PRIVACY POLICY ALLO BANK Allo Bank highly respects matters relating to the protection of Customer privacy. Therefore, Allo Bank compiled this Privacy Policy to explain to the Customer how Allo Bank obtains, collects, processes, analyzes, uses, stores, displays, announces, transmits, disseminates, deletes and destroys the Customer Personal Data provided to Allo Bank or otherwise collected by Allo Bank both when downloading, registering, accessing the website, and using services or products and the Allo App, including Loyalty Program. The Customer is required to read the Allo App Privacy Policy carefully to ensure that the Customer understands how the data processing process at Allo Bank is carried out. The terms in capital letters used have the same meaning as those contained in the Allo App Terms and Conditions listed on a different page PERSONAL DATA Personal Data is any data, information, and/or information in any form that can identify the Customer, which the Customer submits to Allo Bank from time to time or which the Customer includes or conveys in, on, and/or through the Application concerning the information regarding Customer personal, which includes, among others: full name, address, birth data, Customer identity card number, gender, electronic mail address (Email), mobile phone number (including but not limited to: IP address, location information, Customer device data, IMEI number, name of the application that has been attached to the Customer's device, information retrieval), data concerning the information regarding Customer's transaction activities using the Allo App, and other data classified as personal data PERSONAL DATA ACCURACY Allo Bank requires Customer Personal Data, one of which is to be able to register and process transactions. Therefore, the Personal Data that the Customer provides to Allo Bank must be true and accurate according to the facts. The Customer is obliged to update and notify Allo Bank if there are changes to the Customer's Personal Data following the applicable provisions as described in point X below. COLLECTION OF PERSONAL DATA 1. Allo Bank will collect Customer's Personal Data when the Customer registers, updates data or When the Customer accesses the Allo App and makes transactions using the Allo App . or at any other time as Allo Bank asks the Customer if needed from time to time. 2. Allo Bank may receive Customer's Personal Information from Allo Bank Third Parties as longas Allo Bank Third Parties have obtained the Customer's consent to provide the required information (as relevant). IV. USE OF PERSONAL DATA Allo Bank will process, analyze, and/or use Customer's Personal Data for the following purposes and other purposes permitted by applicable laws and regulations: 10. q 12, Identifying and registering Customers as Allo Bank Customers as well as. verifying, deactivating or managing Customer accounts, including performing Know Your Customer processes and authenticating the use of the Allo App ; Allow Allo Bank to provide services requested by the Customer or process transactions that the Customer instructs using the Allo App ; Process and manage Customer's products; Prevent, detect, investigate and address the occurrence of acts that are criminal, prohibited, illegal, illegal or fraudulent, which may occur in the use of the Allo App (including but not limited to fraud, embezzlement, theft and money laundering); Develop, add and provide products to meet customer needs; Researching the purposes of Allo App Customer demographic data including but not limited to the use of Allo Bank products and/or services ; Develop, improve, and provide Allo App services, and features within Allo App ; Sending information that Allo Bank deems useful to the Customer, including information about Allo Bank's products, services and promotions after the Customer has approved Allo Bank that the Customer does not mind being contacted regarding Allo Bank's products and/or services ; Internal administrative purposes, such as; audits, data analysis, records in the database; Communicating with the Customer in connection with all matters regarding the Allo App, Allo Bank services, and/or features thereof; Maintain the safety, security and continuity of the Allo App, Allo Bank services, and/or features thereof; Provide image and camera services. When Customer uses Customer image and camera services, we use Customer images, videos, and other personal data to respond to Customer1% W, 18, 16. requests, provide the requested service to Customer, and improve our services. Comply with legal obligations. in certain cases, we collect and use Customer Personal Data to comply with laws. For instance, we collect from customers the information regarding bank account information for identity verification and other purposes. Communicate with Customers. We use Customer Personal Data to communicate with Customer in relation to MPC Services via different channels (e.g, by phone, email, chat). Advertising and Personalisation. We use Customer Personal Data to display interest-based ads for features, products, and services that might be of interest to Customers. Fraud and Money Laundering Prevention and Credit Risks. We use Customer Personal Data to prevent