Homebank application, Halyk Bank

Privacy Policy

We at Halykbank Bank (hereinafter — the Bank) would like to thank you for your interest in the Bank's products and Services. The protection of your personal information is very important to us and we are committed to the protection of data that are collected and processed as you use the Bank's Services. The Bank's Services include Internet banking mobile applicationsas well as other services posted on the website Homebank.kz, that enable Users to communicate with the Bank under executed banking service contracts and/payment card contracts and/or other contracts or without any such executed contract, including information exchange and individual transactions on the Internet or by using a special mobile device (smartphone, tablet PC, etc.) application and/or an e-payment system that enables mobile device users to pay for services, transfer money between individuals over social networks and shop on the Internet as well as traditional acquiring services. By accessing the Bank's Services a User consents without reservations to provisions of this Privacy Policy. The Bank shall protect the security of personal information received from Bank Service Users under laws of republic of Kazakhstan. This Privacy Policy has been designed to specify details that may be requested from Bank Service Users and ways in which such details may be processed by the Bank or other parties. This Privacy Policy also specifies purposes for which Users' personal information may be requested or disclosed. This Privacy Policy further specifies basic precautions that Users must follows to keep their personal information confidential.

This Regulation shall apply exclusively to information received by the Bank as a result of use of the Bank's Services by Users.

User information received and used and purposes of such use

The Bank collects User information exclusively for purposes of technical management of the Bank's Services and for review and improvement of the Bank's Services; for purposes of informing Users on the Bank's services and products; for marketing purposes; and for other purposes referred to in this Privacy Policy. In this Privacy Policy User information means personal information that a User passes to the Bank on his or her own when creating an account, registering, etc. and while using a Service (full name, sex, e-mail address, telephone number, etc.); and data transmitted automatically during use of the Bank's Services including but not limited to IP address, details of the mobile device used for access purposes, etc.

The following information may be requested and received during use of the Bank's Services:

Passing User information to third parties

The Bank shall be entitled to pass User information to the Bank's affiliated persons and such other companies as may be associated with the Bank for the aforesaid purposes. The Bank's affiliated persons and associated companies shall adhere to this Privacy Policy.

The Bank shall not pass User information to companies and/or private persons that are not associated with the Bank except: — with the User's consent. A User's additional consent is requested for the Bank to pass User information to companies and/or private persons that are not associated with the Bank. — as required by current laws. The Bank provides User information if such information is required to be received, used and disclosed for purposes of:

Security measures used to keep information confidential The Bank shall take every possible measures to ensure that User information is secure and protected from unauthorized access, modification, disclosure or destruction and other improper use. In particular, the Bank shall on an ongoing basis improve ways in which data is collected, stored and processed, including User compliance with the Bank's recommendations will help to ensure maximum protection of information passed to the Bank including details of the User's bank card (or other electronic payment instrument) and other details and will reduce possible risks in performing transactions by using details of the bank card (or another electronic payment instrument) when paying cashless for goods and services including payments on the Internet.

Information transfer terms The User gives his/her consent to the Bank on processing his/her data specified as when registering in the Bank’s Mobile Application and/or Internet Bank, by any means, including by third parties, including but not limited to reproduction, electronic copying, depersonalization, blocking, destruction, as well as the above mentioned processing of his/her other personal data obtained as a result of their processing, in order to: providing access to the functionality of the Bank's Mobile Application and/or Internet Bank, as well as for

The User gives his/her consent to the Bank’s counterparties on processing all personal data available to the Bank and/or the Bank’s counterparties, among other things in order to inform the User about the services of the counterparties, as well as to process the information about subscribers and the communication services rendered to them (if the Bank’s counterparty is a communication provider) in order to assess the probability of the User’s solvency in the future for making a decision on the issue of a credit card. The specified consent has been given for a period of 15 years, and in the event of its recall, the processing of the User’s personal data should be stopped by the Bank and/ or third parties and the data should be destroyed subject to termination of the Agreement and full repayment of the debt under the Agreement no later than one (1) year from the date of the Agreement termination.

Changes to this Privacy Policy. Applicable law The Bank shall be entitled to update and change provisions of this Privacy Policy at any time. Any new version of the Privacy Policy shall be effective from its placing unless otherwise provided in such new version of the Privacy Policy. The Bank recommends that Bank Service Users consult this Privacy Policy on a regular basis to keep up with the latest version.