Privacy and Security Notice

This is our website notice.

We have other notices. Some of these may apply to you as well. It depends on how you choose to interact with us.

• Public website notice (you are here): This notice covers parts of this website where you don't need a password (like this page).
• Full privacy notice: Our full privacy notice contains more information to read alongside this notice. It will tell you more details on how HSBC uses your personal information in general. You can read here
• Cookie notice: This notice covers how we collect information from your web browser or mobile device. You can find out more at here
• Other notices: Some of our apps or parts of our websites have their own privacy notices. For example, mobile apps have privacy notices. So does our careers section of our website at hsbc.com/careers.

You can usually find our notices in the footer of the webpage. If you're using an app, it will usually be in the menu. Our full privacy notice is our main one and can be found at here

We collect information when you use our website. We also do this when you visit one of our social media sites.

When you view our website or social media sites, we can see:

• What you click
• What you view
• How long you spend on pages
• Your device & internet connection details such as: type of device you're using, IP address and details about your internet connection, technical details such as your screen size and the software you're using, such as your web browser.
• Your country or region (not exactly where you are unless we ask permission)
• Your unique advertising or other identification numbers allocated to your browser or device.

If you follow a link to this website, we know the last site you visited. You may have reached this website by following a link from an email. When you open an email from us, we may be able to tell:

• that you've opened it.
• what links in the email you click on.

When you fill in a form on our website, we can see what you type.

If you send us a message, we may collect information you tell us.

Some of this data is collected by:

Our partners: These may be website hosts or social media sites.

Cyber-security filtering technology: This keeps our website safe from fraud and crime.

Cookies and similar technology: These are set on your device by us and our trusted partners.

We don't often know exactly who you are from this data. But sometimes we may connect this data with other information we hold about you.

For example:

• If you browse our website and then access online banking, we may connect this data to you. The next time you visit, we may still link that data to you.
• If you browse our website while logged into social media accounts, then our partners may be able to connect this data to those accounts.

It might be possible to connect your browsing data to personal data held by third parties.

We use your data when it is in our legitimate interests.

This means we need to have a valid and lawful reason to use your data and balance this with your interests.

To deliver the website

We use your information to operate the website and monitor how well it is working. Most websites do this.

To improve our business

We use your information to:

• Understand how you use our services.
• View trends in product offerings.
• Develop well targeted offers and products.
• Find offers and products that may be of interest to you.
• Make our services better for you.
• Learn how useful our marketing is and make it better.

Security & protection

We use your information to help protect you and ourselves against fraud or crime. For example, our service providers look at all use of our website to help block malicious activity. This helps keep you and us safe.

One of our security providers is Google ReCaptcha. Google asks us to tell you that this is subject to the Google Privacy Policy and Terms of Use.

Personalising our website

When you visit our website, we may use data we collect to make the site reflect you. This could include:

• Tailoring our website content and services for you.
• Showing your information or updates that might be useful for you.
• Showing products or services that we think will be of interest to you.

Online advertising

When we advertise online, we may share your information with our advertising partners.

We may ask our advertising partner to use that information to:

• Check if you hold an account with them.
• Choose which adverts to send to you.
• Send our adverts to you.
• Exclude you from adverts, e.g. if the advert is for a service you already use.
• Advertise to people who have a similar profile to you or share your interests.
• Identify what other marketing may be of interest to you.
• Understand how useful our marketing is and make it better.

Social Media

HSBC uses social media to:

• Help connect with you.
• Share information about our products and services.
• Sometimes these involve using your data.
• Social media platforms may let you choose what advertising you receive. You should contact them for more information

Facebook

When you use an HSBC Page on Facebook, Facebook Malaysia and HSBC collect information about you. This includes:

• What you click on: if you start a messenger conversation.
• What you view: when you hover over a link or have an event page on screen.
• What you say: like comments or reactions.
• Your actions: like sharing or recommending.
• Your activity: how long you spend on pages, date and time of actions or websites you visited before you took the action.
• Your location: Country or region. This is not your precise location unless you have provided this in your user profile and you are logged-in.
• Your device and internet connection.
• Your Facebook profile details and user ID.

HSBC has access to this information to use for reporting, insights and marketing purposes and so does Facebook.

This helps HSBC improve our offering on Facebook and create better marketing. HSBC may also see this information if HSBC has communicated with you on Facebook. HSBC does this because it helps us know who we're speaking to.

