第三方提供的服務時主動提供給第三方的相關資料，我行將視為您允許該第三方收集上述此類資料；對於您在使用該第三方服務時產生的資料，應由您與該第三方依法約定上述資料的收集和使用事項。如您拒絕第三方在提供服務時收集、使用或者傳遞上述資料，將可能會導致您無法在手機銀行中使用第三方的相應服務，但這不影響您使用手機銀行的其他功能。
6.以下情形中，您可選擇是否授權我行收集、使用您的個人資料：
（1）基於相機（攝像頭）的功能：您可使用掃碼支付、掃碼取款、雲保管、二維碼識別、銀行卡識別、身份證識別、設置頭像、AR識別、人臉識別、同屏解說、我的客服、遠端視頻審核服務。
（2）基於相冊（圖片庫）的功能：您可使用頭像上傳、電子回單保存、備註收支資料、雲保管、二維碼識別、銀行卡識別、身份證識別、人臉識別、分享、我的客服、意見回饋服務。
（3）基於地理位置的功能：您可開啟定位服務，用於網點預約、網點查詢、第三方位置資料服務、掃碼取款、遠端音視頻審核服務、網路金融交易風控、語音搜索，提高查詢附近網點、獲得優惠商戶資料的準確性。
（4）Face ID/Harmony OS人臉識別：您可使用登錄、支付服務。
（5）基於存儲的功能：用於緩存您在使用手機銀行過程中產生的文本、圖像、視頻內容，以及用於頭像上傳、電子回單保存、備註收支資料、二維碼識別、銀行卡識別、身份證識別、人臉識別、分享、我的客服、意見回饋、掃一掃、登錄頭像圖片保存、用戶端升級服務。
（6）基於電話的功能：用於讀取手機設備基礎資料，並標識設備綁定資料以保障客戶在登錄、支付時的交易安全。當您使用遠端音視頻審核服務和同屏解說服務時，需要確認電話狀態，避免在通話過程中進入音視頻通訊而出現設備佔用等異常狀態。
（7）基於NFC的功能：您可使用雲閃付、Apple Pay、工銀芯管家、遠端辦音視頻服務、轉賬匯款服務。
（8）基於通訊錄的功能：您可使用手機號轉賬、話費充值、匯款短信通知服務。
（9）基於指紋的功能：您可使用指紋登錄、指紋支付服務。
（10）基於剪切板的功能：您可使用雲口令識別、轉賬快捷跳轉功能，我行系統後臺不保存您的剪切板內容。
（11）基於投屏錄屏的功能：您可使用同屏解說服務。
（12）基於應用內下載安裝App的功能：您可使用檢測到新版本後的用戶端升級服務。
（13）基於懸浮窗的功能：您可參加任務中心活動，使用音視頻審核服務和同屏解說服務。
（14）基於加速度感測器的功能：您可使用翻轉退出登錄和搖一搖服務。
（15）基於獲取應用列表的功能：您可使用跳轉ICP/IP地址/功能變數名稱資料備案管理系統網址服務，查詢核對App的ICP備案資料。用於與中化App合作，獲取其App的應用圖示。
（16）基於通知的功能：您可使用消息推送提醒服務。
上述功能可能需要您在您的設備中向我行開啟您的相機（攝像頭）、相冊（圖片庫）、地理位置（位置資料）、麥克風、藍牙、Face ID/Harmony OS人臉識別、存儲空間、電話、NFC、通訊錄、指紋、剪切板、投屏錄屏、應用內下載安裝App、懸浮窗的存取權限，以實現這些功能所涉及的資料的收集和使用。請您注意，您開啟這些許可權即代表您授權我行可以收集和使用這些資料來實現上述功能，如您取消了這些授權，則我行將不再繼續收集和使用您的這些資料，也無法為您提供上述與這些授權所對應的功能。
7.為了統計客戶訪問情況，手機銀行部分行銷廣告和活動頁面中使用了百度統計元件和友盟+（站長統計）元件，此頁面統計元件需要收集您的設備唯一標識（安卓為Android ID、iOS為IDFV、HarmonyOS為AAID）和網路ip所在區域資料，用於實現PV（頁面流覽量）、UV（獨立訪客）的相關資料統計。
元件提供方名稱：北京銳訊通訊科技有限公司（友盟公司）、百度網訊科技有限公司（百度公司），聯繫方式：ext_tongji_reply@baidu.com（百度統計），隱私政策（百度統計）。
8.請您理解，我行向您提供的功能和服務是不斷更新和發展的，如果某一功能或服務未在本政策載明且收集了您的個人資料，我行會通過頁面提示、交互流程、網站公告等方式另行向您說明資料收集、使用的內容、範圍和目的，並在使用前徵得您的授權同意。授權同意是指您對您個人資料進行特定處理作出明確授權的行為，包括通過積極的行為作出授權（即明示同意），或者通過消極的不作為而作出授權（如資料採集區域內的您在被告知資料收集行為後沒有離開該區域）。
（二）我行如何使用您的個人資料
1.為向您提供更優質的服務，經您同意，我行可將您的個人資料用於行銷、使用者體驗改進或者市場調查等用途。無論您是否同意上述授權，我行將繼續提供優質服務，並不會影響向您發送風險提示、服務狀態通知、業務辦理進度、還款提示等提醒資料。您如需更改授權狀態，可通過88995588客戶服務熱線或工銀澳門指定的其他方式進行調整。
2.為確保服務安全，説明我行更好地瞭解工銀澳門手機銀行運行情況，我行可能記錄手機銀行運行的相關資料，比如，您使用手機銀行的頻率、崩潰資料、總體使用情況和性能資料。我行不會將存儲在分析軟體中的資料與您在手機銀行中輸入的任何個人身份資料相結合。
3.我行在收集您的個人資料後，可能會通過技術手段對您的資料進行去標識化處理。去標識化處理後的資料將無法直接識別個人資料主體，您同意我行對去標識化的資料進行分析並予以使用。
4.為了向您提供更契合您的需求和興趣的活動、功能、廣告、產品等內容，給您帶來更好的使用體驗，我行可能會根據您的點擊記錄、搜索記錄、交易記錄行為資料，基於特徵標籤的使用者畫像、使用者風險評級資料，使用電腦演算法對上述資料進行自動計算和分析，以此來提取您的個性化特徵，在手機銀行頁面中的樓層、宮格區、彈框廣告等區域，向您展示理財、基金、存款、保險、繳費等產品推薦或行銷活動的個性化內容。為保障您接收資料的自主性，我行也提供了不基於個性化推薦演算法的展示內容。您可以在手機銀行的“我的-設置-個性化設置-個性化推薦”中關閉個性化推薦。在關閉個性化推薦後，我們會基於內容熱度等非個性化因素向您展示內容，您可能會看到您不感興趣甚至不喜歡的內容，您的使用體驗可能會受到影響。
（三）徵得授權同意的例外
根據相關法律法規、監管要求及國家和澳門特別行政區標準，以下情形中遇到國家和澳門特別行政區有權機關或者監管機關要求我行提供的，或者出於對您的權利、權益進行充分保護的目的，或者符合此處約定的其他合理情形的，我行收集、使用個人資料不必徵求您的授權同意：
1.與我行履行法律法規規定的義務相關的;
2.與國家安全、國防安全直接相關的;
3.與公共安全、公共衛生、重大公共利益直接相關的;
4.與刑事偵查、起訴、審判和判決執行等直接相關的;
5.出於維護客戶或其他個人的生命、財產等重大合法權益但又很難得到客戶本人授權同意的;
6.所涉及的個人資料是客戶自行向社會公眾公開的，但客戶明確拒絕或我行收集、使用該資料侵害客戶重大利益的除外；
7.根據客戶要求簽訂和履行合同所必需的;
8.從合法公開披露的資料中收集個人資料的，如合法的新聞報導、政府資料公開等管道，但客戶明確拒絕或我行收集、使用該資料侵害客戶重大利益的除外;
9.用於維護所提供的產品或服務的安全穩定運行所必需的，例如發現、處置產品或服務的故障;
10.法律法規及監管機構規定的其他情形。
二、我行如何使用Cookie技術
為確保服務正常運轉，我行會在您的電腦或移動設備上存儲名為Cookie的小資料檔案。Cookie通常包含識別字、網站名稱以及一些號碼和字元。借助于Cookie，我行後台伺服器能夠對手機銀行的訪問情況進行有效分配，以便提供更優質的服務。我行不會將Cookie用於本政策所述目的之外的任何用途。您可根據自己的偏好管理或刪除Cookie。您可以清除電腦上保存的所有Cookie，大部分網路流覽器都設有阻止Cookie的功能。但如果您這麼做，則需要在每一次訪問我行的網站時更改用戶設置。
三、我行如何存儲和保護您的個人資料
（一）存儲
1.我行會按照法律法規及監管要求規定，將在中華人民共和國境內收集和產生的個人資料存儲在澳門特別行政區及中華人民共和國境內。但為處理跨境業務，如我們直接將您的個人資料向境外傳輸，我們會向您告知境外接收方的名稱或者姓名、聯繫方式、處理目的、處理方式、個人資料的種類以及您向境外接收方行使相關權利的方式和程式等事項，並取得您的單獨同意。我們會根據境內法律法規規定，對您的個人資料出境前開展安全評估。同時，在相關條件具備時我們將依照國家網信部門組織的安全評估、國家網信部門的規定專業機構個人資料保護認證或按照國家網信部門制定的標準合同與境外接收方訂立合同開展個人資料跨境傳輸工作。並在獲得您的單獨授權同意後，您的部分個人資料（匯款人名稱、地址、聯繫電話、轉出賬號以及收款人名稱、詳細地址）將作為交易資料的一部分被傳輸到境外，法律、行政法規另有規定的除外。此種情況下，我行會採取資料加密傳輸等有效措施保護您的資料安全。
2.我行僅在本政策所述目的所必需期間和法律法規及監管要求的時限內保留您的個人資料，對於超過上述存儲期限的個人資料，我行會進行刪除或匿名化處理。例如：
手機號碼：當您需要使用手機銀行服務時，我行需要一直保存您的手機號碼，以保證您正常使用該服務，當您登出手機銀行賬戶後，我行終止客戶電子銀行關係的資料；
用戶頭像：當您設置了頭像以後，我行會一直保存您的頭像，用於登錄頁面展示使用。當您選擇恢復默為認頭像後，我行將刪除您設置的頭像資料；
登錄地區：當您登錄後，我行會記錄您持有卡片的註冊地資料作為登錄地區，以保證您正常使用手機銀行服務。此資料隨著App的卸載而刪除。
“雲保管”存儲資料：當您使用“雲保管”服務後，
（1）我行會對您存儲在“雲保管”的資料進行加密存儲，從技術上保證數據資料的保密性；
（2）我行會對您存儲在“雲保管”的資料，通過我行後臺伺服器進行儲存，保證資料的安全性，即便在伺服器災難等特殊情況時也能做到您資料及時恢復，保證您資料不丟失；
（3）在您自主操作“雲保管”資料時，備份存儲在我行的資料會同步變化。如果由於您誤操作導致資料被刪除的，則備份存儲在我行的資料也會同步刪除；
（4）您存儲在“雲保管”的內容，需要您本人登錄手機銀行後，再通過“人臉識別+短信驗證碼”/“銀行卡密碼+短信驗證碼”/“國家網路身份認證App+短信驗證碼”驗證解鎖後才能查看編輯，您不應將其賬號、密碼轉讓或出借他人使用；
（5）我行對您存儲在“雲保管”裡的內容不做任何主動的審查，工作人員也無法查看您存儲的任何內容；
（6）我行在未經您同意時，不會向第三方提供您存儲在“雲保管”中的內容，除非有下列情況出現：
a.根據法律的有關規定，或者行政、司法機構的要求，向第三方或者行政、司法機構披露；
b.在緊急情況下，為維護您及公眾的權益；
c.涉及國家安全的情況；
d.其他依法需要公開、編輯或透露個人資料的情況。
（二）保護
1.我行將遵守相關法律規定，採取必要措施保障個人資料的安全，以防止個人資料在意外的、未經授權的情況下被非法訪問、複製、修改、傳送、破壞、處理或使用。例如，資料加密存儲、使用加密技術進行資料傳輸、去標識化處理資料、資料庫加鎖等手段來保護您的個人資料。
2.我行建立配套的管理制度、內控機制和流程以保障您的資料安全。例如，嚴格限制資料存取權限、對資料訪問及處理行為進行系統監控、要求相關工作人員簽署保密協議等。
3.我行會採取一切合理可行的措施，確保未收集無關的個人資料。我行只會在達成本政策所述目的所需的期限內保留您的個人資料，除非需要延長保留期或受到法律的允許。
4.若發生個人資料洩露等安全事件，我行會啟動應急預案，阻止安全事件擴大，並將及時將事件相關情況以推送通知、郵件或電話等方式告知您，難以逐一告知個人資料主體的，我行會採取公告等合理、有效的方式告知。
5.互聯網環境並非百分之百安全，我行將盡力確保您發送給我行的任何資料的安全性。如果我行的物理、技術、或管理防護設施遭到破壞，導致資料被非授權訪問、公開披露、篡改、或毀壞，導致您的合法權益受損，我行將承擔相應的法律責任。
6.如我行提供的全部或部分電子銀行業務停止運營，我行相關產品或服務將通過逐—送達或公告的形式向您告知，同時停止相關產品或服務對您個人資料的收集等操作，對存儲的個人資料做匿名化或刪除處理，保護您的個人資料安全。如因技術故障、網路攻擊、自然災害及事故、人為因素等各種原因造成全部或部分電子銀行業務中斷，我行將採取應急處置和恢復措施予以應對，儘快恢復服務。
7.在個人資料保護方面，我行手機銀行已通過的國家級安全認證：中國網路安全審查技術與認證中心（CCRC）的移動互聯網應用程式（App）安全認證。
四、我行如何提供、轉移和公開披露您的個人資料
（一）提供和轉移
我行不會向其他任何公司、組織和個人提供或轉移您的個人資料，但以下情況除外：
1.事先獲得您的明示同意。
2.如業務需要對外提供、轉移您的個人資料，我行會向您告知提供、轉移個人資料的目的、資料接收方的名稱或者姓名、聯繫方式、處理方式和個人資料的種類，並事先徵得您的單獨授權同意，法律、行政法規另有規定的除外。涉及敏感資料的，我行還會告知敏感資料的類型、資料接收方的身份和資料安全能力，並徵得您的明示同意。我行會準確記錄和存儲個人資料的提供、轉移情況，包括對外提供、轉移的日期、規模、目的，以及資料接收方基本情況等。
3.我行可能會向第三方（推送服務或移動設備廠商）提供您的部分基礎資料，包括您的設備型號、設備唯一標識（安卓為Android ID、iOS為IDFV），以便及時向您的移動設備發送金融服務提醒及相關交易通知。在經過您的授權同意後，第三方可收集您的以上個人資料。
4.我行可能會為您提供基於位置的服務，第三方位置提供商可能會基於您對系統定位的授權及設定，收集您的 部分基礎資料，包括您的設備型號、設備唯一標識（安卓為Android ID、iOS為IDFV）。在經過您的授權同意後，第三方可收集您的以上個人資料。
提供方名稱：北京百度網訊科技有限公司；聯繫方式：400-099-8998，map_service@baidu.com；隱私政策。
5.您的個人資料可能會在我行及附屬公司內部進行共用，共用個人資料的範圍將根據具體業務情況而定。我行只有在經過您的單獨授權同意下才會進行共用，且這種共享受本政策所聲明目的的約束。一旦改變個人資料的處理目的、方式，將再次徵求您的授權同意。
