Personal data is any information relating to an identified or identifiable natural person, not including the information of deceased persons. Personal data is divided into 2 types as follows:

1. General Personal data such as name-surname, address, telephone number, email, date of birth, nationality, account number, credit card number, debit card number, house registration, car registration, IP address, cookie ID, etc.
2. Sensitive Personal Data such as biometric data (e.g. facial scans, fingerprints), criminal records, health data, sexual behavior, political opinions, etc.

• Data Subject is an identified or identifiable living individual to whom personal data relates.
• Data Controller is a natural person or a juristic person who determines the purposes and means of processing personal data.
• Data Processor is a natural person or a juristic person who acts under the instructions of the data controller by processing personal data on behalf of the data controller.

No. Under the Personal Data Protection Act, KBank can process your personal data based on other lawful basis including performance of contract, legal obligation, and legitimate interests. KBank applies the lawful basis that best fits the specific purpose and the context of the processing.

KBank collects, uses, and discloses your personal data for various objectives as specified in Personal Data Protection Policy For Customer

Examples of data processing objectives

• to deliver products and services to you.
• to examine, confirm and adjust your transactions.
• to investigate and solve your complaints or problems.
• to offer products and services that are personalized to you.
• to support research, development and improvement of products and services
• to perform legal obligations.
• to check the quality of services.
• to manage risks or prevent fraud.

KBank relies on your consent for following data processing activities:

1. processing data for product or service development.
2. processing data for product or service offering.
3. processing data for product or service offering from KASIKORNBANK Financial Conglomerate and business partners.

You can freely give consent without harm or negative consequences on product or service application and consent can be withdrawn at any time.

KBank may share your personal data under appropriate lawful basis as well as robust security measures to third parties such as

1. Service providers e.g. banking agents, property valuation service providers, ATM/Credit card producers, debt collector agencies, lawyers which are engaged to conduct business operations on behalf of KBank or to support the provision of KBank’s products and/or services to you.
2. Governmental authorities and/or regulators e.g. the Bank of Thailand, the Securities and Exchange Commission, the Anti-Money Laundering Office, the Revenue Department, the Land Office.
3. Companies in KASIKORNBANK Financial Conglomerate and business partners
4. Other banks and financial institutions

You could withdraw or change the consent that you have previously given to KBank via K PLUS application and K-Contact Center Tel. 02-8888888

You can follow the following procedure for withdrawing or changing your consent.

Step 1

Launch K PLUS application and select “More"

Step 2

Select “Settings”

Step 3

Select “Application”

Step 4

Select “Personal Data Management”

Step 5

Select consent that you want to withdraw or change.

Step 6/1

In case you select “Product Development Consent” Select “Accept” or “Decline”, and press “Confirm”

Step 6/2

In case you select “Product Offering Consent” Select “Accept” or “Decline”, and press “Confirm”

Step 6/3

In case you select “Product Offering from KBank Financial Conglomerate
and Partners Consent”
Select “Accept” or “Decline”, and press “Confirm”

1. Right to withdraw consent: You are entitled to withdraw the consent previously given to KBank at any time.
2. Right to access: You are entitled to have access to your personal data under KBank’s responsibility and to request KBank to provide you the duplication of your personal data and inform you of how your personal data has been obtained.
3. Right to data portability: You are entitled to request KBank to send or transfer your personal data to other data controllers in a format which is readable or usable by way of automatic tools or equipment and obtain your personal data in the same format, except where it is not possible to do so for a technical reason.
4. Right to object: You are entitled to lodge an objection to the collection, use or disclosure of your personal data as specified by laws, for example the collection, use or disclosure of your personal data undertaken under legitimate interest of KBank or any person or any juristic person or for the purpose of direct marketing.
5. Right to deletion or destruction: You are entitled to request KBank to delete or destroy your personal data or make it anonymous if you believe that your personal data has been collected, used and / or disclosed illegitimately, which is not in compliance with applicable laws or if you deem that it is no longer necessary for KBank to keep your personal data.
6. Right to suspension: You are entitled to request KBank to suspend the use of your personal data if KBank is conducting an investigation per your request to exercise your right to rectification or right to object, or for any other case wherein it is no longer necessary for KBank to keep your personal data and KBank must delete or destroy your personal data in accordance with applicable laws, but you have sought to request KBank to suspend the use of your personal data instead.
7. Right to rectification: You are entitled to rectify your personal data to keep it accurate, updated, complete and not misleading.
8. Right to lodge complaint: You are entitled to lodge a complaint to relevant competent authorities or Office of the Personal Data Protection Commission (PDPC) at Tel. 02 142 1033 if you believe that the collection, use and disclosure of your personal data violates or does not comply with applicable laws.



The exercise of data subject rights must be in accordance with law and must not violate the rights or freedoms of other persons.

You can exercise data subject rights via K PLUS Application or submit a formal request via KBank branches or K-Contact Center 02-8888888

Rights	Channels to exercise the rights			Operation period (from the date you submit complete application and supporting documents)
	K PLUS	K - Contact Center	Branches
Right to withdraw consent (opt - out)			-	7 business days
Right to access	-	-		30 days
Right to data portability	-	-
Right to object	-		-
Right to deletion or destruction	-		-
Right to suspension	-		-
Right to rectification	-	-		Immediately

Click and scroll to view information.

KBank has put in place appropriate measures to prevent the infringement of your personal data such as

• Access control to personal data, both in document and electronic formats.
• Secured storage and processing of personal data through systems or devices with robust security measures.
• Prevention and detection of inappropriate transmission of personal data.
• Surveillance and management of unusual events arising from cyber-attacks.

KBank retains your personal data while you still have the relationship with KBank and for a period of time that is appropriate for the type of personal data and the purpose KBank hold its or for a period required or permitted by applicable laws.