Mwalimu Commercial Bank Plc (The bank) is committed to protecting the privacy and security of personal information belonging to its customers and users of the Mwalimu Mobile Banking Application (“the App”).
This Privacy Policy explains how the bank collects, use, protect and disclose personal data when you use the App. The Policy is guided by the Personal Data Protection Act, 2022 and applicable regulations and requirements of the United Republic of Tanzania.
1. Information collected
Depending on the services you use, the App may collect and process:
- Customer identification and contact information, such as name, mobile number and customer/account details;
- Banking and transaction information, including account balances, payments and transaction history;
- Authentication information such as login credentials, PINs, OTPs and security tokens;
- Device and technical information, such as device type, operating system, IP address, App version and security logs;
- Location information where required for specific services, such as locating nearby branches or ATMs;
- Camera or other device permissions where required for specific App functions, such as QR-code scanning or customer verification.
The bank collects only information that is necessary for providing, securing and improving its services or for complying with applicable legal and regulatory requirements.
2. Use of Personal Data
Personal data may be used to:
- Provide mobile banking and other financial services;
- Process and authenticate transactions;
- Verify customer identity;
- Prevent and detect fraud and other financial crimes;
- Protect customer accounts, devices and the Bank's systems;
- Provide customer support and service notifications;
- Maintain, monitor and improve the App;
- Meet legal, regulatory, audit and reporting obligations; and
- Respond to lawful requests from competent authorities.
The bank does not sell customers' personal data.
3. Sharing of Personal Data
Where necessary and permitted by law, personal data may be shared with authorised service providers, payment processors, technology providers, telecommunications providers, auditors, professional advisers, regulators, law enforcement agencies and other competent authorities.
Third-party service providers processing personal data on behalf of the Bank are required to maintain appropriate confidentiality and security safeguards.
4. Protection of Personal Data
The bank implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.
These measures may include encryption, access controls, secure authentication, transaction monitoring, security logging, vulnerability management and other cybersecurity controls.
Customers are responsible for protecting their PINs, passwords, OTPs and other authentication credentials and should immediately report suspected unauthorised access or transactions to the Bank.
5. Data Retention
Personal data is retained only for as long as necessary to provide the relevant services or as required by applicable laws, regulations, banking requirements, audit obligations and legitimate business purposes.
When information is no longer required, it will be securely deleted, destroyed or anonymised in accordance with the Bank's records-retention requirements.
6. Customer Data Protection Rights
Subject to applicable law, customers may have the right to:
- Access their personal data;
- Request correction of inaccurate information;
- Request deletion or restriction of processing where legally applicable;
- Object to certain processing activities;
- Withdraw consent where processing is based on consent; and
- Lodge a complaint concerning the processing of their personal data.
Requests relating to personal data may be submitted using the contact details below.
7. Changes to this Privacy Policy
The bank may update this Privacy Policy from time to time to reflect changes in services, technology, legislation or regulatory requirements. The latest version will be made available through the bank's official website.
8. Contact Us
For questions, concerns or requests regarding the processing of your personal data, please contact:
Mwalimu Commercial Bank Plc
Address: MLIMANI Tower-Mezzanine Floor, Sam Nujoma Road, P. O. Box 61002, Dar es Salaam, Tanzania
Email: info@mwalimubank.co.tz
Telephone: +255 222 772 957
Website: www.mwalimubank.co.tz
By using the Mwalimu Bank Application, you acknowledge that you have read and understood this Privacy Policy.