BOI MOBILE OMNI NEO BANK APP

The Bank shall recognize and respect intellectual property rights (that include software or document copyright, design rights, trademarks, patents, and source code licenses) associated with its information systems.

The Bank shall comply with:

• Copyright requirements associated with proprietary material, software, and designs acquired by the Bank;
• Licensing requirements limiting the usage of products, software, designs and other material acquired by the Bank.
• Updating the License inventory periodically and the efficient management of the license process.
• Appropriate procedures shall be implemented to ensure compliance with legislative, regulatory, and contractual requirements on the use of material in respect of which there may be intellectual property rights and on the use of proprietary software products.

The Bank shall ensure continued compliance with product copyright restrictions and licensing requirements.

We may provide links to other websites. Within our mobile application/internet banking, there may be embedded applications, plug-ins, widgets, as well as links to third-party sites that may offer you goods, services, or information. Some of these sites may appear within our mobile application/internet banking. When you click on one of these applications, plug-ins, widgets, or links, you will leave our mobile application/internet banking and will no longer be subject to Bank of India privacy policy and privacy practices. We are not responsible for the information collection practices of the other sites that you visit, and we urge you to review their privacy policies before you provide them with any non-public information about you. Third-party sites may collect and use information about you in ways that are different from Bank of India privacy policy. Thus, if you follow links to websites not controlled by the Bank, you take the responsibility of reviewing their privacy policies and other terms and provide your information, as they may be different from our mobile application/internet banking and Bank of India will not be liable for any disclosure of information resulting from such activity.

Customers' personal information should be kept confidential unless they have offered specific consent to the financial services provider or such information is required to be provided under the law or it is provided for a mandated business purpose (for example, to insurance, MF company). The customer shall be informed upfront about likely mandated business purposes. Customers have the right to protection from all kinds of communications, electronic or otherwise, which infringe upon their privacy. In pursuance of the above Right, bank will –

Treat customer's personal information as private and confidential (even when the customer is no longer banking with us), and, as a general rule, not disclose such information to any other individual/institutions including its subsidiaries / associates, tie-up institutions etc. for any purpose unless.

• The customer has authorized such disclosure explicitly in writing.
• Disclosure is compelled by law / regulation.
• Bank has a duty to the public to disclose i.e. in public interest.
• Bank has to protect its interests through disclosure.
• It is for a regulatory mandated business purpose such as disclosure of default to credit information companies or debt collection agencies.

Ensure such likely mandated disclosures be communicated immediately to the customer in writing.

Shall not use or share customer's personal information for marketing purpose, unless the customer has specifically authorized it;

Shall adhere to Telecom Commercial Communications Customer Preference Regulations, 2010 (National Customer Preference Registry) issued by Telecom Regulatory Authority of India, while communicating with customers.

The content to be posted on bank's mobile application/internet banking must be reviewed and approved by General Manager (GM) in charge, of the respective functional department of the Bank.

The Bank shall ensure that information processing resources and associated documentation are reviewed immediately after installation and thereafter on a periodic basis to verify that they are compliant with the security policies and standards.

Archival of data from the live system would be decided by the business owner. Archived data would be preserved and made available easily as and when demanded for a reasonable period of time as decided by the Business owner.

Retention period of data would be decided by the business owner. In no case the retention of data would be less than the period mandated by the regulations relevant to the data.

Data Retention & Archival:

Data (electronic / physical) will be retained and disposed of in an appropriate manner in accordance with Bank's and regulatory Record-keeping guidelines.

The following aspects should be taken into account while prescribing various record preservation periods-

• Compliance with statutory and regulatory requirements.
• Satisfaction of the needs of RBI inspectors to have access to certain records.
• Satisfaction of the needs of internal and external auditors to have access to certain records.

a) Protecting Your Information, Integrity, Confidentiality, and Security

• We protect information we collect about you by maintaining physical, logical, administrative, electronic, and procedural safeguards. These safeguards restrict access to your confidential information to only authorized personnel with specific need to access and utilize your information. We train our employees on how to handle your information to maintain confidentiality and privacy. To protect your personal information from unauthorized access and use, we use security measures that comply with law and industry level best practices. These measures include computer and system safeguards, strong access controls, network and application controls, security policies, processes, trained personnel and secured repositories and buildings etc. We regularly monitor and review our compliance with internal policies, regulatory guidelines and industry best practice. We educate our employees to protect the information. The same policy applies to our trusted partners through contracts and agreements.

