BPI Data Privacy Policy

Maintaining your privacy is an important part of all the products and services that we provide. This Privacy Policy, hereafter referred to as “Policy”, explains how we collect, protect, use, and share your information when you access our websites and/or apply for and avail of our products and services.


This Policy outlines the general practices of the Bank of the Philippine Islands (“BPI”) in relation to all our processes and content which are made available through our network of websites, our online and mobile applications, and social media pages (collectively referred to as the “websites”). This Policy also covers the privacy practices for our customers who apply for and obtain products and services from us, including, but not limited to, deposits, loans, investments, insurance, safety deposit box, and such other products and services that the Bank may offer from time to time. 

Our Privacy Practices

The privacy practices described in this Policy are primarily intended for individuals in the Philippines and are designed to fulfill our contractual obligations to our customers, comply with the Data Privacy Act of 2012 (R.A. 10173), its implementing rules, circulars, including all other applicable legal obligations and regulatory requirements, or as may be reasonably necessary to enable us to conduct our banking and other business interests. When accessing our websites and/or availing of our products and services from outside the Philippines, you acknowledge and agree that your information may be transferred to and processed in the Philippines in accordance with applicable legal and regulatory standards for data protection that may differ from your current or home jurisdictions.


In designing our products, services and the processes as well as activities that support the delivery of any or all of these, BPI proactively and appropriately identifies, assesses and addresses data privacy risks and seeks to adhere to the principle of “Privacy by Design” to ensure that the rights of our customers, stakeholders and the public are upheld at all times.

What we may collect from you

When you apply for or avail of any product or service that BPI offers or when you interact with our employees, authorized representatives, agents and service providers, we collect your personal information. These may include, among others:

  • your name and personal particulars such as contact details, address, gender, birthdate, nationality, marital status, education;
  • specimen signatures;
  • digital photos and biometrics;
  • government ID details;
  • financial information (such as income, expenses, balances, investments, tax, insurance, financial and transaction history, among others);
  • employment details;
  • business interests and assets;
  • images via CCTV and other similar recording devices and processes which may be observed when visiting our offices and/or using our other facilities;
  • voice recordings of our conversations with you.

We may, as and when necessary in connection with our provision of services to you, seek to verify or augment the foregoing information with third-party entities or publicly available sources including government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction and, in the process, gain additional information about you.


In the course of availing our products and services, we also collect information about your transactions and dealings which include your account activities, movements and interactions with third parties such as merchants and utility companies.


When you access our websites, we may provide information about us as well as information regarding our products and services. If you have enrolled your account as a condition of use, you may conveniently access your accounts through the website. In the course of using our network of websites and electronic platforms, we may collect non-personal information such as those provided by your device which may include the IP address, operating system, browser type and version, and other machine identifiers. We may track your location if you use our location-based content such as branch or ATM locators. We may likewise use web analytics tools, including those of third parties’, that use cookies to collect anonymous information and data generated in connection with your activities when you visit the pages and our network of websites.


We may also collect, use and keep your personal opinions or comments made known to us via feedback or responses to surveys or any other interaction and exchanges that you had with our employees, authorized representatives, agents and service providers.

How we use your information

We use the information collected to deliver and provide the products and services that you have availed to:

