BizKo Data Privacy Notice

Maintaining your privacy is an important part of the products and services that Bank of the Philippine Islands (hereafter, “we”, “us”, “our”, the “Bank” or “BPI”) provide. This BizKo Privacy Notice, hereafter referred to as the “Privacy Notice”, explains how we collect, protect, use, and share your data when you access and use any of the BizKo digital platforms such as the mobile app and website (hereinafter, “BizKo”). When you access or use BizKo, you consent to the collection, use, processing, and disclosure of your information in accordance with the BPI Data Privacy Statement and this Privacy Notice.

What we may collect from you
Your access to BizKo may require you to provide your personal data to enable the Bank to verify your identity, login to your BizKo account, and authenticate your transactions. We collect personal and non-personal data through your use of BizKo.

We collect information that you may purposely provide to us, including:

• Your name and personal particulars such as contact details, birthdate, email
• Your business information such as nature of business, address, tax identification number
• Transaction-related information and details, such as reference number, beneficiary name,
  beneficiary account number, government agency number
• Your BizKo username, password, biometrics, or other authentication credentials

We automatically collect information when you use and access BizKo:

• Online banking and other transactions executed through BizKo (including its partner
  websites and applications known as open banking)
• IP address of your device or computer
• Device identifier for the device running the BizKo app
• Personal and non-personal information combined

We may collect non-personal information, aggregated and anonymized data about your
use of BizKo, including:

• Date and time when BizKo accesses our servers
• Non-personal information about banking and other transactions
• Information and files that have been downloaded to BizKo

How we use your information
The personal data that you provide may be used to access your online account and avail of products and services via BizKo. We may also use your personal data to inform or offer you products and services that we think may be relevant to you.

We use personal data collected through BizKo to:

• Identify and authorize your log-in to your BizKo account and authentication of transactions
• Recognize you or your device when launching the app for a more secure and personalized experience
• Respond to and process your requests
• Improve and further customize other online services
• Use your information to detect fraud and for other uses on information security BPI uses personal data collected only for the purposes for which it was collected and such other purposes that you may have consented to.

How we may share your information
We may share your personal data with our subsidiaries, affiliates or other third party partners and service providers, under an obligation of confidentiality, in order to:

• Assist in providing you with requested products and services
• Facilitate or implement any transaction-related services
• Help analyze the use of our features and functionalities and how to improve them
• Protect our clients and business from fraudulent and illegal activities
• Comply with legal requirements

How long do we keep your information
We may retain information for as long as the purpose for which it was collected, and such other purposes that you may have consented to from time to time, remains in effect and until such time as it is no longer required nor necessary to keep your information for any other legal, regulatory or business purposes.

How we protect your information
The privacy and security of your personal data is important to us. Appropriately, we employ digital, operational, and physical safety measures and safeguards to maintain the confidentiality, integrity and availability of your personal data. We train our employees to properly and carefully manage personal data. We require our third party partners and service providers to protect personal data aligned with our own security standards.

You have rights.

In respecting your rights to privacy, you may opt to tell us:

• not to send you marketing-related updates via email and phone calls
• o provide you with information that we currently have about you, subject to restrictions applied to us as a bank and a company operating in the Philippines by certain laws and regulations
• to update your information

If you wish to opt out from promotional messages in the future, send us a request through the Contact Us page of bpi.com.ph or call our hotline at (632) 889-10000. To learn more about your rights and how we process and protect your personal data, please refer to the BPI Data Privacy Statement published at
<https://www.bpi.com.ph/privacy>

How to contact us

For any queries, clarifications or requests pertaining to the processing of your personal data, please visit any of our branches or get in touch with our 24-hour BPI Contact Center at (+632) 889-10000 or email us at privacy@bpi.com.ph.

You may also write our Data Protection Officer at:
Data Protection Officer
Bank of the Philippine Islands
Tower One, Ayala North Exchange
6796 Ayala Avenue corner Salcedo St.
Legaspi Village, Makati City 1226
Philippines