Privacy policy of NCB

Thank you for using our Mobile Banking. The app may request access to:

  1. Camera

The app requires your permission to use device's camera, which allows the app to turn on/off camera or flash. This is necessary for using functions of scanning QR code, taking and sending photos to your contact list in OTT.

  1. Device information

The app collects device information, including the type of device, the operating system, unique device identifiers and the manufacturer. The information we collect from your device helps us to update and manage data in Mobile Banking system.

  1. Address book

The app collects information about your address book and requires to read and retrieve phone numbers from your address book, which supports the function of mobile topup and contacts share. This helps to optimize user experience as well as providing better information exchange. Your address book is neither published nor disclosed for any purpose without your consent.

  1. Microphone

The app requests access to device's microphone to record and send audio message to your contact list.

  1. Account

The app associates the list of accounts registered in your device to send notifications (about balance changes and banking information). It also notifies you when an updated version is available, keeping you up-to-date with the latest functions.

  1. Android Permission

 

Number

Permissions

Description

1

ACCESS_COARSE_LOCATION

Allows an app to access approximate location. Alternatively, you might want ACCESS_FINE_LOCATION.

2

ACCESS_FINE_LOCATION

Allows an app to access precise location. Alternatively, you might want ACCESS_COARSE_LOCATION.

3

INTERNET

Allows applications to open network sockets.

4

CALL_PHONE

Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.

5

READ_CONTACTS

Allows an application to read the user's contacts data.

6

READ_EXTERNAL_STORAGE

Allows an application to read from external storage. Any app that declares the WRITE_EXTERNAL_STORAGE permission is implicitly granted this permission. This permission is enforced starting in API level 19. Before API level 19, this permission is not enforced and all apps still have access to read from external storage. You can test your app with the permission enforced by enabling Protect USB storage under Developer options in the Settings app on a device running Android 4.1 or higher. Also starting in API level 19, this permission is not required to read/write files in your application-specific directories returned by Context.getExternalFilesDir(String) and Context.getExternalCacheDir().

7

USE_FINGERPRINT

Allows an app to use fingerprint hardware.

8

WRITE_EXTERNAL_STORAGE

Allows an application to write to external storage. Starting in API level 19, this permission is not required to read/write files in your application-specific directories returned by Context.getExternalFilesDir(String) and Context.getExternalCacheDir().

9

READ_PHONE_STATE

Allows read only access to phone state, including the phone number of the device, current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.

10

CAMERA

Required to be able to access the camera device. This will automatically enforce the uses-feature manifest element for all camera features. If you do not require all camera features or can properly operate if a camera is not available, then you must modify your manifest as appropriate in order to install on devices that don't support all camera features.

11

ACCESS_NETWORK_STATE

Allows applications to access information about networks.

12

VIBRATE

Allows access to the vibrator.

 

  1. Data Collection and Storage

1. HOW DATA AND PERSONAL INFORMATION ARE PROCESSED, USED, AND STORED.

NCB does not collect personal data and information. We are not interested in receiving and knowing the identities of individuals with scannable identification documents. However, the application needs to process personal information displayed on identification documents through NCB Optical Character Recognition (OCR) technology, including:

- Sensitive privacy information such as Portrait Photo, Full Name, Nationality, Gender, ID Number, Date of Birth, Issue Date, Expiry Date, Address, Place of Birth, Father's Full Name, Mother's Full Name, Spouse's Full Name.

- Special categories - Nationality and biometric data such as facial recognition for the purpose of uniquely identifying a natural person and anti-spoofing.

The application processes this information locally on the smartphone and then sends that information to the server for processing. After personal information is processed on the server, the information is returned to the phone. Personal information processed is not stored on the server and/or on the smartphone or within the application. Moreover, this information is not shared with any third party NCB uses servers under its own control. In case you withdraw your consent or definitively revoke consent for NCB to use your information for electronic identification, we will cease all identification processes and delete all your data generated during the electronic identification process. The application displays identity verification through NCB OCR. We do not process, use, and/or store non-personal information such as location, device type, or any other usage information. We are using the TrueDepth API to collect the depth data in real time that allows us to determine the distance of a pixel from the front-facing camera, this data is used to determine the user are using our services is the real user, not the image or even video. This process helps us limit the fraud rate. We do not collect any information during the entire process.

2. HOW YOUR PERSONAL DATA IS PROCESSED AND USED

By using the application, you agree and allow your personal data and information to be sent to NCB servers where they are processed to verify your identity. However, your personal information, including information generated during the authentication process (information read from MRTD documents, facial data used for matching and anti-spoofing), is not stored on the server, on the smartphone, or within the application. NCB does not collect or store any data for any purpose on the server or in the application.

2.1 The personal data we collect will be processed for the following purposes:

We process personal information based on legal grounds and solely for the purpose of personal identity verification according to ICAO 9303. Your entire personal information is not stored before, during, and after this process.

2.2 Disclosure:

NCB will not transfer your personal data to a third party without your prior consent. Please note that NCB does not share personal information with a third party for marketing or any other purposes.

2.3 Data Transmission:

NCB does not store your personal information processed and used through or by NCB.

Headquarter

28C-28D Ba Trieu, Hang Bai Ward, Hoan Kiem District, Hanoi, Vietnam
Hotline: 18006166
Email: Callcenter@ncb-bnk.vn