1.     Scope of Notice

 

·    This Privacy Notice applies to information, including personal data, collected about you by Public Investment Bank Berhad (“PIVB”), referred to in this statement either individually or collectively as “the Bank”, “we”, “our” or “us”.

·     Personal data is information extracted from commercial transactions that can reasonably identify you.

·   This Privacy Notice outlines the personal data collected by the Bank online through our Website, as well as offline through our products and services offered over the counter, by the Bank’s Customer Service Representatives,  and / or the Bank’s sales and marketing team.

 

2.     Our Privacy Commitment

 

·     This Privacy Notice is issued to inform you of the Bank’s commitment to the policy of protecting at all times the confidentiality, integrity and security of the information provided by you to us as we recognise the importance of the personal information we hold about customers and the trust they place in us.

·     Your personal data is classified as confidential and can only be disclosed by us where authorised by you, permitted by any laws (including regulations, standards, guidelines and/or obligations) applicable to us issued by Bank Negara Malaysia, Securities Commission Malaysia, Bursa Malaysia Berhad, Bursa Malaysia Securities Berhad, Bursa Malaysia Depository Sdn Bhd, Bursa Malaysia Securities Clearing Sdn Bhd or other relevant parties.

 

3.     Source of Collection of Your Personal Information

 

We will collect information from a variety of sources including the sources mentioned below, which may constitute personal data and / or *sensitive personal data which are relevant to our business relationship with you:

 

a.                 Information we collect from you directly in person when you:

Ø  apply for products or services, open an account, make deposits into or withdrawals from your account, or apply for a financing;

Ø  communicate to us over the phone or personally including the process of selling or marketing a product or service to you or when you call in for enquiries; and

Ø  visit our sites, use our services, view our online advertisements.

 

b.                 Information we collect about you from other sources without your direct involvement where permitted by law:

Ø  from Credit Reference Agency for the purpose of credit assessment when considering credit applications; and

Ø  from any court order or regulatory body having authority over the Bank or any law enforcement agency for the purpose of considering the opening/maintaining of your accounts with us.

 

*   Sensitive personal data includes information about your physical and mental health, political opinions, religious beliefs or criminal records.

 

4.     Collection of Personal Information

 

     The type of personal information collected varies depending upon the type of products and services you seek and collection may begin prior to your take-up or upon signing up or depending on how you access and use our products and services. Information collected will include :

 

a.           Information that identifies you:

Ø   your name, salutation/title, address and other contact information such as telephone number, mobile number, etc;

Ø   your age, gender, date of birth, race, citizenship, marital status, particulars of identity documents such as identity card or passport, where applicable;

Ø   your education and employment details;

Ø   information captured on security systems (including a recording of your image on Closed Circuit Television (“CCTV”) which security systems are managed and operated by Public Bank Berhad;

Ø   names and particulars of the authorised officers, directors, shareholders, beneficial owners, business registration, country of incorporation and such financial and commercial dealings of the company, where applicable;

Ø   date of call to the Bar (applicable to lawyers only); and

Ø   relationship with other data subject/third parties.

 

b.           Information about your financial position:

Ø   sources of income, expenses, savings, assets, liabilities, investment portfolio and borrowing history;

Ø   account number/income tax number;

Ø   latest audited / management financial statements;

Ø   credit reports from credit reporting agencies; and

Ø   opinions from other banks about your credit worthiness.

 

c.            Information about your intended use of our products or services.

d.           Information about your opinion about our products, services or staff.

 

·     Under certain circumstances, we may also collect sensitive personal data if :

a.      we need it to provide you with a specific product or service; or

b.     you are applying for employment with us.

 

5.     Personal Information about third parties

 

If at any time you supply us with personal information about another person, you should ensure that you are authorised to do so and you agree to inform that person who we are, that we may use and disclose that personal information and that they may gain access to it should we hold that information.

 

6.     Use of Personal Information

 

    Although, the primary purpose of collecting your information is for its use in the normal course of the general business between the Bank and you, the said information may also be applied for purposes incidental to and connected with the said primary purpose including but not limited to the following:

 

a.           provision of financial banking and other related services and credit facilities to you;

b.           offering, cross-selling and marketing products and services of PIVB, Public Bank Berhad,  Public Islamic Bank Berhad, Public Mutual Berhad, PB Trustees Services Berhad, Public Nominees (Tempatan) Sdn Bhd, Public Nominees (Asing) Sdn Bhd, Public Invest Nominees (Tempatan) Sdn Bhd, Public Invest Nominees (Asing) Sdn Bhd, AIA Public Takaful Berhad, Lonpac Insurance Berhad, AIA Bhd, Public Bank (Hong Kong) Limited, Public Finance Limited, Winton (B.V.I) Limited, Cambodian Public Bank PLC, Campu Lonpac Insurance PLC, Public Bank Vietnam, Public Bank (L) Limited, PB Trust (L) Limited and Campu Securities Plc;