  We take reasonable steps to destroy or permanently de-identify any personal information after which it can no longer be used.

b) Who do we disclose your personal information to, and why? Categories of Third-Parties with Whom Bank of India May Share Information.

Bank of India shares personal information with third-parties only as permitted and required by law, as per Bank’s approved guidelines and your consent in connection with the administration, processing, and servicing of account and account-related transactions, in order to perform services for you and on your behalf, for example, credit reporting agencies, bill payment processors, credit, debit and ATM card processing networks, data processing companies, insurers, marketing and other companies in order to offer and/or provide financial products and services to you, and in response to legal or regulatory requirement, court order and/or other legal process or investigation.

For all third-party outsourcing of services the information is shared and used as per the service level agreement and non-disclosure agreement.

To be more specific the information may be shared with the following:

• our agents, contractors, valuers, solicitors and external service providers;
• authorised representatives and agents who sell products and services on our behalf;
• insurers, re-insurers and health care providers;
• payment systems operators (for example, merchants receiving card payments);
• other organisations, who jointly with us, provide products or services to you;
• other financial services organisations, including banks, mutual funds, stockbrokers, custodians, fund’s managers and portfolio service providers;
• debt collectors;
• our financial advisers, legal advisers or auditors;
• your representatives (including your legal heirs, legal adviser, accountant, mortgage broker, financial adviser, executor, administrator, guardian, trustee, or attorney);
• fraud bureaus or other organisations to identify, investigate or prevent fraud or other misconduct;
• agencies providing credit scores
• Govt. agencies for verification of land records etc
• external dispute resolution schemes
• regulatory bodies, government agencies and law enforcement bodies in any jurisdiction
• we are required or authorised by law or where we have a public duty to do so
• your express instructions or consent to the disclosure with specific entities
• any act or regulation which force us to disclose the information to any specified entity;
• law enforcement and judicial entities

For international transactions, such as currency exchanges, we may need to disclose your information to the corresponding international party in order to process the transaction. The countries we disclose your information to will depend on the details of the transaction you ask us to carry out.

c) Notice and Disclosures

• Bank of India will not sell, trade, or disclose the personally identifiable information of its mobile application users to any unauthorized third parties.

d) Data Quality and Access

• Bank of India takes all steps possible to ensure that the data on the mobile application/internet banking is accurate. While reviewing the mobile application/internet banking if something is found to be inaccurate, the Bank will make every effort to correct said information as quickly as possible. If it is found to be an inaccuracy with the entire system, Bank of India will work swiftly to correct the problem so that your web experience is as trouble- free as possible. The information contained on the Bank of India mobile application/internet banking is subject to change without prior advance notice.

• While using the Bank of India mobile application/internet banking certain information such as your IP Address and time spent on pages may be collected. This non- personal information is collected in order to monitor any unauthorized use or access to the Bank of India mobile application/internet banking. Anyone caught attempting to harm, steal information from, or otherwise damage the Bank of India mobile application/internet banking will be prosecuted to the full extent of the law.

e) Data Security

• Bank of India takes security very seriously and has therefore taken every precaution to secure our users' information. To secure the user’s information, Bank of India has implemented several security measures to prevent loss, theft, or misuse of any user data.

Bank of India has a Platform Monitoring Plan in place and the mobile application/internet banking is monitored periodically to address and fix the quality and compatibility issues around the following parameters. The parameters such as Performance, Functionality, Crash Reports, API Response Time, and User Engagement Metrics are analyzed to ensure optimal performance.

A feedback mechanism is available within the mobile application/internet banking through a feedback form, allowing users to share their experiences and suggestions. A structured feedback analysis mechanism is also in place to evaluate user input and enhance the mobile application/internet banking based on user suggestions.