Bank Rakyat Privacy Notice

Bank Rakyat (the ‘Bank’ or ‘we’) is committed to protecting your personal data and takes into consideration your rights in regard to the collection, use and storage of your personal data. We take the matter of protecting your personal data as a high priority. 

 

Collection of Personal Data

The Bank collects and processes your personal data (including sensitive personal data) and other information (collectively, ‘personal data’) to provide you with our products and services (collectively, ‘the products’)

We may collect your personal data directly from you when you sign up for one of our products and/or services (via branches or website) and/or from analysis of our financial transactions.

Your personal data may have otherwise been provided to the Bank by an authorized third party such as your spouse, a company in which you are a director, an officer or a shareholder, or a partnership in which you are a partner for products and/or services that these third parties have sought from the Bank or have provided to Bank Rakyat. In this context, the term ‘you’ or ‘your’ in this Privacy Notice extends to any individual whose personal data has been provided to the Bank and/or has been collected when you enter any commercial transactions with the Bank.

The personal data that we collect, and process may include the following: -

  • Name, company name and job title

  • Contact information including address, phone numbers and email address.

  • Demographic information such as postcode, preferences, and interests.

  • Personal/financial information such as EA forms, date of birth, age, identity card number, monthly income, payment, and financial history

  • Other information relevant to the Products

In addition, we may also collect your sensitive personal data when you apply for certain products which require the same. Sensitive personal data refers to data relating to your physical and mental health, political opinions, and religion. If we need to collect or process your sensitive personal data, we will obtain your explicit consent.

Please note that at times we may collect personal data of non-customers from you (e.g., your spouse or guarantor) when you apply for certain products and services. If you provide us with such personal data, please obtain their consent for us to process their personal data prior to providing us with their personal data. 

 

Processing of Personal Data

The personal data will be processed by us and/or our authorised agents for the following purposes:-

a.to communicate with you;
b.to provide services to you, including the services provided by any of our subsidiaries;
c.to assess your application to the Bank's products and financial services;
d.to process your payment transactions;
e.to manage and maintain your account(s) and facility(ies);
f.to verify your financial standing through credit reference checks;
g.respond to your inquiries and complaints and to generally resolve disputes;
h.administer your participation in any contests and/or any campaign;
i.conduct internal activities;
j.market surveys and trend analysis to improve our products and services;
k.fulfillment of any regulatory / legal requirements / applicable laws;
l.fulfillment of any commercial transactions entered into by you with the Bank
m.other legitimate banking business activities and/or;
n.such other purposes as set out in the General Terms and Conditions of the Products and, if applicable, Campaign Terms and Conditions.
 

Please note that it is necessary for the Bank to process your personal data for the above purposes. If you wish to withdraw your consent for the processing of the above purposes, we will not be able to provide you with our services.

 

Disclosure of Personal Data

Please be informed that in any situation and if required while fulfilling the purposes specified above the Bank may disclose your personal data to the following parties: -

a.Any organisations duly authorised to serve as the Bank's agent.
b.Any organisations that assist in fulfilling the transactions requested by you.
c.Our financial service providers (e.g., takaful companies).
d.Our service providers.
e.Any parties duly authorised by you (e.g., lawyers, financial advisers, or auditors).
f.The Bank's subsidiaries.
g.The Bank's professional advisors (e.g., auditors and legal counsel).
h.Any parties who provide any security under your Facility.
i.Any parties pursuant to any law, Court Order and/or any other regulatory authorities.
j.Any enforcement agencies; and/or
k.Any financial institutions, merchants and/or any card associations in relation to any credit or debit cards issued by us.
 

In addition to the above purposes, we may also process and disclose your personal data to other authorised third party(ies) (i.e., service providers or strategic partners) to provide you with information about our and/or other third party(ies) products, services or promotions that may interest you. If you no longer wish to receive any marketing communications from us, you may withdraw your consent for marketing purposes by calling our Tele-Rakyat at 1-300-80-5454 or visit our nearest branches. Please note that it may take up to seven (7) working days for your withdrawal to take effect.

In certain situations, we may need to transfer your personal data to locations outside Malaysia for processing or storage to provide you with our services and/or any other services requested by you or to fulfil our contractual agreements you have with the Bank. 

 

Retention of Personal Data

We will only retain your personal data for as long as we need to provide you with our services, to fulfil legal and regulatory requirements, and to fulfil the Bank's internal requirements. If we no longer need your personal data for the stated reasons, we will destroy or permanently delete your personal data. 

 

Data Protection

We are committed to ensuring that your personal data is secured. To prevent unauthorised access or disclosure we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure your personal data that we collect from you and/or from any other sources. 

 

Access/Correct/Update Personal Data

We take reasonable steps to ensure that the personal data we collect from you is accurate, complete, not misleading, and up to date. Please contact us if there are any changes to your personal data or if you believe that the personal data, we have about you is inaccurate, incomplete, or not up-to-date.

Under the Personal Data Protection Act 2010, you have the right to access your personal data. If you wish to request access to your personal data, please contact us via the contact details below. Depending on the information you request, we may charge a prescribed fee for your access request. We may take necessary actions to validate your identity to ensure that we are releasing data to the correct person. 

 

Changes to this Privacy Notice

We may amend this Privacy Notice on a periodical basis. Any significant changes will be announced on the website or through direct notification. Please refer to this privacy notice regularly to stay informed on how your information is being processed and protected by the Bank. 

 

Contact Us

For any inquiries about this Privacy Notice, request or update to your personal data you may contact us at any time through the Bank Rakyat API Sandbox platform Contact Us page.