E-CNY Wallet Personal Information Protection Policy of Bank of China Limited

Updated on April 17, 2024

Effective from April 17, 2024

Bank of China Limited ("BOC" or "we") is fully aware of the importance of personal information to you, and hence makes great endeavor to ensure the security of your personal information. To maintain your trust in us, we are committed to the following principles for personal information protection: the principle of consistency between rights and responsibilities, the principle of explicit purposes, the principle of consent solicitation, the principle of necessity, the principle of ensuring security, and the principle of openness and transparency, etc. At the same time, we promise to take the corresponding security protection measures to ensure the security of your personal information in accordance with the law.

The E-CNY Wallet Personal Information Protection Policy of Bank of China Limited (the "Policy") covers the following contents:

Personal information refers to any information related to identified or identifiable natural persons, whether recorded electronically or otherwise, excluding information that has been anonymized. Personal information includes name, date of birth, ID information (ID, passport, etc.), personal biometric information, contact information, address, account information, property information, location information, etc.

Sensitive personal information refers to the information of which any leakage, illegal provision may lead to the infringement of the personal dignity of natural persons or the harm to personal or property safety, including such information as biological recognition, religious belief, specific identities, medical health, financial accounts, and whereabouts, and the personal information of minors under the age of 14.

To provide you with the e-CNY Wallet (hereinafter referred to as "e-CNY Wallet" or "Wallet") services and to ensure the security of your wallet, we will collect information that you enter during your use of the services or otherwise resulting from use of the services.

Please note that your agreement to this Policy does not mean that all personal information set out in this Policy will be collected at one time, but that the necessary personal information (sensitive personal information is highlighted in bold and underlined) will be collected when you use specific business functions.

1. As required by laws and regulations, regulatory requirements, and statutory obligations such as anti-money laundering, we will collect your personal information based on the Wallet category when you open the Wallet or upgrade it online to the Categories 2, 3 and 4. To open the Category 4 Wallet, your mobile phone number and SMS verification code are required; to upgrade the Wallet to the Category 3 Wallet, your name, ID type, ID number, ID expiration date, facial verification information and SMS verification code are necessary; to upgrade the Wallet to the Category 2 Wallet, your bank card number, mobile linked with bank account, and SMS verification code are also required. Refusal to provide such information may lead to the failure in opening or upgrading the Wallet.

2. When using the Wallet functions or services, you may need to provide or authorize us to collect necessary user information in the following circumstances. Refusal to provide such information may lead to the failure in enabling or using such functions or services, which, however, will not affect your normal use of the other functions or services of the Wallet.

(1) We will verify the old payment PIN when you want to change your payment PIN. If you do not remember the PIN and need to reset it, we will verify your identity information, including your mobile phone number of the user's Wallet, Wallet ID, name, ID type, ID number and face features. Refusal to provide such information may lead to the failure in changing or resetting the payment PIN, which, however, will not affect your normal use of the other functions or services of the Wallet.

(2) We will verify the mobile phone number and Wallet ID of the receiver, the authorized operator of the receiver's Wallet, and the payment PIN to make any transfer. We may also verify your name, mobile phone number, ID type and ID number. Besides, we will collect your transfer records for your future inquiry. Such information is sensitive personal information. If you refuse to provide such information, it will only prevent you from using the functions related to money transfer, but will not affect other e-CNY Wallet functions. Refusal to provide such information may lead to the failure in transfer, which, however, will not affect your normal use of the other functions or services of the Wallet.

(3) We will verify your payment PIN and SMS verification code before you make any payment. In order to improve your payment experience, the Quick Pay function is available, which can be enabled after we verify your payment PIN. In addition, we will collect your payment or collection records on for your future inquiry. Refusal to provide such information may lead to the failure in payment, which, however, will not affect your normal use of the other functions or services of the Wallet.

(4) We will verify your payment PIN and SMS verification code before you make e-CNY exchange (deposit to bank, top-up, and exchange from/to RMB cash). Refusal to provide such information may lead to the failure in exchange, which, however, will not affect your normal use of the other functions or services of the Wallet.

