Privacy Policy

Rural Bank of Tandag (SDS) Inc.

Effective Date: May 13, 2026

Rural Bank of Tandag (SDS) Inc. ("Rural Bank of Tandag," "Bank," "we," "our," or "us") respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit the Rural Bank of Tandag website or use the Rural Bank of Tandag Mobile Banking App.

This Privacy Policy applies to both the Bank's website and Mobile Banking App.

1. INFORMATION WE COLLECT

The information we collect depends on how you interact with our services.

1.1 Website Information

When you use our website, we may collect:

  • Personal Information: Name, email address, telephone number, and other information you voluntarily provide through contact forms or other website features.

  • Technical and Usage Information: Browser type, device information, IP address, pages visited, access times, and other technical information that may be collected for website security, maintenance, analytics, and performance purposes.

We only collect information that is reasonably necessary for the purposes described in this Privacy Policy or as otherwise permitted or required by applicable law.

1.2 Mobile Banking App Information

When you register for or use the Mobile Banking App, we may collect information necessary to provide secure banking services, including:

Identity Information

  • Full name;

  • Address;

  • Date of birth; and

  • Other information required for customer identification and account servicing.

Identification and Verification Information

Where required for account opening, identity verification, fraud prevention, or regulatory compliance, we may collect:

  • Images or copies of government-issued identification documents;

  • Photographs;

  • Video or other information used for identity verification; and

  • Other information required by applicable customer identification and verification procedures.

Contact Information

  • Mobile number;

  • Email address; and

  • Other contact information associated with your account.

Financial and Transaction Information

To provide banking services, we may process information relating to:

  • Bank accounts;

  • Account balances;

  • Transaction history;

  • Fund transfers;

  • Payments;

  • Recipients and transaction details; and

  • Other financial information necessary to provide the requested banking services.

Technical Information

We may collect technical information relating to the device and connection used to access the App, including information necessary for:

  • Authentication;

  • Security;

  • Fraud prevention;

  • Troubleshooting;

  • System monitoring; and

  • Protection of the Bank and its customers.

2. HOW WE USE YOUR INFORMATION

We may process your personal information for legitimate and lawful purposes, including:

  • Opening, maintaining, and servicing your bank account;

  • Providing mobile banking and other requested banking services;

  • Processing fund transfers and payments;

  • Verifying your identity;

  • Authenticating transactions and account access;

  • Preventing, detecting, and investigating fraud and unauthorized activities;

  • Maintaining the security of our systems and services;

  • Responding to inquiries, requests, and complaints;

  • Improving our website, applications, systems, and services;

  • Performing internal operations and recordkeeping;

  • Complying with applicable laws, regulations, regulatory requirements, and lawful government requests; and

  • Fulfilling other legitimate purposes necessary for the operation of the Bank.

3. LEGAL BASIS FOR PROCESSING

The Bank processes personal information in accordance with applicable Philippine data privacy laws and regulations.

Depending on the circumstances, processing may be based on:

  • Your consent, where consent is required;

  • The performance of a contract or provision of banking services requested by you;

  • Compliance with legal or regulatory obligations;

  • Protection of lawful interests, including security and fraud prevention; or

  • Other lawful bases recognized under applicable Philippine data privacy laws and regulations.

Where consent is the applicable legal basis, you may withdraw consent subject to applicable legal, contractual, regulatory, and operational requirements.

Withdrawal of consent may affect our ability to provide certain services where processing is necessary to provide those services.

4. SHARING AND DISCLOSURE OF INFORMATION

The Bank does not sell, rent, or trade your personal information.

We may disclose or share personal information only when necessary and permitted or required under applicable law, including with:

Authorized Service Providers

Trusted third-party service providers that assist the Bank in providing and maintaining its systems, applications, technology infrastructure, security, and other banking-related services.

Payment Networks and Financial Service Providers

Where necessary to process transactions, we may share relevant information with authorized payment networks and financial institutions, including services such as InstaPay and PESONet, subject to applicable rules and requirements.

Government and Regulatory Authorities

Information may be disclosed when required or permitted by law, regulation, court order, or lawful government or regulatory request, including requirements applicable to the Bank and the Bangko Sentral ng Pilipinas (BSP).

Fraud Prevention and Security

Information may be processed or disclosed when reasonably necessary to detect, investigate, prevent, or respond to fraud, unauthorized transactions, security incidents, or other unlawful activities.