6.為了向您提供更完善、優質的產品和服務，我行的某些服務將由第三方提供。我行可能會向第三方提供您的某些個人資料，以提供更好的客戶服務和使用者體驗。我行會遵循合法、正當、必要、誠信原則，且經過您的單獨授權同意下才會提供您的個人資料，只會提供服務所必要的個人資料。我行會通過協定簽署的方式，要求第三方嚴格遵守法律法規與監管要求並承諾僅在授權範圍內處理您的個人資料，僅在為實現本協定目的所必要的最短期限內保存您的個人資料，應對您的個人資料進行安全存儲、嚴格保密，並加密傳輸。如果您拒絕提供開展第三方服務所必需的您的個人資料，將可能導致您無法在我行使用該第三方服務。
7.根據法律法規和商業慣例，在我行發生合併、收購、資產轉讓等類似交易中，如涉及到個人資料轉移，我行將通過逐—送達或公告的形式向您告知有關情況，並會要求新的持有您個人資料的公司、組織繼續受本政策的約束，否則我行將要求該公司、組織重新向您徵求授權同意。
8.請您理解，我行可能會根據法律法規規定，或按政府主管部門的強制性要求，對外提供您的個人資料。
我行會對第三方收集個人資料的應用程式介面（API）、軟體工具開發包（SDK）進行嚴格的安全檢測，並與第三方約定嚴格的資料保護措施，令其按照我行的說明、本政策以及其他任何相關的保密和安全措施來處理個人資料。
（二）公開披露
1.我行不會對外公開披露所收集的個人資料，如須披露，我行會向您告知公開披露的目的、披露資料的類型、資料接收方的類型及可能涉及的敏感資料，並徵得您的明示同意。我行將準確記錄和存儲個人資料的公開披露的情況，包括公開披露的日期、規模、目的、公開範圍等。
2.請您理解，在法律、法律程式、訴訟或政府主管部門強制性要求的情況下，我行可能會公開披露您的個人資料。
3.我行不會公開披露個人生物識別資料。
（三）徵得授權同意的例外
根據相關法律法規及監管要求、國家和澳門特別行政區標準，以下情形中，我行可能會提供、轉移、公開披露個人資料不必事先徵得您授權同意：
1.為訂立、履行個人作為一方當事人的合同所必需，或者按照依法制定的勞動規章制度和依法簽訂的集體合同實施人力資源管理所必需；
2.為履行法定職責或者法定義務所必需；
3.為應對突發公共衛生事件，或者緊急情況下為保護自然人的生命健康和財產安全所必需；
4.為公共利益實施新聞報導、輿論監督等行為，在合理的範圍內處理個人資料；
5.依照本政策規定在合理的範圍內處理個人自行公開或者其他已經合法公開的個人資料；
6.法律、行政法規規定的其他情形。
五、您如何管理您的個人資料
按照中華人民共和國及中華人民共和國澳門特別行政區相關的法律法規和監管規定，我行保障您對自己的個人資料行使以下權利：
（一）訪問、複製、更正及更新您的個人資料
您有權通過工銀澳門手機銀行訪問、複製、更正、更新您的個人資料，法律法規另有規定的除外。您有責任及時更新您的個人資料。在您修改個人資料之前，我行會驗證您的身份。
1.在您使用手機銀行期間，您有權修改或自主更新您的個人資料。在您修改個人資料之前，我行會驗證您的身份。您需要登錄手機銀行，登錄後可以在“我的-個人資料”中，查閱、修改您的基本資料，或在“安全中心”中查詢、修改您相關安全設置，例如變更第三方協議、開啟賬戶安全鎖等。
其中，對於修改手機號資料，如您是我行電子銀行註冊使用者，您可以在登錄手機銀行後，在“我的-個人資料-手機號碼”功能或者“安全中心-手機號管理”中修改手機號，修改成功後可使用新手機號再次登錄手機銀行。如您不是我行電子銀行註冊使用者，您可以在手機銀行登錄介面下方的“説明-修改手機號”中修改手機號。
2.您可以登錄手機銀行，在“賬戶”中管理綁定的銀行卡，或通過“e支付-支付明細”以及“安全中心-e支付安全管理”查詢相關交易明細和修改支付密碼、開啟或關閉小額免密支付。
我行對上述個人資料的修改或更新處理將即時或准即時生效。
3.您可以登錄手機銀行，經過密碼驗證後，在“賬戶”中查閱、複製卡號（賬號）以及開戶姓名、開戶行等開戶網點資料。
（二）刪除您的個人資料
在以下情形中，您可以向我行提出刪除個人資料的請求：
1.如果我行收集、使用個人資料的行為違反法律法規規定或違反與您的約定；
2.如果我行向第三方提供、轉移個人資料的行為違反法律法規規定或違反與您的約定；
3.如果我行公開披露個人資料的行為違反法律法規規定或違反與您的約定；
4.如果您不再使用我行的產品或服務，或註銷了您的賬戶；
5.如果我行不再為您提供產品或服務，或者法律、行政法規規定的個人資料保存期限已屆滿；
6.如果我行對您的個人資料處理目的已實現、無法實現或者為實現處理目的不再必要；
7.如果您撤回對我行收集個人資料的授權同意；
8.法律、行政法規規定的其他情形。
您可以通過我行網點、客服熱線（88995588）請求刪除您電子銀行業務相關的個人資料，刪除後辦理電子銀行業務時需重新採集您的個人資料。我行將在收到您的請求次日起15個工作日內完成核查和處理。如我行決定回應您的刪除請求，我行還將同時通知從我行獲得您個人資料的第三方，要求其及時刪除，除非法律法規另有規定，或這些實體獲得您的獨立授權。
當您從我行的服務中刪除資料後，我行可能不會立即在備份系統中刪除相應的資料，但會在備份更新時刪除這些資料。
如果從我行獲得個人資料的第三方違反了法律法規要求或與我行的約定處理個人資料的，我行將立即要求第三方停止相關行為，且採取或要求第三方採取有效補救措施控制或消除個人資料面臨的安全風險；必要時我行將解除與第三方的業務關係，並要求第三方及時刪除從我行獲得的個人資料。
如法律、行政法規規定的保存期限未屆滿，或者刪除客戶資料從技術上難以實現的，我行將停止除存儲和採取必要的安全保護措施之外的處理。
（三）改變您授權同意的範圍
每個業務功能需要一些基本必要的個人資料才能得以完成。對於為提升產品和服務體驗而收集、使用的個人資料（比如地理位置資料、通訊錄連絡人資料等），您可以根據手機的不同品牌和型號，在手機系統“設置”中通過開通或關閉位置服務許可權、讀取連絡人許可權、撥打電話許可權等，隨時給予或撤銷您的授權同意，也可通過手機銀行“我的-設置-個性化設置-系統許可權”進行授權管理。您可以通過關閉手機銀行部分功能，或在開通使用部分功能或服務時拒絕提供相關個人資料的方式，來阻止我行或提供相關服務的第三方收集您的個人資料。上述方式可能會導致我行或相關第三方無法為您提供相應服務。
（四）個人資料主體註銷賬戶
如您為我行電子銀行註冊使用者，您可以自主要求通過我行櫃面、智慧設備、電子銀行管道（手機銀行桌面端、手機銀行）註銷您的電子銀行賬戶。註銷電子銀行賬戶後，您的手機銀行賬戶同步註銷。通過手機銀行註銷電子銀行的方式如下：
登錄內註銷電子銀行：您可以啟動手機銀行，點擊“我的”-“設置”-“註銷電子銀行”，登錄手機銀行後，點擊“我要註銷”，進行人臉識別認證，認證通過後即可登出電子銀行。
如您非我行電子銀行註冊使用者，您可以自主選擇卸載或停止使用手機銀行，以阻止我行收集您的個人資料。您註銷電子銀行賬戶的行為是不可逆行為，一旦您註銷您的電子銀行賬戶，您的手機銀行賬戶會同步註銷，我行將不再通過手機銀行收集您的個人資料，並將刪除有關您手機銀行賬戶的一切資料（例如您在手機銀行“雲保管”中存儲的相關資料，會在電子銀行賬戶與手機銀行賬戶註銷後同步刪除），法律法規或監管機構對個人資料存儲時間另有規定的除外。
請您注意，我行電子銀行註冊使用者僅在手機設備中刪除手機銀行時，我行不會註銷您的手機銀行賬戶，有關您手機銀行賬戶的一切資料不會刪除。您仍需註銷您的電子銀行賬戶方能達到以上目的。您註銷手機銀行賬戶的同時，將視同您撤回了對本政策的同意，我行將不再收集相應的個人資料。但您撤回同意的決定，不會影響此前基於您的授權而開展的個人資料收集。
（五）回應您的上述請求
為保障安全，我行可能需要您提供書面請求，或以其他方式證明您的身份。我行可能會先驗證您的身份，然後再處理您的請求。一般情況下，我行將在驗證您的身份後的15個工作日內完成核查和處理。請您理解，對於目前技術手段尚不支持、可能給他人合法權益帶來風險等請求，我行可能會予以拒絕。
儘管有上述約定，但按照相關法律法規、監管要求等規定，存在以下情形的我行將可能無法回應您的請求：
1.為訂立、履行個人作為一方當事人的合同所必需，或者按照依法制定的勞動規章制度和依法簽訂的集體合同實施人力資源管理所必需；
2.為履行法定職責或者法定義務所必需；
3.為應對突發公共衛生事件，或者緊急情況下為保護自然人的生命健康和財產安全所必需；
4.為公共利益實施新聞報導、輿論監督等行為，在合理的範圍內處理個人資料；
5.依照本政策規定在合理的範圍內處理個人自行公開或者其他已經合法公開的個人資料；
6.法律、行政法規規定的其他情形。
六、我行如何處理未成年人資料
如果沒有監護人的同意，未成年人不得創建自己的用戶賬戶。如您為未成年人，請您的監護人仔細閱讀本政策，並在徵得您的監護人同意的前提下使用我行的服務或向我行提供資料。我行只會在法律法規及監管要求允許、監護人明示同意或者保護未成年人所必要的情況下使用或提供您的個人資料。
七、本政策的適用以及更新
1.我行保留不時更新或修改本政策的權利。本政策適用於中國工商銀行個人手機銀行和個人網上銀行所提供的各項產品和服務以及所有使用者。未經您明確同意，我行不會減少您按照本政策所應享有的權利。在本政策發生變更時，我行會在手機銀行桌面端和移動端上發出本政策更新版本，並會在變更內容生效前以手機銀行推送通知、彈窗形式或網站公告等合理方式通知您，以便您能及時瞭解本政策最新內容。
2.因法律法規及監管要求、業務需要或我行有關個人資料保護的規定發生重大變化，我行會適時對本政策進行修訂並提供更為顯著的通知說明本政策具體變更內容。重大變化所指的具體類型包括但不限於：
（1）相關金融產品或服務模式發生重大變化。如處理個人資料的目的、處理的個人資料類型、個人資料的使用方式等；
（2）我行所有權結構、組織架構等方面發生重大變化。如業務調整、破產並購等引起的所有者變更等；
（3）相關金融產品或服務涉及的個人資料提供、轉移或公開披露的主要對象發生變化；
（4）客戶參與個人資料處理方面的權利及其行使方式發生重大變化；
（5）我行處理個人資料安全的責任部門、聯絡方式及投訴管道發生變化；
（6）我行對相關金融產品或服務進行個人客戶資料安全影響評估，發現存在高風險。
您知悉並確認，如您不同意本政策更新後的內容，應立即停止使用手機銀行服務，並註銷相關的賬戶，我行將停止收集您的相關個人資料；如您同意本政策更新後的內容並繼續使用手機銀行服務，即視為您已充分閱讀、理解並接受更新後的本政策並同意我行按照更新後的政策收集、使用、存儲、提供、轉移、公開披露和刪除您的相關個人資料。
查閱本政策的方式和路徑：
1.門戶網站-首頁-更多公告-業務須知
2.個人手機銀行-我的-設置-關於
八、如何聯繫我行
如您對本政策有任何意見、建議或疑問，您可以通過88995588電話客服、手機銀行中“線上客服”等我行客戶服務管道與我行聯繫諮詢、投訴或舉報，我行會及時處理您的意見、建議及相關問題，一般情況下，我行將在收到您的問題之次日起15日內受理並處理，法律法規或監管機構另有規定的除外。如果您認為我行的個人資料處理行為損害了您的合法權益，不認可我行就相關問題的處理意見，您還可以向澳門金融管理局等監管部門進行投訴或舉報，您還可以通過向被告住所地有管轄權的法院提起訴訟來尋求解決。
我行全稱：中國工商銀行(澳門)股份有限公司
註冊地址：澳門友誼大馬路555號澳門置地廣場工銀（澳門）中心18樓
個人資料保護電子郵箱地址：Data_Protection@icbc.com.cn
附件: 第三方信息集成SDK清單
當您使用我行“ICBC Mobile Banking”的功能或服務時，在某些特定使用場景下，我行可能會使用具有相應業務資質及能力的第三方服務商提供的軟件服務工具包（簡稱“SDK”）來為您提供服務，由第三方服務商收集您的必要資料。相關第三方按照其SDK輸出的通用原則直接獲取為滿足服務所需的相關資料，不與我行共用您的個人信息，我行也不會主動獲取並保存此類資料。
具體包括以下幾種：
（1）百度定位SDK。為了向您提供基於位置的服務，我行使用了百度定位SDK，該SDK需要獲取您的手機終端唯一標誌信息、經緯度資料，操作系統版本，用於實現定位功能。相關功能將在獲得您授權使用定位資料的情況下提供服務，如您未予授權僅影響使用此類功能。
SDK提供方名稱：北京百度網訊科技有限公司；聯繫方式：400-099-8998，map_service@baidu.com。
（2）博睿SDK（安卓）：為了提升“ICBC Mobile Banking”移動端應用程式的穩定性，我行使用了博睿SDK，該SDK需要獲取您的Android ID、CPU、設備型號、手機系統版本、手機電量、網路狀態、應用內部分點擊記錄、粗略位置信息，涉及讀取電話狀態和訪問粗略位置權限，用於實現應用程式的網路請求、崩潰性能監控和優化。
博睿SDK（iOS）：為了提升“ICBC Mobile Banking”移動端應用程式的穩定性，我行使用了博睿SDK，該SDK需要獲取您的IDFV、CPU、設備型號、手機系統版本、手機電量、網路狀態、應用內部分點擊記錄、粗略位置信息，用於實現應用程式的網路請求、崩潰性能監控和優化。
SDK提供方名稱：北京博睿宏遠資料科技股份有限公司；聯繫方式：market@bonree.com。
（3）銀聯出行碼SDK：為了向您提供出行碼服務，我行使用了銀聯出行碼SDK，該SDK需要收集獲取手機終端唯一標識信息（IMEI）、存儲權限、網路/WLAN查看權限，用於提供乘車碼出碼服務。
SDK提供方名稱：銀聯國際有限公司；聯繫方式：95516。
（4）微信Open SDK：為了向您提供分享到微信功能，分享圖片內容到微信，我行使用了微信Open SDK，該SDK需要收集並向微信APP傳輸使用者主動選擇的圖片或內容，但是我們不會將前述信息用於關聯和追蹤使用者。
SDK提供方名稱：深圳市騰訊電腦系統有限公司；聯繫方式:https://kf.qq.com/。