(5) We will verify your bank card number, mobile linked with bank account, SMS verification code, name, ID type and ID number when you link the bank card, after which you can convert your e-CNY to money in bank account or vice versa. If you want to unlink the bank card, we shall verify your payment PIN. Refusal to provide such information may lead to the failure in using functions where a bank card must be linked, which, however, will not affect your normal use of the other functions or services of the Wallet.

(6) As the quick payment function via e-CNY Wallet is available for your convenience and security of payment to the specific third party, we will verify your payment PIN when you enable the function. Refusal to provide such information may lead to the failure in using the function of quick payment via the e-CNY Wallet, which, however, will not affect your normal use of the other functions or services of the Wallet.

(7) We will collect the relevant transaction records when you use functions of payment and collection of the Wallet, money transfer, e-CNY exchange (deposit to bank, top-up, and exchange from/to RMB cash) for your future inquiry. Refusal to provide such information may lead to the failure in using the above functions, which, however, will not affect your normal use of the other functions or services of the Wallet.

(8) If you use the functions of real-name authentication, payment PIN resetting, login password resetting, and quick linking of bank cards via the e-CNY APP, facial verification is required and we will verify your identity with the face image information provided by you; if you use the aforementioned functions via BOC's channels and channels of its cooperative third parties, facial verification is required and we will verify your identity with the face image information or audio and video information provided by you. Refusal to provide such information may lead to the failure in using the above functions, which, however, will not affect your normal use of the other functions or services of the Wallet.

Sending out a red packet. You need to select the red packet type to be sent out according to page prompts, fill out the mobile phone number of recipients or grant access to the address list for selecting red packet recipients, and fill out the amount and number of red packets; your personal sensitive information is included in the information above, if you choose not to provide the information above, some types of red packets may not be able to be sent. However, it will not affect you to use other types of red packets or other services we provide. Meanwhile, you may also choose different red packet covers and fill out greetings. If you choose not to provide the aforementioned information, the system will match the default red packet cover and greetings for you, which will not affect your sending out the red packet. If you choose to send out a group red packet, you may share links with other third parties through the function component we provide and others can collect the red packet by clicking the link and following page prompts. When other people receive the red packet you sent, we will show your real name (when you send out a red packet from the identity-verified wallet) or the name of the Wallet (when you send out a red packet from a non-real-name wallet) to the users received the red packet to help them confirm the identity of the user sending out the red packet.

Receiving a red packet. You may select the e-CNY Wallet used for receiving cash red packets. When you receive the red packet, we will show your real name (when you send out a red packet from the identity-verified Wallet), the name of the e-CNY Wallet and the last four digits of the phone number (when you send out a red packet from a non-real-name Wallet), or the mask phone number (if you do not have an e-CNY Wallet or have not registered the account for the e-CNY APP) to the users sent out a red packet to help users sending out the red packet confirm the identity of the user receiving the red packet. The name of your e-CNY Wallet and the last four digits of the phone number or the mask phone number will be displayed to other users who received the same red packet. When you receive a red packet by clicking a link on a third-party platform, you need to authorize relevant pages to display your nickname of the third-party platform, the name of the e-CNY Wallet, and the last four digits of the phone number or the mask phone number.

3. In order to ensure the normal operation of the services and ensure the security of your transactions, we will collect your geographic location, electronic device information, including your device model, operating system, unique device identifier (UUID for iOS system, IMEI or Android id for Android system), login IP address, method, type and status of network access, network quality data, operation log and information on channels for using the Wallet and user information. We will analyze the information in accordance with the purpose of preventing e-CNY fraud or at the request of competent authorities. Where there may be a risk, in order to verify your identity, we may collect your bank card number (account number) and PIN, SMS verification code, dynamic token, and face image information. If you do not agree to provide the foregoing information, you may not be able to pass the risk control verification of the current transaction.

4. For the following functions, you can choose whether to grant us authorization on your personal information or any permission:

(1) Photographic camera (camera): used for identifying QR codes, facial verification, Scan-to-Pay, and opening online Wallet.

(2) Album: used for QR codes identification, Scan-to-Pay, identify information acquisition, bank card information acquisition, and profile photo.

(3) Fingerprint and facial hardware: used for fingerprint verification and facial verification login.

(4) Microphone: used for facial verification via channels of BOC and its cooperative third parties.

