Privacy Statement

1. Introduction

CSB Bank is committed to maintaining the confidentiality, integrity, and security of the personal information collected from visitors and users of this website and associated digital services. This Privacy Statement outlines the principles governing the collection, use, disclosure, and protection of personal information and applies to all individuals accessing or using the Retail Net and Mobile Banking Applications.
By registering and logging into the Retail Net and Mobile Banking applications, you acknowledge and consent to the practices described in this Privacy Statement

2. Information Collected

2.1 Voluntary Submission of Information

You are not required to provide any personal information unless you choose to do so. Submission of such information constitutes your consent to its processing in accordance with this Policy Statement

2.2 Information Captured for Authentication Services

For the purposes of registration, login support, or resetting your password/MPIN, the Bank may collect the following details:

• Know Your Customer (KYC) information
• Date of Birth or Date of Incorporation
• Debit card details

This information is collected solely for real time authentication with the Bank’s Core Banking System.

2.3 No Storage of Sensitive Authentication Data

Any KYC, demographic, or debit card information captured during these processes is used exclusively for authentication and is not stored within the application or retained beyond the immediate session.

3. Use of Data

3.1 Purpose Limitation

Personal information submitted through CSB Retail Net and Mobile Banking applications is used only for:

• Verification and authentication activities
• Processing customer requests or service enrolments
• Complying with applicable legal and regulatory requirements

3.2 Internal Access Controls

Bank employees may access client information strictly on a need to know basis to perform authorized duties. Employees are prohibited from discussing client information with unauthorized personnel.

3.3 Prohibited Uses

CSB Bank:

• Does not sell, rent, or trade personal information
• Does not disclose personal information except as permitted under this Policy

4. Disclosure of Information

4.1 Customer Authorized or Legally Mandated Disclosure

Client information may be released only:

• With explicit authorization from the client;
• When permitted or required under applicable laws, regulations, or judicial orders

4.2 Third Party Disclosures

Information may be shared with third parties only to the extent required by law or necessary for regulatory compliance. No additional rights to such information are granted beyond the scope required to provide services

4.3 Confidentiality Obligations

With the exception of specific rights granted through contractual agreements:

• No confidential information shall be disclosed without prior written consent from the customer or disclosing party
• Reasonable care shall be taken to protect such information
• Information shall be used solely in connection with services provided or availed

5. Data Protection Measures

CSB Bank follows stringent administrative, technical, and physical safeguards to ensure the confidentiality and security of personal information. These include:

• Restricted access to personal data
• Confidentiality obligations for employees
• Secure authentication mechanisms
• Non retention of sensitive data used for verification (e.g., debit card details, DOB/incorporation data used for MPIN resets)

6. External Links

CSB Retail Net and Mobile Banking applications may contain links to external websites not controlled or operated by CSB Bank. The Bank is not responsible for the content, privacy practices, or data collection methods of such external sites. Users are encouraged to review the privacy policies of those sites directly

7. Policy Amendments

CSB Bank reserves the right to amend, modify, revise, or suspend this Privacy Statement at its discretion and without prior notice. Continued use of CSB Retail Net and Mobile Banking applications after such amendments constitutes acceptance of the revised policy.