Privacy Policy – Positive Pay System

Effective Date: 28/09/2026 | Last Updated: 28/09/2026

At Kalaburagi and Yadgir DCC Bank, we respect the privacy of our customers and are committed to protecting the personal and financial information entrusted to us.

This Privacy Policy (“Policy”) explains how information is collected, used, processed, stored, and protected when you use the Positive Pay System (“PPS”) provided by the Bank through its banking application and technology infrastructure.

The Positive Pay System is enabled through technology and application services provided by C-Edge Technologies Limited (“C-Edge”), as engaged by the Bank for providing banking technology and related services.

This Policy should be read together with the Bank's existing Privacy Policy, Terms and Conditions, and other applicable policies governing your banking relationship with the Bank.

1. Scope

This Policy applies to information submitted, generated, or processed when you use the Bank's Positive Pay System through the Bank's authorised digital banking channels.

The Positive Pay System enables customers to provide cheque details to the Bank in advance so that such details can be validated against cheques presented for payment, in accordance with the Bank's applicable processes and regulatory requirements.

2. Information We Collect

When you use the Positive Pay System, the Bank may collect and process information including:

2.1 Customer Information

Customer name
Customer ID or customer reference number
Account number
Registered mobile number and email address, where applicable
User ID and authentication information
Information required to identify and authenticate the customer

2.2 Cheque Information

To enable Positive Pay processing, the Bank may collect information such as:

Cheque number
Cheque date
Cheque amount
Payee name
Account number from which the cheque is issued
Cheque-related transaction/reference number
Date and time of submission
Confirmation or acknowledgement details
Status of the cheque/transaction
Other information required for cheque validation and processing

2.3 Technical and Security Information

When you access the Positive Pay System through digital banking channels, certain technical information may be recorded for security, audit, and operational purposes, including:

IP address
Device and browser information
Operating system information
Date and time of access
Login and authentication records
Session information
System and transaction logs
Security, fraud-monitoring, and audit information

The information collected will be limited to what is reasonably necessary for providing, securing, operating, and improving the Positive Pay System and for complying with applicable legal and regulatory requirements.

3. Purpose of Collection and Processing

The Bank may collect and process information for the following purposes:

To provide the Positive Pay System to customers
To register and validate cheque details submitted by customers
To facilitate matching and verification of cheque details when a cheque is presented for payment
To process cheque-related instructions and transactions
To authenticate customers and protect accounts from unauthorised access
To send transaction confirmations, alerts, notifications, and service-related communications
To maintain transaction records and audit trails
To detect, prevent, investigate, and mitigate fraud and unauthorised transactions
To monitor and maintain the security and performance of the Positive Pay System
To provide customer support and resolve service-related issues
To comply with applicable laws, regulations, regulatory directions, and legal obligations
To comply with requirements relating to banking, payments, cybersecurity, fraud prevention, record keeping, and audit
To establish, exercise, or defend the Bank's legal rights and interests

4. Processing Through C-Edge Technologies Limited

The Bank uses technology and application services provided by C-Edge Technologies Limited to support its banking operations, including the Positive Pay System.

For the purpose of providing the Service, relevant information may be processed through systems, applications, infrastructure, or services operated or supported by C-Edge on behalf of the Bank.

C-Edge's role is limited to providing technology and related services as authorised and instructed by the Bank and subject to applicable contractual, confidentiality, security, and regulatory requirements.

The Bank remains responsible for determining the purposes for which customer information is processed in connection with the Positive Pay System.

Where applicable, C-Edge and other authorised service providers may have access to information only to the extent necessary to perform the services entrusted to them by the Bank.

5. Sharing and Disclosure of Information

The Bank does not sell or rent customer information for commercial purposes.

Information may be shared or disclosed, where necessary and permitted under applicable law, with:

C-Edge Technologies Limited and other authorised technology/service providers engaged by the Bank
Banking, payment, clearing, and financial infrastructure providers
Regulatory and supervisory authorities
Government authorities and law-enforcement agencies
Courts, tribunals, or other legally authorised authorities
Auditors, professional advisers, consultants, and other authorised representatives
Other entities where disclosure is required or permitted by applicable law or is necessary to protect the Bank's customers, systems, assets, or legal rights

The Bank requires relevant service providers to maintain appropriate confidentiality and security safeguards in accordance with applicable requirements and contractual obligations.