The access to your photographic camera (camera), album (gallery), geographic location (location information), Face ID, storage space, address list, mobile phone, messaging, Bluetooth and NFC is required in order to collect and use the information pertinent to these functions. Please note that when you enable such functions, you are deemed that you have authorized us to collect and use the foregoing information to achieve these functions. If you cancel such authorization, we will stop collecting and using such information, thus closing these functions.

1. Information is used when providing you with our financial products or services and improving such products or services.

2. You authorize us to continuously collect and use your information when we provide you with financial services. When you close the service, we will stop collecting your personal information, but we will continue to use your personal information collected previously for purposes of business data archiving, auditing, regulatory investigation, and performance of anti-money laundering and sanction provisions.

3. In order to improve your product or service experience, or to prevent risks, we will summarize, analyze and process service usage information, which will not include any of your identification information.

4. In order to inform you of our financial products or services or to deepen your understanding of our services, we will send you notifications on service status and commercial information about related products or services. If you do not need this service, you may disable the reminder as prompted on the page.

5. Information is used to fulfill anti-money laundering and other legal obligations.

6. Information is used for other purposes authorized by you and permitted by law.

Pursuant to relevant laws, regulations, regulatory requirements and national standards, we may collect and use your following personal information without your authorization and consent:

1. Information directly related to national security and national defense security;

2. Information directly related to public safety, public health and major public interests;

3. Information directly related to criminal investigation, prosecution, trial and enforcement of judgment;

4. Information used to protect your or other individuals' major legitimate rights such as life and property on which your consent is difficult to be obtained;

6. Personal information collected from legally and publicly disclosed information, such as legal news reports, government information and other channels;

7. Information necessary for execution and performance of contracts according to your requirements;

8. Information necessary for maintaining the safe and stable operation of the products or services provided, such as identifying and resolving failures of products or services;

9. Information necessary for carrying out statistics or academic research for the public interest, the disclosed results of which will de-identify the personal information contained;

10. Information necessary for the fulfillment of anti-money laundering and sanction provisions;

11. Other information as stipulated by laws, regulations and regulatory requirements.

To ensure proper functioning of services, we will store small data files named Cookies on your computer or mobile device. Cookies usually contain an identifier, a site name, and some numbers and characters. With the assistance of Cookies, the websites are able to store your preference data. We will not use Cookies for any purpose other than those stated in the Policy. You may manage or delete Cookies based on your preferences. For example, you can erase all Cookies stored on your computer or block them as most web browsers have the function of blocking Cookies. However, if you do so, you have to modify the user settings every time when you visit the APP or channels which provide the Wallet service for you.

Many web browsers have the Do Not Track function that sends Do Not Track requests to websites. At present, major institutions that make Internet standards have not set up relevant policies to stipulate how websites should respond to such requests. However, if you enable the function of Do Not Track, all our websites will respect your choice.

1. Unless expressly agreed or authorized by you, we will not share or transfer your personal information to any other company, organization or individual.

2. If we need to share or transfer your personal information externally due to business needs, we will inform you of types of sharing or transfer, name and contact method of data receivers, contact information, processing purpose and methods of personal information shared or transferred, and obtain your individual authorization and consent in addition to the Policy. Where sensitive personal information is involved, we will inform you of the types of sensitive personal information, the identity of data receivers and data security capability, the necessity of processing the sensitive personal information, and impacts on your personal rights and interests, and obtain your expressly individual authorization and consent in addition to the Policy.

3. Please understand that we may share your personal information externally in accordance with laws and regulations, mandatory requirements of competent government authorities or for the fulfillment of anti-money laundering and sanction provisions.

4. In accordance with laws, regulations, regulatory requirements, and business practices, in the process of such transactions as merger, acquisition and asset transfer, if personal information transfer is involved, we will separately inform you of the name of new companies and organizations (hereinafter referred to as "information recipients"), name and contact information holding your personal information and request information recipients to be subject to the Policy and continue to perform the obligation as a personal information processor. Where information recipients alter the original processing purpose and methods, we will request them to ask for your authorization and consent again.

5. To the extent required or permitted by law, where it is necessary to provide your personal information to third parties in order to protect the interests, property or security of the Bank, our customers or the public, we will share or transfer your personal information.

