Handling of Personal Information

1. Matters concerning the publication of the intended use of personalinformation

SBI Remit shall use any personal information on customers, obtained either directly or indirectly,to the degree required to fulfill the intended uses as described below.
Note that when the Company acquires personal information directly from the customer in writing, theCompany shall clearly indicate its intended use in advance.
Furthermore, as well as definitively specifying the intended use so that customers can clearlyunderstand it, the Company shall also endeavor to limit intended use according to the circumstancesunder which information is obtained; for example, responses to various questionnaires are used forthe purpose of aggregating statistics.

List of intended uses

1.1. To register members for international remittance services and provide services;
1.2. To confirm the identity of an individual and to confirm an individual is eligible touse the Company’s services pursuant to the Act on the Transfer of Criminal Proceeds, theForeign Exchange Act, the Act on the Submission of Statements of Overseas Wire Transfers forthe Purpose of Securing Proper Domestic Taxation, and other relevant laws and regulations;
1.3. To properly execute any services concerning the processing (either in part or in full)of personal information outsourced to the Company by another business operator;
1.4. To exercise rights and fulfill obligations based on contracts with the Company’scustomers and relevant laws and regulations;
1.5. To research and develop the Company’s services by carrying out market surveys, alongwith data analysis and questionnaires;
1.6. To inform Customers of services, through direct mailing or similar means;
1.7. To inform Customers of products and services from affiliated companies or similarentities;
1.8. To cancel transactions and carry out administrative affairs after cancellation; and
1.9. To otherwise carry out transactions with customers in an appropriate and unhinderedmanner.

Note that where the intended use of specific personal information isrestricted by law, it shall not be used for any purpose other than the intended usestipulated. Specifically, this is as follows.

Pursuant to Article 26 of the Cabinet Ordinance on Fund Transfer Service Providers, FundTransfer Service Providers shall appropriately secure the operation of their services and shallneither use nor provide to third parties information on personal users of their fund transferbusiness for any purpose other than that deemed necessary; note that this includes informationon race, creed, family origin, domicile, health and medical status, and criminal records, aswell as other special nonpublic information handled by the providers (i.e. other informationmade known through the course of business that is not in the public domain).

Pursuant to the Act on the Utilization of Numbers to Identify SpecificPersons in Administrative Procedures, SBI Remit does not acquire, use or provide to thirdparties the customers’ personal ID numbers, or personal information that includes such personalID numbers, for any purpose other than the intended use approved under the same Act.

2. Proper acquisition of personal information

SBI Remit shall appropriately acquire personal information on itscustomers.
For example, the company may collect personal information from the following sources.

Examples of sources used to collect information

・ Sources where information is provided directly by the customer, such as SBI Remit’swebsite where customers enter their data, as well as written documentation filled in andsubmitted by customers, such as application forms for membership registration, etc.

3-1. Provision of personal information to third parties

SBI Remit shall not provide any personal information it holds to a third party without thecustomer’s consent except where services are outsourced, where information is provided in connectionwith business successions resulting from a merger or some other reason, where information is jointlyused, and in cases listed below:

3.1.a. where there are legal or regulatory grounds;
3.1.b. where it is necessary for the protection of human life, persons or property, and it isdifficult to obtain the consent from the individual concerned;
3.1.c. where it is especially required to improve public health or promote the healthydevelopmentof children and it is difficult to obtain consent from the individual concerned;
3.1.d. where it is necessary to cooperate with a national agency, a local government body ortheirconsignee in the execution of legal or regulatory affairs, and where the execution of suchaffairs would be hindered, or risk being hindered, if consent were obtained from the individualconcerned.

Note that when services are outsourced, the Company shall enter into an agreement with the contractorto ensure personal information is handled strictly in keeping with SBI Remit’s standards and theCompany ensures that appropriate preventative measures are in place.

For example, SBI Remit outsources the handling of personal information with respect tothe following administrative tasks.

Examples of outsourced administrative tasks

・ work related to the shipping of procedural documents;
・ work related to the shipping of direct mail;
・ services related to systems operation and maintenance; and
・ operations related to the delivery of the Company’s overseas remittances services.
・ work related to responding to inquiries from customers;

3-2. Provision of personal information to third parties in foreigncountries

(1) Names of foreign countries and information on the personalinformationprotection system of the foreign country obtained by an appropriate and reasonable method.

We provide the personal data we hold to the followinginstitutions dependingon the destination country of remittance of the customers.

