Effective Date: 01 October 2025

International Commercial Bank Tanzania Limited (“ICB” or “the Bank”) respects the confidentiality of your personal information and is committed to processing it in compliance with the Personal Data Protection Act 2022 of Tanzania, its Regulations, and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

This Privacy Policy describes how the Bank collects, uses, stores, shares, and protects personal data across our website, mobile banking application, internet banking platform, and general banking services.

By using our services, you acknowledge and agree to the practices described in this Privacy Policy.

1. Information We Collect

ICB collects personal data depending on your interactions with us. Categories of personal data include:

• Identification information: full name, nationality, date/place of birth, NIDA number, passport number, tax information, marital status, gender, occupation, and similar KYC details.
• Contact information: telephone, email, residential/business addresses, and location descriptors.
• Financial information: bank account details, card details, transaction history.
• Employment and academic information: CVs, references, qualifications, and income information.
• Website and app usage data: IP address, browser type, device identifiers, operating system, app performance logs, crash diagnostics, pages viewed, and cookie data.
• Mobile banking authentication and security data: biometrics (fingerprint/face recognition stored on your device for authentication), session metadata, device security checks.
• Recordings and images: CCTV footage at branches/ATMs
• Other information: information you provide through forms, applications, and communication with staff.

2. How We Collect Information

Data may be collected via:

• Online forms (enquiries, complaints, feedback, service applications)
• Branch interactions and account opening processes
• Mobile app permissions (biometric and device access)
• Cookies and similar technologies (see Cookie Policy)
• Email, SMS, WhatsApp and telephone communication
• Third-party service providers or partners (with your consent where required)
• Technical troubleshooting with authorised support vendors

3. Legal Basis for Processing

The Bank processes personal data under one or more lawful bases:

• Performance of a contract (providing banking and financial services)
• Compliance with legal and regulatory obligations
• Legitimate interests (fraud monitoring, security, and service improvement)
• Consent (non-essential cookies)

4. How We Use Your Information

ICB may use personal data for:

• Opening, managing, and maintaining accounts and banking relationships
• Processing transactions, payments, and statements
• Supporting internet banking and mobile banking functionality, including biometric authentication
• Customer service, enquiry resolution, and issue management
• Fraud monitoring, security events, and system performance
• Regulatory and legal compliance
• Service improvement, analytics, and user experience enhancement
• Sending transactional alerts, reminders, and (with explicit consent) marketing communications
• Facilitating technical troubleshooting with authorised support partners

5. Cookies and Tracking Technologies

ICB uses cookies to support website functionality, manage login sessions, analyse traffic, and enhance user experience. Non-essential cookies are only used with your consent. Please see our Cookie Policy for more information and instructions on managing your preferences.

6. Data Sharing and Disclosure

ICB does not sell personal data. We may share information with:

• Government authorities, regulators, and law enforcement as required
• Third-party service providers (payment processors, card schemes, SMS/email gateway providers, IT service providers)
• Credit reference bureaus for creditworthiness assessment
• Financial institutions involved in interbank payments
• External auditors, consultants, and professional advisers under strict confidentiality obligations

All sharing is limited to legitimate operational purposes and governed by contractual or regulatory safeguards.

7. Cross Border Transfers

Some data may be transferred outside Tanzania, including:

Your information, including Personal Data, may be transferred to and maintained on computers located outside Tanzania or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside Tanzania and choose to provide information to us, please note that ICB transfer the data outside the country with a permit from the Personal Data Protection Commission.

ICB will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Statement and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Your consent to this Privacy Statement followed by your submission of such information represents your acceptance of such transfers when necessary.

8. Data Security

ICB implements organisational and technical measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. While we strive for strong security, no method is entirely risk-free.

In case of a data breach likely to cause harm, ICB will notify the Personal Data Protection Commission and affected individuals in accordance with legal requirements.

9. Data Retention

Data is retained only as long as necessary to:

• Fulfil service purposes
• Meet legal obligations
• Support business operations
• Resolve disputes

10. Your Rights

Subject to applicable laws, you may:

• Access personal information held about you
• Request correction of inaccurate or incomplete data
• Request deletion where permitted
• Request restriction of processing
• Withdraw consent for processing based on consent
• Object to certain processing
• Request information on safeguards for cross-border transfers

The Bank may require verification before acting on requests. If you would like more information about your rights or to exercise any of your rights, please contact us at dpo@icbank.co.tz

11. Children and Minors

We recognize the importance of safeguarding personal data related to minors. If we collect information about individuals under the age of 18, we do so only with the consent of a parent or guardian. We encourage parents and guardians to be actively involved in their children’s online activities.

12. Links to External Sites

ICB digital platforms may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. ICB strongly advise you to review the Privacy Policy of every site you visit. ICB have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

13. Changes to This Privacy Policy

ICB may update this Privacy Policy periodically. The updated version will be posted on our website with a revised “Effective Date.” Continued use of services signifies acceptance of the updated Privacy Policy.

14. Contact Us

Data Protection Officer
International Commercial Bank Tanzania Limited
Email: dpo@icbank.co.tz
Address: P.O. Box 9362, Plot No. 1081/2/2, Vijana Towers, 2nd Floor, Fire Station Road, Dar es Salaam, Tanzania

For any questions regarding this Privacy Policy or how your data is handled, contact:

Data Protection Officer

International Commercial Bank (Tanzania) Limited
Address: P.O. Box 9362, Plot No. 1081/2/2, Vijana Towers, 2nd Floor, Fire Station Road, Dar es Salaam, Tanzania

Email: dpo@icbank.co.tz

15. Cookie Policy Reference

Please review our Cookie Policy for details on cookies used, purposes, third-party cookies, and how to manage your preferences.