6. Your personal information may be shared with us and affiliated companies. We will only share such information with your individual authorization and consent and for the purposes stated in the Policy. If the processing purpose and method of personal information are changed, we will ask for your authorization and consent in advance. The scope of personal information shared will depend on the specific business situation. For example, when submitting statistical information to the financial supervision and administration departments as required, we may share your personal identity information and account information with our operators and affiliated companies.

7. In order to provide better and high-quality products and services for you, some of our services will be provided by our partners. Therefore, we may share some of your personal information with our partners to provide better customer service and user experience. Please refer to the individual authorization page of each function for the specific information shared. We will only share your personal information for legal, legitimate, necessary, specific and explicit purposes, and only share your personal information with your individual authorization consent and the personal information necessary for service provision. Besides, we will sign a strict confidentiality agreement with our partners, requiring them to handle your personal information in strict accordance with the purpose, term, processing methods, information type, and any other relevant confidentiality requirements and security measures agreed upon with us. We will require our partners not to use the shared personal information for any other purpose. If you refuse to let us share the personal information we have collected that is necessary for service provision with our partners, you may be unable to continue to use our services.

8. When you use services provided by third parties in e-CNY, we will not share your personal information with third parties unless you authorize and consent separately. For relevant information that you voluntarily provided to a third party in the use of services it provided, we will consider that you have given the third party access to such information; for the information generated from the use of services provided by the third party, the collection and use of the above information shall be legally agreed between you and the third party. Refusal to collect, use, or transmit the foregoing information when a third party provides services may lead to the failure in using the corresponding services provided by the third party in e-CNY, but will not affect your use of the other functions of e-CNY.

9. Personal information exit term: In order to protect your legitimate rights and interests, when you use the Wallet service provided by "e-CNY special service" of Bank of China (Hong Kong) Limited ("BOCHK" or "overseas recipient") and the relevant services (collectively known as "e-CNY special service"), please carefully read the content of the term. If you apply for or use the e-CNY special service of BOCHK, we consider that you agree to provide your necessary information (inclusive of personal information) to BOCHK for the purpose of providing e-CNY special service by Bank of China Limited (or "us" or "BOC").

Contact information: You may call the customer service hotline +852 3988 2388 of BOCHK.

According to the relevant provisions of the Personal Information Protection Law of the People's Republic of China and the Measures for the Security Assessment of Outbound Data Transfer, in order to help you with the execution, inquiry, rejection, suspension or termination and/or other derivative matters (inclusive of due diligence and other internal control mechanisms for anti-money laundering and sanctions compliance) related to the Wallet (collectively known as "such purposes"), you will (i) allow BOCHK to access the interface and view the page; and/or (ii) access your information (inclusive of basic personal information, basic information on the Wallet, and transaction information) by transferring the information to BOCHK in Hong Kong, please refer to the below table for the specific scope (the actual need ultimately shall prevail).

Basic personal information

Mobile No.

Basic information on the Wallet

Wallet mobile No.
Wallet nickname
Wallet type
Wallet No.
Single payment limit
Daily/annual payment limit and remaining limit
Wallet balance
Red packet information

Personal transaction information

Transaction type
Transaction status
Payment method
Order information
Transaction amount
Merchant information
Voucher No.
Transaction bill No.
Transaction time
Payment Wallet
Information on the connected account
Name and amount of the red packet
Information on the purchased commodity

In order to provide services for you, achieve the foregoing purposes, realize its functions, comply with the provisions of any regulatory requirement, and the foregoing related matters, the overseas recipient may collect (receive), use, store, transmit, and transfer the relevant information described above. Your relevant personal information will be stored in the shortest necessary period to achieve the processing purpose, which cannot exceed seven years at the maximum after the completion of the transaction (unless a longer period is otherwise stipulated by the laws and regulations of the Hong Kong Special Administrative Region of the People's Republic of China and/or tax, audit, litigation/arbitration/mediation, regulatory performance, government, and law enforcement). The overseas recipient shall, after exceeding the foregoing storage period, delete or anonymize your personal information (inclusive of all backup information) in accordance with the law unless your additional consent or otherwise stipulated by laws and regulations.

