Privacy Policy 2

TRIPURA STATE CO-OPERATIVE BANK LTD.
At Tripura State Cooperative Bank Ltd., we are committed to protecting the privacy and confidentiality of our customers’ personal and financial information. This Privacy Policy outlines how we collect, use, store, disclose, and protect your information in compliance with the guidelines issued by the Reserve Bank of India (RBI), the National Bank for Agriculture and Rural Development (NABARD), the Information Technology Act, 2000, and other applicable laws and regulations of the Government of India. This policy applies to all our services, including physical branches, online banking, mobile applications, and other digital platforms.

1. Scope of the Privacy Policy
This Privacy Policy applies to:

• All individuals, including customers, prospective customers, employees, and third-party service providers, who interact with Tripura State Cooperative Bank Ltd..
• All personal and sensitive personal data collected, processed, or stored by the bank in the course of providing banking and financial services.
• Compliance with RBI’s Master Circulars on Customer Service, IT Framework for Banks, and guidelines on data protection, as well as NABARD’s supervisory directives for rural banking (where applicable).

2. Definitions

• Personal Information: Any information that identifies an individual, such as name, address, contact details, date of birth, or government-issued identification numbers (e.g., PAN, Aadhaar).
• Sensitive Personal Data or Information (SPDI): As defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, this includes financial information (e.g., bank account details, transaction history), biometric data, passwords, and other data requiring heightened protection.
• Customer: Any individual or entity availing banking services from Tripura State Cooperative Bank Ltd..

3. Information We Collect
We collect information to provide banking services, comply with legal obligations, and enhance customer experience. The types of information collected include:

A. Personal Information

• Full name, gender, date of birth, and nationality. • Contact details (e.g., phone number, email address, residential address). • Identification details (e.g., PAN, Aadhaar, passport, voter ID) as required under Know Your Customer (KYC) norms mandated by RBI.

B. Financial Information

• Bank account numbers, credit/debit card details, and transaction history.
• Loan details, credit scores, and repayment records.
• Investment and insurance-related data.

C. Digital Information

• IP address, device information, and browsing data when using our online banking platforms or mobile applications.
• Cookies and usage data to improve digital services.

D. Other Information

• Information provided during account opening, loan applications, or customer support interactions.
• Data collected through CCTV footage at branches or ATMs for security purposes.

4. How We Collect Information
We collect information through:

• Direct interactions (e.g., account opening forms, loan applications, customer service requests).
• Digital channels (e.g., online banking, mobile apps, website visits).
• Third parties (e.g., credit bureaus, government agencies, or business correspondents) in compliance with RBI and NABARD guidelines.
• Automated systems (e.g., transaction monitoring, fraud detection tools).

5. Purpose of Collecting Information
We collect and process your information for the following purposes:

• Service Delivery: To open and manage accounts, process transactions, issue loans, and provide other financial products.
• Regulatory Compliance: To fulfill KYC norms, anti-money laundering (AML) requirements, and reporting obligations under RBI, NABARD, and Government of India regulations.
• Risk Management: To assess creditworthiness, prevent fraud, and ensure the security of banking operations.
• Customer Support: To address queries, complaints, and improve service quality.
• Marketing and Communication: To inform you about new products, services, or offers (with your consent, where required).
• Legal Obligations: To comply with court orders, tax laws, or other statutory requirements.

6. Legal Basis for Processing Information

We process your information based on:

• Your consent (e.g., for marketing purposes or optional services).
• Contractual necessity (e.g., to provide banking services under an agreement).
• Legal obligations (e.g., KYC, AML, and tax compliance as per RBI and Government of India guidelines).
• Legitimate interests (e.g., fraud prevention, IT security, and operational efficiency).

7. How We Use Your Information

• To authenticate your identity and ensure secure access to banking services.
• To process payments, transfers, and other financial transactions.
• To monitor and analyze usage patterns for improving services and detecting suspicious activities.
• To share information with regulatory authorities (e.g., RBI, NABARD, Income Tax Department) as required by law.
• To communicate updates, alerts, or promotional offers (subject to your consent).

8. Disclosure of Information

We may share your information with:

• Regulatory Authorities: RBI, NABARD, SEBI, or other government bodies as mandated by law.
• Service Providers: Third-party vendors (e.g., IT service providers, payment processors) under strict confidentiality agreements and in compliance with RBI’s outsourcing guidelines.
• Credit Bureaus: For credit assessment and reporting, as permitted under the Credit Information Companies (Regulation) Act, 2005.
• Law Enforcement: In response to legal requests or to prevent illegal activities.
• Business Correspondents: For extending banking services in rural areas, as per RBI and NABARD frameworks. We do not sell or rent your personal information to third parties for marketing purposes without your explicit consent.

