Online Privacy Statement

Malaga Bank FSB (the "Bank", "we", "us" or "our") is committed to respecting the privacy rights of all users ("you" or "your") of its web site (the "Site"). Certain information about visitors to this site is being collected by DHI Computing Services, Inc., 1525 West 820 North, Provo, UT 84601 on their web servers. The following policy describes how the Bank seeks to assure its visitors about how it protects information provided or collected through this Site.

What information do we collect about you and how do we use it?

When applying to use our Online Banking Site, you are required to provide your name, e-mail address, street address and telephone number, social security number, and your account number(s). Later, you will be asked to create a password to access the online banking services ("Services") offered on our Site. This information allows us to keep a user profile so that we may provide you access to the Services, customize preferences, and provide a faster method for you to submit and receive information to and from us.

We may also collect general information in connection with your use of our Site, such as, for example, the length of time you spend on our site, what pages on our site you visit most frequently, how often you visit our site, what kind of browser software you are using, and your domain name, if applicable. If you communicate with us by e-mail, we may collect your e-mail address and any other information contained in the e-mail. Since e-mail transmissions may be subject to interception, please do not include sensitive or personal information in any e-mail you send to us.

Information is collected for the purpose of processing your application, transaction, or request for information. The information will be used for the purposes of meeting your banking needs and requests, and providing services to you in the future. The Bank does not share customer information with third parties, except as permitted by law such as to service your accounts.

How do we protect your information?

The Bank implements a variety of security measures to maintain the safety of the information you provide to us. Your information is contained behind secured networks and is only accessible by a limited number of employees who have special access rights to such systems. All sensitive information supplied by users is transmitted via Secure Socket Layer (SSL) transaction security protocol (which was developed by Netscape and is now largely accepted as an industry standard) and then encrypted into the Bank's databases. The Bank recommends using one of the following browsers, each of which can be downloaded free of charge: Google Chrome ('http://www.google.com/chrome'), or Microsoft Internet Explorer ('http://www.microsoft.com/ie'). To ensure the highest level of security available today, the Bank suggests that users choose the 128-bit encryption version from the download options. If a user does not have access to a browser that supports at least 48-bit encryption, the Bank's servers will not process such user's information.

You may review the information we collect about you and correct any errors in that information by reviewing account statements and any other correspondence from us and notifying us of any inaccurate or outdated information at the address or phone number on your statements.

Furthermore, if the Bank chooses to make chat rooms, forums, message boards, individual web pages, and/or news groups available to its users, please remember that any information that is disclosed in these areas becomes public information and each user should exercise caution when deciding to disclose any of his/her information.

Do we use "cookies"?

Cookies are bits of electronic information that a Site can transfer to a user's hard drive to help tailor and keep records of a user's visit to a Site. Cookies allow web site operators to better customize visits to a web site to the user's individual preferences. The use of cookies is standard on the Internet and many major web sites use them. Although most web browsers automatically accept cookies, users can usually change browser settings to prevent or provide notification whenever a cookie is sent, thereby giving users the chance to decide whether or not to accept it. Even without accepting a cookie, users can still access most of the features on the Site. The Bank may use cookies in order to help provide you with a better experience on our Site. To obtain more information about cookies, please visit http://www.cookiecentral.com.

OUR SPECIAL NOTE TO PARENTS

Due to the nature of the high-end services offered on our Site, and lack of marketing toward children, we believe that children are unlikely to visit us on the Internet. Nonetheless, we encourage parents and guardians to spend time online with their children, and to participate in the interactive activities offered online. No information should be submitted to or posted at our Site by guests under eighteen (18) years of age without the consent and supervision of their parent or guardian. In addition, we will use our best efforts to comply with the Federal Children's Online Privacy Protection Act (COPPA). In an effort to comply with COPPA, we will not knowingly allow children under the age of thirteen to use our Site.

However, we also believe that it is the parents' responsibility to supervise their children's online activities and parents should therefore consider using parental control tools available from online services and software manufacturers that help provide a child-friendly online environment. These tools can also prevent children from disclosing their name, address, and other personal information online without parental permission.

THIRD PARTY LINKS

In an attempt to provide increased value to our users, we may choose various third party web sites to link to, from, and frame within, our own Site. However, even if the third party is affiliated with us, we have no control over these linked web sites, each of which is independent of our Site and may have separate privacy and data collection practices. We have no responsibility or liability for these independent policies or actions, and are not responsible for the privacy practices, content or any other aspect of such web sites. These linked web sites are only for your convenience and you therefore access them at your own risk.

YOUR CONSENT

By using our Site, you expressly consent to the collection and use of information by us as described in this privacy statement. If we decide to change our privacy statement, we will post those changes at www.malagabank.com, so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it.

CONTACT US

We welcome your questions, comments, and concerns about privacy. Please send us any and all feedback pertaining to this, or any other issue, at malagabank@malagabank.com. Please do not send any sensitive or confidential information through this email, such as account numbers or tax ID numbers. Allow up to 24 hours for a response.

Or you can reach us by posted mail at:
Malaga Bank FSB
2514 Via Tejon
Palos Verdes Estates, CA 90274
By telephone: 310-375-9000
Or by facsimile: 310-373-3615

If you feel the Bank has not met its obligations in the protection or use of your personal information, you may contact the following government agency for specific regulations:

Office of the Comptroller of the Currency
Customer Assistance Group
P.O Box 53570
Houston, TX 77052

INTERNET ACCESS TERMS AND CONDITIONS

Please also visit our Online Access Terms and Conditions establishing the use, disclaimers, and limitations of liability for the Online Banking Site.