We will instruct the overseas recipient not to use or provide your relevant personal information to third parties beyond the authorized scope by you and/or BOC without your and/or BOC's consent. To avoid any doubt, you will agree us and/or the overseas recipient to disclose the information disclosed by BOC/the overseas recipient in accordance with relevant laws and regulations for tax, audit, litigation/arbitration/mediation purposes, or required by regulators, government, law enforcement departments, or competent authorities.

[Methods and procedures for individuals to exercise their rights against overseas recipients]

If you have any problems regarding how overseas recipients process your personal information, you may check the relevant information on overseas recipients via the "BOC Pay App" and call the customer service hotline of BOCHK at +852 3988 2388. You may also contact us via the method stated in the [How to Contact Us] of the E-CNY Wallet Personal Information Protection Policy of Bank of China Limited and we will forward your request.

The terms shall come into force when you click Yes to the Policy. The laws of the People's Republic of China (for the purpose of the term, the laws of Hong Kong Special Administrative Region, Macao Special Administrative Region and Taiwan, China shall be excluded) shall apply to the disputes arising from the term or relevant disputes. In case of a dispute, you may call the customer service hotline (95566) for negotiation and we will try our best to settle the matter through friendly negotiation. Unless otherwise agreed, the efficacy of any other term of agreements (inclusive of the other parts of the E-CNY Wallet Personal Information Protection Policy of Bank of China Limited, the User Service Agreement for E-CNY Wallet of Bank of China Limited, etc.) that you have accepted and agreed shall not be affected.

We will not disclose your personal information. If we do need to do so, we will obtain your individual consent and inform you of the purpose and type of personal information disclosure; if sensitive information is involved, in addition to the above, we will also inform you of the necessity to process the sensitive personal information and the impact on your rights and interests. Unless otherwise provided by laws and regulations and regulatory requirements.

Pursuant to relevant laws, regulations, regulatory requirements and national standards, we may share, transfer and disclose the following user information without your prior authorization and consent:

1. Information directly related to national security and national defense security;

2. Information directly related to public safety, public health and major public interests;

3. Information directly related to criminal investigation, prosecution, trial and enforcement of judgment;

4. Information used to protect your or other individuals' major legitimate rights such as life, property, and reputation on which your consent is difficult to be obtained;

6. Information for the fulfillment of anti-money laundering and sanction provision;

7. User information collected from legally and publicly disclosed information, such as legal news reports, government information and other channels.

1. Personal information collected and generated by us in the People's Republic of China will be stored in the People's Republic of China. However, in order to handle cross-border business and with your authorization and consent, your personal information, including the mobile phone number, Wallet ID, Wallet nickname, SMS verification code, bank card number, and transaction information of e-CNY exchange through overseas channels will be transferred overseas as part of the transaction information. In such case, we will take effective measures to protect your information security in strict accordance with laws, regulations and regulatory requirements. For example, before cross-border data transfer, we will require overseas institutions to keep your information confidential through agreements, verification and other measures.

2. We will only keep your personal information in the minimum term required by law and regulations or anti-money laundering and sanction provisions and the required minimum period for the purpose stated in the Policy. For example, the customer identity information shall be retained for at least five years from the year when the business relationship is terminated or the year when the one-time transaction is entered into the book. After the data storage period expires, we will delete or anonymize your information, except for otherwise required by laws and administrative regulations. For example:

Mobile No.: When you need to use the e-CNY Wallet service, we need to retain your mobile No. to ensure your normal use of this service. When you cancel the e-CNY Wallet, we will delete the corresponding information:

Face image: When you use facial recognition authentication, in accordance with the Facial Recognition Authentication Agreement and the requirements of regulatory authorities for storage time limit of customer identity information and transaction records, we will save your encrypted face image information to meet the requirements of relevant laws and regulations and possible dispute resolution. When you cancel the Wallet, we will delete the relevant facial information.

1. We have adopted security protection measures that are in conformity with industry standards to protect your personal information to prevent unauthorized access, public disclosure, use, modification, damage or loss of data. All the measures have passed relevant inspections including the filing and annual inspection of the National Internet Finance Association of China (NIFA) for Client App of mobile finance. We will take all reasonable and feasible measures to protect your personal information. For example, we will take the corresponding encryption and de-identification technology to ensure data confidentiality; use trusted protection mechanism to prevent data from malicious attacks, deploy access control mechanism to ensure that only authorized staff have the right to access personal information, and hold training courses on security and personal information protection to enhance employees' awareness of the importance of protecting personal information.

