DIGITAL PRIVACY POLICY STATEMENT

This Digital Banking Privacy Notice, hereafter referred to as "Privacy Notice", explains how we collect, protect, use, and share your data when you access and use of the ABPI digital platforms application (hereinafter, "ABPI Digital").

When you access or use ABPI Digital, you consent to the collection, use, processing, and disclosure of your information in accordance with our Data Privacy Statement.

a. We value your safety and privacy seriously. We assure your protection at all times.

b. Your data will be kept confidential and will be used only within the bounds of applicable Philippine laws, rules and regulations.

c. Your data is protected by high security standards of our employees who are trained in matters of protection, privacy, and confidentiality.

d. We value your data privacy rights. For transparency and trust, the following are what we collect from you and for what it is used:

d.1 Data collected:

• Basic personal information: your name, date of birth, nationality, address, and identity supporting documents and government-issued IDs nature of work and source of funds.
• Contact details: your billing address, telephone number, mobile phone number, email address.
• Additional information to verify your identity and for your protection against fraud. This may include photo, live video, biometric data, geolocation data, and specimen signatures.
• Personal information for customer verification when you contact us through our official our website, and mobile platforms.
• We may also collect business information about you as part of our requirements such as Business Name, Business Address, Business Contact Details, Business TIN, Business Type, as well as relevant business documents such as SEC certificate, DTI permits, etc., if you are availing any of our products and services
• Transactional data such as bank account number, deposits, withdrawals, other transfers made to or from your account, and details about them such as reference number, place and time these were made, other forms of customer account number, payments, and transactions.
• Information about the value of your assets, your credit history and capacity, and other financial products and services you have with us.
• When you access our website, we may also collect additional information such as information about your browser type, browser language, internet protocol (IP) address, geolocation, server name, date, and time of accessing this website, the pages you access while you are at this website, and the address of the website from which you linked this website from.
• We may also collect information through the use of cookies. If we are going to use cookies, we shall declare it expressly on this website.
• When you access our mobile app, we may collect information on your device in order to safeguard your account, customize our services, and personalize your user experience, this may include:
• Device attributes: information such as the operating system, hardware and software versions, battery level, signal strength, available storage space, browser type, and installed applications.
• Device identifiers: information such as device IDs and other unique identifiers.
• Device signals: information about Bluetooth signals and nearby wi-fi access points hotspots and cell towers.
• Data from network connections: information such as the name of your mobile network operator or Internet service provider, language, time zone, IP address, connection speed, and information about any devices that are nearby or on your network.
• Data from device settings: information that you allow ABPI to receive through the device settings that you turn on, such as access to your GPS location, contacts, calendar (for reminders), camera, or photos.

d.2 Data uses:

d.2.1. Identify and authorize your log-in to your online banking account, authentication of transactions and processing of applications

d.2.2. Recognize you or your device when launching the app for a more secure and personalized experience

d.2.3. Respond to and process your requests

d.2.4. Improve and further customize other online services

d.2.5. Use your information to detect fraud and for other uses on information security

e. Your rights under the Data Privacy Act of 2012:

e.1. The right to demand reasonable access to your data and obtain a copy of such data in an electronic or structured format;

e.2. The right to revoke, block, remove or destroy your data if it is proven to be incomplete, outdated, unlawfully obtained, or used for unauthorized transactions;

e.3. The right to object to the processing of your personal data, including processing for direct marketing, automated processing or profiling, and to dispute and correct inaccuracies and errors in your data;

e.4. The right to know if your data is being processed, what data is being processed, and for what purposes;

e.5. The right to file a complaint.

f. How long do we keep your information:

We will keep your personal information safely stored for as long as the purpose for which it was collected, and such other purposes that you may have consented to from time to time. It shall remain in effect until such time as it is no longer required nor necessary to keep your information for any other legal, regulatory or business purposes.

g. How to contact us:

You can contact us through our website, Contact center and direct mobile or directly through our Data Protection Officer at 121 Don Placido Campos Ave., Dasmarinas city, Cavite, Tel. Nos. (046) 4160118; 4163988.