（5）同盾SDK：為及時甄別異常賬戶和可疑交易，保護您的資金安全，保障手機銀行端服務安全穩定運行，我行使用了同盾SDK，該SDK需要收集獲取設備品牌及型號、運營商信息、螢幕解析度、CPU型號、設備感測器信息（加速度、重力、光線、磁性、方向、陀螺儀感測器）、安卓的Android ID、OAID和設備序號、IP位址、設備MAC位址、WLAN熱點、服務集標識（SSID、BSSID）、藍牙MAC位址、終端設備唯一標誌符(UUID、IMEI、MEID和IMSI)、應用名稱、應用版本號、iOS的應用開發商識別字IDFV、軟體安裝清單信息、定位信息（GPS定位信息、基站信息）、SIM卡信息（SIM卡序號、語音信箱號碼）、麥克風許可權，我行收集上述信息僅用於反電信網路詐騙的風險識別。
SDK提供方名稱：同盾科技有限公司；聯繫方式：400-068-9796，service@tongdun.cn;隱私政策。
（6）騰訊雲慧眼人臉核身SDK：為了向您提供人臉識別服務，我行使用了騰訊雲慧眼人臉核身SDK，該SDK將收集獲取設備序號、網路狀態、IP位址、相機許可權、相機參數信息、人臉視頻及照片，用於人臉識別的活體檢測，收集上述設備信息並進行必要處理後用於真人即時認證的風險檢測和故障問題排查分析。
SDK提供方名稱：騰訊雲計算（北京）有限責任公司；聯繫方式：https://kf.qq.com/，Dataprivacy@tencent.com。
（7）國民認證FIDO SDK：為了向您提供指紋、3D人臉安全認證服務，我行使用了國民認證FIDO SDK，該SDK需要收集手機設備型號、設備名稱、手機廠商名稱、作業系統版本，用於機型相容性支持和問題排查。
SDK提供方名稱：國民認證科技（重慶）有限公司；聯繫方式：010-82900030。
（8）無碼埋點SDK：為了實現頁面訪問數據分析，我行使用了無碼埋點SDK，該SDK需要收集Android ID（安卓）、UUID（iOS）、CPU型號、生產廠商、設備型號、系統類型、運營商信息、網路類別信息。
SDK提供方名稱：長城信息股份有限公司，聯繫方式：0731-84932757，xuetao@greatwall.com.cn。
（9）掌紋支付 SDK：為了向您提供手機掌紋支付功能，我行使用了Palmda SDK，該SDK需要收集使用者掌紋信息的特徵值，用於使用者身份識別。
SDK提供方名稱：Tencent SenseTech Pte.Ltd；聯繫方式:蔡鴻真 18688838549；隱私政策。
Electronic Banking Services Personal Data Collection and
Privacy Policy Statement
Release date of this version: July 31, 2026
Effective date: July 31, 2026
ICBC Macau Electronic Banking (hereinafter referred to as "Mobile Banking") is a professional online financial service platform provided by INDUSTRIAL AND COMMERCIAL BANK OF CHINA (MACAU) LIMITED (hereinafter referred to as "the Bank"). According to the service channel, it can be divided into desktop page (Personal Online Banking, website: https://myebank.icbc.com.cn/icbc/perbank/index.jsp?areaCode=0119) and (Personal Mobile Banking, App name: ICBC Mobile Banking). In order to explain how the mobile banking collects, uses, stores, provides, transfers, discloses and deletes your personal data and what rights you have, the Bank will explain the relevant matters to you through this Policy. The key points are as follows:
I. The Bank will explain the types and purposes of your personal data collected so that you can understand the purpose, method, scope and possible consequences of our collection of personal data for a specific function.
II. When you use some functions, the Bank will collect some of your sensitive personal data, such as your phone book, biometric information, etc., after obtaining your explicit consent, refusing to provide such information will affect your normal use of the relevant functions.
III. Mobile banking will not actively provide or transfer your personal data to a third party. In case of other circumstances where your personal data is provided or transferred, the Bank will obtain your explicit consent. Explicit consent means that you make a written or oral statement in paper or electronic form, or make an affirmative action on your own to explicitly authorize the specific processing of your personal data. (Note: Affirmative actions include you actively check, actively click "OK", "Agree", "Register", "Send", "Dial", actively fill in or provide, etc.).
The clauses and sensitive personal data in this Policy that we consider to be materially related to your rights and interests, if you click or check "Agree" for this Policy and confirm the submission, it is deemed that you agree with this Policy and agree that the Bank will collect, use, store, provide, transfer, disclose and delete your personal data in accordance with this Policy.
The Bank is fully aware of the importance of personal data to you and will do our best to protect your personal data. The Bank is committed to maintaining your trust in the Bank and protecting your personal data in accordance with the following principles: the principle of consistent rights and responsibilities, the principle of clear purpose, the principle of consent, the principle of minimum necessity, the principle of ensuring security, the principle of subject participation, the principle of openness and transparency, etc. At the same time, the Bank is committed to taking appropriate security protection measures to protect your personal data in accordance with the law.
If you would like to know more about this Policy, please read the corresponding section according to the following index:
1. How the Bank collects and use your personal data
2. How the Bank uses Cookie technology
3. How the Bank stores and protects your personal data
4. How the Bank provides, transfers and discloses your personal data
5. How you manage your personal data
6. How the Bank process the data of minors
7. Application and update of this Policy
8. How to contact the Bank
1. How the Bank collects and uses your personal data
Personal data is any information relating to an identified or identifiable natural person that is recorded electronically or by any other means, excluding information that has been anonymized. Sensitive personal data refers to the personal data that, once disclosed or illegally used, is likely to cause the personal dignity of a natural person to be infringed or the personal or property safety to be endangered, including but not limited to biometric identification, religious belief, specific identity, medical health, financial account, whereabouts and other information and personal data of minors under the age of 18.
(1) How the Bank collects your personal data
In order to provide you with services and ensure the safety of your mobile banking account, when you use the mobile banking services, the Bank will collect the information that you actively input during your use of the services or that is generated due to your use of the services:
1. When you register for mobile banking, you need to provide the Bank with or authorize the Bank to collect necessary personal data in accordance with laws, regulations and regulatory requirements. If you refuse to provide, you will not be able to use the corresponding features or services.