and detect fraud and money laundering and abuse in order to protect the security of our customers, Allo Bank, and others. We may also use scoring methods to assess and manage credit risks V. DISCLOSURE TO THIRD PARTIES To develop, improve, protect, or maintain the AlloApp, and/or other Allo Bank services, Allo Bank is sometimes required to display, publish, transmit, and/or disseminate Personal Data to third parties. For the avoidance of doubt, the third parties referred to in this paragraph may be, including but not limited to: a. Allo Bank Third Parties that are Allo Bank affiliated companies for or in connection with purposes related to the provision of the Allo App, business management and other activities; b. A third party who is a government authority or institution if (i) is required or ordered by applicable laws and regulations (including but not limited to responding to questions related to regulations, investigations or guidelines, or complying with archiving and reporting requirements or conditions based on laws and regulations applicable) and/or ) there is a legal process related to Allo Bank ; c. Third parties if there are company transactions, such as the formation of a joint venture, sale of 2 subsidiary or division, merger, consolidation, takeover, sale of assets, or liquidation; and d. Other third parties (including agents, vendors, suppliers, contractors, Third Parties and other parties providing services to Allo Bank or Customers, performing tasks on behalf of Allo Bank or Parties entering into commercial cooperation with ( Allo Bank ) for or in connection with the purpose of where the third party is involved or the purpose of Allovi vil. vill. Bank's cooperation with the third party (depending on the circumstances), which may include allowing the third party to introduce or offer products or services to Customers or carry out other activities including marketing, research, analysis and product development the third party (depending on the circumstances. 2. In connection with the implementation of special widgets or content in the Allo App as explained in Allo Bank in these Terms and Conditions, Allo Bank hereby declares that Allo Bank Third Parties will and can send, convey and/or provide Customer Personal Data to other parties in cooperation with the Third Party. Third (as relevant), especially to be able to forward the customer request for the support service that the customer wants to change/update another party providing the support service. In this case, the other party who receives the Customer's Personal Data will be subject to obligations related to the delivery and use of the same data as applicable to Allo Bank Third Parties. LINKS TO THIRD PARTY SITES Allo App may contain links to third-party sites. Allo Bank is not responsible for the acquisition, collection, processing, analysis, use, storage, display, announcement, transmission, dissemination, deletion and destruction of Customer's Personal Data by such third parties. If the Customer provides information directly to the site, the privacy policy and terms of service on the site will apply, so that all consequences of taking such action are entirely the responsibility of the Customer. DATA STORAGE AND SECURITY Allo Bank ensures that Customer data collected and/or collected by Allo Bank will be stored safely following the prevailing laws and regulations in Indonesia. Allo Bank will retain Customer data for as long as necessary to fulfil the purposes described in this Privacy Policy. UNAUTHORIZED ACCESS Allo Bank is responsible for the Personal Data that Allo Bank collects from the Customer but the Customer is obliged to maintain the confidentiality of the Customer's Personal Data, the password and/or PIN that the Customer creates and uses to access the Customer's Personal Data wherever the Customer stores the Customer's Personal Data, including accounts, passwords and /or PIN to access of login to the Customer's Allo App and not allow third-parties to be able to access the Customer's Personal Data without the consent and knowledge of the Customer Customer is responsible for all misuse of the Allo App, password and/or PIN that the Customer creates and uses to access the Customer's Personal Data including the Account, password and/or PIN to access or login to the Customer's Allo App by parties other than the Customer.The customer is obliged to notify Allo Bank if the Customer believes that the Customer's Allo App password and/or PIN is misused by other irresponsible parties. IX. INTELLECTUAL PROPERTY RIGHTS 1. All Allo App products and their support systems include but are not limited to all: (a) layout, design and appearance of Allo App contained in or displayed on Allo App media; (b) logos, photos, images, names, brands, words, letters, numbers, text, and color arrangements contained in Allo App products; and (c) the combination of the elements as referred to in letters (a) and (b), is entirely Intellectual Property Rights owned by Allo Bank and no other party also has rights to Allo App products . as well as on the layout, design and appearance of the product; 2. Customers are not allowed from time to time to: a. Copy, modify, adapt, translate, create derivative works