Overview

This Privacy Policy outlines how Banco Kaebauk (‘we’, ‘us’, ‘our’) collects, uses, and secures your Personal Data when you interact with our mobile banking application. It also explains your rights regarding your Personal Data, how you can access or update it, and the choices you can make about how your information is processed.

 

What type of Personal Data do we collect?

We want you to understand the types of data that we may collect through the application, so that you can make informed decisions about what you choose to share with us. Personal data is any information that can identify you as an individual. We may collect such information when you interact with the application in connection with our products or services.

 

Types of personal data include:

• Personal particulars (e.g. name, address, ID, employment details etc.).

• Banking information and financial details (e.g. debit card number, transactions etc.).

• Details of interactions with us (e.g. Call Center, WhatsApp Chat, Message Center).

• Technical and usage information (e.g. device details, login information and activity, security-related information).

• Information obtained from mobile device with your permission.

 

 

Device permissions

Depending on the user’s specific device, the application may request certain permissions that allow it to access the user’s device data as described below. By default, these permissions must be granted by the user before the respective information can be accessed.

The permission can be revoked by the user at any time. The exact procedure for controlling the application’s permissions may be dependent on the user’s device and software. Please note that the revoking of such permissions might impact on the proper functioning of the application.

• Camera permission: Required to enable the application to access the device camera for capturing a profile photo, performing biometric face authentication, scanning QR codes, and taking photos of documents attachment for raise a dispute.

• Telephone permission: Required for capturing phones status and identity such as Device ID (unique Device ID provided by the platform), Device OS type, Device Name and Device Model.

• Files / Media / Storage permission: Allows the application to upload photos or documents from your device when you update your personal information or profile picture by selecting from your device’s gallery. Only PDF, JPG, JPEG, PNG formats are permitted.

Note: We do not access, read, or collect photos, videos, or personal media files beyond the specific documents you explicitly choose to upload.

This permission also enables you to download your account statements and transaction receipts (generated in PDF format) during transfers or bill payments.

Please note that we do not access, read or collect the photos, videos or media on your device beyond the specific files you choose to upload.

• Other permissions required to ensure the application functions securely and reliably, such as the ability to:

  • View Network / Wi-Fi connections, to verify internet availability before performing online services.

  • Use fingerprint / biometric hardware, to enable secure biometric authentication, where supported.These permissions are used strictly for operational and security purposes and do not involve collecting personal content from your device.

 

 

How do we collect your Personal Data?

We collect personal data in the following ways when you use our application:

• Directly from you when you register, log in, transact, or communicate with us through the application, application downloads and registrations.

• Through permissions you enable on your device.

 

 

What do we use your Personal Data for?

Your personal information allows us to create more personalized and unique banking experiences just for you. When you trust us with your data, it’s only right that you understand how we may use it:

• For general support:

  • To provide, operate, and maintain mobile banking services.

  • To process transfers, bill payments, deposit creations, and other financial transactions.

  • To send service notifications, transaction alerts, and respond to customer inquiries.

• For our internal operations:

  • To authenticate your identity and secure access to your account.

  • To detect, prevent, and mitigate fraud, unauthorized access, or illegal activities.

  • To update and maintain accurate records in compliance with applicable laws and regulatory requirements.

  • To conduct system troubleshooting, testing, data analysis, and audits to continuously improve app performance, user experience, and product offerings.

​

 

Who do we share your Personal Data with?

Banco Kaebauk may share personal data where deemed necessary, legal, or appropriate, including:

 

• Regulatory & Government Authorities: Such as the Central Bank of Timor-Leste (BCTL) or law enforcement agencies when required by law, legal processes, or court orders.

• Trusted Third-Party Service Providers: System integrators, technical vendors, and payment processors engaged to support our banking infrastructure and services under strict confidentiality agreements.

• Legal Enforcement: When necessary to enforce our legal rights, investigate policy breaches, or protect the security and integrity of our financial ecosystem.

Please note: We do not rent, sell, or trade your personal data to any third parties for marketing or commercial purposes.

 

Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by statutory, regulatory, and banking compliance requirements. In accordance with applicable banking regulations and Anti-Money Laundering (AML) laws, customer records and transaction histories are typically retained for a minimum period of 5 to 10 years following the closure of an account or termination of the business relationship.

​

 

What rights do you have regarding your Personal Data?

You may exercise the following rights regarding your personal data through the application, by visiting the nearest Banco Kaebauk branch, or via email:

 

• Access and Review: View your personal details and account activity within the application at any time.

• Correction and Update: Request updates or corrections to incomplete or inaccurate data. It is your responsibility to maintain up-to-date personal information on our digital channels.

• Deletion: Request the deletion of your personal data where we have no legal or regulatory basis to retain it.

• Restrict / Revoke Consent: Object to or restrict specific processing activities, such as revoking device permissions via your mobile device settings.

 

Children's Privacy

Our mobile banking application and related services are not directed to or intended for individuals under the age of 18 without the explicit authorization and supervision of a parent or legal guardian.

 

How do we protect your data?

We implement strict administrative, technical, and physical security measures—including data encryption, secure socket layers (SSL), firewalls, and access controls—to protect your information against loss, unauthorized access, misuse, alteration, or disclosure.

You are responsible for maintaining the confidentiality of your login credentials, PINs, and passwords. Please contact us immediately if you suspect any unauthorized access to or compromise of your account.

 

​

Changes to this privacy policy

Banco Kaebauk reserves the right to modify or update this Privacy Policy at any time to reflect changes in legal requirements, operational practices, or customer feedback. The updated policy will be posted on our official website or communicated directly to you within the application.

 

Contact Us

If you have any inquiries regarding this Privacy Policy, your personal data, or any transactions occurring through our digital touchpoints, please contact us:

 

Phone Number : +670 33 22 062

Email Address   : info@kaebauk.tl

Official Website : https://www.kaebauk.tl

 

Last Updated: July 2026