At Khaleeji Bank BSC (hereinafter referred to as Khaleeji), your privacy is a top priority. We are committed to protecting your personal data and ensuring its confidentiality and security. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Bahrain Personal Data Protection Law No. 30 of 2018 and any of its amendments (PDPL) and, where applicable, the European Union’s General Data Protection Regulation (GDPR). We encourage you to read this policy carefully to understand our practices and your rights.

1- Introduction

Khaleeji is dedicated to maintaining high standards of data protection and transparency. This Privacy Policy applies to personal data collected from our customers, website visitors, and any individuals interacting with our services. By accessing or using our services, you agree to the terms of this policy.

2- Data We Collect

Khaleeji shall collect personal data necessary to provide you with secure and efficient financial services. This data may include, but is not limited to:

• Personal Identification Data: Name, address, date of birth, contact details, national ID number, passport number, and other identification documents.
• Financial Data: Bank account details, transaction histories, credit information, and investment records.
• Online and Interaction Data: IP address, browser type, device information, cookies, and usage data collected when you visit our website or mobile application.
• Sensitive Data: Where required by law or with your explicit consent, additional sensitive information may be processed to meet regulatory or contractual obligations.

3- Purposes for Data Processing

Khaleeji processes your personal data for the following purposes:

• Account Management: To open and maintain your bank accounts, verify your identity, and provide you with tailored financial services.
• Transaction Processing: To execute and record your transactions, manage payments, and prevent fraud.
• Regulatory Compliance: To comply with Bahrain PDPL, GDPR (where applicable), anti-money laundering laws, and other legal or regulatory obligations.
• Customer Support: To respond to your inquiries, provide customer service, and enhance our offerings based on your feedback.
• Marketing and Communications: With your consent, to inform you about our products, offers, and updates. You may opt out of these communications at any time.
• Risk Management: To monitor, assess, and manage risks related to your financial transactions and our services.

4- Legal Basis for Processing

Our processing of your personal data is based on the following legal grounds:

• Consent: When you have provided explicit consent.
• Contractual Necessity: To perform the services you have requested or to fulfill our contractual obligations.
• Legal Obligation: To comply with statutory or regulatory requirements under Bahrain PDPL, GDPR, or other applicable laws.
• Legitimate Interests: For purposes such as fraud prevention, internal administrative functions, and service improvement, provided these interests do not override your rights and freedoms.

5- Data Sharing and Disclosure

Your personal data may be shared with:

• Third-Party Service Providers: Trusted partners who support our operations (e.g., IT services, payment processors, credit agencies) under strict confidentiality agreements.
• Regulatory Authorities: As required by Bahrain PDPL, GDPR, and other applicable laws or regulatory requests.
• Legal and Business Transfers: In the event of a merger, acquisition, or restructuring, your data may be transferred as part of business assets, subject to continued confidentiality and protection measures.

6- Data Security and Retention

Security Measures:
Khaleeji employs robust technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes encryption, secure access controls, regular assessments, and continuous monitoring.

Data Retention:
Khaleeji retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, or internal policy requirements. Once the data is no longer needed, it will be securely disposed of or anonymized.

7- Your Rights Under Bahrain PDPL and GDPR

In addition to your rights under Bahrain PDPL, if you are an individual residing in the European Economic Area (EEA) or otherwise subject to GDPR, you have the following rights:

• Access: Request access to the personal data we hold about you.
• Rectification: Request corrections to any inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (right to be forgotten) under certain conditions.
• Objection: Object to the processing of your data for specific purposes.
• Restriction: Request that we restrict the processing of your data under particular circumstances.
• Data Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Withdrawal of Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact our Data Protection Team using the contact information provided below. We may request additional information to verify your identity before processing your request.

8- International Data Transfers

If your personal data is transferred outside Bahrain or the European Economic Area, Khaleeji ensures that appropriate safeguards are in place. These include standard contractual clauses or other legally recognized mechanisms to guarantee that your data remains protected in accordance with Bahrain PDPL and GDPR.

9- Cookies and Online Tracking

Our website and digital services use cookies and similar technologies to enhance your browsing experience, analyze traffic, and support our marketing efforts. You can manage your cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

10- Changes to This Privacy Policy

Khaleeji Bank reserves the right to update or modify this Privacy Policy periodically to reflect changes in our practices, legal requirements, or regulatory guidance under Bahrain PDPL and GDPR. Significant changes will be communicated by updating the effective date and via prominent notice on our website or through direct communication.

11- Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, here’s how you can get in touch:

Call Centre: 17 540054

Fax: 17 100017

Email: callcenter@khaleeji.bank

Alternatively, you can write to:

Fajer Sami Albusmait

Head of Compliance

Khaleeji Bank BSC

GFH Tower, 6th Floor

P.O Box 60002, Kingdom of Bahrain.

Or send an email to complaints@khaleeji.bank

Or use this Feedback Form

Need technical support?

For help with the issuing of cards, online banking, SMS and OTP,  you can send an email or give us a call:

Email: support@khaleeji.bank

Call Centre: 17 540054

We are committed to addressing your inquiries promptly and ensuring your privacy rights are fully respected.

This Privacy Policy has been designed to comply with the requirements of both Bahrain PDPL and the European Union’s GDPR. It reflects Khaleeji Bank’s commitment to safeguarding your personal data and maintaining transparency in our data processing practices. For further details or assistance, please contact us using the information provided above.