Privacy Policy

Effective Date: January 1, 2026 | Last Updated: October 2026

1. Introduction and Commitment to Privacy

Darasalaam Bank (hereinafter referred to as "DSB", "the Bank", "we", "our", or "us") respects your privacy and is firmly committed to protecting your personal and financial data. This Privacy Policy outlines our procedures and policies concerning the collection, utilization, storage, and safeguarding of information acquired through our official website, Safaari Online Banking portal, and the DSB Mobile Banking Application.

By accessing or utilizing our digital banking services, mobile applications, or visiting our branches, you consent to the data practices described in this policy.

2. Information We Collect

To provide high-quality banking services and satisfy regulatory anti-money laundering (AML) and know-your-customer (KYC) requirements, we collect the following categories of data:

a. Identification and Profile Data

• Full legal name, national identification number, passport number, or registration details.
• Contact details including verified mobile telephone numbers, physical residential address, and email addresses.
• Photographic proof of identity and specimen signatures gathered during onboarding or account opening.

b. Financial and Transactional Information

• Account numbers, IBAN/SWIFT identifiers, balances, statement history, and transaction amounts.
• Beneficiary details, remittances, payment references, utility bill payments, and merchant settlement logs.
• Debit and credit card numbers (masked in compliance with PCI-DSS standards), card activity, and expiration periods.

c. Device and Technical Information

• Device model, operating system version, unique device identifiers (IMEI/UUID), and IP address.
• Mobile application performance telemetry, error logs, and session durations to defend against fraud and improve app stability.
• Biometric login metadata (e.g., Face ID or Fingerprint recognition). Note: Biometric verification is processed locally on your hardware secure enclave; DSB servers never capture or store raw biometric templates.

3. How We Use Your Information

The information we collect is strictly utilized for legitimate banking and operational purposes, including:

• Processing Banking Transactions: Authenticating transfers, scheduling standing orders, executing bill payments, and clearing domestic/international remittances.
• Security & Fraud Prevention: Continuously monitoring accounts for suspicious behavioral anomalies, unauthorized logins, and cyber-attacks.
• Regulatory & Legal Compliance: Adhering to Central Bank of Somaliland regulations, financial reporting standards, and counter-terrorist financing (CFT) laws.
• Customer Support & Service Alerts: Sending critical transaction notifications, one-time passwords (OTP), fraud alerts, and responding to inquiries submitted to our Contact Center.

4. Information Sharing and Non-Disclosure

Darasalaam Bank enforces rigorous restrictions against the unauthorized disclosure of customer records. We will only share data under the following defined circumstances:

• Central Regulatory Authorities: Sharing with the Central Bank of Somaliland or accredited judicial law enforcement agencies when mandated by binding statutory legal warrants.
• Interbank & Payment Networks: Transmitting necessary payment instruction payloads to national and international payment switches (e.g., SWIFT, Visa, Mastercard, and licensed domestic clearinghouses) to execute user-initiated transfers.
• Auditors & Professional Advisors: Certified external auditors, legal counsel, and regulatory inspectors operating under strict professional non-disclosure agreements.

5. Data Security and Infrastructure

We deploy robust, multi-layered technological and organizational defenses to safeguard your confidential data against accidental destruction, alteration, or unlawful compromise:

• Advanced Encryption: All data in transit between your mobile device, browser, and our central banking cores is encrypted with high-grade TLS 1.3 / 256-bit AES encryption.
• Firewalls & Threat Scanning: 24/7 automated monitoring, perimeter firewalls, and scheduled vulnerability assessments defend our networks against unauthorized penetration.
• Session Timeout Controls: Digital banking sessions expire automatically after periods of inactivity to protect unauthorized access on unattended devices.

6. Employee Confidentiality & Access Limits

Access to customer account files is strictly role-based and governed by standard operating procedures (SOPs). Employees may access customer data solely to perform specific, logged operational tasks. All staff are bound by signed confidentiality covenants and undergo recurring data governance and ethics training.

7. Data Retention and Account Deletion

We retain customer information for the lifespan of your active banking relationship and for the statutory duration required by central banking authorities and AML record-keeping regulations.

If you wish to terminate your digital banking profile, close your mobile application credentials, or delete your mobile app records, please review our detailed step-by-step instructions on our dedicated Account Deletion Page.

8. Your Rights and Choices

As a valued customer of Darasalaam Bank, you possess the right to:

• Request an accurate summary of your account balance, transaction history, and personal profile information on file.
• Promptly correct or update any outdated contact details or identification records.
• Opt-out of promotional marketing messages (essential operational transaction alerts and OTPs cannot be disabled for security reasons).
• Lodge a grievance or security inquiry with our compliance department if you suspect any compromise of your account integrity.

9. Updates to This Policy

We may periodically update this Privacy Policy to reflect advancements in our technology, digital service offerings, or relevant regulatory frameworks. Any revisions will be published immediately on this page with an updated revision date. Continued usage of our services after updates constitutes acceptance of the modified terms.

10. Contact Us & Customer Care

If you have any questions, concerns, or requests regarding this Privacy Policy or your data protection rights, please reach out through our official channels: