Privacy Policy

ADCB Islamic Bank JSC, hereinafter referred to as the "Bank", thanks you for your interest in the Bank's Products and Services, hereinafter referred to as the "Bank's Services". Protection of your personal information is very important for the Bank; therefore, we take special care to protect the data collected and processed when using the Bank's Services.

The Bank's Services are a mobile application and website that allow the users of the Bank's Services, hereinafter referred to as "Users", to interact with the Bank under the concluded Bank servicing agreement, as well as interaction with the Bank's partners under the agreements concluded between the Bank and such partners, including exchange of information and performance of certain operations via the Internet or a special application of a mobile device (smartphone, tablet, etc.), as well as to make purchases on the Internet.

Obtaining access to the use of the Bank's Services means that Users unconditionally agree with the provisions of this Privacy Policy.

The Bank ensures security of personal information received from the Users of the Bank's Services. This Privacy Policy is designed to indicate the list of data that may be requested from the Users of the Bank's Services, as well as the ways of processing such data by the Bank and other persons. This Privacy Policy also specifies the purposes for which personal information of Users may be requested or disclosed. This Privacy Policy also specifies the basic precautions to be taken by Users to ensure that their personal information remains confidential.

This Privacy Policy applies to the information that was obtained by the Bank as a result of the use of the Bank's Services by the Users.

1. Received and used information of Users, and the purposes of its use

Information of Users is collected by the Bank to carry out proper identification and authorization of the User, to increase the User's security when using the Bank's Services, to increase the level of operational protection, information protection, to perform technical management of the Bank's Services, to facilitate money transfer operations by Users, and to analyze and improve the performance of the Bank's Services; to provide Users with information about the services provided by the Bank and products offered by the Bank; for marketing purposes, for audit, regulatory, tax and other reporting purposes; to prevent fraudulent transactions; for other purposes specified in this Privacy Policy or as provided for by the laws of the Republic of Kazakhstan. Within the framework of this Privacy Policy, the User's information is understood as personal and biometric data that the User provides to the Bank when creating an account, registration, as well as automatically transmitted data in the process of using the Bank's services, including but not limited to ip-address, information about the mobile device from which the access is made, etc. When using the Bank's services, the following information may be requested and received:

Information about the User

When creating an account and/or registering, the Bank may request information about the User, such as full name, gender, date of birth, IIN, identity document data, residence and registration address, e-mail address, telephone number, photo images and video recordings containing the User's biometric data obtained using a camera or otherwise, education data, the User's contact data (telephone and/or address book, contacts in a mobile device), as well as data automatically sent by the web server. Additional information may also be requested by the Bank.

Mobile device information

The Bank collects data about Users' mobile devices, such as mobile device model, operating system version, unique device identifiers, as well as mobile network data and cell phone number. Besides, the device identifier and cell phone number may be linked to the User's account.

Location information

The Bank's services supporting the geographic location function of the user's mobile device allow the Bank to receive information about the user's actual location, including gps data sent by the mobile device.

Information on transactions

When making payment transactions for goods and services, money transfers, etc., the Bank collects data on the place, time and amount of transactions, type of payment method, data on the seller and/or service provider, descriptions of the reason for the transaction, if any, as well as other information related to the above transactions.

2. Terms of information processing

When using Users' information, the Bank shall be guided by this Privacy Policy, as well as by the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and their Protection", as well as international treaties ratified by the Republic of Kazakhstan.

3. Provision of Users' information to third parties

The Bank is entitled to provide information of Users to its shareholder, affiliates, as well as partners and other companies related to the Bank for the purposes specified above and in the comprehensive retail banking service agreement of ADCB Islamic Bank JSC. At the same time, the Bank shall ensure mandatory compliance of the Bank's affiliates, partners, as well as companies related to the Bank with the terms and conditions of this Privacy Policy by concluding agreements that will guarantee that the recipients of information adhere to the appropriate level of protection.

The Bank does not provide user information to companies and individuals not related to the Bank, except for the cases listed below:

• The User has given his/her consent. To provide User information to companies and private persons not related to the Bank, including other Users, the Bank needs an additional consent of the User.
• According to the current legislation of the Republic of Kazakhstan, the Bank may provide generalized anonymized data of Users of the Bank's services to partners (for example, for statistical and other research).

When transferring Users' information abroad, the Bank shall ensure compliance with the current legislation of the Republic of Kazakhstan in respect of Users' information, including by concluding agreements that will guarantee that the recipients of information adhere to the appropriate level of protection.

4. Security measures used to maintain confidentiality of information

The Bank takes all possible measures to ensure security and protection of Users' personal information from unauthorized attempts to access, modify, disclose or destroy it, as well as other types of improper use. In particular, the Bank continuously improves the methods of data collection, storage and processing, including physical security measures, to prevent unauthorized access to the Bank's systems and theft of property, phishing and other types of fraud. The Bank also restricts access by employees, contractors and agents to users' personal information, providing for strict contractual confidentiality obligations, the breach of which is subject to strict liability and penalties.

The safety of using the Bank's services also depends on the User's compliance with the recommendations. The User shall keep account data, such as login and password, secret from third parties. The User undertakes to immediately notify the Bank of any case of suspected unauthorized use of their account.

The User's compliance with the Bank's recommendations will ensure maximum safety of the information provided to the Bank, including details of the User's Bank Card (or other electronic means of payment) and other data, as well as reduce possible risks when making transactions using details of the Bank Card (or other electronic means of payment) for cashless payment for goods and services, including via the Internet.