Policy

Privacy Notice

Introduction

To enhance the services provided by PT Bank Central Asia Tbk ("BCA"), we are always committed to protect and safeguard any information/data on a person who is individually identifiable either on their own or in combination with other informations obtained directly or indirectly through electronic or non-electronic systems ("PersonalData"). This commitment is in line with the provisions of Law Number 27 of 2022 on Personal Data Protection (“Indonesian Personal Data Protection Law”).

This Privacy Notice presents the standards applied by BCA in processing your Personal Data when you interact with BCA, such as:

  • BCA website visitors;
  • customers and other parties related to customers;
  • BCA vendors or partners; and
  • all parties using BCA products and/or services or products and/or services provided by other parties having cooperation with BCA;

while taking into account the principles of Personal Data processing in accordance with applicable legal provisions.

Scope of Personal Data

Personal Data collected by BCA includes specific Personal Data and general Personal Data.

  1. Specific Personal Data

    Specific Personal Data includes, among others:

    1. health data and information;
    2. biometric data that allows unique identification of individuals, such as facial images, fingerprint records, and voice records;
    3. data of your child/children;
    4. personal financial data, such as bank deposit information and credit card details; and
    5. other data as stipulated by applicable laws and regulations.
  2. General Personal Data

    General Personal Data includes, among others:

    1. full name;
    2. Resident ID Card number;
    3. gender;
    4. citizenship;
    5. religion;
    6. marital status;
    7. address;
    8. place and date of birth;
    9. biological mother maiden name;
    10. occupation;
    11. combined personal data used to identify an individual, such as mobile phone number and IP address

How BCA Obtains and Collects Personal Data

BCA obtains and collects Personal Data through various means and activities, including:

  1. when you submit applications for banking services/facilities to BCA and/or services/facilities of other parties working with BCA whether by filling a form, completing application data through website, BCA apps, and other media provided by BCA or other parties working with BCA;
  2. when you apply to become BCA partner/vendor;
  3. when you update your data through means provided by BCA;
  4. when you conduct transactions through banking services/facilities provided by BCA;
  5. when you communicate and interact with BCA, such as contacting BCA call centers, answering questions, submitting a complaint, providing information or suggestion, or participating in promotions, contests, surveys, or other activities organized by BCA;
  6. when you or your official representative conduct transactions with or through means provided by BCA;
  7. through BCA apps/platforms and social media sites you are using/accessing or through BCA online forums you are accessing;
  8. from devices you use when accessing websites or applications provided by BCA or other parties having cooperation with BCA;
  9. when you or your official representative visit(s) BCA branches, office, and other physical locations related to BCA;
  10. from visual data processing equipment located in branches, offices, and other physical locations related to BCA (such as: CCTV); and/or
  11. other parties affiliated with BCA or other parties working with BCA.

Basis on which BCA conducts Personal Data Processing

BCA will process the Personal Data obtained or collected by BCA on a processing basis as follows:

No

Personal Data Processing Basis

Description

1

Contractual Obligation

BCA may process your Personal Data to comply with obligations based on contracts between you and BCA or to fulfill your requests

2

Consent

BCA may process your Personal Data based on the consent you have given to BCA

3

Legal Obligation

BCA may process your Personal Data to meet legal obligations according to applicable laws

4

Legitimate Interest

BCA may process your Personal Data to fulfil other legitimate interests by taking into account the purposes, needs, and balance of interests between BCA and your rights as the Personal Data Subject.

5

Public Interest BCA may process your Personal Data to fulfil public interests, public services, or to exercise authority of BCA based on laws and regulations.

6

Vital Interest

BCA may process your Personal Data to protect your vital interests as the Personal Data Subject.

