PT Bank Rakyat Indonesia (Persero) Tbk. ("BRI” or “We") understand the importance and value of our Customers’ personal information and data privacy. We are committed to maintaining the confidentiality Your Data and Your privacy rights when interacting with us. Detailed information regarding BRI can be accessed through https://bri.co.id/tentang-bri.

We can collect your personal information including: • Data we collected directly from you. • Data we automatically collected from your device when you use our Services (sites, applications, and Our platforms). • Data we collected or provided related with using our Services. • Data we collected from from third-party. We will only collect Your information that is relevant to You in accordance with the applicable laws and depending on the type of product or service You currently use/have or have used/had. Please note that You are responsible for ensuring that the information You provide is accurate and up to date. If you provide information to other people, you must inform them of this Privacy Notice and ensure that they understand how We use their information for the purposes set out in it.

We process Your Personal Data based on legal basis Personal Data Processing: • Fulfilment of contractual obligations between Us and You; • Compliance with legal obligations as mandated by law; • Safeguarding the vital interest; • Serving public interest, providing public services, or exercising authority by statutory regulations; • Pursuit of other legitimate interests, considering our objectives, needs, and the balance of interests between us and You; or • For certain purpose based on Your consent or Your representatives.

We may disclose Your Personal Data to other companies, organizations and individuals including subsidiaries (see list of subsidiaries), affiliates and other parties who cooperate with Us in connection with the provision of Services to You or other purposes permitted by law. We may send or transfer your Personal Data to and be processed outside the territory of the Republic of Indonesia including countries that may not have the same level of protection for Personal Data. We will endeavor to take reasonable steps to ensure that Your Personal Data remains subject to comparable security standards with the requirements set out in this Privacy Notice.

We may retain Personal Data for as long as it is necessary to attain the purposes for which the Personal Data was collected, while You are still using the Services, or as long as such retention is required or permitted in accordance with BRI's internal policies and laws and regulations. We may retain your information longer if necessary to comply with applicable legal or regulatory requirements, help detect or prevent fraud and financial crimes, respond to requests from regulators, judicial investigations, resolve disputes or legal issues, and others.

You may have certain rights to Personal Data that is in Our possession or control based on applicable laws and regulations, such as: the right to be informed, the right to rectification/correction, the right to access data, etc. As long as these rights are available to You in accordance with the provisions of applicable laws and regulations, You may exercise these rights by contacting Us through the available mechanisms.

If You consented to it, BRI may use and share relevant information about You, Your transactions, and Your relation with BRI, to provide You information or offering about products, services and promotions available from the BRI Group, affiliates and third parties collaborating with Us via email, short message service, or other means.

If you have any questions, complaints, suggestions, or requests regarding the protection of your personal data, please contact Us at: ● Call Center: 1500 017 ● Email: callbri@bri.co.id