Third parties that process personal information on behalf of the Bank are expected to implement appropriate confidentiality and security measures consistent with applicable requirements.

5. DATA SECURITY

The Bank implements reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, collection, use, disclosure, alteration, loss, destruction, or other unlawful processing.

Security measures may include, as appropriate:

  • Access controls;

  • Authentication mechanisms;

  • Encryption or other security controls;

  • Monitoring and logging;

  • Secure system configurations;

  • Personnel security measures;

  • Security policies and procedures; and

  • Incident response and business continuity measures.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

You are also responsible for maintaining the confidentiality of your account credentials, passwords, Mobile PIN, OTPs, and other authentication information.

6. DATA RETENTION

The Bank retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide services, to comply with contractual and legal obligations, to meet regulatory and recordkeeping requirements, to resolve disputes, and for other legitimate business purposes.

Certain banking and customer records may be retained for periods required by applicable Philippine laws, regulations, regulatory requirements, and Bank policies.

When personal information is no longer required to be retained, the Bank will take appropriate steps to securely dispose of, delete, or anonymize the information, subject to applicable legal and regulatory requirements.

7. YOUR DATA PRIVACY RIGHTS

Subject to applicable Philippine data privacy laws and regulations, you may have rights concerning your personal information, including the right to:

  • Be informed about the processing of your personal information;

  • Access personal information held by the Bank, subject to applicable limitations;

  • Request correction of inaccurate or incomplete personal information;

  • Object to certain processing where permitted by law;

  • Request deletion or blocking where legally applicable;

  • Withdraw consent where consent is the applicable legal basis;

  • Request data portability where applicable; and

  • Lodge a complaint with the appropriate data protection authority where you believe your privacy rights have been violated.

The exercise of these rights may be subject to legal, regulatory, security, and banking requirements.

To protect your account and personal information, the Bank may require verification of your identity before processing certain requests.

8. WEBSITE LINKS TO OTHER WEBSITES

Our website may contain links to third-party websites or services.

These third-party websites operate independently from the Bank and may have their own privacy policies and practices.

The Bank is not responsible for the privacy practices, content, security, or handling of personal information by third-party websites.

We encourage users to review the privacy policies of external websites before providing personal information.

9. CHILDREN'S PRIVACY

Our services are not intended to knowingly collect personal information from individuals who are not legally permitted to use the relevant banking services.

The Bank does not knowingly collect personal information from children through its website for purposes unrelated to legitimate banking or service requirements.

Where applicable, the Bank will process information relating to minors in accordance with applicable Philippine laws and regulations and appropriate consent or authorization requirements.

10. MOBILE APP SECURITY

For your protection when using the Rural Bank of Tandag Mobile Banking App:

  • Keep your Mobile PIN and password confidential.

  • Never share your OTP or authentication codes.

  • Do not install the App from unauthorized sources.

  • Keep your device operating system and App updated.

  • Avoid using the App on rooted or jailbroken devices.

  • Report a lost or stolen device immediately.

  • Immediately report suspected unauthorized transactions or account compromise to the Bank.

The Bank will never ask you to disclose your password, PIN, or OTP through unsolicited communications.

11. CHANGES TO THIS PRIVACY POLICY

The Bank may periodically update this Privacy Policy to reflect changes in our services, technologies, security practices, legal requirements, or regulatory requirements.

Any updated Privacy Policy will be posted on the Bank's official website together with the revised effective date.

We encourage you to review this Privacy Policy periodically.

12. CONTACT US

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of your personal information, you may contact the Bank through:

Rural Bank of Tandag (SDS) Inc.

Email:official@rbtph.com

Telephone: (086) 211-3026 / (086) 211-5858

Mobile Banking Concerns: (086) 212-5286

Address: National Highway, Bag-ong Lungsod, Tandag City, Surigao del Sur 8300, Philippines

For data privacy-related concerns, please indicate that your inquiry concerns Data Privacy / Personal Information so that it can be properly routed.

Last Updated: September 2, 2026

Regulatory Information

Rural Bank of Tandag (SDS) Inc. operates in accordance with applicable Philippine laws and regulations and is subject to the applicable regulatory framework for rural banks.

For information regarding the Bangko Sentral ng Pilipinas, please visit:

https://www.bsp.gov.ph