9. Data Security

We implement reasonable security practices and procedures as mandated under the Information Technology Act, 2000, and RBI’s IT Framework for Banks to protect your information from unauthorized access, loss, or misuse. Our security measures include:

• Encryption of sensitive data during transmission and storage.
• Regular security audits and vulnerability assessments.
• Access controls to limit data access to authorized personnel only.
• Compliance with RBI’s cybersecurity guidelines and NABARD’s supervisory standards for rural banking. In case of a data breach, we will notify affected customers and regulatory authorities (e.g., RBI, CERT-In) as required under applicable laws.

10. Data Retention

• We retain your personal and financial information for as long as necessary to fulfill the purposes outlined in this policy or as required by law (e.g., RBI’s record retention guidelines, which mandate retaining customer data for at least 10 years after account closure).
• Inactive account data or marketing-related information may be retained only with your consent or until you withdraw it.
   

11. Your Rights

As a customer, you have the following rights regarding your information:

• Right to Access: Request details of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Withdraw Consent: Opt out of non-essential data processing (e.g., marketing communications).
• Right to Grievance Redressal: Raise concerns about data handling with our Grievance Officer (details below). To exercise these rights, please contact us using the details in Section 15.

12. Cookies and Tracking Technologies

Our digital platforms use cookies and similar technologies to enhance user experience, analyze usage, and ensure security. You can manage cookie preferences through your browser settings. However, disabling cookies may affect the functionality of our online services.

13. Third-Party Links Our website or mobile app may contain links to third-party sites. We are not responsible for the privacy practices of these external entities. We encourage you to review their privacy policies before sharing information.
 

14. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in laws, regulations, or our practices. The updated policy will be posted on our website () and mobile app, with the “Last Updated” date revised accordingly. We encourage you to review this policy regularly.

15. Contact Us
For questions, complaints, or to exercise your rights, please contact our Grievance Officer:

• Name:Aparna Debbarma
• Designation: Grievance Redressal Officer
• Email: grievance@tscb.co.in
• Phone: [Toll-Free Number]
• Address: Head Office, 1st Floor, Tripura State Cooperative Bank Ltd., Post Office Chowmuhani, Agartala, Tripura, India, 799001 Alternatively, you may escalate unresolved issues to the Banking Ombudsman as per RBI’s Banking Ombudsman Scheme.

16. Compliance with Regulatory Framework
This Privacy Policy adheres to:

• RBI’s Master Direction on KYC, 2016 (updated periodically).
• RBI’s IT Framework for Banks, 2016, and subsequent cybersecurity guidelines.
• NABARD’s supervisory guidelines for cooperative banks and regional rural banks (where applicable).
• Information Technology Act, 2000, and its Rules on Sensitive Personal Data.
• Tripura State Cooperative Bank Ltd. complies with the data protection and privacy guidelines issued by the Unique Identification Authority of India (UIDAI), including but not limited to the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 and the UIDAI’s Aadhaar Data Security Regulations.

17. Consent By using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. Where explicit consent is required (e.g., for marketing), we will seek it separately.

Disclaimer: The information, material, advices suggestions, illustrations notifications, circulars etc. are collectively stated “the content" in this website. If the said content contains any mistakes, omissions, inaccuracies and typographical errors, etc. Tripura State Cooperative Bank Ltd., assumes no responsibility thereof. Tripura State Cooperative Bank Ltd., makes no warranty or representation regarding any content provided through this website and disclaims its liability in respect thereof. Any action on your part based on the said content is at your own risk and responsibility Tripura State Cooperative Bank Ltd., reserves its right to correct any part of the said content at any time as and when required at its sole discretion. The content of this website shall not be displayed or printed in any form in part or whole without the prior written approval of Tripura State Cooperative Bank Ltd.. Tripura State Cooperative Bank Ltd. will limit the collection and use of Customer information only on a need-to-know basis to deliver better service to the Customers. Tripura State Cooperative Bank Ltd., may use and share the information provided by the Customers and third parties for providing services, and notifying or contacting the Customers regarding any problem with, or the expiration of, such services. This Privacy Policy does not create any contractual rights beyond those provided under applicable laws. In case of any conflict between this policy and statutory requirements, the latter shall prevail.