c.            conducting credit and other status checks at the time of application and periodically during the tenure of the credit to ensure ongoing credit worthiness of customers;

d.           creating and maintaining the Bank’s credit scoring and risk related models;

e.            provision of reference (status enquiries);

f.             maintaining credit history of customers;

g.           assisting other financial institutions to conduct credit checks;

h.           customising and improving financial services or related products for customers’ use;

i.             internal monitoring and control, including but without limitation to determining amounts owed to or by customers;

j.             enforcement of customer’s obligations, including but without limitation to collection of amounts outstanding from customers and other parties having liability to the Bank;

k.           where disclosure is required under any law, rule, regulation, court orders or any guidelines issued by a regulatory body having authority over the Bank or any law enforcement agency;

l.             enabling an actual or proposed assignee of the Bank, or participant or sub-participant of the Bank’s rights in respect of the customer to evaluate the transaction intended to be the subject of the assignment, participation or sub participation;

m.         research and statistical analysis (including behavioral analysis);

n.           engaging with legal firms to perfect the Bank’s security documentation for customer’s loan and advances;

o.           process lawyer’s data to enable the Bank to evaluate their suitability to be appointed to the Bank’s Panel of Solicitors;

p.           assist authorised vendors to perform onsite maintenance and support for IT systems and equipments;

q.           due diligence check for employees, suppliers, vendors, IT hardware and software providers prior to contracting their services or purchasing their products;

r.           design and organise campaigns/promotions/events for customers’ participation including the process of selecting winners, distribution/delivery of gifts and prize giving ceremonies;

s.            retrieving, recording and storing for internal/external audit purposes;

t.             for the purpose of satisfying the terms and conditions of employment contracts with the Bank;

u.           the administration and management of salary, medical and other employment benefits; and

v.    CCTV footage, in particular, may also be used for the following purposes:

Ø   for quality assurance purposes;

Ø   for public safety and security;

Ø   detecting and deterring suspicious, inappropriate or unauthorised use of our facilities, products, services and/or premises;

Ø   detecting and deterring criminal behavior; and/or

Ø   conducting incident investigations.

 

7.     Consent

 

·     We only collect personal information about you that is necessary to perform our functions and activities.  If you do not provide this information or consent to certain use of your personal information, we may not be able to provide you with the product or services that you want or process your application for employment or facilities or establish any business dealings with you.

·     In most cases, before or at the time of taking up a new product or applying for a facility(ies) or applying for employment with the Bank, (or if that is not practicable, as soon as practicable thereafter) we will obtain your consent for the purposes for which it is intended to be used and to disclose your personal information.

·     Your consent can be expressed verbally or in writing, or implied by your actions.

 

8.     Data Confidentiality And Sharing of Personal Information

 

·     We may share your personal information with the Affiliates in order to offer you products and services of the Bank and the Affiliates which may interest you. To enable us to do the same, we will obtain your consent and only share your personal information for the purposes to which you have agreed.

·     Data (except data already in the public domain) held by the Bank relating to you will be kept confidential, but we may need to share your personal information in the normal course of general business and connected with the primary purpose for which your information was collected with the following parties, subject at all times to any laws (including regulations, standards, guidelines and/or obligations) applicable to us:

a.    Securities Commission Malaysia, Bursa Malaysia Berhad, Bursa Malaysia Securities Berhad, Bursa Malaysia Depository Sdn Bhd, Bursa Malaysia Securities Clearing Sdn Bhd, any Dealer's Representatives, any agent, any contractor, third party service provider, adviser, liquidators/ Receivers & Managers, auctioneer or consultant who provides administrative, telecommunications, computer system, data processing and analysis, payment, securities clearing, debt collection, valuation, insurance, research, legal, financial, accounting, taxation, audit or refers business to us or other services to the Bank;

b.     any other person who has expressly or impliedly undertaken to keep such information confidential or otherwise is under a duty of confidentiality to the Bank;

c.      any financial or other institution, credit charge or other card company with which the customer has or proposes to have dealings;

d.    any party jointly with whom the Bank launches, organises or offers any product, function or service and any other party having business arrangements with the Bank in connection with the services, products, customer feedback survey and functions offered or organised by or through the Bank;

e.      the drawee bank providing a copy of a paid cheque (which may contain information about the payee) to the drawer,

f.       credit reporting agencies, and, in the event of default, to debt collection agencies;

g.     any person, which is required by law, rule, regulation, court order and under any guidelines issued by regulatory or other authorities;

h.     any party giving or proposing to give a guarantee or third party security to guarantee or secure the customer’s obligations;

i.       any party making any request mentioned in paragraph 6(k) below;

j.       any actual or proposed assignee of the Bank or participant or sub participant or transferee of the Bank’s rights in respect of the customer;

k.     marketing campaigns prize winners’ names to the media and Bank’s website;

l.       selected companies, organisations or institutions for the purpose of informing customer of services, products and functions which the Bank believes will be of interest to the customer; and

m.   legal and other professional advisers of any party mentioned in items 8 (a) to (l) above.

