Rules for Online BankingCorporate Services of Bank of China Limited

Article 1 Any customer who has opened a corporate account with any banking outlet of Bank of China Limited (BOC) and registered for online banking corporate services shall conduct online banking businesses pursuant to the Rules.

Article 2 The online banking corporate services of BOC offer its customers with the following transaction functions: account inquiry(domestic and overseas), remittance and transfer(domestic and overseas), payment to designated account, third party custody , bank-futures account transfer, asset custody, payroll service ,Other payment service ,futures payment & withdrawal service, group service(domestic and overseas), BOC Direct service(domestic and overseas), and service settings, etc.

Article 3 BOC provides 24-hour online banking corporate services, though a concrete service shall be handled during a given system processing time.

Article 4 The operator of a corporate customer shall pay attention to the following matters when making use of the online banking corporate services of BOC for the first time:

1. The operator who applied for CA digital certificate shall download the CA authentification certificate according to the reference number and authorized code printed on the sealed password envelope.

2. Please customize the online banking user name after logging on the system with the user login name printed on the password envelop or printed on the service slip;

3. Please change the initial logon password printed on the sealed password envelop or sent by short messaging service of mobile phone to a new logon password pursuant to the requirements of User Security Mechanism (8-20 digit combination of numbers and letters);

4. Please customize the reserved information in time.

Article 5 A corporate customer may irregularly modify the password according to the actual needs; however, the user name set during initial logon into the online banking system cannot be modified once it is confirmed by the customer.

Article 6 All operators of a corporate customer must have the same identity certification tool.

Article 7 The identity certification tool used by an operator of a corporate customer to access the online banking system shall be independent from (i.e. shall not be shared with) that used by him as a personal customer.

Article 8 A corporate customer should assigned its operators and his/her banking authorizers according to the manual of BOC online banking.

Article 9 A corporate customer should pay attention to the following events when applicates or uses the online banking corporate services :

1. Based on having known, understood and agreed to comply with the terms and conditions of BOC Electronic Banking Regulations, customer voluntarily applies for these services.

2. Customer is obliged to accurately fill in the application form of BOC Corporate Banking Online Services in consistence to the rules and regulations of Bank of China. The completed form aforesaid shall serve as an inalienable part of the Bank of China Corporate Banking Online Services Agreement, and carries the same legal force. If any change to the information in the application form is incurred, the new form will be equally effective as a part of the service agreement. Customer shall ensure that the completed application form and the provided information are authentic, accurate, and complete. Bank of China shall configure relevant settings in the online banking system in strict accordance with the account, operator, operation purview and organizational relationship provided by Customer.

3. Bank of China has the right to define and alter the online banking service time and the daily deadline for specific services or transactions. The transaction instruction received after the daily deadline will be deemed as being submitted and will be processed on the next day.

4. Customers who applied for the following services should pay additional attentions to the following points:

(1)Account inquiry: A corporate customer may only apply for the function of account inquiry; and the function of account inquiry may also be opened when a customer apply for other service functions which involves fund transfer.

(2)Payment to designated account: A corporate customer may also assign specific operators to operate the function of “Designated Accounts Maintenance”. Meanwhile, the function of “Payment Entrustment ”and the function of “Designated Accounts Maintenance” cannot be assigned to the same operator in order to ensure effective control of funds flow.

(3)Third party custody : In order to access the third party custody of online banking corporate service, customer need to apply for the service of Third Party Custody at the counter first so that its information can be registered in our Third Party Custody system.

(4)Payroll Management and Other Agency Payment services: Customer may first sign the agency payment service agreement with Bank of China and apply for the Payroll Management and Other Agency Payment services. Customer should guarantee that all the funds for agency payment should be paid from the settlement accounts which meet the standard of the People’s Bank of China. The customer should also guarantee the authenticity and legitimacy of its purpose for the payments.

