MulakanPRIVACY NOTICE IN RELATION TO PERSONAL DATA PROTECTION (“PRIVACY NOTICE”)
This Privacy Notice relates to the personal information Bank Islam Group (referred to as “the Bank”/ “we” which shall include Bank Islam’s holding company(s), subsidiaries, associated companies, affiliates, representatives and branch offices) collects in relation to the products and services we offer (referred to as “facilities”). This Privacy Notice is intended to be addressed to, without limitation, individual customers, individuals in body corporate/business enterprise (e.g directors, shareholders, managers, authorized signatories and persons and company secretary), beneficial owners (e.g. sole proprietor, partners and joint names), guarantors and obligors (referred to as “Identified Individuals”/”you”). This Privacy Notice explains the types of personal data we collect from all Identified Individuals for the facilities you are enjoying, you have requested, you intend to request and further explains how the data is processed, used, protected and stored.
Your application continued usage of our facilities shall be deemed as your consent for the Bank to continue collecting, use, process and store your personal data. If you are reading and signing this Privacy Notice on behalf of body corporate / body enterprise and the beneficial owners, you shall undertake to ensure all Identified Individuals understand and agree to the Privacy Notice.
TYPES OF YOUR PERSONAL DATA WE COLLECT
The personal information we collect from you in relation to our facilities that you have requested or requested by others whose obligation is guaranteed by you or whom you represent and are authorized to act on behalf of you or whom you are associated with shall be deemed willfully provided by you
The personal information we collect from you in relation to the facilities includes but not limited to:
The Bank may also collect your personal data from other sources, including but not limited to regulatory bodies, supervisory authority, credit bureaus, credit reference agencies, financial crime reference agencies, your employer, your guarantors and from other sources which the Bank access to.
FAILURE TO SUPPLY YOUR PERSONAL INFORMATION
The supply of your personal information to the Bank is necessary in connection to the provision of the facilities we offer. Failure to supply such information may result in the Bank being unable to provide you the facilities and /or failure to comply with regulatory requirements.
PURPOSES FOR COLLECTING YOUR PERSONAL INFORMATION
The purposes (“Purpose”) for which your personal informatiion are collected and processed depend on the nature of the relationship which you as a data subject have with the Bank. Broadly, the Purpose may comprise part or all of the followings:-
i. the processing of the facilities you are currently enjoying and/or the facilities you requested:
ii. for prevention and detection of financial crime (including, without limitation, money laundering, and fraud prevention, detection and prosecution);
iii. notifying you on the important changes to the features of the facilities;
iv. to support the operational activities of the facilities;
v. updating and managing the accuracy of the data you have provided the Bank;
vi. the enforcement of your obligations to the Bank within the provision of the facilities, including the collection and recovery of amounts outstanding from you or obligated upon you; This includes, but is not limited to checking your CCRIS and any other credit reporting agencies under Credit Reporting Agencies Act 2010 (CRAA 2010);
vii. determining your credit worthiness and maintaining your credit history for present and future references;
viii. determining the amount of indebtedness owed by you/to you and designing improved financial solutions for you;
ix. assessment and analysis including credit / lending / insurance risks / behaviour scoring / product analysis and market research;
x. as required by any law or regulation;
xi. communications and ensuring customer satisfaction, which may include conducting surveys to improve the quality of the facilities, responding to inquiries and complaints and to generally resolve disputes; and
xii. protecting Bank Islam Group’s interest and other ancillary and/or related purposes.
DISCLOSURE OF YOUR PERSONAL INFORMATION
The Bank will not reveal your personal information including your address, telephone number or email address to any external party other than parties listed below (the “Authorized Parties”) other than for the Purpose above, unless the Bank has your permission, or is under either a legal obligation or any other duty to do so:-
a) any officer, employee, agent or director of Bank
b) relevant third parties such as professional advisers, strategic business partners and alliances, service providers, insurers/ Takaful operator or insurance/ Takaful brokers, outsourced agents, merchants, vendors, business partners and business agents who supports the operational activities of the Bank and whom are under legal obligation to the confidentiality of your information;
c) any actual or potential participants or assignee, novatee or transferee of the Bank’s rights and/or obligations under any transaction between the Bank and you (or any agents or professional advisers);
d) any rating agency or direct/ indirect provider of credit protection to the Bank;
e) any party as required by any law or any government, quasi-government, administrative, regulatory/ supervisory body or authority, court or tribunal;
f) any credit reference agency that the Bank uses for credit assessment or credit review of you and parties related to the facilities provided by the Bank to you;
g) any financial crime references agencies, other financial institution and any of their respective agents;
h) any security party, guarantor or collateral provider for your facilities.
