BTN Privacy Policy
Last updated and effective as of: August 3, 2026
-
Introduction
The protection and privacy of your Personal Data are of utmost importance to PT Bank Tabungan Negara (Persero) Tbk ("BTN").
BTN is committed to safeguarding the processing of your Personal Data in connection with your application for, access to, and use of BTN's banking products, services, and facilities. This commitment applies to products and services offered through BTN's electronic systems, including BTN applications and digital platforms, as well as non-electronic channels, including but not limited to Branch Offices and Sub-Branch Offices. This Privacy Policy shall apply unless a separate privacy policy is specifically provided for a particular BTN product, service, or banking facility.
BTN endeavours to implement industry best practices and robust governance measures to ensure the privacy, security, and protection of Personal Data in accordance with applicable Personal Data Protection laws and regulations in Indonesia.
This Privacy Policy describes how BTN collects, uses, stores, discloses, and otherwise processes your Personal Data. This Privacy Policy applies to all Personal Data owners ("Personal Data Subjects") who utilize products, services, and/or banking facilities offered by BTN ("you" or "your").
-
Purposes of Personal Data Processing
BTN processes Personal Data for the following purposes:
- To register, identify, and verify your identity in accordance with Know Your Customer ("KYC") requirements and customer due diligence obligations in connection with your application as a customer, client, and/or user of BTN services.
- To establish, administer, and manage your account(s) and to provide banking products and services.
- To perform credit assessments, background checks, due diligence reviews, and other verifications as required under applicable laws, regulations, or BTN's internal policies.
- To prevent, detect, investigate, and mitigate fraud, financial crimes, and other unlawful activities that may adversely affect BTN, you, or third parties.
- To respond to inquiries, feedback, complaints, requests, suggestions, and communications relating to BTN's products and services.
- To evaluate, maintain, enhance, and continuously improve BTN's products, services, systems, and operational capabilities.
- To personalize products, services, facilities, and customer benefits, including loyalty and rewards programs.
- To comply with legal, regulatory, supervisory, and other mandatory obligations applicable to BTN.
- For administrative, internal governance, and operational purposes, including audits, data analytics, product testing and development, regulatory reporting to Bank Indonesia ("BI"), the Financial Services Authority ("OJK"), and archival management.
- To obtain professional advice, including legal, compliance, financial, and other professional services.
- To conduct marketing activities relating to BTN's products and services, including the distribution of promotional materials, information regarding new products, surveys, newsletters, and service updates through telephone calls, email, SMS, WhatsApp, and other communication channels.
- To assess your banking needs and preferences and, with your consent where required, provide offers, promotions, and facilitate requests and/or transactions relating to products and services offered by third-party partners of BTN.
- To perform data matching, reconciliation, validation, and periodic updates of Personal Data to ensure data quality, accuracy, and integrity, including through reference data obtained from government agencies, identity verification service providers, credit information bureaus, and other third parties that maintain a lawful basis and valid cooperation arrangements with BTN.
- To pursue other legitimate purposes in accordance with BTN's internal policies and applicable laws and regulations.
-
Categories of Personal Data Processed by BTN
BTN may collect and obtain Personal Data directly or indirectly through electronic and non-electronic means.
Personal Data may be provided directly by you or obtained from third parties, including where such information is required for customer identification, KYC compliance, fraud prevention, or other lawful purposes. BTN collects and processes Personal Data in accordance with applicable Indonesian laws and regulations.
- Personal Data Collected Directly
- General Personal Data
- Information contained in identity documents, including identity card number, full name, gender, religion, residential address, place and date of birth, and nationality.
- Employment and professional information, including occupation, employment history, position, employer or business name, office/business contact information, length of employment or business operation, income, salary, and benefits received.
- Contact details, including email address, home telephone number, and mobile phone number.
- Residential address.
- Mother's maiden name.
- Signature specimen.
- Educational background.
- Internet Protocol (IP) address and corporate email address.
- Employee and corporate information, including beneficial ownership information.
