CARD MRI RIZAL BANK, INC.’S DATA PRIVACY STATEMENT

 

GENERAL STATEMENT

CARD MRI RIZAL BANK, Inc. (“CARD RBI”), including its affiliates and subsidiaries and all members of the CARD Mutually Reinforcing Institutions (“CARD MRI”), values the confidentiality of personal data and is committed in maintaining the privacy of its customers. This Data Privacy Statement (“Statement”), details how CARD RBI uses and protects personal data for the purpose of obtaining the consent of data subject in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations (“DPA”). This Statement also covers the privacy practices for our customers who apply for and obtain products and services from us, such as, but not limited to, deposits, loans, investments, insurance, remittances, and other such products and services that CARD RBI may offer from time to time.

 

OUR PRIVACY PRACTICES

The privacy practices described in this Statement are primarily intended for individuals in the Philippines and are designed to comply with the provisions of the DPA. When accessing our websites, digital platforms and electronic banking and communication channels, official social media pages and/or availing of our services through our branches, you acknowledge and consent to the collection, processing, and transfer of your personal data within the Philippines, subject to applicable legal and regulatory standards.

 

WHAT DATA DO WE COLLECT FROM YOU

To provide the client with CARD RBI’s banking/financial products and services and/or to implement client-requested transactions, CARD RBI shall collect personal information from the client which may include, but are not limited to:

  • Full Name, Age, Date and Place of Birth, Gender, Civil Status, Nationality;
  • Residential and Business Address, Contact Details
  • Educational Background and Employment History;
  • Financial Information (e.g., income, expenses, account balances, investments, tax details, insurance, account details financial and transaction history,);
  • Specimen Signature;
  • Permits, Licenses and Registrations;
  • Status of Pending Civil or Criminal Cases (if any);
  • Recorded telephone conversations with Customer Service;
  • Device and Location Data (e.g., IP Address, device type, geolocation)
  • CCTV footage for security purposes;
  • Religion and Health/Disability Information;
  • Political Affiliation (if any)
  • Regulatory Numbers (e.g., HDMF/SSS/TIN);
  • Spouse Information;
  • Legal Dependent and Beneficiary Information;
  • Valid IDs & Photos;
  • Mother’s Maiden Name;
  • Biometric Data (e.g., fingerprints, facial recognition)

 

HOW WE USE YOUR INFORMATION

CARD RBI uses your personal information to provide the services and products that you have availed or intend to avail from CARD RBI, including and together with following purposes:

  • Opening, maintaining, and/or terminations of accounts;
  • Ease of contacting/communicating with clients;
  • Evaluate, approve, provide, or manage applications, financial products and services, and other transactions that the client has requested;
  • Comply with know-your-customer (KYC) information requirements as specified under the Manual of Regulations for Banks and other applicable regulations;
  • Conduct of credit and background information checks and verification;
  • Evaluate client’s eligibility for CARD RBI’s products and services, such as loan inventory and loan validation;
  • Perform risk profile and risk assessment;
  • Perform Loan Utilization Check (LUC);
  • Provide extensive and quality support to the client;
  • For internal purposes, such as administrative, operational, audit, credit and risk management;
  • Provide location-based services such as finding the ATM or branch nearest to you;
  • Offering and processing of insurance products as authorized by regulatory agencies.
  • Comply with legal and regulatory requirements such as submission of data to credit bureaus, credit information companies, the Credit Information Corporation (CIC), CISA, responding to court orders and other instructions and requests from any local or foreign authorities including regulatory, governmental, tax and law enforcement authorities or other similar authorities;
  • Perform other such activities permitted by law or with your consent.

 

WHEN DO WE COLLECT PERSONAL INFORMATION

CARD RBI collects personal information through, but not limited to, any of the following:

  • Face-to-face and/or telephone conversation with CARD RBI Customer Service;
  • Accomplishment and/or signing of forms/documents (e.g. loan proposal, New Accounts Form, Insurance Products, Employment application and contracts and Client Information Form);
  • Registration through electronic banking channels and services (e.g. Mobile Banking Application-Konek2CARD, konek2CARD Plus HCIS, Members OnBoarding, Loan Origination System);
  • Conducting Background and credit investigation and Loan Utilization Check; and
  • Inquiries to the Credit Bureau such as CIC, NFIS and MIDAS.

 

RECIPIENTS OF INFORMATION

We may share your personal information with our subsidiaries, affiliates and third parties, including members of CARD MRI, for the purposes above and with an obligation of confidentiality. Your personal information may similarly be disclosed to government agencies, supervisory bodies, tax authorities, or courts of competent jurisdictions for purposes of complying with banking regulations, which CARD RBI may be subject to such as Republic Act No. 9160 otherwise known as the Anti-Money Laundering Act of 2001 or Republic Act No. 9510 otherwise known as the Credit Information System Act (“CISA”), among others.

If necessary, for the efficient delivery of CARD RBI’s products and services, we may also outsource processing of your personal information to third-party service providers or CARD MRI, consistent with the terms of this Statement and the provisions of the DPA.

 

HOW WE SAFEGUARD PERSONAL INFORMATION

CARD RBI, its employees, agents and representatives, shall handle personal information with utmost care and adhere to the implemented organizational, physical, and technical security measures to maintain the confidentiality, integrity, security, and availability of all personal information under its custody.

 

HOW LONG DO WE KEEP YOUR INFORMATION

Documents containing your personal information will be retained in the records and systems of CARD RBI for a period no longer than five years from the date of the termination of your account or of the specific transaction with CARD RBI, unless CARD RBI is required by law to retain the information for a longer period.

 

YOUR RIGHTS AS DATA SUBJECT

CARD RBI respects your rights to:

  1. Be informed;
  2. Object to the processing of your personal data;
  3. Have reasonable access to your personal data under the custody of CARD RBI;
  4. Correct or rectify information or dispute accuracies
  5. Suspend, withdraw or order the blocking, removal or destruction of your personal data from CARD RBI’s records and/or system; and
  6. Be indemnified in case of violation of your rights as data subject.

 

HOW TO CONTACT US

Should you need to get in touch with us for any data privacy concerns or requests or should you have any questions or clarifications regarding the Data Privacy Statement, you may visit the Customer Service Desk at any of CARD RBI’s branches or call the Customer Service Hotlines at the following numbers:

Telephone Number:    (049)-530-7284
Cellphone Number:     0999-880-4785 (Smart – call)
0917-132-7589 (Globe – call)
0961-017-0677 (Smart – calls)
0938-744-6274 (Smart – text messages)
0969-285-4378 (Smart – Outgoing Calls)
0961-017-0676 (Smart – Outgoing Calls)
CSR email Address:   cmrbi.csr@cardmri.com
Official Website:          www.cardmri.com/rbi
Alternatively, for any pressing concerns, you may reach our Data Protection Officer at the following contact information:
Email Address:                  cmrbi.compliance@cardmri.com
Telephone Number:          (049) 523-1047
Address: P. Guevarra St. corner Aguirre St., Brgy. Poblacion II, Sta Cruz, Laguna

 

CHANGES TO OUR PRIVACY STATEMENT

We may amend or modify the terms of this Statement from time to time to ensure relevance with the relevant laws and regulations applicable to CARD RBI. Any relevant modification will be posted on our website and distributed to all CARD RBI branches and Branch-Lite Units.

 

Data Privacy Statement

Updated as of: August 11, 2025