(1) When you use the ICBC card to register the mobile banking, the Bank will collect your mobile phone number, ID card information, bank card number, and verify your bank card password to help you complete the mobile banking registration. If you are a registered ICBC Macau electronic banking customer or ICBC Macau mobile banking customer, you can directly log in to the mobile banking by using the electronic banking registered mobile phone number/user name/card (account) number. The Bank will collect the login information provided by you and verify and check the information.
(2) When you register for mobile banking, the Bank will collect your face information for identity authentication. If you are a permanent/non-permanent Macau resident, we will send your face information to the One Account App system of the Administration and Public Service Bureau of the Macao Special Administrative Region Government for verification and receive the verification results. If you are a resident of the People's Republic of China, your face information will be sent to the system of the Ministry of Public Security for verification and the verification results will be received. If you refuse to authorize the Bank to collect your face information, the Bank may not be able to register mobile banking for you.
2. When you use the functions or services of mobile banking, you may need to provide the Bank with or authorize the Bank to collect the personal data required for the corresponding services. If you refuse to provide, you may not be able to use the corresponding features or services.
(1) When you log in to the mobile banking, the Bank will verify the validity of the login mobile phone number, login password or gesture password. For the first login, use the initial password reserved at the counter and the customer's ID number to modify the new password, and then log in with the new password. If you forget your login password and need to reset it, the Bank will verify your identity information according to the needs of your selected scenario, including mobile phone number, name, ID type, ID number, bank card number, bank card withdrawal password and face information. The Bank will also collect the unique identifier and operating system version of the device for hardware binding and login security reinforcement. If you do not provide the above information, you will not be able to log in or retrieve your password, but this will not affect your normal use of the functions or services available without login.
(2) In order for you to use the login service more safely and conveniently, if your device and mobile banking version both support the fingerprint/iOS face ID/Harmony OS face recognition function, you can choose to log in to the mobile banking through the fingerprint/iOS face ID/Harmony OS face recognition function. You need to input your fingerprint/face information on your device. When you log in the mobile banking through fingerprint/iOS face ID/Harmony OS face recognition, you need to complete a fingerprint/iOS Face ID/Harmony OS Face Recognition verification on your device. The Bank only accepts the verification results and does not collect your fingerprint/face information, which will only be saved and processed on the device that you authorize to collect fingerprint/face information. If you don't want to login using fingerprint/iOS Face ID/Harmony OS Face Recognition, you can still login using other methods. You can turn on or turn off the fingerprint/iOS face ID/Harmony OS face recognition login function through the mobile banking "Me - Login Management - Fingerprint/Face Swipe Login." In order to ensure the safety of your personal data and account funds, you should not keep other people's fingerprints or face information in your device.
(3) For the purpose of maintaining your information, account, fund security and risk control, etc., when you are registering, logging in or logging out of electronic banking, or when you need to verify your identity or perform auxiliary authentication during function activation, inquiry or change of transactions, or when the customer's identity must be verified according to laws, regulations and regulatory requirements, the Bank will require you to verify your identity through face recognition. If you are a minor, you need to be verified by your guardian through face recognition. If you refuse to authorize the Bank to collect your face information, the Bank may not be able to provide you with the products or services that can be used only after the face recognition authentication is completed.
During face recognition, the Bank will collect your face information and verify your real identity through live body detection and face comparison technologies. The Bank will use the facial information that you authorize to keep in the Bank's electronic banking, self-service terminals, branch counters and other channels, or through the competent authorities (including but not limited to the Government of the Macao Special Administrative Region, the People's Bank of China and its authorized institutions) to find and use your identity information and facial photo information. If necessary, the Bank will send your face information to the above-mentioned institutions for verification and receive the verification results. After the face recognition verification, your face information will be archived and stored in our system as the transaction evidence.(Your face information will be stored for 3 years from the date of storage, and will be automatically deleted by our system after the storage period expires). If you do not provide your face information for collection and verification, the Bank will not be able to provide you with products or services that require face recognition and verification based on the nature of your business, risk control and other reasons. You can still choose other authentication methods provided by the Bank to complete the identity verification, or consult and handle the business through other channels such as branch counters, smart terminals, etc.
