1.1 —Ahli Bank S.A.O.G. ("the Bank"/"we"/"our Bank") is committed to maintaining the privacy of visitors/customers ("Visitor"/"Customer"/"you"/"your") and protecting it through our compliance with this Privacy Policy ("the Policy"). We value your privacy and strive to protect your personal information and data ("the Data") in accordance with the laws and regulations applicable in the Sultanate of Oman.

1.2 — This Policy explains the types of data we collect from you or that you may provide to us, subject to obtaining the guardian’s consent when applicable, when:

1.2.1 — This Policy pertains to the savings account(s) created for a minor under the supervision and control of his/her legal guardian or custodian, and when you visit, access, or use our website www.ahlibank.om ("the Site") and/or our app (hereinafter, "the App") that runs on computers, laptops, smartphones, tablets, or any other devices providing a dedicated browser and non-browser-based interaction between you and our Site/App.

1.2.2 — You communicate with us electronically or by other means.

1.2.3 — You click on advertisements or online content when visiting our Site/App.

1.2.4 — You interact with us via social media.

1.3 — Our practices regarding the collection, use, retention, protection, and disclosure of the information you provide serve as evidence of our commitment to safeguarding the privacy of your personal information and data.

1.4 — By using our Site/App and by accepting this Policy, you consent to the use of cookies in accordance with the terms of this Policy.

1.5 — Since we may update or modify this Policy from time to time, we recommend that you periodically check the currently available version. Should we make any changes to this Policy, we will update the "Last Modified" date at the top of this page.

1.6 — This Policy is intended for use only by minors aged between 13 and 18 under the supervision and control of their legal guardian or custodian (hereinafter "Guardian"). No person under the age of 18 may provide personal information on our Site/App without legal consent from a parent or legal guardian. We do not intentionally collect personal information from individuals under the age of 18 if such information is provided without the parental or guardian consent. If you are under 18, please obtain legal consent from your guardian before using the App or providing any details about yourself, including without limitation your name, screen name, address, phone number, email address, or any details regarding any other social media or communication platforms you might use.

2.1 —We may collect, record, retain, disclose, store, and use the following types of data about you:

2.1.1 —Information regarding your visits to and use of our Site/App, including your IP address, your mobile operator’s name, browser type, language and time zone, geographic location, duration of your visit, and page views.

2.1.2 —Information you provide relating to your networks and contacts (e.g., address book information) and/or customer-related data.

2.1.3 —Information you provide when registering on our Site/App, including your name, email address, phone number, and/or social media details.

2.1.4 —Information you provide when completing your profile on our Site/App, including your name, profile pictures (whether uploaded from your camera roll, photos, or from social media accounts), address, and contact details such as gender, date of birth, nationality, and/or employment and/or educational details.

2.1.5 —Information you provide related directly or indirectly to you and/or to your transactions with us, including your account details, the type of product(s) and/or service(s) you have subscribed to with us, and any other necessary information related to your transaction with us.

2.1.6 —Information you provide that will determine your financial standing, creditworthiness, or suitability for any product(s) and/or service(s) for which you have applied (if applicable).

2.1.7 — Information you supply regarding your risk profile, investments, and insurance/takaful, as well as your knowledge, experience, and/or commercial interests.

2.1.8 — Information supplied to us while using the services on our Site/App or that is generated in connection with such services, including the timing, frequency, and/or patterns of your usage.

2.1.9 — Information that you share publicly on our Site/App for online publication, including your name, username, profile pictures, and the content of your opinions and/or posts.

2.1.10 — Information you provide regarding your use of our third-party partners, such as your opinions about our partners.

2.1.11 — Information provided by you in relation to your communications with us, for example in application forms, customer surveys, competitions, and promotional offers.

2.1.12 — Information contained in or relating to any communication (verbal or written) that you send to us via our Site/App and/or through our authorized agents, social media, email, SMS, non-electronic communications, or any other appropriate communication channels.

2.1.13 — Information related to your use and management of your account(s), including payments and transactions conducted to and from your account(s).

2.1.14 — Any other information from external sources that you have consented to disclose, or that is not otherwise restricted.