If you've allowed us to use cookies that support our marketing, HSBC and Facebook can collect this information when you use HSBC's site too. To learn more, or to switch this off, please visit our Cookies Notice at here. You can control which cookies you allow by selecting "Manage Cookies".

Facebook

Facebook Malaysia is a 'joint controller' with us in law for processing where we collect information about you:

• From your actions on our Facebook page.
• Through the Facebook pixel on our website.

We and Facebook have agreed to share some responsibilities to protect your personal data, by:

• Making sure we each have a legal basis for joint processing.
• Honouring your legal rights in respect of your data.
• Ensuring security of joint processing.

You can contact HSBC about how we do this. You can also contact Facebook about what they do. This includes exercising your legal rights in respect of the data Facebook collects and retains itself.

Further details of how Facebook processes your personal information, the legal basis it relies on, your rights and Facebook’s contact details can be found at https://www.facebook.com/about/privacy .

We think carefully about how we use your information. We always aim to use it in a way that's fair to you. You might prefer us not to use it for some purposes.

You have a legal right object to our processing of your information in some circumstances. For example to ask us not to send you direct marketing materials. We may not always be able to stop processing your information, such as if we're using it to help protect you or others or when it is necessary to provide you banking services or to fulfil legal and regulatory obligations.

We have a couple more things to tell you.

• Transfers: We transfer your information outside of Malaysia. For more information, please refer to our privacy notice below
• Security: We'll use a range of measures to keep your information safe and secure, such as encryption.
• Storage: We keep your information in line with our data retention policy. We do this to comply with legal and regulatory requirements, and for our legitimate purposes.

Our full privacy notice contains more information about these topics at here

Thank you for reading this privacy notice. Happy browsing.

We try to protect your personal data against unauthorised or accidental access or processing.

• implementing appropriate physical, electronic and internal processes to safeguard and secure your personal data,
• using 128-bit Transport Layer Security ("TLS") encryption technology, which is an industry standard for encryption over the internet to protect data, in the secure area of this site/app. When you provide sensitive information such as credit card details, it will be automatically converted into codes before being securely dispatched over the internet,
• protecting our web servers behind "firewalls" and our systems are monitored to try to prevent any unauthorised access,
• using the secure email facility if we need to send personal data to you by email. We won't send your personal data by ordinary email,
• taking all practical steps to ensure that personal data will not be kept longer than necessary and we comply with all laws and regulations in Malaysia concerning the retention of personal data.

Keep your account details and security details secure.

This means taking steps like:

• not sharing or allowing anyone else to know your username, password, 6-digit pin and Security Code so don't write them down. We'll never verbally ask you for your password.
• choosing a username and password that are not easily identifiable by others (such as your birthday, telephone number or email address),
• using the secure email facility on this app/website for general enquiries.

This means taking steps like:

• keeping your device locked when not in use, with a PIN, password or biometric authentication,
• not sharing your device. If you do allow someone else to use your device, please supervise their use to ensure that they don't access your accounts,
• not sharing or allowing anyone else to know any access password that you use on your device,
• if you choose to activate the feature that allows you to use your biometric credentials to log onto your device or this app, ensuring that only your biometric credentials are registered on the device to avoid unauthorised access by other people,
• only downloading HSBC apps and its updates from an official app store and not from any unofficial sources,
• installing the latest anti-virus and anti-spyware software on your device that you use to access this site/app, and keeping it updated. When installing protection, always use a reputable brand from a mainstream supplier,
• ensuring the operating system running on your device and the security update is up to date,
• not disclosing your online banking credentials to any third parties (including third party mobile aggregator apps),
• not using HSBC apps and the Mobile Secure Key Feature on any device or operating system that has been modified outside the mobile device or operating system vendor supported or warranted configurations. This includes devices that have been "jail-broken" or "rooted". A jail broken or rooted device means one that has been freed from the limitations imposed on it by your mobile service provider and the phone manufacturer without their approval. The use of HSBC apps and the Mobile Secure Key feature on a jail broken or rooted device may compromise security and lead to fraudulent transactions which we may not be responsible for.

If you think that your device has been lost, stolen or is being used by another person or if you think your username or password is known by someone else, please tell us straight away. You may be responsible for unauthorised payments made from your accounts if you have not kept your device, account details or security details safe or if you haven't followed the security precautions that we advise you to follow from time to time.

