SQIF Capital JSC

Client Cyber Hygiene Memo

This section contains recommendations for the safe use of the SQIF Capital mobile application and web cabinet.

Following these rules will help protect your personal data and financial information from unauthorized access and cyber fraud.

Protecting Credentials

Never share your login, password, SMS code or other credentials with third parties.
Use a unique and strong password: at least 8 characters, including letters, numbers and special characters.
Do not use the same password across different services: social networks, banks or mobile applications.
Change your password at least once every 6 months.
Do not save your password in a browser or on a device in plain text.
Enable two-factor authentication (2FA) where possible, for example an app code or SMS code.

Install the application only from official stores: Google Play or App Store.
Do not use rooted or jailbroken devices, as they significantly increase risk.
Regularly update the operating system and the application itself.
Enable screen lock: PIN code, fingerprint or Face ID.
Do not install applications from unverified sources and do not grant access to SMS, microphone, screen or file system unless necessary.
If your device is lost or replaced, immediately change your password and notify your manager.

Use only the official address: https://trade.sqif.kz.
Check for the lock icon or another secure connection indicator in the address bar.
Do not use shared or third-party computers to access your account.
After finishing your work, always log out and close the browser tab.
When signing in, make sure the address contains https:// and has no typos.

Connect only through trusted Wi-Fi networks or mobile internet.
Avoid public Wi-Fi networks: cafes, airports and hotels, especially when signing in to a financial application.
Use a VPN connection when necessary.
Make sure antivirus software, firewall and system updates are active on your device.

SQIF Capital never asks clients for passwords, SMS codes, EDS files or installation of third-party software.
Do not follow links from SMS, email or messengers, even if they look like messages from SQIF Capital.
Do not leave personal data, home address, geolocation or photos publicly available.
If in doubt, contact your manager.

Regularly update the operating system and installed applications.
Delete applications you no longer use.
Do not store screenshots, files or notes containing logins and passwords on your device.
Set up notifications about sign-ins, settings changes or completed transactions, if this feature is available.
Back up important data and, where possible, encrypt storage media: smartphone, tablet or drive.

Following these rules will help keep your data secure when using the digital services of SQIF Capital JSC.