You can authorize the Bank to save your face information to the Bank's information database to provide 7*24-hour face recognition and authentication service. After your explicit consent and identity authentication, your face information will be encrypted and stored in our face recognition information database. You can log in to the mobile banking, and turn on or turn off the face recognition service or update your face information in the "Mobile banking" "My - Login management - Face brushing login service."
(4) In order for you to use the transfer and payment services more safely and conveniently, if your device and the mobile banking version both support the fingerprint/face recognition function, you may choose to activate the fingerprint/face recognition payment function for some brands or models of devices. You need to enter your fingerprint/face information on your device. When you pay by fingerprint/face swiping, you need to complete the fingerprint/face verification on your device. The Bank only accepts the verification results and does not collect your fingerprint/face information, which will only be saved and processed on the device that you authorize to collect fingerprint/face information. If you do not want to pay by fingerprint/face swiping, you can still transfer and pay by other means. You can turn on or turn off the fingerprint/face-swiping payment function through the mobile banking "ICBC e-payment - security management - fingerprint payment/face-swiping payment."
(5) When you use the real-name authentication service provided by mobile banking, the Bank will verify your name, identity type (ID card, passport), identity number, bank card number/account number, SMS verification code and face information according to the needs of the scenario you selected. The validity of the relevant information may be verified by verifying the account number/card password. If you do not provide the above information, the Bank will not be able to provide you with the products or services that can be used only after the real-name authentication is completed, but this will not affect your normal use of other functions of the Bank mobile banking.
(6) When you use the messenger service and mobile banking message service, the Bank will collect your account information and transaction information so as to send you the notices of account capital change and relevant transactions in a timely manner; the Bank may also collect the information that is legally retained by the Bank's partners and can be used with your authorization, so as to provide you with the corresponding message notification service.
(7) When you use the search service provided by mobile banking, the Bank will collect your search keywords and historical search records. If you use the voice search function, the Bank will collect your voice information and convert it into text search. The Bank will retain or collect statistics on your search keywords and click-through data, and display them below the search box to facilitate you to repeatedly enter or collect statistics on your search keywords and click-through data, or show you the product features or activity information related to your search content. Please note that your search keyword information cannot be used to identify your individual identity independently and does not belong to your personal data, and the Bank may use it for other purposes; only when your search keyword information is combined with your other information and can accurately identify your personal identity, during the combined use period, we will treat your search keyword information as your personal data and protect it.
(8) When you use the branch appointment, branch inquiry, remote audio and video services, third-party location information services provided by the mobile banking and the Bank for online financial transaction risk control, the Bank will collect your geographical location information. If you refuse to provide such information, you will not be able to use the location-based functions of the above services, but this will not affect your normal use of other functions of mobile banking.
(9) When you use your mobile phone number to send SMS notification for transfer or remittance, in order to facilitate you to quickly select the contact information for handling business from the mobile phone book, after you authorize us to obtain the phone book permission, we will collect the contact name or mobile phone number information you select from the phone book. It is automatically filled in the business processing page, and you do not need to enter it manually. If you refuse our collection of the above information, you may choose to manually enter the contact information and continue to use the above functions, which will not affect your normal use of other functions of mobile banking.
(10) When you use transfer remittance and ICBC electronic payment, you need to provide the name of the payee, bank card number/account number or mobile phone number, and may need to provide your name, mobile phone number, identity type and identity number, for the purpose of verifying identity and using the above-mentioned functions of payment services. In addition, the Bank will collect your relevant receipt and payment transaction records for your convenience. Specific matters shall be subject to the Customer Service Agreement for E-banking of Industrial and Commercial Bank of China (Macau) Limited that you agree to sign when you add the bank card. The above information is sensitive personal data, if you refuse to provide such information, you will not be able to use the above functions, but your normal use of other functions of mobile banking will not be affected.
When you open electronic payment through mobile banking, the Bank will verify your payment password. You can modify your payment password through the mobile banking "ICBC e-payment - security management". In order to ensure the security of your account funds, you need to verify your user identity and provide the original payment password when you enter the security management function to change the payment password.
(11) When you start the mobile banking, the Bank will conditionally read the contents of your mobile phone clipboard. If there are consecutive numbers on the clipboard and the system judges it as a bank account number, the system will read the number part to ask you whether you need to transfer money to this bank account. After you confirm the transfer and log in to the mobile banking, the page will jump to the transfer and remittance function and automatically fill the number read in the receiving account number input box to simplify your operation. When you copy the product sharing password, the content of the clipboard will be read and a pop-up box will be displayed. If you click View, it will jump to the corresponding product page. In order to effectively protect your personal data security, the read content is only stored in the local client. (Only the latest one is stored, and no historical record is kept) and will not be uploaded to the server of the Bank.
(12) When you use the mobile banking to reset the account password, cancel the loss reporting of the debit card, change the mobile phone number, adjust the limit, and sign the face agreement, the Bank needs to collect the bank card, mobile phone number, ID card, relevant certification materials, handwritten signature information and face information provided by you as the transaction evidence information.
(13) When you use the real-time activity notification (equipment system push) function of mobile banking, in order to show you the order status of your use of the service of reservation and number collection of ICBC Macau through the real-time activity notification function provided by the mobile phone system, we will send your order information (booking time, booking branch, queue number) to the mobile phone system. The real-time activity status related to the order will be displayed on the mobile phone home screen or the top of the active APP and the mobile phone lock screen. You can choose whether to receive the notification through the mobile phone system notification permission switch or the real-time activity notification function. When you agree to receive and use the above features, the Bank will collect and use your operating system version. Such information is necessary for the above functions, if you do not agree to provide such information, you may not be able to use the real-time activity notification function normally.
(14) When you use the risk capability assessment function of mobile banking, the Bank needs to collect information about your age, investment objectives, expected return, liquidity requirements, risk tolerance, source of income, disposable annual income, financial investment proportion, large debts, investment knowledge, investment experience, investment period, investment varieties, risk preference and the maximum investment loss that can be tolerated, in order to evaluate your risk tolerance and ensure the safety of your property.
(15) When you use the mobile banking to maintain the validity period of your ID card, we will collect your ID card information to verify the relevant information and the authenticity of your identity. We will keep the relevant information as the transaction data.
3. When you use the mobile banking service, in order to maintain the normal operation of the service, optimize the service experience of the Bank and ensure the security of your account, the Bank may collect the following basic information, including your device model, operating system and device unique identifier (Android ID for Android, IDFV for iOS, serial for Harmony OS),mobile banking version number, login IP address, device MAC address, network access mode, type and status, network quality data, device sensing data, operation log, system parameter, application permission, installed application information or running process information, service log information (information you search and view in mobile banking, referring website, service failure information),such information is the basic information that must be collected to provide you with services and ensure your normal use of our services.
4. In order to provide you with more accurate, personalized and convenient services, improve service experience and service quality, or to prevent risks, the Bank will collect the information provided by you when you give feedback, suggestions or report, collect the information you provide to the Bank when you participate in the questionnaire survey, collect the category, mode and operation information of your use of mobile banking functions or services, as well as your personal data in the Bank. The Bank will make statistics and analysis of such information, and provide you with corresponding services or products based on the above information.
5. When you use the services provided by the third party in the mobile banking, the third party may collect your nickname and icon through the mobile banking; if you have expressly agreed that such third party may collect your geographic location information, the Bank will authorize such third party to obtain the terminal geographic location information interface through which it may obtain your specific location information; with your explicit consent, third parties may collect your mobile phone number information; the Bank will deem that you allow the third party to collect the relevant information that you voluntarily provide to the third party when you use the services provided by the third party; for the information generated when you use the third-party service, the collection and use of the above information shall be agreed by you and the third party in accordance with the law. If you refuse the collection, use or transfer of the above information by the third party when providing services, you may not be able to use the corresponding services of the third party in the mobile banking, but this will not affect your use of other functions of the mobile banking.
6. In the following circumstances, you can choose whether to authorize the Bank to collect and use your personal data:
(1)Functions based on camera: you can use scan code payment, scan code withdrawal, cloud custody, QR code recognition, bank card recognition, ID card recognition, set icon, AR recognition, face recognition, same-screen narration service, my customer service, and remote video review services.
(2) Functions based on photo album (photo gallery): you can use the icon uploading, electronic receipt saving, notes of income and expenditure information, cloud storage, QR code recognition, bank card recognition, ID card recognition, face recognition, sharing, my customer service, and feedback services.
(3) Functions based on geographical location: you can enable positioning services for branch booking, branch inquiry, third-party location information service, code scanning and withdrawal, remote audio and video review service, online financial transaction risk control, voice search, so as to improve the accuracy of querying nearby branches and obtaining preferential merchant information.
(4) Face ID/Harmony OS face recognition: you can use the login and payment services.
(5) Functions based on storage: it is used to cache the text, image and video contents generated during your use of mobile banking, and used for icon uploading, electronic receipt saving, notes of income and expenditure information, QR code recognition, bank card recognition, ID card recognition, face recognition, sharing, my customer service, feedback, scan, login icon picture saving, client upgrade services.
(6) Functions based on telephone: it is used to read the basic information of the mobile phone device and identify the device binding information to ensure the transaction security when the customer logs in and pays. When you use the remote audio and video review services and the same-screen narration service, you need to confirm the phone status to avoid abnormal status such as equipment occupation due to audio and video communication during the call.
(7)Functions based on NFC: you can use Cloud Quick Pass, Apple Pay, ICBC Smart Manager, remote audio and video services, transfer and remittance services.
(8) Functions based on the phone book: you can use the mobile phone number for transfer, top up phone credit, and remittance SMS notification services.
(9)Functions based on fingerprint: you can use the fingerprint login and fingerprint payment services.
(10) Functions based on clipboard: you can use the functions of cloud password identification and transfer shortcut jump. The background of our system does not save the content of your clipboard.
(11) Functions based on screen projection and screen recording: you can use the same-screen narration service.
(12)Functions based on in-app App downloads and installation: you can use the client upgrade service when a new version is detected.