Purpose of BCA Personal Data Processing

BCA will process Personal Data obtained or collected by BCA for these purposes:

No

Purpose

Description

Personal Data Processing Basis

1

Providing banking products and/or services

  • providing you with BCA banking products and/or services;
  • providing you with personalised BCA banking products and/or services
  • Contractual Obligation and/or
  • Legitimate Interest

2

Banking transaction processing

  • conducting banking transactions based on your instruction to BCA, such as: fund transfer and Outward Remittance

3

Complaint Handling

  • follow up each complaint on banking products and/or services provided by BCA or other parties having cooperation with BCA;
  • resolve every issues related to your access to BCA banking products and/or services
  • Contractual Obligation;
  • Legal Obligation; and/or
  • Legitimate Interest

4

Security

  • maintaining the security of branches, offices, and other physical locations related to BCA through the installation of visual data processing equipment (such as CCTV)

Legitimate Interest

5

Compliance with laws and regulations

  • implementing the principles of Customer Due Diligence (CDD) in accordance with applicable laws and regulations;
  • reporting to regulators including but not limited to reports related to Anti-Money Laundering and Prevention of Terrorism and Proliferation of Weapons of Mass Destruction Funding; and
  • compliance with other applicable laws and regulations

Legal Obligation

6

Monitoring and Audit

  • monitoring the provision and use of BCA banking products and/or services;
  • conducting periodic audits, whether by internal or external auditors
  • Legal Obligation; and/or
  • Legitimate Interest

7

Survey and Research

  • evaluating, improving, and/or updating BCA banking products and/or services from time to time

Legitimate Interest

8

Marketing and Campaign

  • advertising/promoting or marketing banking products and/or services provided by BCA or other parties having cooperation with BCA;
  • organizing loyalty programs to customers, such as gifts, raffles, et cetera

Consent

 

9

Collaboration

Implementing your collaboration with BCA.

  • Contractual Obligation;
  • Consent; and/or
  • Legitimate Interest

BCA may also process your Personal Data for other purposes as long as it is permitted or required under applicable regulations.

Disclosure of Personal Data

BCA may disclose your Personal Data to its affiliates or other parties working with BCA, whether located in Indonesia or other countries, to carry out the purposes of processing Personal Data as referred to in this Privacy Notice with the following role relations:

  • Personal Data Controller - Personal Data Controller;
  • Personal Data Controller and Personal Data Processor; and/or
  • Personal Data Joint-Controller.

No

Your Personal Data Recipient

Description

1

BCA Affiliates

BCA may disclose your Personal Data to BCA affiliates for the purposes of offering products and/or services owned by BCA affiliates and analyzing requests for products and/or services that you submit to BCA and/or BCA affiliates.

2

Vendor

BCA may disclose your Personal Data to vendors for the purposes of providing services to you, such as: expedition company.

 

3

Advisors and Auditors

BCA may disclose your Personal Data to accountants, auditors, lawyers, and/or other advisors whose services we use.

 

4

Authorised Institutions

BCA may disclose your Personal Data if:

  • an authorized institution requests your Personal Data from BCA;
  • BCA is required to report to the authorities

5

Other Parties Working with BCA

BCA may disclose your Personal Data to other parties who has cooperation with BCA for the purpose of processing Personal Data as referred to in this Privacy Notice.

In the event BCA discloses your Personal Data to its affiliates, partners, auditors, and other parties working with BCA, BCA will always require its affiliates, partners, auditors, and other parties working with BCA to maintain the confidentiality and security of your Personal Data in compliance with applicable regulations.