MoneyGram International Payment Systems, Inc.	USA
LandBank of The Philippines	Philippines
G-Xchange, Inc.	Philippines
COINS.PH (BETUR INC.)	Philippines
PT Bank Rakyat Indonesia (Persero) Tbk.	Indonesia
PT Bank Central Asia Tbk	Indonesia
VIETNAM JOINT STOCK COMMERCIAL BANK FOR INDUSTRY AND TRADE	Vietnam
Tien Phong Commercial Joint Stock Bank	Vietnam
SAI GON THUONG TIN COMMERCIAL JOINT STOCK BANK.	Vietnam
City Express Money Transfer Pvt., Ltd.	Nepal
JET PERU S.A.	Peru
Tranglo Sdn. Bhd.	Malaysia
Tranglo Pte. Ltd.	Singapore
The Siam Commercial Bank Public Company Limited	Thailand
CB Bank PCL	Myanmar
ACLEDA Bank Plc.	Cambodia
UnionPay International Co., Ltd.	China

For the personal information protection system of the countrywhere theabove institution is located, please check the following pages or the link below published bythe Personal Information Protection Commission.
https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku

Nepal

■ Existence of apersonal information protectionsystem.

・TheIndividual Privacy Act 2075(2018)
・The Individual Privacy Regulation 2077 (2020)
・TheNational Civil Code 2074 (2017)
・TheNational Penal (Code) Act(2017)

■ Information that can be an indicator ofthe personal information protection system.

・EU adequacy decision : None
・APEC CBPR System : None
・Obligations of institutions or their rights that comply with the 8 principlesof the OECD Privacy Guidelines.
Both are stipulated.
・Other systems that may have a significant impact on the rights and interests ofthe individuals.
None.

(2) Information on measures taken by the third party to protect personalinformation.

The measures taken by the above businesses to comply with theeightprinciples of the OECD Privacy Guidelines are as follows.

・MoneyGram International Payment Systems, Inc.
All measures are taken.
・LandBank of The Philippines
All measures are taken.
・G-Xchange, Inc.
All measures are taken.
・COINS.PH (BETUR INC.).
All measures are taken.
・PT Bank Rakyat Indonesia (Persero) Tbk.
1. All measures are taken.
・PT Bank Central Asia Tbk
1. ①Collection Limitation Principle : Confirmed that measures are taken partially.
2. ②Data Quality Principle : Confirmed that measures are taken partially.
3. ③Purpose Specification Principle :Confirmed that measures are taken partially.
4. ④Use Limitation Principle : Measures are taken.
5. ⑤Security Safeguards Principle : Measures are taken.
6. ⑥Openness Principle : Confirmed that measures are taken partially.
7. ⑦Individual Participation Principle :Confirmed that measures are takenpartially.
8. ⑧Accountability Principle : Confirmed that measures are taken partially.
・VIETNAM JOINT STOCK COMMERCIAL BANK FOR INDUSTRY AND TRADE
1. All measures are taken.
・Tien Phong Commercial Joint Stock Bank
1. All measures are taken.
・SAI GON THUONG TIN COMMERCIAL JOINT STOCK BANK
1. All measures are taken.
・City Express Money Transfer Pvt., Ltd.
1. All measures are taken.
・JET PERU S.A.
1. All measures are taken.
・Tranglo Sdn. Bhd.
1. All measures are taken.
・Tranglo Pte. Ltd.
1. All measures are taken.
・The Siam Commercial Bank Public Company Limited
1. All measures are taken.
・CB Bank PCL
1. All measures are taken.
・ACLEDA Bank Plc.
1. All measures are taken.
・UnionPay International Co., Ltd.
All measures are taken.

4-A. Shared use of personal information

SBI Remit may share use of personal information described in item 4.1 below withthe parties listed in item 4.2. However, the personal information concerning applicants foremployment described in item 4.1.d. shall only be used for the purpose described in item 4.3.e.Furthermore, the Company shall comply with restrictions on the shared use of information pursuant tothe Financial Instruments and Exchange Act, the Insurance Business Act, and other related laws andregulations, and handle personal information in accordance with these laws.

4.1. Items of personal information that may be sharedare as follows:

4.1.a. name, address, date of birth, telephone number, e-mail address, information ontransaction needs, information in the public domain, and information on other personalattributes;
4.1.b. transaction records, points data, various types of products and services, etc.that the customer has traded, other information on transactions;
4.1.c. information required for transaction management such as administrative numbers,including customer numbers and transaction numbers, etc.; and
4.1.d. information on individuals applying for employment at SBI group companies,including their name, gender, e-mail address, date of birth, address, phone number,academic background, employment history, aspirations and motivations, and similarinformation.

