East Africa Bank

1. Regulatory Commitment

We process personal data in compliance with applicable laws and under the supervision of the Central Bank of Djibouti.

2. Information We Collect

We collect data necessary to meet regulatory and operational requirements, including:

  • Identity and KYC information
  • Financial and transactional data
  • Contact information
  • Risk and compliance data
3. Purpose of Processing

Your data is used to:

  • Provide banking services
  • Perform credit analysis
  • Meet regulatory reporting obligations
  • Prevent fraud and financial crime
  • Ensure compliance with AML/CFT regulations
4. Legal and Regulatory Basis

We process data based on:

  • Legal obligations under Djibouti banking law
  • Regulatory requirements from the Central Bank
  • Contractual necessity
  • Legitimate business interests
5. Data Sharing (Regulatory Disclosure)

Your information may be shared with:

  • Central Bank of Djibouti
  • Financial intelligence authorities
  • Credit reporting systems
  • Auditors and regulators

Such sharing is mandatory under regulatory frameworks.

6. AML and Fraud Prevention

We may:

  • Monitor transactions
  • Flag suspicious activities
  • Report to authorities

This is required to combat financial crime and protect the financial system.

7. Data Security and Integrity

We maintain strong internal controls, compliance programs, and monitoring systems to protect data and ensure regulatory compliance

8. Data Retention

We retain customer data as required by:

  • Regulatory reporting rules
  • AML/CFT obligations
  • Audit and compliance requirements
9. Customer Rights

Subject to legal limitations, you may:

  • Request access to your data
  • Request correction
  • Request deletion (where permitted by law)

Note: Some data cannot be deleted due to regulatory obligations.

10. International Transfers

Where data is transferred outside Djibouti, we ensure compliance with applicable regulatory safeguards.

11. Updates

We may update this Privacy Policy to reflect regulatory changes or operational requirements.