2.2 — Without prejudice to obtaining the guardian’s consent before disclosing any personal information to any other party, you must obtain the guardian’s approval for both the disclosure and processing of such personal information in accordance with this Policy. Providing us with the above data is optional for you. If the guardian decides not to disclose or provide us with such information, we may generally be unable to address your inquiries and/or provide you with our products and services. In general, we do not collect or process sensitive personal data about you. However, if you provide us with material containing sensitive personal data—for example, via our Site/App and/or through our authorized agents, social media, email, SMS, non-electronic communications, or any other appropriate channels—relating to your genetic data, racial or ethnic origin, health, beliefs, political or religious opinions, or criminal convictions, we will endeavor not to process such information but rather delete it, in order to comply with the provisions set out in the laws and regulations in the Sultanate of Oman.

3.1 — The Bank will use the Data in accordance with the terms set out in this Policy, the Royal Decree 6/2022 on the issuance of the Personal Data Protection Law, the relevant Circulars from the Central Bank, and other applicable legislation in Oman, as well as the Legal Terms of Use for the Bank’s online banking service ("Terms of Use").

3.2 —The Data provided to us via this Site/App will be used solely for the purposes specified in this Policy, subject to obtaining the guardian’s consent where required.

3.3 — We may use your data for the following purposes:

3.3.1 — To manage and personalize our Site/App for you, enabling you to use the services on our Site/App.

3.3.2 — To provide, enhance, and develop our services to improve your experience.

3.3.3 — To communicate with you regarding our services and to respond to your inquiries.

3.3.4 — To gauge our audience size and usage patterns for better management of our network infrastructure requirements.

3.3.5 — To store information about your preferences, allowing us to tailor our Site/App according to your individual interests.

3.3.6 — To gain insights into your use of our Site/App.

3.3.7 — To evaluate your application(s) for our product(s) and/or service(s).

3.3.8 — To conduct credit audits and verify your financial position to analyze your credit behavior and repayment capability.

3.3.9 — To maintain and/or manage your savings account(s) with us.

3.3.10 — To assign or transfer our rights, interests, and obligations under any of your agreements with us.

3.3.11 — To enforce and/or defend any of our rights, including but not limited to our rights to recover any outstanding debts.

3.3.12 — To conduct investigations aimed at detecting fraud, and to carry out anti-money laundering audits in accordance with applicable laws and regulations relating to anti-money laundering and counter-terrorism financing.

3.3.13 — To comply with any sanctions or law enforcement requirements.

3.3.14 — To maintain the security of our Site/App and prevent fraud.

3.3.15 — To send you non-promotional commercial communications.

3.3.16 — To send you email notifications that you have specifically requested.

3.3.17 — To send you marketing messages related to our Site/App or from carefully selected third parties that we believe may interest you, subject to your agreement and consent.

3.3.18 — To provide third parties with statistical information about our users without enabling them to identify any individual user.

3.3.19 — And for any other purpose permitted by any applicable law, regulation, guideline, or regulatory authority.

3.4 — Please note that we will obtain the guardian’s consent before using your personal information for any purpose other than those specified in this Policy and in the terms contained in your agreement(s) with us.

4.1 — We may disclose your data to any of our employees, officers, insurers, legal advisors, financial advisors, auditors, technical advisors, agents, suppliers, members of our group companies, or subcontractors (including correspondent banks and other financial institutions) to the extent reasonably necessary for the purposes specified in this Policy, provided that we have obtained your and/or your guardian’s prior explicit consent in order to ensure compliance with Banking Law No. 2/2025 and Article 10 of the Personal Data Protection Law 6/2022, as amended from time to time.

4.2 — We may, without the need to obtain the guardian’s consent when required, disclose your data to government and/or judicial authorities and to banking regulators to whom we are obliged to disclose under any applicable law.

4.3 — We may also disclose your data:

4.3.1 — To the extent required or permitted by law.

4.3.2 — In connection with any ongoing or potential legal proceedings.

4.3.3 — For the purpose of establishing, exercising, or defending our legal rights, including providing data to others for the prevention of fraud and the mitigation of credit risks.