For more tips on staying safe on Online Banking, please read: Safe-internet-banking and on mobile banking, please read: mobile-security

Cookies are small bits of information that are automatically stored on your web browser in your computer, mobile phone or other device for accessing the internet that can be retrieved by this site/app. We will be able to access the information stored on the cookies and record how you use this site/app.

Cookies are useful because they allow us to recognise your device and they store information about your use of this site/app which enables us to provide more useful features to you, to tailor the content of our website and mobile applications to suit your interests and, where permitted by your marketing preferences, provide you with promotional materials or direct marketing based on your usage patterns.

Most browsers are initially set to accept cookies. If you prefer, you can set your browser to disable cookies – you can do this through your browser setting (your browser's 'help' function should tell you how to do this). You cannot manage cookies in the app.

By disabling cookies, you may not be able to take full advantage of this site, including HSBC Online Banking.

If you accept cookies during your use of this site or continue to use this app, you will be acknowledging that your information is being collected, stored, accessed and used as outlined above.

We may work with third parties to research certain usage and activities on this site/app on our behalf. These third party agencies include Doubleclick, Yahoo!, Facebook, Nielsen//NetRatings and Adobe.

They use technologies such as cookies, spotlight monitoring (this manages tagging which is used for example, to track which advertisement users clicked on to take them to a site) and web beacons (these are used to monitor the behaviour of the user, for example whether they scroll down a page) to collect information for this research. They use the information collected through such technologies (i) to find out more about users of this site/app, including user demographics and behaviour and usage patterns, (ii) for more accurate reporting and (iii) to improve the effectiveness of our marketing. They aggregate the information collected and then share it with us.

As part of the information that we share with them, we may share your advertising identifier and "installation event" (which means the data in relation to when you first install or use this site/app). No personally identifiable information about you is collected or shared by third party agencies with us as a result of this research.

Should you wish to disable the cookies associated with such technologies, you may change the setting on your browser. However, you may not be able to enter certain parts of this site, including HSBC Online Banking.

To find out more about the use of cookies and the information-collecting practices and opt-out procedures of third party agencies, including Doubleclick, Yahoo!, Facebook, Nielsen//NetRatings and Adobe, please visit:

• Yahoo!'s website
• Facebook's website
• Nielsen//NetRatings website
• Adobe's website
• Doubleclick's website

All of these links are external to HSBC and so we're not responsible for the content of these links, which will open in new windows.

This website is designed for use in Malaysia. The products and services represented within this website are intended for HSBC Bank Malaysia Berhad ("HSBC Malaysia") customers/ HSBC Amanah Malaysia Berhad ("HSBC Amanah") customers.

This website is provided by HSBC Malaysia/HSBC Amanah. HSBC Malaysia/HSBC Amanah is authorised and regulated in Malaysia by Bank Negara Malaysia.

If you are outside of Malaysia, we may not be authorised to offer or provide you with the products and services available through this website in the country you are located or resident in.

This website is not intended for distribution or use by any person in any jurisdiction or country where the distribution or use of this material is restricted and would not be permitted by law or regulation. The information provided through the website is not intended for use by persons located in or resident in jurisdictions where the distribution of such material may be considered marketing or promotional and where that activity is restricted.

This App is designed for use in Malaysia. The products and services represented within this App are intended for HSBC Bank Malaysia Berhad ("HSBC Malaysia") and HSBC Amanah Malaysia Berhad ("HSBC Amanah") customers.

This App is provided by HSBC Malaysia and HSBC Amanah for the use of existing customers of HSBC Malaysia and HSBC Amanah. Please do not download this App if you are not an existing customer of HSBC Malaysia and HSBC Amanah.

HSBC Malaysia and HSBC Amanah are authorised and regulated in Malaysia by Bank Negara Malaysia.

If you are outside of Malaysia, we may not be authorised to offer or provide you with the products and services available through this App in the country you are located or resident in. The information provided through the App is not intended for use by persons located in or resident in jurisdictions where the distribution of such material may be considered marketing or promotional and where that activity is restricted.

This App is not intended for distribution, download or use by any person in any jurisdiction or country where the distribution, download or use of this material is restricted and would not be permitted by law or regulation.