Rights of Personal Data Subjects

BCA is committed to uphold your rights as a Personal Data Subject. You may ask BCA to:

  • complete, update, and/or correct errors and/or inaccuracies in your Personal Data (Article 6 of Indonesian Personal Data Protection Law);
  • end the processing, erase, and/or destroy your Personal Data (Article 8 of Indonesian Personal Data Protection Law);
  • not process your Personal Data without Personal Data Processing basis (legal basis);
  • withdraw consent to the processing of your Personal Data (Article 9 of the Indonesian Personal Data Protection Law);
  • suspend or restrict the processing of Personal Data in proportion to the purposes for which the Personal Data is processed (Article 11 of the Indonesian Personal Data Protection Law);
  • take other actions in accordance with the applicable laws and regulations governing the protection of Personal Data;

for Personal Data under the control of BCA in accordance with applicable laws and regulations. However, BCA reserves the rights to deny the fulfilment of such requests if (among others):

  • the Personal Data is still needed to achieve the Personal Data processing purpose(s);
  • it causes the disclosure of Personal Data belonging to another person;
  • it contradicts the interests of national defense and security;
  • it is permitted under applicable laws and regulations or your request contradicts the interests of applicable laws and regulations.

Security of Personal Data

BCA employs various security measures to keep your Personal Data safe and secure, including the use of encryption technology and other forms of security measures. In addition, BCA also requires its staff and any other parties cooperating with BCA to comply with applicable laws and regulations related to Personal Data protection and implement security measures in processing Personal Data.

Retention of Personal Data

BCA adheres to data retention practices in accordance with its data retention policy. For instance, BCA will retain your Personal Data for a certain period after your interaction with BCA. BCA may retain your Personal Data longer than the specified period if necessary for legal purposes, to help detect financial crimes, respond to requests from regulatory bodies or competent authorities, etc. Your Personal Data will be retained only for as long as necessary for legal or business purposes. If BCA no longer needs the information related to your Personal Data, BCA may delete your Personal Data in accordance with the provisions applicable at BCA.

Security of Personal Data

BCA utilizes various methods to keep your Personal Data safe and secure. In addition, BCA always provides education to all BCA staff who access Personal Data to maintain the confidentiality and security of Personal Data. BCA also requires its staff and other parties having cooperation with BCA to comply with all applicable provisions related to the protection of Personal Data and implement security measures in processing Personal Data.

Amendment of Privacy Notice

BCA may amend, complete, and/or replace this Privacy Notice from time to time to ensure that this Privacy Notice aligns with applicable laws and regulations, procedures, and practices conducted by BCA in processing Personal Data. BCA will provide the latest Privacy Notice through its official website at www.bca.co.id.

Language

This Privacy Notice has been established and issued in Indonesian and English. If the event of any discrepancy between the Indonesian and English versions or any dispute over the interpretation of any provisions therein, the Indonesian version shall prevail.

Contact BCA

For further information, please contact BCA via its 24-hour hotline: Halo BCA 1500 888 or via email at halobca@bca.co.id.


Online Privacy and Security Policy - Info BCA

The following are the policies and practices carried out by PT Bank Central Asia, Tbk (“BCA”) to demonstrate its commitment to protecting and maintaining user privacy and security when using the Info BCA application.

  1. Privacy Policy
    BCA does not sell, exchange, or show any information related to customers or users of Infor BCA.

    BCA does not track the location of the Info BCA users without their consent.

    All personal information and other account information collected confidential under applicable law in Indonesia and BCA’s internal policies. 
  2. Security
    1. Online Application  (Credit Card Application)
      Users can submit a request for BCA credit card facilities by using the Online Application feature. When using the feature, users must enter their full name, email address, phone numbers, and city of domicile.

      To allow for the secure transmission of information to the user’s email address, please do the following:

      • Provide the user’s email address to BCA. Never use fictitious or someone else’s email address.
      • Provide the user’s full name according to the Identity Card (KTP) or other valid identification. Never use a fictitious/fake name or nickname.
      • Provide the user’s active, registered personal phone number to BCA.
    2. BCA Location
      To use the “Nearest ATM Location” or “Nearest Branch Location” feature, users must authorize access to BCA to track their location. 
    3. Reward BCA
      To use the “Inquiry Reward” facility, users must enter the customer number information and their date of birth. 
    4. BCA Promo
      To obtain information about BCA promos at the nearest locations to the users, users can use the “Promo in Vicinity” feature. Users must authorize access for BCA to track their location.