6. Information Security

The Bank takes reasonable and appropriate technical, organisational, and administrative measures to protect customer information processed through the Positive Pay System against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

Such measures may include, as applicable:

Authentication and access controls
Role-based access restrictions
Encryption and secure communication mechanisms
System monitoring and logging
Security testing and vulnerability management
Fraud and suspicious-activity monitoring
Incident management and response procedures
Backup, business continuity, and disaster recovery measures
Confidentiality obligations for employees and authorised service providers

Customers are also responsible for maintaining the confidentiality of their login credentials, passwords, authentication information, and other security details.

No electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, customers should immediately notify the Bank if they suspect unauthorised access or activity relating to their account or the Positive Pay System.

7. Data Retention

The Bank retains information relating to the Positive Pay System for such period as may be necessary to:

Provide and administer the Service
Maintain transaction and audit records
Meet applicable legal, regulatory, accounting, and reporting requirements
Prevent, detect, and investigate fraud or security incidents
Resolve complaints and disputes
Comply with directions from regulatory or governmental authorities
Protect and enforce the Bank's legal rights

The applicable retention period may vary depending on the nature of the information and the requirements applicable to the Bank.

Upon expiry of the applicable retention period, information may be securely deleted, anonymised, or otherwise disposed of in accordance with the Bank's applicable policies and legal requirements.

8. Cookies and Similar Technologies

Where the Positive Pay System is accessed through digital banking channels, cookies, session identifiers, logs, and similar technologies may be used for purposes such as:

User authentication
Session management
Security monitoring
Fraud prevention
Maintaining system functionality
Improving service performance

The use of such technologies is subject to the Bank's applicable digital banking and privacy practices.

9. Customer Responsibilities

Customers using the Positive Pay System are responsible for:

Providing accurate cheque and other required information
Reviewing the information entered before submitting it to the Bank
Keeping login credentials and authentication information confidential
Not sharing passwords, OTPs, PINs, or other authentication credentials with any person
Using only authorised devices, applications, and channels to access the Service
Maintaining appropriate security on devices used to access digital banking services
Immediately reporting suspected fraud, unauthorised access, or incorrect transactions to the Bank

The Bank shall not be responsible for consequences arising from the customer's failure to maintain the confidentiality of authentication credentials or failure to follow applicable security instructions, subject to applicable law and the Bank's terms and conditions.

10. Customer Rights

Subject to applicable laws, regulations, and the Bank's policies, customers may have rights concerning their personal information, including the right to:

Request access to certain personal information held by the Bank
Request correction or updating of inaccurate information
Seek information regarding the processing of personal information
Exercise other rights available under applicable data protection and privacy laws

Requests may be subject to applicable legal, regulatory, security, contractual, or operational limitations.

Customers may contact the Bank using the details provided below for privacy-related requests or concerns.

11. Grievance Redressal

If you have any concerns, complaints, or queries regarding the collection or processing of your information through the Positive Pay System, you may contact the Bank through the following channels:

Kalaburagi and Yadgir DCC Bank
Grievance/Privacy Officer: S.V Patil
Super Market Main Road, Jagat Circle
Kalaburagi 585101
Website: dccbkalburgi.bank.in

The Bank will endeavour to address complaints and requests in accordance with applicable laws, regulatory requirements, and its internal grievance-redressal procedures.

12. Changes to This Privacy Policy

The Bank may modify or update this Policy from time to time to reflect changes in the Positive Pay System, technology, applicable laws and regulations, regulatory requirements, or the Bank's privacy and security practices.

The updated Policy will be published on the Bank's official website or through other appropriate channels and will indicate the date on which it was last updated.

Customers are advised to periodically review this Policy for any changes.

13. Applicable Law

This Policy shall be governed by and interpreted in accordance with the laws and regulations applicable to the Bank in India.

The collection, processing, storage, disclosure, and protection of personal information shall be subject to applicable Indian data protection, banking, payment, cybersecurity, and regulatory requirements, as amended from time to time.

14. Contact Us

For questions regarding this Privacy Policy or the handling of information in connection with the Positive Pay System, please contact:

Kalaburagi and Yadgir DCC Bank
Grievance/Privacy Officer: S.V Patil
Super Market Main Road, Jagat Circle
Kalaburagi 585101
Website: dccbkalburgi.bank.in