We shall, at all times and to the best of our ability, endeavor to ensure that all materials, data, communications, and/or information exchanged, disclosed, shared, stored, or otherwise used, as well as any transactions conducted through our system (“Transactions”), are kept private and confidential.
Furthermore, we shall comply with and adhere to the requirements of CITY BANK PLC. regarding the privacy and confidentiality of Information and Transactions, as well as the necessity of maintaining the security and integrity of our system.
In pursuit of these objectives, we have implemented appropriate security procedures and requirements designed to ensure the highest level of security of Information, Transactions, and our system at all times. These are described in detail below.
To ensure the privacy, confidentiality, and integrity of Information exchanged, disclosed, shared, stored, or otherwise processed within our system, and of all Transactions whether originating from you or otherwise we utilize a combination of authentication, encryption, and auditing mechanisms that serve as strong safeguards against all forms of system intrusion and misuse.
These mechanisms include, but are not limited to:
All such measures have been thoroughly tested through independent security audits and have been determined whether individually or collectively to effectively protect against known security threats and to prevent any form of unauthorized access, tampering, or theft of Information or Transactions, where applicable.
For the purpose of verifying customer identity, we use a combination of unique and individual Username(s), Personal Identification Numbers (PINs), Password(s), and security questions and answers (“Access Codes”).
These Access Codes act as keys to access your relevant accounts, financial information, and the banking facilities, products, and services provided through our website: www.citytouch.com.bd.
To maintain the integrity of these Access Codes, you are advised to keep them strictly confidential and not disclose them to any other person or make them accessible to others. You are also advised to take all reasonable precautions to protect their security, including memorizing them, changing passwords regularly, and logging out before accessing other internet sites.
In addition to individual Access Codes, we also use digital certificates for business customers to verify and authenticate their identity.
In further clarification of this Security Arrangement, any and all Transactions initiated through or originating from a customer’s Access Codes shall be deemed to have been initiated by the respective customer. Accordingly, we shall be entitled to process such Transactions as if they were duly authorized by the customer.
We maintain and continuously update transaction logs that record, among other details, the Transactions conducted by our customers (including you), along with their nature, time, and date. These logs enable us to verify Transactions and serve as evidence in the event of any dispute.
Our system is designed and developed with the primary objective of ensuring the continuous security and integrity of all Information and Transactions.
Accordingly, the system incorporates a wide range of security features that are regularly reviewed, audited, updated, and maintained to ensure optimal performance at all times.
We implement various monitoring and security measures, including but not limited to:
These measures are designed to prevent any form of attack, intrusion, or unauthorized access to our system and to ensure that critical components including Information storage, Information processing, and Transaction authentication remain secure at all times (“System Security Monitors”).
We conduct regular and comprehensive reviews and audits of our System Security Monitors, carried out by both internal security auditors and external security experts. These audits may include penetration testing and intrusion detection to identify any defects, faults, malfunctions, or shortcomings (“Defects”).
In the event that any such defects or a security breach is discovered, we shall promptly report the matter to the relevant management and CITY BANK PLC., and immediately take steps to rectify the issue.
For this purpose, we may be required to temporarily or indefinitely suspend system operations without prior notice and without any liability to you, until such defects are fully resolved.
While we ensure the privacy, confidentiality, and integrity of Information and Transactions at all times, we also collaborate periodically with hardware, equipment, and software vendors to stay updated with technological advancements.
Where such developments are deemed to enhance security, we shall implement them for the benefit of improved protection of Information, Transactions, and our system.
In addition to Access Codes, our mobile application supports Biometric Authentication (such as Fingerprint and FaceID/Facial Recognition) utilizing your device's native hardware security modules. Your biometric data is securely encrypted and stored locally on your device; City Bank PLC. does not extract, collect, or store your biometric templates on our servers.
Beyond standard Secure Sockets Layer (SSL) channels, our mobile application implements advanced JSON Web Encryption (JWE). This ensures that sensitive transaction data and payloads are cryptographically encrypted at the application layer before being transmitted over the network, providing an additional robust layer of security against interception.
To protect your financial data from malware and compromised operating systems, our app actively performs device integrity checks. The application is designed to detect if a device has been "jailbroken" or "rooted." If a compromised operating system is detected, access to the application may be restricted or blocked to prevent unauthorized access to your banking information.
Copyright © 2026 | CITY BANK PLC.