(5) Futures (payment & withdrawal) service: The futures exchange and the membership organizations (futures companies) should open settlement accounts in accordance with the relevant regulations of Bank of China and sign the relevant membership service agreement with each other. The futures exchange should authorize the future companies to apply the Futures Withdrawal Entrustment, Futures Withdrawal Inquiry, Futures Withdrawal Cancellation and Futures Withdrawal Modification functions to the account which belongs to the futures exchange. Meanwhile, the futures exchange should authorize Bank of China to open the Futures Withdrawal Entrustment, Futures Withdrawal Inquiry, Futures Withdrawal Cancellation and Futures Withdrawal Modification functions for the membership organizations (futures companies) to apply the above functions to the futures margin account which belongs to futures exchange. The futures exchange should perform authorizations to the electronic payment instructions submitted by the membership organizations (futures companies) and bear corresponding liabilities for the authorized electronic payment instructions.

(6) Group Services: Both the headquarters and the branches/subsidiaries who apply for Group Services should open bank account at Bank of China. If the applicant is securities companies, its should strictly abide by the relevant rules and regulations on the usage and transfer of customer’s funds for settlements and the securities company’s own funds published by the China Banking Regulatory Commission and the China Securities Regulatory Commission. As for automatic fund transfer function, automatic fund deduction will be performed by the bank after relevant settings are completed. Bank of China will process the automatic fund transfer strictly in accordance to the settings of the cash pool account and the pooled accounts applied by the customer. In case that the fund transfer is failure or the transactions is generated due to system malfunction, the system will not re-process the fund transfer automatically on the same day, and the customer could finish the fund transfer through other channels instead if necessary. As for overseas automatic fund transfer function, online banking system will process the transactions based on the time zone of the payer’s account in accordance to customer’s settings.

(7) Fund Transfer (overseas): The payer’s account for overseas fund transfer should be opened at the overseas branches of Bank of China, and Bank of China will provide the customer with the function of fund transfers from overseas account to domestic account and the transfers between overseas accounts. As a prerequisite of the application of overseas fund transfer service, the customer should acquire written authorization which is sufficient, effective and legitimate from the its overseas branches (All the written authorization documents will be attached to the service agreement and serve as part of the service agreement. Meanwhile, the authorization documents and service agreement should meet the legal or supervisory requirement of the country/region where the overseas branches of Bank of China are based.)

(8) BOC Direct Service: Customer who apply for BOC Direct service should sign the Bank of China online banking BOC Direct Service Agreement separately. A customer can set several front-end servers and several IP address for the BOC Direct service. One BOC Direct operator can use only one IP address, and one IP address can be used by several operators at different time. But during applications, one IP address can only be used by one BOC Direct operator at once.

(9)Asset Custody Service: Before applying for the online banking Asset Customer Service, customer should first sign the asset custody service agreement with Bank of China and become a customer of our traditional asset custody service.

(10) Bank-futures account transfer: In order to access the bank-futures account transfer of online banking corporate service, the corporate customer may register as a user as BOC bank-futures account transfer system first.

Article 10 In order to protect the security of corporate customer’s information, fund and transaction, an operator of a corporate customer shall use his/her identity certification tool to logon the online banking system, operates pursuant to the applicable requirements and properly keeps the customer identity certification tool. All online banking operations completed by virtue of the customer’s identity authentication toll are deemed by BOC as being conducted by the corporate customer itself.

Article 11 A corporate customer shall comply with terms given in the Agreement on Online Banking Corporate Service of Bank of China Limited as well as that of the Rules when using the online banking services of BOC. The operator of an enterprise shall maintain the password and identity certification tool in a safe and confidential manner, and take measures to prevent unauthorized use of the password, including but not limited to:

1. Avoid writing down or recording the password in such a way that other people may be easily figure out;

2. Avoid disclosing the password to any other person, including staff of BOC (in operations, BOC staff can not and does not need to know customer’s passwords);

3. Destroy the password envelop or other password-related notices immediately after accessing to the online bank services for the first time;

4. Avoid using the easy-to-guess passwords (such as, birth day, telephone number, other personal information, or regular combination of numbers or letters), or the password relating to a third party (such as the same password with that of E-mail);

5. Avoid storing the password on any software that saves the password automatically (such as the windows which promoting “save password” on the computer screens or similar functions of internet browser);

6. Change the password regularly or aperiodically, and avoid using two passwords alternatively;

7. Avoid sending the online banking account number and password through e-mails.

Article 12 Corporate customers of BOC online banking must pay necessary fees in accordance with the onling banking charging standard published by BOC.

