Registration and Authentication
When you sign up for MyCard app, you are creating a RBL MyCard Account that is associated with your Credit Card relationship with RBL Bank. Depending on the RBL MyCard services that you use, you may be asked to provide the following information: credit or debit card number and card expiry date, CVV, bank account number and expiry date, address, phone number, date of birth, PAN (or some other government-issued identification number).In some cases, we may also ask you to send us additional information or to answer additional questions to help verify your information.

Finally, we also use Unified Payment Services within our app. As required by RBI, we will be asking for additional SIM based authentication by sending a secure SMS verification from the phone. This allows us to verify that you are the authorized users of the SIM card in your phone.

Analytics
The services contained in this section enable the Owner (viz. Google Analytics, CleverTap) to monitor and analyze traffic, can be used to keep track of User behavior and send push notifications.

Security 

We have taken reasonable measures to protect security and confidentiality of your personal information and its transmission through internet. You are required to follow the applicable terms and conditions while using RBL MyCard app including the instructions stated therein in respect of security and confidentiality of your log-in and password.

We will give access to your personal information to only authorised employees. Employees who violate this document shall be subject to disciplinary process as per internal policies of the Bank.

Review and amendment of personal information 
You are free to (i) review and amend the personal information provided to us earlier, (ii) withhold your consent for the collection of any personal information or (iii) withdraw any prior consent that you may have provided for collection of personal information, at any time, by denying the permission from settings. However, please note that once consent is withdrawn, we may not be able to provide you with services which depend on such consents.

Disclosure – We shall not be held liable for disclosure of your personal information or Statistical Information in accordance with this Privacy Document or in terms of any other agreements with you.

We may disclose the Statistical Information to any person, without any limitation and you hereby give your irrevocable consent for the same.

We may disclose the personal information, to the following third parties, for the purpose mentioned under this Document and you hereby give your irrevocable consent for the same:-

1. any agent or third party service provider who provides administrative, telecommunications, computer, payment or securities clearing or other services to us in connection with the operation of business;
2. any other person under a duty of confidentiality to us including our Group company, which has undertaken to keep such information confidential; 
3. the drawee bank providing a copy of a paid cheque (which may contain information about the payee) to the drawer; 
4. credit reference agencies, and, in the event of default, to debt collection agencies; 
5. any person to whom we are under an obligation to make disclosure under the requirements of any law binding on us; and 
6. any of our actual or proposed assignee or participant or sub-participant or transferee of our rights in respect of the customer.

We may disclose the personal information for the following reasons as well:

1. To comply with legal requirements, legal process, legal or regulatory directive/ instruction. or
2. To enforce the Terms and Conditions of the products or services. or 
3. For fraud prevention purposes. or 
4. to capture the location by using its internal services or any third party services and to preserve the records in its own server or server of the third party. Customer's location is accessed to improve features of the mobile app such as displaying nearby offers or sending location specific deals via notification or for any other purpose which, directly or indirectly, improves the features of the mobile app. Customers location is retained solely for the purpose of enhancing Customer experience. RBL Bank may use and share the information provided by the Customers with its affiliates and selected and credible third parties for providing services and any service-related activities. 
5. Act to protect the interests of RBL Bank, its Affiliates, or its members, constituents or of other persons.

The Customer would be required to cooperate with RBL Bank in order to ensure the security of the information, and it is recommended that the Customers necessarily choose their passwords carefully such that no unauthorised access is made by a third party. The Customers should undertake not to disclose their password to anyone or keep any written or other record of the password such that a third party could access it.

The Customers shall not disclose to any other person, in any manner whatsoever, any information relating to RBL Bank or its Affiliates of a confidential nature obtained in the course of availing the services through the RBL MyCard app. Failure to comply with this obligation shall be deemed a serious breach of the terms herein and shall entitle RBL Bank to terminate the services, without prejudice any damages, to which the customer may otherwise be entitled.

"Cookies" are bits of electronic information that can transfer to your hard drive, mobile device, or other device to keep records of your use or visit to MyCard app. We may use cookies to improve your experiences when visiting or using RBL MyCard app. We may use cookies to anonymously track interests, and collect aggregate information when you use or visit app. We do not use cookies to store or transmit any Personal Data.

Log files" are files that anonymously log actions that take place on the app. We may use log files to gather statistics about your browsing habits and to assess overall digital activity, including how many "hits" a particular page is getting. Log files enable us to track interest in specific promotions, troubleshoot technical concerns, and provide content that may be of interest. We also use the log file entries for our internal marketing and demographic studies, so we can improve the app we provide to customers and visitors. Log files are used internally only, are anonymous, and are not associated with any particular user, device, computer, or browser.

SDK Policy
If you use the RBL MyCard app, we may use third party SDK’s (viz. CleverTap, Google Analytics), cookies and other similar tracking technologies.

How we use data collected via SDK’s

1. To operate and improve the app
   • Enable you to use app feature
   • Communicate with you about the app, including by sending announcements, updates and security alerts which we may send through a push notification, and responding to your questions and feedback 
   • Perform statistical analysis about use of the app measure and analyze effectiveness of marketing campaigns
      
2. To send you marketing and promotional communication
   • We may send you marketing communications as permitted by law
   • We might do the following analysis with aggregated data (no PII is stored or used at any given point in time)
   • Customer Journey Analysis: Conversion funnels such as from Home Page to Product Page to Lead Form
   • Traffic Analysis: Marketing channel categorized by visits, unique visitors, bounces etc.