 

9.     International Transfers

 

·     Personal information may be processed and disclosed as described above in any country in which we conduct business or have a service provider in accordance with this Privacy Notice if :

a.      you have given consent to the transfer;

b.     the transfer is necessary for the performance of a contract between you and the Bank;

c.      the transfer is necessary for the conclusion or performance of a contract between the Bank and a third party which is entered into at your request or is in your interest;

d.     the transfer is for the purpose of any legal proceedings or for the purpose of obtaining legal advice or for establishing, exercising or defending legal rights;

e.      The Bank has reasonable grounds for believing that in all circumstances of the case that:

(i)    the transfer is for the avoidance or mitigation of adverse action against you;

(ii)   it is not practical to obtain your consent in writing to the transfer; or

(iii)  if it is practical to obtain such a consent, you would have given your consent.

f.       The Bank has taken all reasonable precautions and exercised all due diligence to ensure that your personal information will be processed in that place in accordance with Malaysian law;

g.     the transfer is necessary in order to protect your vital interests; or

h.     where the Government deems that the transfer of your personal information is necessary in the public interest.

 

·     Our Privacy Notice and our practices are designed to provide a consistent level of protection for personal information. This means that even in countries whose laws provide for less protection for your information, the Bank will still handle your information in the manner described here.

 

10.    Personal Information Security

  

·     The Bank is committed in protecting the security of your personal information by implementing adequate and stringent security controls, measures and protocols in line with existing industry practices and legal requirements to safeguard and secure your personal information against any loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction.

·     To achieve this objective, regular reviews of the risks to personal information would be conducted and any security flaws or weaknesses identified would be promptly addressed and rectified.

·     We employ security measures regardless of the media on which information is stored (paper, computer disks, etc.), the systems which process it (microcomputers, mainframes, voice mail systems, etc.), or the methods by which it is moved (electronic mail, face-to-face conversation, etc.). Such protection includes restricting access to information on a need-to-know basis. The Bank devotes sufficient time and resources to ensure that information is properly protected.

·     As a source of reference for the Bank's information security needs, information security policies, standards and procedures are fully documented and maintained. All employees, including new recruits, are educated as to their obligations with regard to your personal information. Consultants or other external parties contracted to carry out work for the Bank must also conform to these requirements and where appropriate, are also bound by non-disclosure agreements to ensure the confidentiality of the Bank's information assets.

·     We also require you to help us by complying with the security measures designed to protect your personal identification numbers and passwords by keeping it secret and confidential. These are set out in the terms and conditions of your account. You may be able to limit your liability for unauthorised use of your account if you observe these requirements.

·     If we no longer require your personal information, after the expiry of the relevant retention period, we will take reasonable steps to destroy it in a secure manner or remove identifying features from it.

 

11.    Personal Information Accuracy

 

·     The Bank will take all practicable and reasonable steps to ensure that your personal information is accurate, complete and up-to-date.

·     You can help the Bank to keep accurate and up-to-date records by informing us in writing of any changes so that records on you could be updated promptly.

 

12.   Access to Personal Information

 

·     As a customer, you can exercise the following rights:

a.      to check whether the Bank holds personal information about you and have access to such data;

b.     to require us to correct any data relating to you which is inaccurate; and

c.      to ascertain our policies and practices in relation to your data and to be informed of the kind of personal data held by us.

·     The Bank reserves the right to charge a reasonable fee for the processing of any data access request.

·     In relation to the rights of individuals, the person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of personal data held, or privacy complaints, your request should be made personally as follows:

a.      visit our offices; or

b.     write and post your request to:

 

Manager

Business Processing Department

Level 26, Menara Public Bank 2

No.78, Jalan Raja Chulan

50200 Kuala Lumpur

 

13.   Direct Marketing / Telemarketing

 

·     The Bank may with your consent use your personal information to provide you with Bank’s offers, newsletters and marketing materials / information about products, services or other events that may be of interest to you.

·     If at any time you choose not to receive such marketing information from us, you may instruct us not to send you any further such material as follows:

a.      visit our offices; or

b.     write and post your request to:

 

Manager

Business Processing Department

Level 26, Menara Public Bank 2

No.78, Jalan Raja Chulan

50200 Kuala Lumpur

·     We will process your instruction as soon as practicable.

 

14.   Website Links

 

      Please note that our Bank’s website may contain hyperlinks to other sites that are not affiliated with the Bank. The hyperlinked websites may or may not meet the same privacy standards that we set for ourselves and you are to take care to understand  and  evaluate  their  particular  privacy  standards  and  procedures.  A link to such websites is not an endorsement of the contents of such websites and makes no warranties as to the information contained in such websites.

 

15.   Changes to this Privacy Notice

 

The Bank will occasionally update this Privacy Notice to reflect changes to our policies, processes and systems in relation to how we handle your personal information. When we post changes to this notice we will revise the “Last updated on” date on the front page of this notice. We encourage you to periodically review this notice.