Article 13 Where an operator of a corporate customer enters wrong username, passwords for 5 consecutive times a day, BOC will temporarily lock up his/her online banking account on the day and BOC will unlock the account automatically the next day or the operator shall reset his/her password by presenting his/her valid identity materials to a counter of their opening bank on the day. Where an operator fails to authenticate the username or password for 15 consecutive times accumulatively or fails to authenticate the authentification tools for 10 consecutive times accumulatively, Bank of China will freeze his/her transaction qualification, and the operator of the corporate customer shall reset the password, unlock or apply for a new certification tool by presenting the required application/certificate materials issued by the enterprise and the locked authentification tool to a counter of their opening bank. The qualification of the enterprise’ other operators is not affected, and all operators may continue handling transactions at the counters when an operator’s qualification for online banking transaction is frozen.

Article 14 Operators of a corporate customer shall conduct transactions according to the prompts and instructions of BOC online banking system; and shall exit the system immediately after completion of a transaction. In the event of transaction interruption, the corporate customer is advised to carefully verify the accounting information to avoid repeated transaction. In case related information cannot be affirmed, please timely contact BOC. BOC will make inquiries on behalf of the corporate customers.

Article 15 Corporate customers shall ensure a secure computer environment and safe information saved in the computer systems and communication systems when making use of the online banking services. Please download and install the controls provided by BOC for protecting the security of clients, regularly download and install the latest security programs or patches for the operating system and browser, install firewall, install and update the anti-virus software.

Article 16 BOC will handle relevant business in strict accordance with the online banking transaction instructions made by the corporate customer. Where an erroneous payment transaction is made due to wrong instruction submitted by the corporate customer (such as erroneous payer’s account number, erroneous beneficiary’s account number, etc), BOC does not assume any liabilities, but may offer necessary assistance.

Article 17 BOC will publish an announcement in advance to remind its customers before updating of the website or online banking system. Customers shall use other channels such as outlet counter service to complete the transactions, in case the online banking service is suspended due to service upgrade or is not available resulted from Force Majeure.

Article 18 BOC sets system limits for online services. A corporate customer should negotiate about account limit with BOC to set a transaction limit lower than the system limit via any counter of BOC.

Please refer to the following table for the current uniform limits set by the system (in RMB):

Transaction / Authentification tool / Upper limit of a single transaction / Accumulative amount per day
Remittance and transfer of corporate customer(Payment to designated account) / No certification tool / RMB 0 / RMB 0
Dynamic password
e-Token / RMB 100,000,000,000 / RMB 500,000,000,000
CA digital Certificate / RMB 100,000,000,000 / RMB 500,000,000,000
Third party custody of corporate customer / No certification tool / RMB 0 / RMB 0
Dynamic password
e-Token / RMB 100,000,000,000 / RMB 500,000,000,000
CA digital Certificate / RMB 100,000,000,000 / RMB 500,000,000,000
Payroll service / No certification tool / RMB 0 / RMB 0
Dynamic password
e-Token / RMB 100,000,000 / RMB 1,000,000,000
CA digital Certificate / RMB 100,000,000 / RMB 1,000,000,000
Other payment service / No certification tool / RMB 0 / RMB 0
Dynamic password
e-Token / RMB 100,000,000 / RMB 1,000,000,000
CA digital Certificate / RMB 100,000,000 / RMB 1,000,000,000
Bank-futures account transfer / No certification tool / RMB 0 / RMB 0
Dynamic password
e-Token / RMB
500,000,000 / RMB
5,000,000,000
CA digital Certificate / RMB
500,000,000 / RMB
5,000,000,000

NOTE: The limit of futures-bank transfer Transaction will be set differently by different futures company,Pleast contact your futures company for details.