Information Security Guidelines


Your role in safeguarding your Personal Data and Account information

You are responsible for keeping your user name and password confidential. Failure to do so exposes you to the risks of fraud and data theft. iXchange and its Related Companies including but not limited to Parkway Shenton Pte Ltd and any company within the Parkway Group will not be responsible for losses suffered by customers as a result of:

a.       Voluntary disclosure of your user name or password.

b.      Carelessness or improper handling, storage or disclosure of your user name or password.

c.       Leaving computer unattended during an online session

d.      Input errors or misuse of online services

e.      Failure to immediately report known incidents of unauthorized account access


Your security responsibilities

You play a vital role in protecting your security when utilizing our online portals or mobile service on a computer, laptop or on a smart device. While we implement safeguards to protect the security, privacy and integrity of your information, you should always follow below mentioned security best practices to protect your information and prevent loss.

1.       Safeguard your Password

a.       Ensure that no one can see your Password when you login to our system.

b.      Ensure that you always keep your Password confidential and do not divulge it to anyone.

c.       Do not allow anyone (without exception) to use your Username and Password, as you are responsible for all transactions undertaken with your Username and Password.

d.      Do not base your Password on your User name or personal information such as your telephone number, birth date or the like as it could be guessed by cyber criminals.

e.      Memorise your Password and do not record it anywhere.

f.        Change your Password regularly.

g.       Do not recycle your recently used Password.

h.      Change your Password IMMEDIATELY if you suspect that someone knows it.

i.         The same Password should NOT be used for different websites, applications or services particularly when they relate to different entities.

j.        Do NOT select the option on your browser for storing or retaining user name and password.


2.       Verify the authenticity of the website / portal

We provide a Secure Zone icon (as symbolised by a 'padlock' icon) within our online portal/transaction web pages for your verification of its authenticity.


Check that the online portal/transaction website address changes from http:// to https:// and that a security icon (as symbolised by a lock or key) appears next to the URL in the browser. These indicate that the web page that you are online with uses encryption technology. You can double click the security icon to view information pertaining to the security certificate for the web page.



3.       Avoid using shared computers

Avoid using shared PCs or public PCs such as those found in cyber cafes to perform online transactions. If such shared computers are infected by virus, they could steal your access credentials covertly and results in unauthorised access of your accounts.


4.       Use secured internet connection

Avoid connecting to unsecure public Wi-Fi, especially if youíre logging into any accounts with private or sensitive information. Such networks could have cyber criminals as peers connected and they may be sniffing your access credentials and sensitive information transmitted to online services. Always connect to Wi-Fi that is provided with authentication feature and usage is limited to authorised users.


5.       Log-Off from the portal or mobile service

After finishing your transaction, log-off from the online service to prevent unauthorized access in case your device gets lost or stolen.


6.       Clear your internet browser cache and history

Itís best practice to clear browser cache after accessing online portal or mobile service so that sensitive information such as passwords and personal information are not stored in the temporary files that can be accessed by unauthorised users.


7.       Keep your software up-to-date

It is a very important security measure to keep your computer software such as Operating System, browser software and any other software installed to be up-to-date with all latest security patches applied. This makes your computer hardened against vulnerabilities.


8.       Beware of Phishing emails and text messages

Do not click on URL links or attachments in unexpected emails and messages. Cyber criminals keep sending malicious links and attachments to all of us to compromise our computers/mobiles and the best way to protect is to avoid clicking in unexpected mails/messages.


9.       Report to us immediately of any suspicious activity

If you notice suspicious activity in your account login or if you suspect that your account is accessed by unauthorised users, immediately reset your password and notify us through your organization in-charge for services provided by us.




   Copyright © iXchange Pte Ltd. - All rights reserved.