from, distribute, sell, transfer, publicly display, reproduce, transmit, transfer, broadcast, decipher or disassemble any part of or otherwise exploit Allo App (including systems support and facilities therein) which are licensed to the Customer, except as permitted in this Privacy Policy; b. License, sublicense, sell, resell, transfer, transfer, distribute or exploit commercially or otherwise make available to third parties the software and/or software in any way; c. Publish, distribute or reproduce in any way any copyrighted material, trademarks, or other information that Allo Bank owns without obtaining prior approval from Allo Bank or the rights owner who licenses his rights to Allo Bank ; d. Remove any copyright, trademark or other proprietary notices contained in the Allo App ; fe. Reengineer or access the Allo App and/or its support systems to (i) build a competing product or service, (ii) build a product using similar ideas, features, functionality or graphics, or (i) copy ideas, features, functionality or graphics; Launch automated programs or scripts, including, but not limited to, web crawlers, web robots, web indexers, bots, viruses, worms, or other similar applications and any program that may make several server requests per second, create heavy loads or hinder operation and/or performance of Allo App; 9. Use robots, spiders, site search/app retrieval, or other manual or automated devices or processes to retrieve, index, “data mine", or in any way reproduce or circumvent the navigational structure or presentation of the Allo App and its content contained in it.X. ACCESS REQUESTS AND CHANGES OF PERSONAL DATA Subject to the applicable laws and regulations, the Customer may request access to and/or request changes to the Customer's Personal Data, by contacting Allo Bank's Customer Care (with supporting evidence/documents), via: ii, Call 080.4110 4110; ili, Email to allocare@allobank.com iv. Help Center on Allo App ; v. Twitter (AlloBankiD); vi. Facebook (Allo Bank Indonesia); and vii, Instagram (@allobank); Allo Bank has the right to refuse a Customer's request to access and/or change the Customer's Personal Data for reasons justified based on the applicable laws and regulations. XI. REVOCATION OF APPROVAL The customer has the right to ask Allo Bank to stop using the Customer's Personal Data for the purposes stated above. if the Customer intends to ask Allo Bank to stop using the Customer's Personal Data, the Customer may contact the Allo Bank Call Center (with supporting evidence/documents) or select the “unsubscribe” option contained in the message Allo Bank sent so that the Customer will no longer receive messages. messages from Alllo Bank in the future. In Ife revocation of the agreement may result in the termination of any Customer Account service or Allo Bank agreement with the Customer, provided that all rights and obligations that arise after that must be fuifilled. After the Customer conveys the intention to revoke the Customer's consent, Allo Bank will notify about the possible consequences, so that the Customer can decide on the process of revoking the agreement. XI, APPLICABLE LAW * This Privacy Policy is governed and construed in accordance with the laws of the Republic of Indonesia. © Inthe event of a dispute, the Privacy Policy that will be used as the main reference is the Privacy Policy in the Indonesian language.xi, xv. CHANGES TO PRIVACY POLICY Allo Bank may at any time change, update, and/or add part or all of the provisions in this Privacy Policy, in accordance with Allo Bank 's business going forward, and/or changes to laws and regulations. If this Privacy Policy is changed / updated / added, Allo Bank will notify the Customer through the communication media determined by Allo Bank . By continuing to communicate with Allo Bank , using the Allo App or using the features in the Allo App, means adding to the Customer's acceptance of changes, updates, and/or additions that Allo Bank has made to this Privacy Policy. If the Customer continues to use the Allo App after reading this Privacy Policy, the Customer is deemed to have agreed to this Privacy Policy and can continue to use the Allo App. CUSTOMER STATEMENTS AND APPROVAL. Based on the Allo App Privacy Policy above, the Customer hereby declares: 1. That the Personal Data provided by the Customer is true and valid data, therefore the Customer approvesAllo Bank to obtain, collect, process, analyze, store, display, publish, transmit, disseminate, delete and destroy following this Privacy Policy and regulations current regulation; 2. That the Customer has read, understood and agreed to all the provisions contained in this Privacy Policy and is an inseparable part of the Allo App Terms and Conditions; 3. That the Customer releases Allo Bank from any claims, lawsuits, damages, and/or claims in connection with the failure of transaction processing on the Allo App caused by inaccuracies/inaccuracies in the Personal Data that the Customer provides to Allo Bank ; 4. That the Customer has given approval, permission, and authority to Allo Bank to announce, send, and/or disseminate and provide access to Personal Data to third parties for the purposes as referred to in point IV above.