Security Statement

The Maybank Group is highly committed to ensuring that all transactions performed through our online financial service are secure, safe and confidential. For this purpose, we have put in place privacy protection control systems designed to ensure the highest security standards and confidentiality.

  • Security Tips
  • Username and Password
  • Information Protection
  • Data Confidentiality and Data Integrity
  • Systems Security and Monitoring
  • Computer Virus Protection
  • Updating Your Browser

Username and Password

To prevent unauthorised access to our online financial services, every customer is required to select a username and an alphanumeric password, which are the access key to your financial information. The username must be between 6 to 16 characters and the alphanumeric password must be between 8 to 12 characters. Your password must include both alphabets and numbers but you may also use special characters (e.g. & * $) except spaces.

The username and alphanumeric password are case sensitive. For example, if your password is "fuNNySAD2B" and you key in "fuNNySAD2b", you will not be able to login (the "b" must be uppercase).

To ensure the integrity of your username and password, you are advised to do the following:

  • Do not choose a password that others can easily guess
  • Do not use simple words, your name, birth date, telephone number or names listed in standard dictionary
  • Memorise your password and do not write it down
  • Passwords or PINs should be used when accessing an online account to protect your personal information
  • Sharing your password or PIN with another person is the same as giving that individual authority to use your name in a transaction. It should not be disclosed even if requested by an authorized Maybank Group Officer
  • Change your password frequently
  • To create a password, you can use the following options:
  • Use a combination of unrelated words and numbers
  • Use grossly misspelled or mistyped words
    (e.g. sinaran_07 -> slnalam_07)
  • Use both upper and lower case characters
    (e.g. funnysad2b -> fuNNySAD2B)
  • Use a line of lyrics or poem
    (e.g. "A thousand sad reasons for a broken heart" -> 1Ksrfabh)

Don´t copy any of these examples!
Tips to remember your password:

  1. Login and logout many times to practice using your password.
  2. Learn your password, just as you learn any other unfamiliar stuff you have to memorise.
  3. Learn to care about your passwords. Think about why they are important. Think about the consequences of forgetting your password.
  4. Use whatever memory tricks that help you. For example, you can personally make acronyms that represent events and dates, such as I lived in Pulau Pinang for 12 years -> iliPPf12y (Don't copy this example!)
  5. If you absolutely need to write down your password, make sure that anyone seeing it or finding it cannot determine what it is. Make sure that it is unrecognisable and cannot be associated with your account/username.

Information Protection

We take considerable effort to ensure a safe and secure online experience, but we do not have control over the computer you use to access Maybank2u.com. As an added security feature, we have incorporated an automatic log out function if no activity is detected after a preset time limit.

However, you must ensure that your computer does not provide anyone opportunity to gain access to your account information:

  • Ensure no one has access to your computer or records your online activities
  • Always log out of Maybank2u.com immediately after completing transactions and before visiting other websites
  • Do not send any information about your account via e-mail
  • Disable the AutoComplete function on your browser to avoid automatic completion of your ID when you type in User ID
  • To turn AutoComplete "On" or "Off" in MS Internet Explorer browser:
  • Click the "Tools" menu to get the "Internet Options" function
  • Click "Internet Options" to get the "Content" tab
  • From this tab, click the "AutoComplete" button
  • Uncheck "User names and passwords on forms"

More Security Tips

  • Don't open suspicious e-mail attachments
  • Avoid downloading free programmes. These may incorporate hacker-friendly software
  • Download security updates regularly
  • Don't use the "remember password" function because this information can be easily accessed by hackers

Clear your cache (information stored in your computer memory) each time you log out. Click "clear your cache" in the Maybank2u.com logout page and follow the step-by-step instructions.

Maybank2u.com collects personal information that you voluntarily provide on this Web site, which may include your name, address, e-mail address, marital status, salary range, number(s) of children, etc. We use this information to communicate with you and to provide you with your requested service or product. If you provide your consent at the time your personal information is collected via this Web site, we may also provide you with information, special offers, and promotions. Furthermore, we may store some or all of that personal information and use it for marketing research and marketing purposes. We maintain your data for as long as you are a customer of the Maybank Group.

Data Confidentiality and Data Integrity

To ensure data confidentiality and integrity, all information transmitted over the Internet is encrypted using the 128-bit Secure Sockets Layer (SSL) protocol from Verisign Certificate Authority. SSL is a secure way of transferring information between two computers on the Internet using encryption. Strong end-to-end encryption is also adopted within the bank's computer networks and resources.

