Close Menu

Security Information

This webpage sets out the security information of the Internet Services offered by BOC Group Life Assurance Co. Ltd. (“BOC Life”). Internet Services include BOC Life’s eChannel Online Platform and eService.

 

Important Security Information

● Customers are reminded to stay vigilant to anything abnormal when logging into the eService (e.g. unusual pop-up screens, unusually slow browser response, multiple requests for password input etc).

● Please keep your personal information secure. Company will not enquire customer's personal information, e.g. user name, password, One-Time Password (“OTP”) or other account details by email, SMS or by phone.

● Customers are reminded NOT to log into Internet Services through hyperlinks embedded in any emails.

 

What have we done to protect you?

● We have adopted the 128-bit or above Transport Layer Security ("TLS") encryption to ensure the security of your data during transmission and prevent any unauthorised access by the third party to your data.

● Our web servers are protected by firewall systems to prevent any unauthorised access to Company’s system.

● Customers’ login attempts are recorded systematically. In the event of several consecutive login attempts with incorrect password, the related Internet Service will be suspended immediately.

● The Internet Services will be automatically disconnected after remaining inactive (i.e. no operational instructions have been received) over a period of time to prevent unauthorised transaction.

 

Security Certificate

Company has adopted Extended Validation ("EV") SSL Certificate. You can verify Company’s websites by checking the address bar of your browser, which is green for the browser of Microsoft Internet Explorer Version 9 or above, one of the security features of EV SSL. You may also check the certification details, including the date of the certificate and the following information, by clicking the "security lock icon" at the bottom right corner of the login page of eService using the browser of Microsoft Internet Explorer. Please note that the layouts would be different for different browsers. For details of the EV SSL Certificate, please refer to the website of VeriSign, the issuer of the certificate.

BOC Life eService
Domain name as issued to: boclifeonline.com 
Issued by: Symantec Class 3 EV SSL CA –G3

 

Recommended browsers for minimum security requirements

To ensure customer data security, please install any of the browser versions we recommend to log into the eChannel Online Platform and eService.

● Microsoft Internet Explorer (Version 11 or above)

● Mozilla Firefox (Version 45.2 or above)

● Apple Safari (Version 8 or above)

● Google Chrome (Version 43 or above)

[For optimal viewing, please use Internet Explorer (Version 11) , Firefox (Version 45.2), Safari (Version 9) or Chrome (Version 47) to login to eService.]

 

Information Security Tips

1.    Beware of fraudulent website

Customers are reminded to be vigilant of any fraudulent websites which seek to pass off as Company’s websites. Unless you are certain that you are connected to the websites of Company (https://www.boclifeonline.com), particulars of your Internet Services should not be provided.

2.    Fraudulent emails      

Please note that viruses, Trojan software and hacker programmes can be distributed via emails. Virus like "Worms" can even reproduce and deliver infected emails to the recipients in your address book. Hence, you should not open any unknown or suspicious emails. Instead, you should delete them immediately. Please do not log into Internet Services through hyperlinks embedded in any emails. You should also perform virus scanning before opening any attachment. In addition, you should pay extra care as fraudsters will perpetrate frauds using emails.

3.    Security tips for using WeChat Pay      

● Please download the WeChat Application from App Store or Google Play.

● Install and update the latest security application, anti-virus application and anti-spyware application regularly on your mobile devices (smartphone or tablet).

● Never use WeChat Pay in a mobile device with any pirated hacked, fake and/or unauthorised applications or in which the software lockdown has been overridden or root access to its software operating system has been obtained (such as, but without limitation, a "jailbroken" or a "rooted" mobile device).

● Please make sure you are using supported versions of OS and applications of your mobile devices. Enable the auto-update feature to obtain and apply security patches regularly from trusted sources.

● Set a passcode for your mobile device that is difficult to guess and activate the auto-lock function.

● Set your WeChat Pay payment password that is difficult to guess and do not disclose such payment password to anyone.

● Disable any wireless network functions (e.g. Wi-Fi, Bluetooth, NFC) not in use.

● Choose encrypted network when using Wi-Fi and remove any unnecessary Wi-Fi connection settings.

● To prevent unauthorised access to your WeChat wallet, do not leave your mobile device unattended. Always log off properly when you are finished making WeChat Pay payment.