(13) Functions based on floating window: you can participate in Task Center activities and use audio and video review services and same-screen narration service.
(14)Functions based on accelerometer: you can use the Flip Logout and Shake services to log in.
(15) Functions based on obtaining the application list: you can use the URL service of the ICP/IP address/domain name information filing management system to query and check the ICP filing information of the App. It is used to cooperate with Sino chem App and obtain the application icon of its App.
(16) Functions based on notification: you can use the push notification service.
The above functions may require you to enable access permission of your camera, photo album (photo gallery), geographical location (location information), microphone, Bluetooth, Face ID/Harmony OS face recognition, storage space, phone, NFC, phonebook, fingerprint, clipboard, screen projection and recording, in-app App downloads and installation, and floating window in your device to the Bank, so as to realize the collection and use of the information involved in these functions. Please note that by enabling these permissions, you authorize the Bank to collect and use such information to realize the above-mentioned functions. If you cancel these permissions, the Bank will not continue to collect and use such information from you, and will not be able to provide you with the above-mentioned functions corresponding to these permissions.
7. In order to make statistics of customer visits, Baidu statistics component and Youmeng+ (webmaster statistics) component are used in some marketing advertisements and activity pages of mobile banking. The statistics component of this page needs to collect the device unique identifier(Android ID for Android, IDFV for iOS, AAID for Harmony OS) And network ip area information, used to achieve PV (page views), UV (independent visitors) related data statistics.
Name of component provider: Beijing Ruixun Communication Technology Co., Ltd. (Youmeng Company), Baidu Netcom Technology Co., Ltd. (Baidu Company), contact information: ext_tongji_reply@baidu.com (Baidu statistics), privacy policy (Baidu statistics).
8. Please understand that the functions and services provided by the Bank to you are constantly updated and developed, if a function or service is not specified in this Policy and collects your personal data, the Bank will separately explain to you the content, scope and purpose of information collection and use through page prompts, interaction processes, website announcements, etc., and obtain your authorization and consent before use. Authorized consent means an act by which you explicitly authorize the specific processing of your personal data, including through a positive act (i.e., explicit consent) or through a negative omission. (e.g., if you are in a collection area and do not leave the area after being notified of the collection).
(2) How the Bank use your personal data
1. In order to provide you with better services, with your consent, the Bank may use your personal data for the purposes of marketing, user experience improvement or market research. Whether you agree with the above authorization or not, the Bank will continue to provide high-quality services, which will not affect the sending of risk warnings, service status notices, business processing progress, repayment reminders and other reminders to you. You may change your authorization status by contacting the Customer Service Hotline 88995588 or by any other means designated by ICBC Macau.
2. In order to ensure the security of the service and help the Bank to better understand the operation of the ICBC Macau mobile banking, the Bank may record the information related to the operation of the mobile banking, such as the frequency of your use of the mobile banking, crash data, overall usage and performance data. The Bank will not combine the information stored in the analytics software with any personally identifiable information that you enter in mobile banking.
3. After collecting your personal data, the Bank may de-identify your information data by technical means. The de-identified information will not be able to directly identify the personal data subject. You agree that the Bank will analyze and use the de-identified data.
4. In order to provide you with activities, functions, advertisements, products and other contents that are more in line with your needs and interests, and bring you a better use experience, the Bank may, based on your click history, search history, transaction history and behavior information, based on the user portrait and user risk rating information of the feature tag, use the computer algorithm to automatically calculate and analyze the above information, so as to extract your personalized features, and in the floor, grid area, pop-up box advertisement and other areas of the mobile banking page, to show you the personalized content of product recommendation or marketing activities, such as wealth management, fund, deposit, insurance, payment, etc. In order to ensure your autonomy in receiving information, the Bank also provides the display content that is not based on the personalized recommendation algorithm. You can turn off the personalized recommendation in "Me-Settings-Personalized Settings-Personalized Recommendation" of mobile banking. After turning off the personalized recommendation, we will show you content based on non-personalized factors such as the popularity of the content, you may see content that you are not interested in or even do not like, and your experience may be affected.
(3) Exceptions to obtaining authorized consent
In accordance with relevant laws and regulations, regulatory requirements and national and Macao Special Administrative Region standards, in the following cases, if the competent national and Macao Special Administrative Region authorities or regulatory authorities require the Bank to provide, or for the purpose of fully protecting your rights and interests, or under other reasonable circumstances as agreed herein, your authorization and consent are not required for the Bank to collect and use your personal data:
1. In connection with the Bank's performance of its obligations under laws and regulations;
2. Directly related to national security and national defense security;
3. Directly related to public security, public health and significant public interests;
4. Directly related to criminal investigation, prosecution, trial and execution of judgment;
5. For the purpose of protecting the life, property and other significant legal rights and interests of customers or other individuals, but it is difficult to obtain the authorization and consent of the customers themselves;
6. The personal data involved is disclosed to the public by the customer, except that the customer expressly refuses or the Bank's collection and use of such information infringes the customer's significant interests;
7. Necessary for signing and performing the contract according to the customer's requirements;
8. The personal data is collected from legally disclosed information, such as legal news reports, government information disclosure and other channels, except that the customer expressly refuses or the Bank's collection and use of such information infringes the customer's significant interests;
9. Necessary for maintaining the safe and stable operation of the products or services provided, such as finding and handling the faults of products or services;
10. Other circumstances specified by laws, regulations and regulatory authorities.
2. How the Bank uses Cookie technology
To ensure that our services work properly, the Bank stores small data files called Cookie on your computer or mobile device. Cookie typically contain an identifier, the name of the site, and some numbers and characters. With the help of Cookie, the background server of the Bank can effectively allocate the access to the mobile banking, so as to provide better services. The Bank will not use Cookie for any purposes other than those described in this Policy. You can manage or delete Cookie according to your preferences. You can erase all Cookie stored on your computer and most web browsers have a feature that blocks Cookie. However, if you do this, you will need to change your user settings each time you visit our website.
3. How does the Bank stores and protects your personal data
(1) Storage
1. The Bank will store the personal data collected and generated within the territory of the People's Republic of China in the Macao Special Administrative Region and the People's Republic of China in accordance with laws, regulations and regulatory requirements. However, in order to process cross-border business, if we directly transfer your personal data overseas, we will inform you of the name of the overseas recipient, the contact information, the purpose of processing, the processing method, the type of personal data, and the way and procedure for you to exercise the relevant rights against the overseas recipient with your individual consent. We will, in accordance with domestic laws and regulations, conduct a security assessment of your personal data before leaving the country. At the same time, when the relevant conditions are met, we will carry out the cross-border transfer of personal data with overseas recipients in accordance with the security assessment organized by the national network information department, the provisions of the national network information department, the personal data protection certification of professional institutions, or the standard contract formulated by the national network information department. Also after obtaining your separate authorization and consent, some of your personal data (remitter's name, address, contact number, transfer-out account number and payee's name and detailed address) will be transmitted abroad as part of the transaction information, unless otherwise provided by laws and administrative regulations. In this case, the Bank will take effective measures such as data encryption and transmission to protect your information security.
2. The Bank will only retain your personal data for the period necessary for the purposes described in this Policy and within the time limit required by laws, regulations and regulatory requirements. For personal data beyond the above storage period, we will delete or anonymize it. For example:
Mobile phone number: when you need to use the mobile banking service, the Bank needs to keep your mobile phone number to ensure that you can use the service normally. When you cancel your mobile banking account, the Bank will terminate the information of the customer's electronic banking relationship;
User icon: after you set your icon, the Bank will always save your iconfor display on the login page. After you choose to restore the default icon, the Bank will delete the icon information you have set;
Login area: after you log in, the Bank will record the registration area of your card as the login area to ensure that you can use the mobile banking service normally. This information will be deleted when the App is uninstalled.
"Cloud Custody" storage information: after you use the "Cloud Custody" service,
(1) the Bank will encrypt and store your information stored in the "Cloud Custody" to ensure the confidentiality of the information technically;
(2) the Bank will store your information stored in the "Cloud Custody" on the background server of the Bank to ensure the security of your data. Even in the event of a server disaster or other special circumstances, your data can be recovered in a timely manner to ensure that your data will not be lost;
(3) when you operate the "Cloud Custody" data independently, the backup data stored in the Bank will change synchronously. If the data is deleted due to your misoperation, the backup data stored in the Bank will also be deleted;
(4) the contents stored in "Cloud Custody" can be viewed and edited only after you have logged in to the mobile banking in person and unlocked through "face recognition + SMS verification code" / "bank card password + SMS verification code" / "national network identity authentication App+ SMS verification code." You shall not transfer or lend your account or password to others;
(5) the Bank will not actively review the contents stored in "Cloud Custody," and the staff will not be able to view any contents stored by you;
(6) without your consent, the Bank will not provide the contents stored in "Cloud Custody" to a third party, unless the following circumstances occur:
a. disclosure to a third party or administrative or judicial authorities in accordance with the relevant provisions of laws or the requirements of administrative or judicial authorities;
b. in an emergency, to protect your interests and the interests of the public;
c. situations involving national security;
d. other circumstances in which personal data is required to be disclosed, edited or revealed according to law.
(2) Protection
1. The Bank will comply with relevant laws and regulations and take necessary measures to ensure the security of personal data, so as to prevent personal data from being illegally accessed, copied, modified, transmitted, destroyed, processed or used in an accidental or unauthorized manner. For example, we protect your personal data by means of encrypted storage of information, use of encryption technology for information transmission, de-identification of information, database locking, etc.
2. The Bank has established supporting management systems, internal control mechanisms and processes to protect your information security. For example, information access rights are strictly restricted, information access and processing activities are systematically monitored, and relevant personnel are required to sign non-disclosure agreements.
3. The Bank will take all reasonable and feasible measures to ensure that no irrelevant personal datais collected. The Bank will only retain your personal data for the period necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
4. In case of any security incident such as personal data leakage, the Bank will initiate the emergency response plan to prevent the security incident from expanding, and will promptly inform you of the incident-related information by means of push notification, e-mail or telephone, etc. If it is difficult to inform the personal data subjects one by one, the Bank will inform you by reasonable and effective means such as announcement.
5. The Internet environment is not 100% secure, we will try our best to ensure the security of any information you send to us. If our physical, technical or management protection facilities are damaged, resulting in unauthorized access to, public disclosure of, tampering with, or destruction of your information, resulting in damage to your legitimate rights and interests, we will bear the corresponding legal responsibilities.
