Resources/8/BOB-logo.png
Privacy Policy

Privacy Policy

This privacy policy explains how Bank of Baghdad collects, uses, discloses, and protects your personal information when you use our website. By accessing and using our mobile application or website or our other services, you agree to the terms of this policy. If you do not agree with the terms, please do not use our services (including but not limited to our website, mobile application, internet banking, contact center and etc...)

Who Are We? Bank of Baghdad is one of Iraq’s premier financial institutions, offering a wide range of banking products and digital services to individuals, businesses, and institutions. As part of our commitment to transparency and privacy, we are dedicated to safeguarding the personal data of our website visitors in accordance with Iraqi laws and international standards.

Information security departmant is responsible for ensuring that personal data is processed in compliance with applicable data protection laws and regulations.

Contact Details: Email: info.security@bankofbaghdad.com

When you visit our website to explore services or obtain information, we use cookies and related technologies to enhance your experience. These cookies collect data such as IP address, browser type, device information, and session duration.

Information We Collect When you interact with us via our website, mobile application or contact center, we may collect:

  • Name
  • Phone number
  • Email address
  • National ID (if applicable)
  • Partial card number (first 6 and last 4 digits, if relevant)
  • Inquiry or feedback details

This data helps us respond to your inquiries, deliver services, and provide follow-up communication. Your data is stored securely and will not be shared unless required by law or regulatory obligations.

 Why Do We Collect Your Data?

We collect and process personal data for specific and lawful purposes including:

  • Managing customer relationships
  • Providing requested services
  • Improving our website, mobile app and other services
  • Marketing new services or updates
  • Ensuring compliance with Central Bank of Iraq regulations Anti-money laundry and anti-fraud frameworks.

What Kind of Personal Data Do We Collect?

We may collect:

  • Identification data: name, national ID, residence card or travel Visa.
  • Contact details: phone number, email address
  • Service data: customer number, feedback
  • Regulatory data: required under anti-money laundering (AML) or KYC laws
  • Technical data: Device Info, IMEI, Location, browser cookies, IP address, MAC address.

How We Use Your Information?

  We will use your data only when there is a lawful basis. This includes:

  • Fulfilling service requests
  • Responding to inquiries or complaints
  • Sending marketing communications (where you have consented)
  • Complying with legal obligations and regulatory requirements
  • Detecting and preventing fraud, cybercrime, or financial abuse

Sharing Your Data

  We may share your data with:

  • Our service providers are under strict confidentiality agreements
  • Regulatory authorities when required.
  • Third parties involved in investigations of fraud or misconduct.

 We do not sell or lease your data to any external parties.

Your Rights Under Iraqi Law You have the right to:

  • Request access to your personal data
  • Correct inaccurate or outdated data
  • Close the account
  • Request data portability (where feasible)
  • Suspend  or restrict certain processing activities
  • Request to delete your data after 7 years from the last financial transaction (subject to Iraqi banking law for the year 2004 )

 To exercise these rights, please contact  Information security department .

Right to Complain If you are concerned about how we handle your data, you are encouraged to contact us directly. You also have the right to submit a complaint to the Iraqi Communications and Media Commission (CMC) or the relevant legal authority.

Updates to This Policy We review this policy regularly and may update it to reflect changes in legal or regulatory requirements, or our data practices. Updated versions will be posted on our website/mobile application.