Mobile Application Privacy Notice

1. Introduction

Maldives Premier Bank PSC ("MPB", "the Bank", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Notice explains how we collect, use, store, share, and protect information about our customers, website visitors, and other individuals who interact with us.

This notice applies to all personal information processed by MPB, whether collected online through our website and digital banking platforms, or offline through our branches and other service channels.

2. Information We Collect

We may collect and process the following categories of personal information:

2.1 Information You Provide

• Full name, date of birth, nationality, and national identification number
• Contact details including address, email, and phone number
• Financial information including income, employment details, and source of funds
• Account and transaction information
• Identification documents (national ID, passport, visa)
• Information provided through forms, applications, and correspondence

2.2 Information Collected Automatically

• IP address, browser type, and device information
• Website usage data, pages visited, and interactions
• Cookies and similar tracking technologies (see our Cookie Notice)
• Location data where permitted

2.3 Biometric Information

• Where customers choose to use biometric authentication features available on their device, the MPB Mobile Application may utilize biometric authentication methods such as fingerprint recognition or facial recognition for login and transaction authentication purposes.
• The Bank does not generally collect, store, or retain biometric templates maintained on the customer's device unless otherwise disclosed and permitted by applicable law.

3. Mobile Application Permissions

To provide certain features and services, the MPB Mobile Application may request access to specific device permissions, including:

• Camera access for identity verification, document submission, and QR code scanning;
• Photo and file access for uploading supporting documents and completing service requests;
• Push notifications for transaction alerts, security notifications, OTPs, and service updates;
• Biometric authentication features available on the customer's device for secure login and transaction authentication; and
• Location services where required for fraud prevention, security monitoring, or specific banking services.

Customers may manage these permissions through their device settings. Disabling certain permissions may limit the availability or functionality of certain App features.

4. How We Use Your Information

We use your personal information for the following purposes:

• To open and manage your accounts and provide banking services
• To process transactions, payments, and transfers
• To verify your identity and prevent fraud
• To comply with legal and regulatory obligations, including AML/CTF requirements
• To communicate with you about your accounts, services, and security
• To improve our products, services, and customer experience
• To provide information relating to products, services, promotions, campaigns, and events where permitted by law or where consent has been obtained.
• To respond to your inquiries and complaints
• To manage risk and ensure the security of our systems
• To detect, investigate, and prevent fraud, money laundering, terrorist financing, and other financial crimes

By applying for, accessing, or using the Bank's products and services, customers acknowledge that the Bank may collect, use, disclose, and process personal information in accordance with this Privacy Notice and applicable laws. Where required by law, the Bank will obtain the customer's consent for specific processing activities.

5. Legal Basis for Processing

We process your personal information on the following legal bases:

• Contractual necessity: To perform our obligations under our banking agreements with you
• Legal obligation: To comply with applicable laws, regulations, and MMA directives
• Legitimate interest: To manage our business, prevent fraud, and improve services
• Consent: Where required for specific processing activities such as marketing communications

6. Information Sharing

We may share your information with:

• Regulatory authorities including the Maldives Monetary Authority (MMA)
• Law enforcement agencies where required by law
• Correspondent banks for international transactions
• Service providers, technology vendors, cloud hosting providers, payment system operators, card schemes, correspondent banks, agents, outsourced service providers, and other third parties engaged to support the provision of banking services
• Auditors, legal advisors, and other professional service providers

We do not sell your personal information to third parties.

7. International Data Transfers

Where necessary for the provision of banking services, operation of technology systems, engagement of service providers, processing of international transactions, or compliance with legal and regulatory requirements, personal information may be transferred to, processed in, or stored in jurisdictions outside the Republic of Maldives, including where such information is required by overseas financial institutions, payment networks, correspondent banks, or other parties involved in facilitating international transactions.

Personal information may be transferred to countries that may not have the same level of data protection as the Republic of Maldives. The Bank will implement appropriate contractual, technical, and organisational safeguards to protect such information and maintain its confidentiality and security.

8. Data Security

We implement appropriate technical, organisational, and administrative measures to protect personal information from unauthorized access, use, disclosure, alteration, loss, destruction, or misuse, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Staff training on data protection and security awareness
• Incident response and breach notification procedures

9. Data Retention

The Bank retains personal information for as long as necessary to provide banking services and thereafter for such periods as required by applicable laws, regulatory requirements, anti-money laundering obligations, tax requirements, dispute resolution purposes, and the Bank's internal record retention policies and legitimate operational and business purposes.

10. Your Rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information where permissible
• Withdraw consent where processing is based on consent
• Opt out of receiving marketing communications from the Bank
• Lodge a complaint with the relevant supervisory authority

The Bank may require satisfactory proof of identity before acting upon any request relating to personal information or the exercise of privacy rights.

11. Third-Party Websites and Services

The Bank's website, digital banking platforms, or Mobile Application may contain links to third-party websites, applications, or services.

The Bank is not responsible for the privacy practices, content, security, or availability of such third-party websites or services. Customers are encouraged to review the privacy policies of those third parties before providing any personal information.

12. Contact Us

If you have questions about this Privacy Notice or wish to exercise your rights, please contact us:

13. Updates to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website. We encourage you to review this notice periodically.