Maybank2u.com is WebTrust certified. This certifies our compliance with leading international security standards and Best Practices, as well as our commitment to maintaining a secure environment. WebTrust is an independent corporation that monitors and tests our facilities to assure that we maintain the highest and most current standards in Internet information security and exchange.

Systems Security and Monitoring

The Maybank Group has adopted a combination of the following systems security and monitoring measures for online transactions:

  • Firewall systems, strong data encryption, anti-virus protection and round-the-clock security surveillance systems to detect and prevent any form of illegitimate activities on our network systems.
  • Regular security reviews of our systems by our internal System Auditor as well as external security experts
  • When you have a broadband connected to the Internet (always-on connection), consider installing a personal firewall. At a minimum, power-off your PC when not in use

We also take every effort in ensuring collaboration with major vendors/manufacturers to keep abreast of information security technology developments, for possible and future implementation.

Computer Virus Protection

Computer viruses are real and once your computer is infected it can cost you time, loss of information, repair expense, and aggravation. Make sure your computer has an anti-virus protection programme installed to reduce the risk.

We recommend that you purchase a programme that automatically upgrades your virus protection on a recurring basis. If you currently have a virus protection programme on your computer without the automatic upgrade feature, make sure you update your virus detection program at least monthly and/or when you hear of a new virus to minimise your risk. You can do this by visiting the Internet site of the company that provides your software.

In addition we advise not to open attachments from others or open diskettes unless you have absolute certainty that you can trust the source, and then still be cautious. Whoever sent you that attachment or gave you a diskette may not know that they have carried the virus to you.

Updating Your Browser

An Internet browser allows access and the ability to navigate a myriad of information and service resources on the Internet. Most computers come with a browser already installed.

  • Always update your browser when new versions are released because they often include new security features
  • Check your browser for built-in safety features that you may or may not elect to use
  • If you use Internet Explorer, update it to IE version 6.0
  • You may access the lastest security patches at the following URL: http://www.microsoft.com/windows/ie/downloads/critical
  • It is a good practice to always check the site certificate before login
  • We recommend using Microsoft Internet Explorer for Maybank2u online transactions.

Internet Explorer for Windows 98/2000/NT

  • Internet Explorer version 6.0
Privacy Policy

Our customers have always been our top priority and the Maybank Group is dedicated to ensuring that our online financial transactions are private, safe and secure. In short, your privacy is our top priority. This privacy policy is designed to explain some of the privacy principles we abide by, in providing a responsible and reliable online experience.

Types of Information

When applying for any of Maybank Group's products or services, or to perform any of your banking transactions online via this website, you will be required to provide us with information such as your name, address, age, gender, and identity card number. Where applicable, financial information such as income, assets and liabilities may be required as well.

Use of Information

The information gathered is used primarily to provide you the financial services you have requested, evaluate your financial needs, prevent fraud and offer additional products or services that we believe may be of benefit to you.

Employee Access

Employee access is only limited to authorised employees who are fully trained in handling your information. These authorised personnel are required to ensure the confidentiality of your information and to respect your privacy at all times. Employees who have access to your information will be subjected to disciplinary action should they fail to observe this privacy policy.

Security Measures Adopted to Protect User Information

We protect your information in a highly secure data centre, adhering to strict computer security standards. We have put in place, privacy protection control systems designed to ensure that our customers' information remain safe, secure and private. For more information on our security measures, please refer to our security statement.

Sharing of Information

Besides sharing of information between members of the Maybank Group, we do not disclose your information to any third party or external organisations. This is in view of our strict compliance to the Banking and Financial Institutional Act (BAFIA).

However, to ensure that you benefit from our full range of products and services, your non-financial information may, from time-to-time, be provided to our alliance partners, suppliers and/or any other parties.

Should any information be provided to these entities, we will make every effort to ensure that the entity has adopted at least the same customer privacy standards as the Maybank Group.

If you do not wish to share your information with any other entities, or you do not want to be solicited for products or services offered by the Maybank Group, or entities it provides information to, please write in to us or e-mail us at Maybank2u.com.

The only other instances where we disclose your information is:

  • When it is required by law
    When such disclosure is required under legislation or regulation, government agency or court order
  • When it involves public interest
    When such disclosure is required to protect the interest of the public, for example in the detection of crimes, etc.
  • Where it is authorised by you

Accuracy of Information

Keeping your data and information accurate and updates is very important to us. You can help us keep accurate records by informing us of any changes. If you have reasons to believe that your records with us are inaccurate, incomplete or not updated, please write in to us. We will promptly rectify your records accordingly.

Customer Complaints

You may address any queries, concerns or complaints relating to your information or data by writing or e-mailing us.