- Combinations of Personal Data capable of identifying an individual,
- Combinations of mobile phone numbers, geolocation data, and IP addresses.
- Specific Personal Data
- Biometric information capable of uniquely identifying an individual, including but not limited to facial images, fingerprints, and voice recordings.
- Financial information, including income, expenses, account activity, and transaction history.
- Taxation and insurance information, including Taxpayer Identification Number (NPWP) and tax-related information.
- Information relating to customer risk profiles, investments, investment objectives, knowledge and experience, business interests, and assets.
- Other categories of Personal Data as required or permitted by applicable laws and regulations.
- Personal Data Generated Through the Use of BTN Services
- Technical and analytical data, such as location assessments and advanced profiling information.
- Information generated from your interactions with banking services, including transaction activities, bill payments, customer profiling, and segmentation data.
- Personal Data Obtained from Subsidiaries, Affiliates, and Third Parties
BTN may also process specific Personal Data, including:
BTN may generate and process information derived from your use of BTN products and services, including:
BTN may obtain Personal Data from its subsidiaries, affiliated companies, strategic partners, and other third parties engaged in lawful cooperation arrangements with BTN.
Such Personal Data may be collected to facilitate processing activities involving those third parties and/or to fulfill the objectives of cooperative arrangements between BTN and such parties.
BTN ensures that any Personal Data obtained from third parties has been collected with your consent where required and/or on another valid legal basis under applicable law.
-
Processing of Personal Data of Children and Persons with Disabilities
In certain circumstances, BTN may process the Personal Data of individuals under the age of 18 years, provided that valid consent has been obtained from the relevant parent or legal guardian.
BTN may also process the Personal Data of persons with disabilities, where consent is provided by the individual concerned and/or their legal guardian in accordance with applicable laws and regulations.
-
Rights of Personal Data Subjects
- As a Personal Data Subject, you are entitled to exercise the following rights, subject to applicable laws and regulations:
- To access and obtain a copy of your Personal Data.
- To complete, correct, and update inaccurate or incomplete Personal Data.
- To receive information regarding:
- The identity of the data controller;
- The legal basis for processing;
- The purposes of collection and processing; and
- The accountability of parties requesting access to Personal Data.
- To request the termination of processing, deletion, and/or destruction of Personal Data, where such action does not conflict with legal or regulatory obligations.
- To request the postponement, restriction, or objection to the processing of Personal Data, and under certain circumstances, to receive certain Personal Data that you have provided in an electronic format.
- To object to decisions based solely on automated processing, including profiling, that result in legal consequences or significantly impact you.
- To seek remedies and compensation for violations relating to the processing of your Personal Data in accordance with applicable law.
- Exceptions to Data Subject Rights BTN may decline to fulfil certain requests where legally permitted or required under applicable laws and regulations.
- Right to Withdraw Consent Where processing is based on consent, you may withdraw or modify your consent for optional processing activities, including direct marketing communications through telephone, email, and WhatsApp.
- Right to Correct Personal Data Requests to update or correct Personal Data may be submitted through the nearest BTN Branch Office. At present, such requests cannot be processed through BTN Call services.
Requests to opt out of such marketing activities may be submitted through BTN Call or by visiting the nearest BTN Branch Office. -
Retention of Personal Data
BTN is committed to maintaining appropriate safeguards for the retention and storage of your Personal Data.
Certain Personal Data may be retained by third-party service providers engaged by BTN where necessary to support the provision of banking products and services, subject to applicable legal and regulatory requirements.
BTN retains Personal Data only for as long as necessary to fulfill the purposes for which it was collected and processed, and in accordance with applicable legal and regulatory retention requirements.
Where Personal Data is no longer required for business, operational, regulatory, or legal purposes, BTN will take reasonable measures permitted by applicable law to securely delete, destroy, anonymize, or otherwise cease retaining such Personal Data.
-
Disclosure and Processing of Personal Data
BTN does not sell, trade, publicly display, publish, transfer, disseminate, or otherwise disclose Personal Data relating to customers and users except as permitted or required by applicable law.