4.2. Scope of users sharing the information

Information listed in 4.1 may be shared with SBI Groupcompanies listed onthe website below (hereinafter referred to as “SBI Group Companies”). Note that the usersentitled to share information may be changed at the Company’s discretion.

http://www.sbigroup.co.jp/company/group/overview.html

4.3. Intended use of sharing information Theinformation in 4.1 is sharedfor intended uses as follows:

4.3.a. User-friendliness of services offered by SBI Group companies
To improve user-friendliness during login, and user authentication after loggingin, and to display customer information automatically on various pages when using theServices as a registered customer of SBI Group companies.
4.3.b. Services necessary to deliver goods
To execute duties required to deliver products, provide services, settlepayments,deal withcustomer inquiries, deal with inquiries from SBI Group companies, provideassociatedafter-salesservices, and carry out other transactions where an application is made toreserve,purchase oraward a product or service or another transaction from an SBI Group company.
4.3.c. Advertising and marketing for SBI Group Companies
- ・To provide information from SBI Group Companies through e-mail magazines orsimilar communication.
- ・To provide information on SBI Group Company services via e-mail, postal mail,telephone or similar means.
- ・To provide advertisements and content offered by SBI Group Companies in linewith personal attributes such as gender, age, location of residence, hobbies andinterests, as well as purchase history and browsing history from websitesoperated by SBI Group Companies or similar entities.
- ・To develop new services and improve existing ones by analyzing the use of SBIGroup Company services.
- ・To contact applicants in relation to questionnaires, campaigns, prize draws andthe shipment of prizes.
4.3.d. Responding to enquiries
To respond to enquiries made to SBI Group Company via e-mail, postal mail or telephone.
4.3.e. Recruitment and talent acquisition
Personal information including curriculum vitae and job history statements submitted toapply for a position at an SBI Group company shall be used for the purpose of talentacquisition activities at the SBI Group company.
4.3.f. Other duties
In addition to 4.3.a. to 4.3.e above, as required for the provision of SBI Group companyservices.
4.3.g. Miscellaneous
The Company may use personal information for services provided by SBI Group Companiesfor purposes other than those described in 4.3.a through 4.3.f above. In such cases,a notification shall be posted on the website in regards to the service in question.

4.4. The name of the party responsible for managingpersonal information

The name of the party responsible for managing personal information is SBI Holdings,Inc.: 1-6-1 Roppongi, Minato-ku, Tokyo; Representative Director, Chairman, President & CEO Yoshitaka Kitao

4.5. Inquiries on the shared use of information

Any inquires on the shared use of information should be addressed to the General Affairs Department, SBI Holdings, Inc.: Phone : 03-6229-0100 (Rep)

4-B. Shared use of personal information

SBI Remit may share use of personal information described in item (4.1) belowwith the parties listed in item (4.2).

4.1. Items of personal information that may be sharedare as follows:

4.1. name, gender, occupation, date of birth, address,telephone number, nationality, e-mail address, customer code, membership status according to thenumber of remittances (remittance details not included), membership registration date and time

4.2. Scope of users sharing the information

SB Payment Service Corp.

4.3. Intended use of sharing information

4.3.a. To notify customers of international money transfer services using the systemprovided by G-Xchange, Inc. (the “Service”) and related promotions
4.3.b. To respond to inquiries from customers and provide support related to use of theService, such as relevant procedures and information
4.3.c. To assist customers in entering their membership information when applying forthe Service
4.3.d. Other duties necessary for provision of the Service in addition to 1. to 3. above

4.4. The name of the party responsible for managingpersonal information

SBI Remit Co., Ltd.: 4F Sumitomo Fudosan Otowa Bldg., 2-9-3 Otsuka, Bunkyo-ku, Tokyo; Representative Director Yoshinori Kimura

4.5. Inquiries on the shared use of information

SBI Remit Customer Support Center: Phone : 03-5652-6759

5. Procedures to cancel direct marketing

If the customer requests direct marketing to be discontinued, we will take measures to suspend thesubsequent use and provision without delay. Important notices such as maintenance sent withoutrestriction to customers are not subject to suspension procedures.

For details on cancellation procedures

Requests should be made to the Customer Support Center as detailed below.

