Internet Security and Privacy Policy Statement

Internet Security
 
Security Measures By the Bank
 
MEVAS Bank provides the following measures to ensure your banking information and account details are secure when you are using our online personal financial services:
Secure Socket Layer (SSL) & Strong Encryption (128 bit)
Secure Socket Layer and 128 bit encryption is employed to ensure confidentiality. All data and information transmitted between you and our Bank through Internet is encrypted by using 128-bit encryption. To ensure your online transaction information is encrypted, look for the 'lock icon' in the status bar of your internet browser on the right hand side corner of your PC while you are connected.
 
Personal Identification Number (PIN)
Your only way to access your account via MEVAS online personal financial services is to enter the correct combination of your MEVAS ID and PIN. For security reason, your PIN will be temporarily suspended if you incorrectly key in your password for four consecutive times.
 
Firewalls
We also use firewalls to protect the inside of MEVAS Bank's computer systems by refusing those entries that were unauthorized.
 
Automatic time out
MEVAS online financial services will be automatically logoff when there is no activity for 15 minutes in order to protect you against unauthorized access.
 
Security Team
To fight against computer hacker, MEVAS Bank Security Team which keep track to any attempts that would break into our security systems in order to ensure safe security. If you suspect there are unusual activities in your account, please promptly call the Security Incident Hotline at 2507-8000 to report the incidence.
 
Last Logon Information
MEVAS online financial services also provide you with the information required to be vigilant. Each time you logon, we provide information related to your last banking session. If you find any discrepancies, please contact us immediately.
 
Security Measures by Customers
 
To avoid unauthorised access to your account(s), you should pay attention to the following points:
Take good care of your PIN
The PIN for MEVAS online financial services is used to secure your online transactions. You play an important role in protecting your PIN:
  		• Do not disclose your PIN in any occasion or to anyone else including your relatives, friends, to anyone. You are suggested to memorize your PIN and destroy the PIN notification, then change your PIN after first successful login to the online financial services.
  		• Avoid using easy-to-access numbers as your PIN, such as your birthday, HKID No., Phone No., or similar numbers or a recognisable part of your name as your PIN.
  		• Do not write down or record the PIN without disguising it.
  		• Do not use same set of User ID and PIN from other Internet sites.
  		• Regularly change your PIN via our online financial services (e.g. 1 month).
  		• Contact us immediately if you believe that your PIN has been compromised, lost or stolen.
     
    Never disclose your PIN and personal information
    MEVAS Bank will never contact you and ask you for your PIN and personal information for our online financial services, phone banking, or ATM services. These include your MEVAS ID, PIN, account number, identification/passport number, address, phone number etc. On the other hand, MEVAS Bank will never disclose such information in our e-mails other than your name for personalisation purpose, nor ask you to confirm any personal data by replying to our email.
     
    Protect your computer
  		• Install a personal firewall on your computer. Personal firewall software is designed to prevent hackers from accessing the computer it is installed on. Installing a personal firewall is recommended especially if you are using a broadband connection. When installing such software, follow the manufacturer's recommendations for a 'conservative' accesses control.
  		• Install and regularly update virus detection software. Virus detection software scans your computer and your incoming email for viruses and then deletes them. You can download anti-virus software from the websites of software companies or buy it in retail stores. To be effective, anti-virus software must be updated routinely. As a matter of precaution avoid opening any emails with attachments that you are not expecting, even if they are from known people.
     
    Protect your online transactions
  		• Do not access MEVAS online financial services from public places or from shared computers such as those in cyber cafes. You never know what malicious programs might be installed on the PC you use there.
  		• Always exit using the 'Logout' button to ensure you end each Internet banking session securely.
  		• When you've finished using the Internet, always disconnect. Avoid leaving your connection on, especially with broadband access, unless you're actively using it.
  		• Always check the date and time of your last visit to MEVAS online financial service (we track it at all times and display it on the Welcome Page). If you suspect anything unusual, please contact us immediately.
  		• Please take attention to review the transactions before confirmation. When your instructions have been accepted and confirmed online, they cannot be reversed and cancelled.
  		• For your protection, kindly check your Bank statement regularly and report any unusual transaction to the Bank immediately. For statement information and customer enquiries, please call customer service hotline.
     
    Make sure you are connected with MEVAS Bank
    Recently, there are some fradulent websites that mimics the look of the financial instutition's website to capture your usernames, PIN and other personal and confidential banking details. Thus, it is important to make sure that you are connecting with MEVAS Bank. To stay away from connecting with a fraud website, never follow a link within an email to start an e-banking session. Always logon directly from your browser or select from your favourite if you have already added www.mevas.com to your list of favourite internet sites. This will avoid you from being sent to a false site. Remember: No e-mail from MEVAS Bank will contain a hyperlink to our internet banking logon page.
     

    To ensure that you are visiting MEVAS's secure web pages, you can click on the lock or key symbol at the bottom of the browser window. A pop-up window will show the certificate information that should contain our bank's domain name, i.e. pfsxx.mevas.com*, for your verification. Make sure you only enter your MEVAS PIN in a secure web page.

    * "xx" should be a numerical value of either 01, 02, 03 or 04; "pfs" stands for personal financial services.

     


    Privacy Policy Statement

    It has been our policy and priority to safeguard any information provided by our customers. We will strictly comply with the requirements of the Personal Data (Privacy) Ordinance. That means the internationally recognized standards of personal data protection will be followed or even exceeded where possible. It has been our commitment to train and enforce our staff to practise this Privacy Policy.

    In visit to our website, we collect no personal data from any customer for only browsing, except updating the statistics on the number of visitors. Throughout the website, only the necessary information for applications / enquiry will be collected, and the customers will be informed of the purposes and uses, retention period, possible transfer and disclosure and the right of access to and correction of the collected information on the respective screens. In order to ensure the security and confidentiality of personal data we collect, encryption techniques have been applied for data transmission. We will not collect any information from customers without notice.

    Once we obtain customer's personal information, only the authorized staff will be permitted to access to that information, and it will not be revealed to any external organizations without customer's agreement unless it is required to do so by law. From time to time, we may send promotional materials regarding our products to customers according to the collected information. We will stop sending the materials to customers when they show us their preferences by writing or talking to us.

    We will continuously assess ourselves to ensure that our customer privacy is properly respected and protected. For details, please refer to the Notice to Customers relating to Customers' Data.