CTBC BANK (PHILIPPINES) CORP. values your trust and respects your expectation of privacy. As such, we are committed in maintaining the confidentiality of your personal financial information.

To better protect your privacy, we provide this statement explaining our online information practices and the choices you can make about the way your information is collected and used. This also outlines our privacy practice for visitors who access our websites as well as for consumers who have a continuing relationship with us.

To make this statement easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested. Personally identifiable information includes:

• Any information you provided to obtain a financial product or service from us
• Any information resulting to transactions involving a financial product or service between you and us
• Or any information that we otherwise obtain in connection with providing a financial product or service to you

Throughout this statement, we refer Information as nonpublic personal information.

Visitors to our website remain anonymous unless they register for a service or otherwise elect to disclose their identity to us. Although we do not collect personally identifying information about persons who simply visit our site, we do collect certain limited information about visitors, such as their IP address (a numeric address assigned automatically to computers when they access the Internet). We also may place "cookies" on a computer to track a visitor's use of our website. A cookie is a piece of data that is stored on your hard drive. It takes up very little room on your system and helps us to customize our site and make its navigation easier for you. We sometimes use cookies to help estimate the number of visitors to our site and to determine which areas are the most popular. Unless you register with us for a service (such as our NetBanking service), the cookie does not provide us with any personally identifying information about you such as your name or address.

We may collect non-public personal information in order to understand your needs, administer our business, process transactions, and provide you with products and services. We obtain nonpublic personal information from the following sources:

• Information you provided about yourself in the application form or any other forms (personal information collected such as name, street address, email address, phone number, date of birth, assets, income, and beneficiaries)
• Information about your transactions with us, our affiliates, or others (such as your account balance, payment history, parties to transactions, and credit usage)
• Information we receive from a consumer reporting agency (such as your creditworthiness and credit history)
• We use personal information to provide you information and samples you request, to give you a customized interactive experience, and to help us develop new products and services that meet your needs.

We use personal information you provide only for purposes consistent with the reason you provided it.

Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

We may disclose information we collect, as described above, to other financial institutions with which we have joint marketing agreements, such as securities broker-dealers, insurance agents, and card issuers, so that they can market goods and services to you. We will not disclose account numbers, and/or credit related information obtained in a credit report or provided in a credit application.

We may also disclose:

• Some of this information such as your name and address to companies that perform marketing services on our behalf (e.g., to companies that assist us with mailings)
• Information about your accounts and transactions:
  • Where it is necessary or helpful to effect, process or confirm your transactions
  • To verify the existence, history and condition of your account for credit reporting agencies
  • To comply with legal process such as subpoenas and court orders
  • To law enforcement authorities if we believe a crime has been committed
  • If you give us your consent

We do not disclose non-public personal information about our current or former customers to unaffiliated third parties except as set forth in this notice or as permitted by law.

We have procedures that help us to maintain the accuracy of the personally identifiable information that we collect. We use this procedure to better safeguard your information.

You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error to:

CTBC BANK (PHILIPPINES) CORP.
Attention: Customer Care
16th Floor, Fort Legend Towers
31st Street corner 3rd Avenue
Bonifacio Global City, Taguig City 1634

Or you may contact your branch of account. If you are an Online Banking customer, you may review your information by visiting our website (https://www.ctbcbank.com.ph).

To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.

CTBC BANK strives to keep your personal information accurately recorded. We have implemented technology, management processes and policies to help maintain data accuracy. CTBC BANK provides employees with reasonable access to personal information and the reasonable ability to review and correct it or ask for blockage, or deletion, as applicable. To protect your privacy and security, we also take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your data.

CTBC BANK takes seriously the trust you place in us. To prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information, the Bank utilizes appropriate physical, technical and administrative procedures to safeguard the information we collect.

We use a "3 strikes and you're out" lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the user out, requiring either a designated wait period or a phone call to the bank to verify the password before re-entry into the system. Upon successful login, the system authenticates the user's identity and establishes a secure session with that visitor.

For added protection, do not reveal your password and/or Log-in ID to anyone. If for any reason you feel that your password / PIN have been compromised we strongly suggest changing it.

Our website may provide links to third-party websites that offer goods, services or information for your convenience. Some of these sites may appear as windows-within-windows at this site. If you access those links, you will leave the CTBC BANK website. CTBC BANK does not control those sites or their privacy practices, which may differ from our practices. We do not endorse or make any representations about third-party websites. The personal data you choose to provide to or that is collected by these third parties is not covered by this Privacy Statement. We encourage you to review the privacy policy of any company before submitting your personal information.

Third parties may offer services from time to time at our website. If you provide them with information, their use of that information will be subject to their privacy policy, if any, and will not be subject to this policy. If you accept third party goods or services advertised at our website, the third party may be able to identify that you have a relationship with us (e.g., if the offer was only made through our site).

We feel strongly about protecting the privacy of children and teenagers. For that reason, we never collect or maintain personally identifiable information at our website from those we actually know are minors (under 18 years of age).

We may add to, delete from, or otherwise change the terms of this Privacy Statement from time to time by posting a notice of the change (or an amended Privacy Statement) at this website. If required by law, we will send you a notice of the change. Your continued use of our website or any online service following notification will constitute your agreement to the revised Privacy Statement.

Should you have other questions or concerns about this Privacy Statement, please send us an email at [email protected] or write us at:

CTBC Bank (Philippines) Corp.
Attention: Data Privacy Officer
16th Floor, Fort Legend Towers
31st Street corner 3rd Avenue
Bonifacio Global City, Taguig City 1634