6. About Retained personal data

(1) Name, address and name of representative of personal informationhandlingbusiness operator

SBI Remit Co., Ltd.: 4F Sumitomo Fudosan Otowa Bldg., 2-9-3 Otsuka, Bunkyo-ku, Tokyo; Representative Director Yoshinori Kimura

(2) Utilization purpose of all retained personal data

It is as shown in “1” above.

(3) Procedures for the disclosure of Retained personal data

SBI Remit shall respond in the following manner to requestsfrom an individual (or their agent) for Retained personal data by the Company to be disclosedand related enquiries.
Once the Company has confirmed the identity of the individual (or theagent)using the method described below, the Company shall respond with details of the procedurethrough the exchange of written documents, or another method. Note that, depending on thecontent of the request, the Company may ask you to submit the request using a form prescribed bythe Company.

Making a request
Requests from an individual (or their agent) for thedisclosure of Retained personal data by the Company should be made using the formprescribed by the Company. Once it has been filled in, the form should be sent by postto the Customer Support Center together with personal identification documents.
Confirming the identity of the individual or the agent
In the event of arequest froman individual, the Company shall check their identity from a driver’s license, passport,health insurance card, or a certified document such as a seal registration certificate(note that any such document must be currently valid, or have been issued within thepast three months). The Company shall place a call back to the telephone numberregistered with SBI Remit and confirm the individual’s identity by checking registeredinformation, including name, address and telephone number.
In case of a request froman agent, the Company shall confirm the agent’s power of attorney and the sealregistration certificate proving that the seal stamped on the letter of attorney belongsto the agent. The Company shall also contact the individual via telephone to confirm theagent’s identity.
Fees
The Company does not charge Customers any fees for the disclosureof Retained personal data by the Company. However, the Customer shall be responsible forany expenses related to communications from the Customer to SBI Remit, anytransportation expenses, and any expenses incurred by the Customer in the preparation ofmaterials required for personal identification as per the previous clause.
Response
Once procedures are complete, the Company’s written responseshall be sent by post.
Note that the procedures normally take about two weeks.

(4) For details of Measures taken for the security management of Retainedpersonal data.

Please contact our help desks below.

7. SBI Remit’s help desks

Any enquiries, discussions or complaints on the handling of personal informationshould be directed to the help desks listed below.

SBI Remit Co., Ltd. – Customer Support Center:

TEL : 03-5652-6759
Press 4for Japanese / 1 for Tagalog / 2 for Chinese / 3forEnglish

■ 4 for Japanese / 2 for Chinese: Opening Hours :
weekdays 09:00-18:00 (JST)
■ 1 for Tagalog / 3 for English: Opening Hours :
Weekdays 08:00-22:00 (JST)
weekends and national holidays12:00-21:00 (JST)
(apart from New Year and holidays specified by the company)

8. Cookies

SBI Remit uses the technology known as cookies on some of its webpages to allow the Company’scustomers more convenient use of the site. The Company uses cookies to allow the Company’s websiteto identify a customer’s computer and retain information for when the customer later returns to theCompany’s site. The Company never uses cookies to acquire personal information on customers.

9. Use of information on personal attributes provided by Google Inc.

SBI Remit uses Google Analytics-a service provided by Google Inc. that analyzesaccess to websites—in order to improve the quality of the Company’s services and convenience for theCompany’s customers. The Company uses this to collect information on the pages viewed by visitors tothe Company’s website, without personally identifying them.
In addition, the Company uses anadditional feature of Google Analytics to obtain the following information (hereinafter referred toas “attribute information”) from Google Inc.

Information on customer attributes (age/gender), interests and concerns that arestatistically inferred from a customer’s use of Google’s advertising services and browsing history.

*Customers can visit Google Inc.’s [ Ad Settings ] to change the attribute informationstatistically inferred by Google Inc.

*Attribute information that the Company obtains from Google Inc. never includes information thatidentifies individuals.

*Attribute information is not acquired if the Customer does not use Google Inc.’s advertisementservices.

SBI Remit and third party distributors (including Google Inc.) use first partycookies (such as Google Analytics Cookies) and other first party identifications and third partycookies (such as DoubleClick Cookies), or a combination of other third party identifications toanalyze the attributes, interests and concerns of users visiting the Company’s website. The Companyalso acquires data on the customers’ advertisement browsing, click history and use of non-SBI Groupwebsites to use in the distribution of advertisements by group companies.

If you do not want SBI Remit to be able to access attribute information throughthe use of Google Analytics, then please follow the URL below to opt out.
https://tools.google.com/dlpage/gaoptout