6. If all or part of the electronic banking services provided by the Bank cease to operate, the Bank will inform you of the relevant products or services in the form of one-by-one delivery or announcement, at the same time, stop the collection of your personal data by the relevant products or services, and anonymize or delete the stored personal data, and protect the security of your personal data. If all or part of the electronic banking services are interrupted due to technical failures, network attacks, natural disasters and accidents, human factors and other reasons, the Bank will take emergency response and recovery measures to respond and resume services as soon as possible.
7. In terms of personal data protection, our mobile banking has passed the national security certification: Mobile Internet Application (App) security certification of China Network Security Review and Certification Center (CCRC).
4. How the Bank provides, transfers and publicly disclose your personal data
(1) Provide and transfer
The Bank will not provide or transfer your personal data to any other company, organization or individual, except in the following circumstances:
1. Obtain your explicit consent in advance.
2. If it is necessary to provide or transfer your personal data for business purposes, the Bank will inform you of the purpose of providing or transferring your personal data, the name of the data receiver, contact information, processing method and type of personal data, and obtain your separate authorization and consent in advance, unless otherwise provided by laws and administrative regulations. If sensitive data is involved, the Bank will also inform you of the type of sensitive data, the identity of the data recipient and the data security capabilities, and obtain your explicit consent. The Bank will accurately record and store the provision and transfer of personal data, including the date, scale and purpose of external provision and transfer, as well as the basic information of the data recipient.
3. The Bank may provide a third party (push service or mobile device manufacturer) with some of your basic information, including your device model and device unique identifier (Android ID for Android and IDFV for iOS), so that financial service alerts and related transaction notifications can be delivered to your mobile device in a timely manner. With your authorization and consent, the third party may collect your above personal data.
4. The Bank may provide you with location-based services, and the third-party location provider may collect some of your basic information, including your device model, device unique identifier (Android ID for Android, IDFV for iOS). With your authorization and consent, the third party may collect the above personal data from you.
Name of provider: Beijing Baidu Netcom Technology Co., Ltd.; Contact: 400 - 099 - 8998, map_service@baidu.com; Privacy Policy.
5. Your personal data may be shared within the Bank and its affiliates, and the scope of the shared personal data will be determined according to the specific business situation. The Bank will share the information only with your separate authorization and consent, and such sharing shall be subject to the purpose stated in this Policy. Once the purpose and method of processing personal data are changed, your authorization and consent will be sought again.
6. In order to provide you with more complete and high-quality products and services, some of our services will be provided by third parties. We may provide certain of your personal data to third parties to provide better customer service and user experience. The Bank will provide your personal data in accordance with the principles of legality, legitimacy, necessity and good faith and with your separate authorization and consent. The Bank will only provide the personal data necessary for the service. By signing an agreement, the Bank will require the third parties to strictly comply with laws, regulations and regulatory requirements and promise to process your personal data only within the scope of authorization, keep your personal data only for the shortest period necessary to achieve the purpose of this agreement, and keep your personal data securely and strictly confidential and encrypted transmission. If you refuse to provide your personal data necessary for carrying out the third-party service, you may not be able to use the third-party service in the Bank.
7. In accordance with laws, regulations and business practices, if personal data transfer is involved in the merger, acquisition, asset transfer and other similar transactions of the Bank, the Bank will inform you of the relevant information in the form of one-by-one delivery or announcement. The Bank will require new companies and organizations holding your personal data to continue to be bound by this Policy, otherwise, the Bank will require such companies and organizations to seek authorization from you again.
8. Please understand that the Bank may provide your personal data in accordance with the laws and regulations or the mandatory requirements of the competent government authorities.
The Bank will conduct strict security testing on the application programming interface (API) and software development kit (SDK) used by the third party to collect personal data, and agree on strict data protection measures with the third party to require the third party to process personal data in accordance with the Bank's instructions, this Policy and any other relevant confidentiality and security measures.
(2) Public disclosure
1. The Bank will not disclose the personal data collected to the public. If it is necessary to disclose, the Bank will inform you of the purpose of public disclosure, the type of the disclosed information, the type of the data receiver and the sensitive data that may be involved, and obtain your express consent. The Bank will accurately record and store the public disclosure of personal data, including the date, scale, purpose and scope of public disclosure.
2. Please understand that the Bank may disclose your personal data to the public under the circumstances of laws, legal procedures, lawsuits or mandatory requirements of government authorities.
3. The Bank will not disclose personal biometric data to the public.
(3) Exceptions to obtaining authorized consent
In accordance with relevant laws, regulations and regulatory requirements, as well as national and Macao Special Administrative Region standards, the Bank may provide, transfer and publicly disclose your data information without your prior authorization and consent under the following circumstances:
1. Necessary for the conclusion and performance of a contract to which an individual is a party, or necessary for the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with the law and the collective contract signed in accordance with the law;
2. Necessary for the performance of statutory duties or obligations;
3. Necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in emergencies;
4. Carry out news reporting, public opinion supervision and other activities for the public interest, and process personal data within a reasonable scope;
5. Process personal data that is disclosed by the individual or has been legally disclosed to the public within a reasonable scope in accordance with the provisions of this Policy;
6. Other circumstances prescribed by laws and administrative regulations.
5. How you manage your personal data
In accordance with the relevant laws, regulations and regulatory provisions of the People's Republic of China and the MacaoSpecial Administrative Region of the People's Republic of China, the Bank guarantees that you will exercise the following rights with respect to your personal data:
(1) Accessing, copying, correcting and updating your personal data
You have the right to access, copy, correct and update your personal data through the mobile banking of ICBC Macau, unless otherwise specified by laws and regulations. You are responsible for keeping your personal data up-to-date. The Bank will verify your identity before you amend your personal data.
1. During your use of mobile banking, you have the right to modify or independently update your personal data, the Bank will verify your identity before you amend your personal data. You need to log in the mobile banking, after logging in, you can view and modify your basic information in "My - Personal Information" or query and modify your relevant security settings in "Security Center" such as changing the third-party agreement, opening the account security lock, etc..
For the modification of mobile phone number information, if you are a registered user of the Bank’s electronic banking, you can modify the mobile phone number in the function of "My - Personal Information - Mobile Phone Number" or "Security Center - Mobile Phone Number Management" after logging in the mobile banking. After the modification, you can use the new mobile phone number to log in to the mobile banking again. If you are not a registered user of the Bank's electronic banking, you can modify your mobile phone number in the "Help - Modify Mobile Phone Number" at the bottom of the login interface of mobile banking.
2. You can log in the mobile banking, manage the bound bank card in "Account," or query the relevant transaction details and modify the payment password, turn on or turn off the small-amount password-free payment through "e-payment - payment details" and "Security Center - e-payment security management."
The Bank's modification or update of the above personal data will take effect in real time or quasi-real time.
3. You can log in to the mobile banking, after the password is verified, you can view and copy the card number (account number), account opening name, opening bank and other account opening information in the "Account."
(2) Delete your personal data
You may request the Bank to delete your personal data under the following circumstances:
1. If the Bank's collection and use of personal data violates laws and regulations or violates the agreement with you;
2. The Bank's provision or transfer of personal data to a third party violates laws and regulations or violates the agreement with you;
3. The Bank's public disclosure of personal data violates laws and regulations or violates the agreement with you;
4. If you no longer use our products or services, or cancel your account;
5. If the Bank no longer provides you with products or services, or the retention period of personal data specified by laws and administrative regulations has expired;
6. If the purpose of the Bank's processing of your personal data has been realized, cannot be realized or is no longer necessary for the realization of the processing purpose;
7. If you withdraw your consent to our collection of personal data;
8. Other circumstances stipulated by laws and administrative regulations.
You may request to delete your personal data related to electronic banking through our branches and customer service hotline (88995588). After deletion, your personal data shall be collected again when you apply for electronic banking. The Bank will complete the verification and processing within 15 working days from the next day of receipt of your request. If the Bank decides to respond to your request for deletion, we will also notify the third parties who have obtained your personal data from us at the same time and require them to delete it in a timely manner, unless otherwise provided by laws and regulations, or these entities have obtained your independent authorization.
When you delete information from our services, the Bank may not delete the corresponding information in the backup system immediately, but will delete such information when the backup is updated.
If the third party who obtains the personal data from the Bank violates the requirements of laws and regulations or the agreement with the Bank to process the personal data, the Bank will immediately require the third party to stop the relevant behavior, and take or require the third party to take effective remedial measures to control or eliminate the security risk of the personal data; If necessary, the Bank will terminate the business relationship with the third party and require the third party to delete the personal data obtained from the Bank in a timely manner.
If the retention period prescribed by laws and administrative regulations has not expired, or if it is technically difficult to delete the customer's information, the Bank will stop processing the customer's information except for storage and taking necessary security protection measures.
(3) Change the scope of your authorization and consent
Each business function requires some basic necessary personal data to be completed. For the personal data collected and used to improve the product and service experience (such as geographic location information, phone book contact information, etc.), you can turn on or turn off the location service permission, read contact permission, call permission, etc., in the "Settings" of the mobile phone system according to the different brands and models of the mobile phone. You can give or revoke your authorization at any time, or you can manage the authorization through "My-Settings-Personalized Settings-System Permission" of mobile banking. You may prevent the Bank or the third party providing relevant services from collecting your personal data by disabling some functions of mobile banking or refusing to provide relevant personal data when you open and use some functions or services. The above methods may cause the Bank or the relevant third party to be unable to provide you with the corresponding services.
(4) Cancellation of account by the personal data subject
If you are a registered user of the Bank's electronic banking, you may request to cancel your electronic banking account through the Bank's counter, smart device or electronic banking channel (mobile banking desktop and mobile banking). After the electronic banking account is cancelled, your mobile banking account will be cancelled at the same time. The way to cancel electronic banking via mobile banking is as follows:
Log in and cancel electronic banking: you can start the mobile banking, click "My" - "Settings" - "Cancel electronic banking." After logging in the mobile banking, click "I want to cancel" for face recognition authentication. After passing the authentication, you can cancel electronic banking.