2. If all or part of the e-CNY business provided by us ceases operation, we will inform you through announcements about relevant products or services, and we will stop the collection of your personal information about relevant products or services timely to protect the security of your personal information. If all or part of the e-CNY business is interrupted due to technical failure, network attacks, natural disasters and accidents, human factors and other reasons, we will take emergency procedures and recovery measures to recover the service as soon as possible.

3. Please understand that due to the limitation of technology and possible malicious attacks, unexpected incidents that we could not reasonably foresee, prevent, avoid and control may occur. The Internet is not an absolutely secure environment. Please use a complex password and security tools to help us ensure the security of your account.

4. In case of any personal information security incident, we will, in accordance with the requirements of laws and regulations and regulatory provisions, promptly inform you of the incident in a timely manner by emails, letters, telephone, sending notices and other ways or adopt reasonable and effective manner to release announcements. In addition, we will also report the disposal of such personal information security incident in accordance with laws and regulations, and regulatory provisions.

In accordance with the relevant laws, regulations and standards of the People's Republic of China, we ensure your following rights on your personal information:

After you log in to the e-CNY APP, you can inquire about your Wallet balance and transaction records from the "home page". You can inquire about the real-name information and activation date, manage your Wallet type, limit, Wallet name, and payment PIN, bind a bank card, register a mobile number, and authorize biometric payment from "My - Wallet Management".

You can also access, correct, and update your personal information by logging in to our mobile banking APP or visiting our business outlets. Please refer to the reminders and descriptions of each channel for specific methods, unless otherwise provided by laws and regulations. You are obliged to timely update your personal information. Before you revise your personal information, we will verify your identity. We will ensure accurate and valid information revision through a reasonable verification mechanism.

You may ask us to delete your personal information in the following circumstances:

1. Our acts of processing personal information are in violation of laws and regulations;

3. Our acts of processing personal information are in violation of the agreement with you;

Upon we decide to follow your request, we will inform the entities that have obtained your personal information from us and ask them to delete your personal information in a timely manner, unless otherwise stipulated by laws and regulations or these entities obtain your individual authorization. After you delete the APP that provides BOC e-CNY Wallet services from your mobile terminal, the local information of the client-side will be deleted, but the personal information in the back office will not been deleted. When you delete information from our service, we may not be able to delete the corresponding information in the backup system immediately, but we will delete the information when the backup is updated.

iii. To change the scope of your authorization and consent or withdraw your authorization

The realization of each business function requires some basic personal information. For the collection and use of those additionally collected personal information, you may give or withdraw your authorization and consent at any time by allowing or refusing access to your location based on different brands and models of mobile phones.

Please note that it will be deemed that you have withdrawn your consent to the e-CNY Wallet Personal Information Protection Policy along with your voluntary closure of the e-CNY Wallet services. For example, if you close the Wallet service through the e-CNY APP, we will deem that you have withdrawn your consent to the Personal Information Protection Policy. When you withdraw your consent, we will no longer handle the corresponding personal information. However, your decision to withdraw your consent will not affect the previous personal information handling based on your authorization.

If you are a user of our Wallet. You may cancel the Wallet by logging in to the e-CNY APP or our mobile banking APP, or visiting our outlets. If you need to close the mobile banking channel, you may log in to our mobile banking APP and cancel the Wallet through the "e-CNY" function. You may also log in to the e-CNY APP and enter "My - Software Wallets" for cancellation.

The cancellation of Wallet is irreversible. Once you cancel your Wallet, we will not collect your personal information via the Client of the mobile banking APP or the e-CNY APP and will delete all information related to your Wallet, unless the storage time of personal information is otherwise stipulated by laws, regulations or regulatory authorities.

In some business functions, we may only make decisions based on automatic decision-making mechanisms such as information systems, and algorithms. If these decisions significantly affect your legitimate rights and interests, you are entitled to request us to make an explanation, and we will also provide appropriate remedies to you.

