The bank is obligated to strictly protect your personal information in accordance with the Law on Banking of Mongolia, the Law on Cybersecurity, the Law on the Protection of Personal Information, and other relevant laws, regulations, and guidelines. The bank must not disclose your information to any third party without your consent. However, in cases where it is legally required, the bank may provide your information to regulatory authorities or competent law enforcement agencies in accordance with Mongolian legislation.

To ensure reliable and secure services, the bank protects customer information through the following measures:

1. Develops and implements internal policies and procedures to ensure information security;
2. Employs a team of certified and skilled professionals dedicated to maintaining customer information security;
3. Protects personal, confidential, and sensitive customer information in compliance with internationally recognized standards such as ISO 27001, PCI DSS, SWIFT CSP, GDPR and others;
4. Continuously researches and adopts new technologies and innovative solutions to strengthen information security;
5. Utilizes customer identification and authentication tools to safeguard financial and personal data when delivering services and processing transactions via internet banking and other digital channels;
6. Regularly conducts information security audits and risk assessments through both regulatory bodies and internationally accredited third-party organizations to validate the bank’s information security practices;
7. Performs security vulnerability assessments and penetration testing on digital banking platforms and other information systems, making continuous improvements and updates based on the results;
8. Ensures that all bank employees undergo regular training and instruction on maintaining the confidentiality and security of customer information.

Under the Law on the Protection of Personal Information, you, as a customer, have the right to request the correction, deletion, or verification of the accuracy of your personal data. Therefore, we kindly ask that you review the personal information registered with the bank and promptly update it in the event of any changes.