Chat dengan kami disini
The following are the policies and practices implemented by PT BPR Lestari Bali ("BPR Lestari") to demonstrate BPR Lestari’s commitment to protecting and maintaining your privacy and security when you use the LestariMobile application.
BPR Lestari does not sell, exchange, or disclose any information related to BPR Lestari customers or mobile banking users. BPR Lestari does not track LestariMobile users. All of your banking transactions and other account information are kept confidential in accordance with the applicable laws and regulations in Indonesia and BPR Lestari’s internal policies.
In order to provide online account opening services through the LestariMobile application, BPR Lestari Bali ("Bank") conducts an electronic identity verification process, also known as electronic Know Your Customer ("e-KYC").
During the e-KYC process, the Bank may collect and process personal data provided by the Customer, including:
a. Data contained in the Identity Card (KTP);
b. Photo or image of the KTP;
c. Customer’s selfie photo;
d. Facial data obtained from the selfie photo and liveness detection process;
e. Facial information or characteristics generated from the facial verification and/or analysis process; and
f. Other information required to verify and validate the Customer’s identity.
g. The selfie capture and processing of facial data are conducted using the Customer’s device camera as part of the e-KYC process.
The Bank collects and processes facial data for purposes directly related to the e-KYC process and banking services, including:
a. Verifying and validating the Customer’s identity;
b. Matching the Customer’s face with the identity information and/or identity documents provided;
c. Conducting liveness detection to help ensure that the verification process is performed by the actual person;
d. Preventing and detecting fraud, identity theft, and misuse of services;
e. Complying with Know Your Customer (KYC) principles in accordance with Bank Indonesia and Financial Services Authority (OJK) regulations;
f. Fulfilling obligations under applicable laws, regulations, and regulatory provisions;
g. Maintaining the security of the account opening process and banking services; and
h. Providing and managing the services requested by the Customer.
i. Facial data is not used for advertising or marketing purposes.
j. The Bank does not sell, lease, or trade the Customer’s facial data.
k. The Bank does not use facial data to create Customer profiles for advertising or marketing purposes.
l. Facial data is used only for purposes related to e-KYC, security, fraud prevention, the provision of Bank services, and/or the fulfillment of legal and regulatory obligations.
Selfie data and facial data obtained during the e-KYC process are stored on servers and/or databases managed or used by BPR Lestari Bali.
Such data may be stored together with the Customer’s identity information and other information required to support identity verification, account management, service security, fraud prevention, audit, and the fulfillment of legal and regulatory obligations.
The Bank applies reasonable technical and organizational measures to maintain the security and confidentiality of facial data and to prevent unauthorized access, use, alteration, disclosure, loss, or processing.
The Customer may withdraw their consent to the processing of personal data and/or facial data in accordance with the applicable laws and regulations.
The request to withdraw consent may be submitted by contacting the Bank through the official Customer service channels provided by the Bank.
The withdrawal of consent shall not affect the lawfulness of any data processing that has been carried out based on the Customer’s consent before the withdrawal was made.
If there are other legal bases that allow or require the Bank to continue processing the data, including Know Your Customer (KYC) obligations, fraud prevention, regulatory obligations, or data retention requirements, the Bank may continue to store and process such data to the extent permitted or required under the applicable laws and regulations.
2.1 Security System
BPR Lestari uses 3 (three) layered security system to protect your access and transactions in LestariMobile, namely:
a. User ID and Password
b.SMS Token (a numeric code sent to the user through short message service)
c. Email Token (a numeric code sent to the user through email)
d. M-PIN (Mobile Personal Identification Number), which is the Customer’s personal identification number used to conduct transactions through LestariMobile
2.2 LestariMobile Access Protection
BPR Lestari requires you to enter your User ID and Password before you can access the transaction menu or account information in LestariMobile. To ensure your protection when accessing LestariMobile, please observe the following:
a. Keep your User ID and Password confidential and do not disclose them to anyone.
b. Do not disclose your M-PIN or any part of your M-PIN to anyone, even if the person claims to be an employee of BPR Lestari. BPR Lestari will never ask for your M-PIN.
c. Change your M-PIN periodically through the Change M-PIN menu in LestariMobile or whenever you are unsure about the confidentiality of your M-PIN. Do not use an M-PIN that is easy to guess, such as 111111, 222222, 123456, 654321, date of birth, vehicle plate number, address, and other similar information. Do not write down your M-PIN in a place where it can be read by others.
d. Use a LestariMobile User ID Password that is different from the User ID Password you use to access other applications.
e. Contact Tanya Lestari if your User ID is blocked. Follow the instructions provided on how to reactivate your LestariMobile facility.
BPR Lestari provides you with a facility to register your e-mail address with BPR Lestari. BPR Lestari will use your e-mail address to send information regarding financial transactions you have conducted through LestariMobile. To ensure the protection of information delivery to your e-mail address, please observe the following:
a. Provide BPR Lestari with your personal e-mail address. Do not use a fake e-mail address.
b. Immediately update your e-mail address in LestariMobile if you change your e-mail address.
c. If you contact BPR Lestari by e-mail, please include the information required for follow-up, such as your full name, relevant account number, registered mobile phone number, and a chronology of the issue. For your security, never send your User ID, Password, M-PIN, OTP, ATM PIN, or any other security code to anyone, including any party claiming to represent the Bank.
a. LestariMobile services will end or be terminated if one or more of the following conditions are met:
i. The Customer submits a request to terminate LestariMobile services to BPR Lestari Bali through the nearest BPR Lestari Bali branch office.
ii. The Customer closes all accounts connected to LestariMobile by submitting an account closure request to BPR Lestari Bali through the nearest BPR Lestari Bali branch office.
iii. The Customer uses or allows LestariMobile to be used by another party to conduct an unlawful act.
iv. The Bank is required to terminate access to the service due to obligations under the applicable laws and regulations.
v. The Bank, based on its own considerations and interests, terminates the provision of LestariMobile services by providing notice to the Customer through media determined by the Bank.
b. A terminated LestariMobile account will be deleted and can no longer be accessed within a maximum of 1x24 hours after the condition referred to in point a. is met.
c. To reactivate LestariMobile services that have been terminated by either the Bank or the Customer as referred to in point a. above, the Customer must follow the registration procedure for new Customers.