4.    Security tips for using AlipayHK      

● Please download the AlipayHK Application from App Store or Google Play.

● Install and update the latest security application, anti-virus application and anti-spyware application regularly on your mobile devices (smartphone or tablet).

● Never use AlipayHK in a mobile device with any pirated hacked, fake and/or unauthorised applications or in which the software lockdown has been overridden or root access to its software operating system has been obtained (such as, but without limitation, a "jailbroken" or a "rooted" mobile device).

● Please make sure you are using supported versions of OS and applications of your mobile devices. Enable the auto-update feature to obtain and apply security patches regularly from trusted sources.

● Set a passcode for your mobile device that is difficult to guess and activate the auto-lock function.

● Set your AlipayHK payment password that is difficult to guess and do not disclose such payment password to anyone.

● Disable any wireless network functions (e.g. Wi-Fi, Bluetooth, NFC) not in use.

● Choose encrypted network when using Wi-Fi and remove any unnecessary Wi-Fi connection settings.

● To prevent unauthorised access to your AlipayHK wallet, do not leave your mobile device unattended. Always log off properly when you are finished making AlipayHK payment.

 

Frequently asked questions

1.   What is 128-bit SSL encryption?

Our Internet Services have adopted 128-bit SSL encryption, one of the online security standards for commercial application. All data transmitted via the Internet Services are protected by this technology to ensure data security.

2.   What precautions should I take when I set up my password?

● Do not use your date of birth, HKID/passport number, telephone number or any combinations of your English name as your password.

● Do not use 3 or more consecutive identical alphabets or digits, e.g. "333", "bbb", etc.

● Do not use sequential alphabets or digits, e.g. "123", "abc", etc.

● Do not use your user name/login ID as your password.

3.    How often should I change my password?

You are advised to change your password regularly. If you have not changed your password over certain period of time, our system will remind you automatically.

4.   How can I contact you in case of any enquiries?

● BOC Life’s enquiry hotlines and website

Customer Service Hotline:
(Monday to Friday 9:00 a.m. to 5:50 p.m., Saturday 9:00 a.m. to 1:00 p.m.)

Hong Kong 2860 0688

Macau 0800 908

Mainland China China Unicom: 10800 852 1859

China Mobile: 10800 152 1859

● Email: cs@boclife.com.hk
● Address: 13/F, Cityplaza One, 1111 King's Road, Taikoo Shing, Hong Kong (Monday to Friday 9:00 a.m. to 5:50 p.m.)

5.    How can I protect my personal information?

You may be asked to provide your personal information (such as HKID/passport number and date of birth) as additional identity verification when using the Internet Services. However, you should not disclose your personal information to anyone other than for the aforesaid purpose. You should also keep the documents (such as letters and bank statements) which include your personal information in a proper and secure manner.

6.    Why should I update my operating systems and browsers regularly?

You should check and download patches provided by software vendors to fix security loopholes of the operating systems or web browsers. This helps avoid unauthorised access or attacks of computer viruses or hackers.

7.    How can I set up the security settings of Wireless LAN?

● Do not place the Access Point (“AP”) too close to doors and windows to avoid data captured and decrypted by any third party due to wireless signal exposure.

● Turn off the power supply and disconnect from the wireless network after use.

● Take appropriate security measures to protect the Wireless LAN.

● Do not disclose the security setting of your wireless network to any third party.

8.    Precautionary measures for using internet

● Disconnect from internet after you have finished using the internet.

● Encrypt and secure your electronic storage media to protect your personal data from unauthorised access or use by any third party.

● Do not save or keep your password in your browser, and disable the "Auto-Complete" feature to prevent any third party from accessing your information via the browser.

● Disable the "File and Printer Sharing" function and set up the proper access rights of your computer to avoid unauthorised access by third party to your data via the network.

● Do not download or install any illegal or unauthorised software to prevent infection of computer virus or Trojan Software. Remember to perform virus scanning before opening any files from insecure sources.

9.    Where can I obtain more information about the precautionary measures of using the Internet Services?

● Hong Kong Police - Introduction to Technology Crime and Prevention Tips

● HKSAR Government – The InfoSec Web Site