In order to ensure the security of your personal information, you may be asked to provide written requests or otherwise prove your identity in other ways when you call BOC's customer service hotline at 95566 or visit BOC's business outlets for consultation. We may ask you to verify your identity first and then process your requests. If manual processing is involved in the foregoing request, we will process it and reply to you within 15 business days. Please understand that we may reject some requests that are unreasonably repeated or highly impractical, require excessive technical means or bring risks to the legitimate rights and interests of others.

Notwithstanding the above agreement, in accordance with the laws and regulations, we may not be able to respond to your requests in the following circumstances:

1. Your request involves information related to national security and national defense security;

2. Your request involves information related to public safety, public health and major public interests;

3. Your request involves information related to criminal investigation, prosecution, trial and enforcement of judgment;

4. There is sufficient evidence to show that you have subjective malice or abuse of rights;

5. It will cause serious damage to the legitimate rights and interests of you or other individuals or organizations to respond to your requests;

7. Your request involves information for the fulfillment of anti-money laundering and sanctions provisions.

i. We expect the parents or other guardians to instruct the minors to use our services. Notwithstanding different definitions of "children" according to local laws and customs, we regard anyone under 14 years old as children. Hence, children are not supposed to open their own e-CNY Wallet without the consent of their parents or other guardians.

ii. If you are a minor, please ask your guardians to read the Personal Information Protection Policy for Juveniles carefully. The use of our e-CNY Wallet means that you use our services or provide us with your personal information on the premise of being approved by your parent or other guardians. For minors under the age of 14, please be reminded that your personal information falls into sensitive personal information. We will only process your personal information with the express consent of your parent or other guardians, as permitted by law, and as necessary to protect your rights and interests. The specific types and rules of information processed will be in strict accordance with the relevant agreements on personal information stipulated in the Personal Information Protection Policy for Juveniles. If your guardians do not agree to use our services or provide us with your information in accordance with the Policy, please immediately stop using our services and notify us so that we can adopt the corresponding measures.

iii. If you are the parents or other guardians of a minor, please contact us via the contact information herein when you have any doubt about the information processing of the minors in your custody.

i. We reserve the right to update or modify this Policy from time to time. The Policy shall apply to all products and services provided by BOC's personal e-CNY and all users. Unless expressly agreed by you, we will not reduce your rights under the Policy. We will inform you of the changes via reasonable means such as notification, pop-up windows and official website announcements so as to update you of any changes of the Policy (including changes in business functions, use purposes, and contact information of persons responsible for personal information protection).

ii. For substantial changes, depending on the specific situation, we may provide a more prominent notice to explain the specific changes to the Policy. Substantial changes include but are not limited to the following:

1. Substantial changes in our service modes and business forms, such as the purposes of personal information processing, types of personal information processed, and ways in which personal information is used;

2. Any change in major subjects that personal information is shared with, transferred to or publicly disclosed to;

3. Any substantial change in your right on personal information and the way of exercising such right;

4. Any change in our contact information and complaint channels for the personal information security;

iii. If you do not agree to the revised Policy, you are entitled to stop using our products and services, otherwise, you will be deemed to have accepted the changes to the Policy and continue to use our products and services.

If you have any questions, comments, or suggestions about the Policy, or believe that our personal information processing has compromised your legitimate rights and interests, please call the e-CNY customer service hotline at 956196 and BOC customer service hotline at 95566, or go to the business outlets of BOC for consultation or feedback. Upon accepting your issue, we will handle it promptly and properly, and provide you with a response within 15 days. If you are not satisfied with the response, you can also apply for mediation, arbitration or litigation with mediation organizations, arbitration institutions, courts, and other institutions to protect your legitimate rights and interests.

Full name of the Bank: Bank of China Limited; registered address: No. 1 Fuxingmennei Street, Xicheng District, Beijing China, 100818.

Please read the Policy carefully to make sure that you are fully aware of and understand the meaning and legal consequences of the contents, especially the contents in bold. If you click "Agree" and submit, it will be deemed that you have accepted the Policy. We will use and protect your personal information in accordance with relevant laws and regulations as well as the Policy.

The Agreement is signed on the Internet and its legal effect shall be equal to a written agreement. The electronic data materials formed by signing and performing agreements on the Internet are equivalent to the original written materials formed offline.