4.3.4 — To any purchaser or prospective purchaser of the Site/App or any part thereof in the event of an acquisition, merger, demerger, restructuring, reorganization, dissolution, sale, or transfer of all our assets, whether for the purpose of continuing operations or as part of bankruptcy, liquidation, or similar proceedings, where the personal information we hold about our users is among the assets transferred.

4.3.5 — To any person whom we reasonably believe may apply to a court or other competent authority for disclosure of that data, where it is reasonably likely, in our opinion, that such court or authority would order the disclosure.

4.4 — Notwithstanding the foregoing, we agree that – subject to strict confidentiality and security standards – we will protect any of your relevant data in accordance with the terms of this Policy and our Terms of Use. We place great importance on safeguarding your data and regularly review and implement updated technical and organizational security measures when processing your data. Our employees are trained to handle your data securely and with the utmost respect, failing which they may be subject to disciplinary measures.

5.1 — Our Site/App includes hyperlinks and details regarding third-party websites.

5.2 — We have no control over the privacy policies or practices of third parties and assume no responsibility for them.

6.1 — Our Site/App uses cookies.

6.2 — A cookie is a file that contains an identifier (a string of characters and numbers) which is sent by a web server to your web browser and stored by the browser. The identifier is then sent back to the server each time your browser requests a page from the server.

6.3 — We use the following types of cookies:

6.3.1 — Essential cookies that are necessary for us to operate and enable our Site/App.

6.3.2 — Performance cookies that collect anonymous information about visitors to our Site/App so that we can improve its performance. For example, we use cookies to help us understand how customers access and navigate our websites, highlighting areas for improvement such as navigation, online banking experience, and marketing. The data stored by these cookies does not include personal details that could identify an individual.

6.3.3 — Functional cookies to retain your choices (e.g., screen name, email identifier, phone number, and other preferences) to assist you in not having to re-enter your information while navigating our Site/App.

6.3.4 — Targeted or advertising cookies that help us gather information about your browsing habits, allowing us to deliver advertising relevant to you and your interests. These cookies help us retain information about websites you have visited or hyperlink clicks you have made. This information may be shared with third parties such as advertisers on an anonymous basis. Personal identifying information such as your name or address is not shared with such third parties. For example, we use third-party companies to provide you with more personalized advertisements when you visit certain third-party websites.

6.4 — Most browsers on your tablet or smartphone allow you to refuse cookies, which you may do.

7.1 — We may use log files to capture your activity on our Site/App. The data captured in these log files may include the type of content you view or share, the frequency of your activity, and the duration of your activities.

8.1 — Subject to obtaining the guardian’s consent, you have the right to know the data we process about you, including its source, the purpose of its use, and the recipients of your data. However, access to this data may be restricted in accordance with the laws and regulations in Oman. For example, you may be unable to obtain information on whether we have recorded any data if it is related to investigations we are required to conduct under applicable laws and regulations in Oman.

8.2 — If the information we have recorded about you is inaccurate, incomplete, irrelevant, misleading, or outdated, you may submit a request to us to correct, update, or delete the data by notifying us via the email address provided at the end of this Policy. We will assist you in accessing and correcting your data.

8.3 — You may withdraw your consent to the disclosure of your data at any time by submitting a written request regarding such withdrawal at one of our bank branches.

9.1 — We update our Policy from time to time. If we make any material changes to the Policy, we will post the updated Policy on this page or notify you by updating the App or your app store, as applicable, through the guardian.

9.2 — The effective date of this Policy is the "Last Modified" date indicated at the top of the page. You are responsible for periodically reviewing this Policy for any changes.

If you wish to receive marketing, advertising, or promotional information from us, please contact us at info@ahlibank.om with the guardian’s approval. However, if you do not wish to receive direct marketing communications from us, our individual entities, and/or our strategic partners or merchants at any time, please notify us at the email address provided at the end of this Policy. Your latest written instructions to us shall prevail.

For any questions or comments or if you require further information about how we handle your data or regarding this Policy and our privacy practices, please contact us at info@ahlibank.om.