Introduction
Maltaaba Community Bank PLC (“we”, “our”, or “the Bank”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our banking services, website, mobile applications, and any related services.

By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect
We collect information to provide better financial services to our customers. The types of information we collect include:

1. Personal Information
   1. Full name
   2. Date of birth
   3. National ID / Passport details
   4. Contact information (phone number, email, address)
   5. Employment and income details
   6. Next of kin or beneficiary details
2. Financial Information
   1. Bank account details
   2. Transaction history
   3. Credit and debit card information
   4. Loan and credit records
3. Technical Information
   1. IP address
   2. Device information
   3. Browser type
   4. Mobile app usage data
   5. Cookies and similar technologies
   6. Sensitive Information
      1. Where necessary and permitted by law:
         1. Biometric data (e.g., fingerprint for mobile banking)
         2. Verification data for fraud prevention

How We Use Your Information
We use your information to:

1. Provide and manage banking services
2. Process transactions and payments
3. Verify your identity (KYC – Know Your Customer)
4. Prevent fraud and enhance security
5. Improve our products and services
6. Communicate important updates and notifications
7. Comply with legal and regulatory obligations

Legal Basis for Processing
We process your data based on:

1. Your consent
2. Performance of a contract (e.g., account services)
3. Legal obligations (e.g., anti-money laundering laws)
4. Legitimate business interests

Sharing of Information
We do not sell your personal data. However, we may share your information with:

1. Regulatory authorities and government agencies
2. Payment processors and financial partners
3. Credit reference bureaus
4. Service providers (IT, cloud storage, security)
5. Auditors and legal advisors

All third parties are required to maintain confidentiality and data protection standards.

Data Security
We implement strong security measures including:

1. Encryption of sensitive data
2. Secure servers and firewalls
3. Multi-fact