Security Policy

• Protection of your personal information

  • Secure Socket Layer technology is implemented to protect the information transmitted over the internet. The website should start with Https:// instead of Http://.
  • 2 factor authentication (2FA) is implemented to provide an additional protection to prevent disclosure of your personal information to someone else.

• To access the customer web application, a User ID and password is required. To protect your information, you should adopt the following:

  • Log off the online session.
  • Should not share your login credentials (ie User ID and password) with anyone. It is for your own use to enquire and update your policy information.
  • Change the password immediately when you receive the initial password from us.
  • Change regularly or if there is any suspicion that it has been compromised.
  • Password should be a combination of uppercase, lowercase alphabets, numerals and symbol.
  • Do not use password that can easily identify or relate to you (eg date of birth or name of your close ones or yourself).
  • Do not reveal One-Time Password (OTP) generated by the website to anyone.
  • Should not choose the internet option to store or retain the login ID and password.
  • Do not disclose personal, financial or credit card information to little-known or suspect websites.

• In addition in protecting your password, some of the best practices in using computer are highlighted below:

  • Anti-virus software must be installed. Virus signature files should be downloaded regularly and keep up to date.
  • Firewall should be installed and activated.
  • Regularly update the security patches of your computer and device operating system, anti-virus and firewall applications.
  • Clear the cache of your internet browser and history after you log out from the web application.
  • Do not use a computer or a device which cannot be trusted.
  • Minimize the use of public computers or devices to access your personal information or process transaction (eg: change of personal particulars, bank accounts etc).
  • Remove file and printer sharing in computers or devices, especially when they are connected to internet.
  • Make regular backup of critical data.
  • Consider the use of encryption technology to protect highly sensitive or confidential information.
  • Do not install software or run programs of unknown origin.
  • Delete junk or chain emails.
  • Do not open email attachments from strangers.
  • Customer should inform AXA immediately on the loss of his mobile phone or change his mobile phone number.
  • Password or Pin number should be memorized and not recorded anywhere.