This page explains our policies regarding the collection, use, and disclosure of personal data when you use and/or access our Electronic Systems*, including data related to your choices.

We use your data to increase the reliability and improve the quality of our Electronic Systems. By using and accessing our Electronic System, you have consented to the collection and use of data/information in accordance with this privacy policy.

A. COLLECTION AND USE OF INFORMATION

We collect several types of information depending on our needs in order to improve our services to you, including:

1. Personal Data

When using our Electronic System, you may also be asked to provide us with certain personal information which can be used to contact or identify you, including, but not limited to your name, date of birth, KTP, NPWP, passport, or other identification number or information, address, email address, telephone number, contact details, and financial information, personal description and photo, product and service portfolio information, risk profile, financial history, training, and demographic data.

2. Usage Data

When you access our Electronic System, whether through a mobile device or other devices, we may automatically collect certain information, including, but not limited to, the type of device you are using, a unique ID of the device, the Internet Protocol address, type of operating system, the type of browser you use, unique device identifiers, and other diagnostic data.

Each of the above information and data is generated and/or provided to us as long as you access and perform activities in the Electronic System. For example, your registered username, search results, and history of available products and services, transaction records, as well as your answers to verification questions.

3. Tracking & Cookie Data

We use cookies and similar tracking technologies to track activities on our Electronic Systems and to store certain information. With cookies, we can identify you, your account, or your device through our Electronic System (e.g. www.mandirisekuritas.co.id, www.most.co.id, including all related domains and subdomains)

Cookies are sent to your browser from this website and stored on your device. Tracking technologies such as beacons, tag, and scripts we use to collect and track information and to improve the reliability and analyze our services.

You can command your browser to refuse all Cookies or to indicate when Cookies can be sent. However, if you do not accept/accept cookies, you may not be able to use some or all of the services of our Electronic System.

If you choose to use the Electronic System without blocking or disabling cookies, it means that you agree to the use of these cookies as well as our use of your information/data that we collect through cookies. To provide you with a simple understanding of cookies, we will inform you of the types below, including:

• Session Cookies

We use these cookies to operate our Electronic Systems.

• Preference cookies

We use these cookies to remember your preferences and various settings.

• Security Cookies

We use these cookies for security purposes.

For more information on cookies, please see www.aboutCookies.org or www.allaboutCookies.org

In addition to our own cookies, we also work with other companies to place cookies on our sites to collect information for us. These companies may not use these cookies for internal purposes or share the information collected with anyone other than Mandiri, in accordance with the terms of the contract/agreement with us.

B. USE OF DATA

Mandiri uses the data that has been collected for different purposes, namely:

• Organize and maintain Electronic Systems
• Inform you of changes in our services
• Allows you to participate in the interactive features of our products/services when you choose to do so
• Provide customer service and support
• Provide valuable analysis or information so that we can improve our electronic systems
• Monitoring of the use of electronic systems
• Detect, prevent and resolve technical problems

C. DATA TRANSFER

Your information, including personal data, may be sent to or stored in third-party media which may be located in areas outside of Indonesia. If you are located outside Indonesia and choose to provide information to us, please note that we may transfer information, including Personal Data, to regions and process it in Indonesia.

With your consent to this privacy policy, we understand your consent to the transmission of such information or transfer of data.

Mandiri will take all reasonable and necessary steps to ensure that your information/data is treated securely and in accordance with this Privacy Policy.

D. DISCLOSURE OF DATA

• Mandiri may disclose your information/data for true purposes, only if such action is necessary and to:
• Execute and respect legal obligations
• Protect and defend the rights or property of Mandiri
• Prevent or investigate errors that may arise related to Electronic Systems
• Protect the personal safety of users of the electronic system or the public
• Protect the implementation of legal responsibilities

E. DATA SECURITY

The security of your data is very important to us, but please understand that there are no methods of transmission over the Internet, or the method of electronic storage is 100% secured. Therefore, although we have done our best in a general commercial manner to protect your personal data, we cannot guarantee its absolute security.

F. THIRD-PARTY SERVICE PROVIDERS

We may employ third parties and individuals to facilitate our Electronic Systems, provide Electronic Systems on our behalf, perform Electronic Systems-related services, or help us analyze how our Electronic Systems operate. Therefore, these third parties may have access to your information/data only in order to perform and complete work for and on our behalf and are obligated not to disclose or use it for any other purpose.

G. LINKS TO OTHER SITES

Our electronic system may contain links to other sites belonging to the Mandiri group or to third parties which are not operated by us. If you click on a third-party link, it means that you will be directed to that third-party site. In this case, we strongly encourage you to study the privacy policy of each site you visit. Please understand that we have no responsibility and no control over the content, privacy policies, or operation of any third-party sites or any Electronic Systems.

H. APPLICATION AND MODIFICATIONS OF THIS PRIVACY POLICY

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. We recommend that you review and revise this privacy policy periodically for any changes. Changes to any or all of this privacy policy will be effective when posted on this page.

I. OTHERS

Mandiri cannot detect the age of users who access and use its Electronic System. If a minor (following applicable law) has provided their personal information/data to Mandiri without the consent of their parent or guardian, the parent or guardian may contact Mandiri to delete such data.

J. BEWARE OF VARIOUS FORMS OF DIGITAL TRANSACTION CRIME

Almost all digital transaction crimes use social engineering techniques, namely manipulation through social interaction by utilizing human negligence, so that we unconsciously provide confidential information to criminals. According to Security Professional Kevin Mitnick, it's easier to manipulate someone to give out their password, rather than break into the system to get the password.

Financial services is the industry with the highest phishing targets. Therefore, be aware of people or organizations that use communication media such as telephone, social media, email, websites, SMS, and others to request credit and debit card information, passwords, and other sensitive data.

In addition, phishing perpetrators can also contact customers and claim to be bank representatives or people that the customers know, claiming to update customer banking data or offering a product/gift, to gain customers’ trust and get them to reveal confidential information. Phishing perpetrators can also intercept communications made by customers through malware or computer viruses implanted in customers' devices.

K. TRANSACTION WITH MANDIRI SEKURITAS IS SAFE AND GUARANTEED

Mandiri Sekuritas is committed to maintain the confidentiality of all digital transactions of its customers, including by taking protective measures using encryption technology. Every transaction has risks, including digital transactions. But most of the risks can be mitigated with the right understanding on how to transact digitally more securely. The principle emphasized is very simple and easy to remember: CAREFUL, COMPREHEND and CONFIRM.

Information:

*The Electronic System is a series of electronic devices and electronic procedures that operate to prepare, collect, process, analyze, store, display, advertise, transmit and/or disseminate electronic information, for example: websites and mobile applications