The above disclosure is subject at all times to any laws (including regulations, standards, guidelines and / or obligations) applicable to the Bank. In addition, this Privacy Notice serves as a consent for any credit reporting agency to disclose your credit information to the Bank pursuant to section 24(1)(a) of the CRAA 2010.
TRANSFER OF YOUR PERSONAL INFORMATION OUTSIDE MALAYSIA
The Bank may transfer your personal information outside of Malaysia if any of the Bank’s service providers are located in countries outside Malaysia. Such transfers for the purpose are necessary to perform or conclude the Bank’s services to you, to perform or conclude the Bank’s contract(s) with the relevant third parties, and for legal proceedings or obtaining legal advice. Should the operational need arise where your personal information is to be processed, used, transferred to, or stored at a location outside of Malaysia, the Bank will take necessary steps to ensure that your personal information is treated securely and any service providers engaged by the bank are contractually bound to not use your personal information for any reasons other than what they are contracted to provide and is in accordance to this Privacy Notice and the respective jurisdictions’ personal data laws. In these regards, you give your consent to us transfer to your personal information outside Malaysia.
RETENTION OF YOUR PERSONAL INFORMATION
Information provided by you shall be retained as long as the Purpose for which the information was collected continues to exist; destruction / permanent deletion of data will be made once the purpose information collected has ceased permanently unless it is to be retained to meet any legal and / or regulatory requirements or to protect the Bank’s legitimate interest
THIRD PARTY DATA/ INFORMATION
Where you shall be required and have provided the personal information relating to others including that of co-applicant(s), spouse, related parties, contact person, referees, and employer’s (including, but not limited to from Suruhanjaya Syarikat Malaysia (SSM) and any credit reporting agency governed by CRAA 2010) for the Purpose, you shall undertake and be deemed that you have obtained their consent or that you are entitled to provide their information to the Bank.
DIRECT MARKETING OPTION
The Bank would like to contact you to keep you informed of our latest products and services, other products and services offered, marketing campaigns, advertisements and promotions including those jointly run with our current and future partners and affiliates (referred to as “direct marketing”). Hence, the Bank will use your contact details including your address, telephone numbers and email address for the purpose of direct marketing activities including the administration of offers and competitions.
In case you do not wish to be contacted for direct marketing activities, you may opt out via telephone, post or email our Customer Care:
Customer Care
BIMB Investment Management Berhad
Level 19, Menara Bank Islam
No. 22, Jalan Perak
50450 Kuala Lumpur
Toll free number : 1800-88-1196
Email : marketing.bimbinvest@bankislam.com.my
Please be informed that we will process your request within 2 months from the date of your request.
ACCESS AND CORRECTION TO YOUR PERSONAL INFORMATION
You have the right to request access to your personal information held by the Bank. The Bank may charge you a nominal fee for such request. You may also update and correct your personal information held by the Bank. For such request, you may speak to your respective agent, visit our Head Office, write to us an email or you may speak to our Customer Care at the given address. You will be required to fill in the ‘Change of Unit Holder Information Details Form’ that is available to you to update and correct your personal information.
HOW TO CONTACT US
If you have any questions concerning this Privacy Notice, you may visit our Head Office, write to us an email or you may speak to our Customer Care at the given address. You may also contact us to convey your complaints relating to this Privacy Notice or otherwise relating to any misuse or suspected misuse of your personal information.
CHANGES TO THIS PRIVACY NOTICE
The Bank reserves the rights to amend this Privacy Notice at any time and will place notice of such amendments on the Bank’s website and / or the Bank’s branches and / or via such other suitable methods. This Privacy Notice is not intended to, nor does it, create any contractual rights / nor any contractual obligations on the Bank or any other party or on behalf of any party. Any references made to ‘privacy statement’ in any of the Bank’s documentation, refers to this ‘Privacy Notice’.