If you are not a registered user of the Bank's electronic banking, you may choose to uninstall or stop the use of mobile banking at your own discretion to prevent the Bank from collecting your personal data. The cancellation of your electronic banking account is irreversible. Once you cancel your electronic banking account, your mobile banking account will be cancelled synchronously. The Bank will no longer collect your personal data through mobile banking and will delete all the information related to your mobile banking account (for example, the relevant information stored in the "Cloud Custody" of mobile banking will be deleted synchronously after the electronic banking account and mobile banking account are cancelled), unless otherwise specified by laws, regulations or regulatory authorities.
Please note that the Bank will not cancel your mobile banking account and all information related to your mobile banking account will not be deleted when the registered electronic banking user of the Bank only deletes the mobile banking in the mobile phone device. You will still need to close your electronic banking account in order to do so. When you cancel your mobile banking account, it will be deemed that you have withdrawn your consent to this Policy, and the Bank will no longer collect the corresponding personal data. However, your decision to withdraw your consent will not affect the previous collection of personal data based on your authorization.
(5) Responding to your request above
For security reasons, the Bank may require you to provide a written request or otherwise prove your identity. The Bank may verify your identity before processing your request. Generally, we will complete the verification and processing within 15 working days after verifying your identity. Please understand that the Bank may refuse the requests that are not supported by the current technical means and may bring risks to the legitimate rights and interests of others.
Notwithstanding the foregoing, in accordance with relevant laws, regulations and regulatory requirements, the Bank may not be able to respond to your request under the following circumstances:
1. Necessary for the conclusion and performance of a contract to which an individual is a party, or necessary for the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with the law and the collective contract signed in accordance with the law;
2. Necessary for the performance of statutory duties or obligations;
3. Necessary to respond to public health emergencies, or to protect the life, health and property safety of natural persons in emergencies;
4. Carry out news reporting, public opinion supervision and other activities for the public interest, and process personal data within a reasonable scope;
5. Process personal data disclosed by the individual or other legally disclosed personal data within a reasonable scope in accordance with the provisions of this Policy;
6. Other circumstances prescribed by laws and administrative regulations.
6. How the Bank processes the data of minors
Minors may not create their own user accounts without the consent of their guardians. If you are a minor, please ask your guardians to read this Policy carefully and use our services or provide information to us with your guardian's consent. The Bank will only use or provide your personal data when permitted by laws, regulations and regulatory requirements, expressly agreed by the guardians or necessary to protect minors.
7. Application and update of this Policy
1. The Bank reserves the right to update or modify this Policy from time to time. This Policy is applicable to all products and services provided by ICBC personal mobile banking and personal online banking as well as all users. The Bank will not reduce your rights under this Policy without your explicit consent. In case of any change to this Policy, the Bank will release the updated version of this Policy on the desktop and mobile terminals of mobile banking, and will notify you in reasonable ways such as mobile banking push notice, pop-up window or website announcement before the change takes effect, so that you can understand the latest content of this Policy in a timely manner.
2. In case of any significant change in laws, regulations and regulatory requirements, business needs or the Bank's provisions on the protection of personal data, the Bank will revise this Policy in due time and provide a more prominent notice to explain the specific changes in this Policy. The specific types of significant changes include, but are not limited to:
(1) The mode of relevant financial products or services has changed significantly. For example, the purpose of processing personal data, the type of personal data to be processed, and the way in which personal data is to be used;
(2) Significant changes in the Bank's ownership structure and organizational structure. For example, change of owners due to business adjustment, bankruptcy merger, etc.;
(3) The change in the main target of the provision, transfer or public disclosure of personal data involved in the relevant financial products or services;
(4) Significant changes in the rights of the customer to participate in the processing of personal data and the manner in which they are exercised;
(5) The change of the Bank's responsible department for handling personal data security, contact information and complaint channel;
(6) The Bank assesses the impact of personal customer information security on relevant financial products or services and finds that there is a high risk.
You acknowledge and confirm that if you do not agree with the updated contents of this Policy, you shall immediately stop using the mobile banking services and cancel the relevant accounts, and we will stop collecting your relevant personal data; if you agree to the updated contents of this Policy and continue to use the mobile banking services, it shall be deemed that you have fully read, understood and accepted the updated Policy and agreed that the Bank will collect, use, store, provide, transfer, publicly disclose and delete your relevant personal data in accordance with the updated Policy.
How and how to access this Policy:
1. Portal - Home - More Announcement - Business Notice
2. Personal mobile banking - My - Settings - About
8. How to contact the Bank
If you have any comments, suggestions or questions about this Policy, you can contact the Bank via 88995588 or "Online" in mobile banking. We will accept and handle your questions within 15 days from the next day of receipt, unless otherwise specified by laws, regulations or regulatory authorities. If you believe that our handling of personal data has damaged your legal rights and interests, and you do not agree with our handling opinions on relevant issues, you can also make a complaint or report to the regulatory authorities such as the Monetary Authority of Macao. You may also seek resolution by filing a lawsuit in a court of competent jurisdiction in the defendant's domicile.
Full name of the Bank: Industrial and Commercial Bank of China (Macau) Limited
Registered address: Avenida da Amizade no.555, Macau Landmark, ICBC (Macau) Tower, 18/F, Macau
Personal data protection e-mail address: Data_Protection@icbc.com.cn
Appendix: Third-party Information Integration SDK List
When you use the functions or services of our "ICBC Mobile Banking," in some specific scenarios, our bank may use the software service kits (hereinafter referred to as "SDK") provided by the third-party service providers with corresponding business qualifications and capabilities to provide you with services, the third-party service provider collects your necessary information. The relevant third party directly obtains the relevant information required to meet the service in accordance with the general principles of its SDK output, and does not share your personal information with our bank, and our bank will not actively obtain and store such information.
(1) Baidu positioning SDK. In order to provide you with location-based services, our bank uses Baidu location SDK, which needs to obtain the unique identification information, latitude and longitude information and operating system version of your mobile phone terminal to realize the location function. The relevant functions will be provided with your authorization to use the location information. If you do not authorize, the use of such functions will only be affected.
Name of SDK provider: Beijing Baidu Network Technology Co., Ltd.; Contact: 400 - 099 -8998, map_service@baidu.com.
(2) Borui SDK (Android): In order to improve the stability of "ICBC Mobile Banking" mobile terminal application, we have adopted Borui SDK. The SDK needs to obtain your Android ID, CPU, device model, mobile phone system version, mobile phone battery, network status, partial click records in the application, rough location information, involving read phone status and access to rough location permissions, for network request, crash performance monitoring and optimization of the application.
Borui SDK (iOS): In order to improve the stability of the mobile application of "ICBC Mobile Banking," we have used the Borui SDK. The SDK needs to obtain your IDFV, CPU, device model, mobile phone system version, mobile phone battery, network status, partial click records in the application, and rough location information for network request, crash performance monitoring and optimization of the application.
Name of SDK provider: Beijing Borui Hongyuan Data Technology Co., Ltd.; Contact: market@bonree.com.
(3) UnionPay travel code SDK: In order to provide you with travel code service, our bank uses UnionPay travel code SDK, which needs to collect and obtain the unique identification information (IMEI) of mobile phone terminal, storage authority and network/WLAN viewing authority to provide the travel code issuing service.
Name of SDK Provider: UnionPay International Co., Ltd.; Contact: 95516.
(4) Wechat Open SDK: In order to provide you with the function of sharing to Wechat and sharing picture contents to Wechat, we have adopted Wechat Open SDK, which needs to collect and transmit to Wechat APP the pictures or contents actively selected by users, but we will not use the aforesaid information for associating and tracking users.
Name of SDK provider: Shenzhen Tencent Computer System Co., Ltd.; Contact: https://kf.qq.com/.
(5) Tongdun SDK: In order to identify abnormal accounts and suspicious transactions in a timely manner, protect the safety of your funds, and ensure the safe and stable operation of the mobile terminal service of mobile banking, we use Tongdun SDK. This SDK needs to collect and obtain the device brand and model, operator information, screen resolution, CPU model, and device sensor information (Acceleration, gravity, light, magnetism, direction, gyro sensor), Android ID, OAID and device serial number, IP address, device MAC address, WLAN hotspot, service set identifier (SSID, BSSID), Bluetooth MAC address, unique identifier of terminal device (UUID, IMEI, MEID and IMSI), application Name, application version number, iOS application developer identifier IDFV, software installation list information, location information (GPS location information, base station information), SIM card information (SIM card serial number, voice mail number), microphone permission, The above information collected by the Bank is only used for risk identification of anti-telecommunication and network fraud.
Name of SDK provider: Tongdun Technology Co., Ltd.; Contact: 400 - 068 - 9796,service@tongdun.cn; Privacy Policy.
(6) Tencent Cloud Smart Eye Face Verification SDK: In order to provide you with face recognition service, we have adopted Tencent Cloud Smart Eye Face Verification SDK. The SDK will collect and obtain the device serial number, network status, IP address, camera permission, camera parameter information, face video and photos for the liveness detection of face recognition. After collecting the above device information and performing necessary processing, it will be used for the risk detection and fault troubleshooting analysis of real-time authentication of real people.
Name of SDK provider: Tencent Cloud Computing (Beijing) Co., Ltd.; Contact: https://kf.qq.com/, Dataprivacy@tencent.com.
(7) National certification FIDO SDK: In order to provide you with fingerprint and 3D face security certification services, our bank has used the national certification FIDO SDK, which needs to collect mobile phone device model, device name, mobile phone manufacturer name and operating system version for model compatibility support and troubleshooting.
Name of SDK provider: National Authentication Technology (Chongqing) Co., Ltd.; Contact: 010 - 82900030.
(8) Codeless embedding SDK: in order to realize the analysis of page access data, BQD has adopted codeless embedding SDK, The SDK needs to collect Android ID (Android), UUID (iOS), CPU model, manufacturer, device model, system type, carrier information, and network type information.
Name of SDK provider: Greatwall Information Co., Ltd., contact information: 0731 -84932757, xuetao@greatwall.com.cn.
(9) Palmprint payment SDK: In order to provide you with the mobile phone palmprint
payment function, our bank uses Palmda SDK, which needs to collect the characteristic value of the user's palmprint information for user identification.
Name of SDK Provider: Tencent Sense Tech Pte.Ltd; Contact: Cai Hongzhen 18688838549; Privacy Policy.
If there is any inconsistency between the Traditional Chinese version and the English version of this Statement, the Traditional Chinese version shall prevail.