You are responsible for maintaining the confidentiality of your Personal Data and for safeguarding any devices used to access BTN's products and services.
You expressly acknowledge and agree that BTN may disclose Personal Data and related information to competent government authorities and other authorized parties where required under applicable laws, regulations, contractual arrangements, or lawful requests.
Personal Data may be disclosed for purposes including:
- Compliance with applicable legal obligations and legal proceedings.
- Protection of BTN, its employees, service providers, customers, and other parties in connection with:
- National security;
- Law enforcement activities;
- Government administration;
- Supervision of the financial services sector, payment systems, and financial system stability;
- Statistical and scientific research activities conducted for public purposes; and
- Government-declared emergency situations.
- Internal and external investigations, audits, and digital forensic examinations relating to violations of laws, regulations, or policies.
- Legal proceedings involving BTN, its officers, employees, affiliates, or business partners.
- Establishing, exercising, defending, or enforcing BTN's legal rights.
- Processing by affiliated entities and third parties operating under valid cooperation and confidentiality agreements and in compliance with applicable laws and regulations.
Any disclosure shall be carried out with appropriate safeguards to minimize the risk of unauthorized access, misuse, or disclosure.
-
Consent
BTN may amend, revise, and/or update this Privacy Policy from time to time. Accordingly, BTN encourages you to review this Privacy Policy periodically to remain informed of any updates or modifications.
You may withdraw your consent to the collection, use, and/or disclosure of your Personal Data at any time by submitting a written request, including the reasons for such withdrawal, through the nearest BTN Branch Office.
Depending on the circumstances and the nature of the processing activities affected by the withdrawal of consent, BTN may, subject to applicable laws and regulations, be unable to accommodate such request in whole or in part.
You acknowledge and understand that the withdrawal of your consent may result in the limitation, suspension, or termination of certain products, services, facilities, and/or contractual relationships with BTN. Any rights and obligations that have arisen prior to the effective date of such withdrawal shall remain valid and enforceable.
-
Personal Data Security
The security and confidentiality of your Personal Data are of paramount importance to BTN.
BTN is committed to implementing appropriate administrative, technical, and organizational measures to protect your Personal Data against unauthorized access, collection, processing, analysis, storage, disclosure, alteration, destruction, or deletion.
You are responsible for maintaining the confidentiality and security of your Personal Data, including but not limited to:
- Username;
- Password;
- Email account credentials;
- Personal Identification Number (PIN);
- Card Verification Value/Card Verification Code (CVV/CVC);
- One-Time Password (OTP) codes; and
- Any other confidential information related to your use of BTN products and services.
You must not disclose or share such information with any person under any circumstances. You are also responsible for maintaining the security and integrity of any device used to access BTN's products and services.
-
Cross-Border Transfer of Personal Data
In certain circumstances, BTN may process, store, and/or transfer your Personal Data outside the territory of the Republic of Indonesia.
Where such cross-border transfers occur, BTN shall ensure that the processing, storage, and transfer of Personal Data are carried out in accordance with applicable laws and regulations, including by ensuring the existence of a lawful basis for the transfer and the implementation of appropriate safeguards to maintain the security, confidentiality, and integrity of your Personal Data.
-
Language
This Privacy Policy is prepared and published in both Indonesian and English.
In the event of any inconsistency, discrepancy, or conflict between the Indonesian version and the English version of this Privacy Policy, the Indonesian version shall prevail and govern.
You may access available language versions of this Privacy Policy through the language settings provided on the BTN website.
-
Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Indonesia.
You agree that any action, claim, dispute, or proceeding arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the Republic of Indonesia.
-
Contact Us
If you have any questions, comments, requests, or feedback regarding this Privacy Policy or BTN's processing of Personal Data, you may visit the nearest BTN Branch Office or contact BTN through the following channels:
- BTN Call: 150286 / 1500286
- Email: btncontactcenter@btn.co.id