  • approve, facilitate, administer and process applications and transactions;
  • respond to queries, requests and complaints and improve how we interact with you;
  • send you statements, billings, notices and other such documents necessary for continued use of our products and services;
  • conduct studies and research for the purpose of further reviewing, developing and improving our products and services;
  • perform profile analysis, behavioral modeling and analytics to understand needs, preferences and market trends to be able to improve, enhance and recommend suitable products and services;
  • reach out to you regarding products and services information, including offers, promotions, discounts, rewards; and for personalizing your experience with our various touchpoints such as branches, call center, telemarketing, email, messaging and such other bank channels;
  • determine the effectiveness of our marketing efforts and initiatives;
  • provide location-based services such as finding the ATM or branch nearest to you;
  • perform certain protective safeguards against improper use or abuse of our products and services including fraud prevention;
  • comply with our operational, audit, administrative, credit and risk management processes, policies and procedures, the terms and conditions governing our products, services, facilities and channels, the Bangko Sentral ng Pilipinas rules and regulations, legal and regulatory requirements of government regulators, judicial, supervisory bodies, tax authorities or courts of competent jurisdiction, as the same may be amended or supplemented from time to time;
  • comply with applicable laws of the Philippines and those of other jurisdictions including the United States Foreign Account Tax Compliance Act (FATCA), the laws on the prevention of money laundering including the provisions of Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended (AMLA) and the implementation of know your customer and sanction screening checks;
  • comply with legal and regulatory requirements such as submission of data to credit bureaus, credit information companies, the Credit Information Corporation (CIC) (pursuant to Republic Act No. 9510 and its implementing rules and regulations), respond to court orders and other instructions and requests from any local or foreign authorities including regulatory, governmental, tax and law enforcement authorities or other similar authorities;
  • perform other such activities permitted by law or with your consent.
How we may share your information

We may share your personal information with our subsidiaries, affiliates and third parties, under an obligation of confidentiality.

  • We may share personal information with various units within BPI in order to better understand the way you use our products and services. This will allow us to improve our services and offer you opportunities to obtain such other useful products and services that may deliver greater value to you.
  • We may share information with our subsidiaries and affiliates to likewise offer you additional products and services that we believe you might find interesting.
  • We may share with third parties that we engaged to support us in delivering our services to you. These may involve anonymous or aggregated information to help improve our products, services, and content.
  • We may share information with any potential transferee or assignee of any of the rights and obligations of BPI under the relevant contracts or agreements or in connection with any sale, acquisition, merger or consolidation of any member of the BPI Group of Companies.
  • We may also engage third parties to help us operate our business. These include support in:
    • complying with legal requirements and directives such as court orders and legal processes;
    • enforcing the terms and conditions of products and services which you have availed including, among others, those relating to loans and/or credit facilities, or such other applicable guidelines, policies and procedures governing products and services that we provide or make available;
    • addressing fraud, security or technical issues, to respond to an emergency or otherwise to protect the rights, property or security of our customers or third parties;
    • to carry out all other purposes set out above.

Further, if you are, become, or apply to become a customer of any of our subsidiaries and affiliates, BPI and the subsidiary/ies and/or affiliate/s concerned has the option, but not the obligation to, rely upon, use, and share your relevant personal and/or account information for any of the following purposes:

  • To facilitate your account opening or application with the concerned subsidiary/ies or affiliate/s;
  • To validate, consolidate or update your customer information records and/or credit history;
  • To provide consolidated billings, deposit or investment summaries or such other reports as you may request;
  • To send you reminders, announcements, promotions, advertisements, offers, invitations and other notifications;
  • To enroll you in loyalty or similar client-oriented programs of the BPI Group of Companies;
  • For research purposes or to develop, design, upgrade and/or enhance banking, financial, securities and investments or such other related products or services that you may consider and/or avail of;
  • For promotional campaigns and/or marketing activities of BPI or of relevant members of the BPI Group of Companies;
  • To comply with or enforce the terms and conditions of any agreement entered into by or on behalf of BPI which the Bank is bound to observe; and/or
  • To comply with legal obligations and/or regulatory requirements to which BPI or the relevant member of the BPI Group of Companies is subject.


We may transfer, store, and/or process your personal data outside the Philippines to support any business purposes which you have authorized or to comply with our legal obligations and agreements in other jurisdictions. In doing so, we will comply with applicable data protection laws and regulations.


We assure you that we do not, and will not, sell personal data to any third parties. All our engagements with third parties shall be fully compliant with our obligation of confidentiality imposed on us under the applicable agreements and/or terms and conditions or any applicable laws that govern our relationship with you.

How we protect your information

We fully recognize the value of your personal information particularly as it may include sensitive personal information such as your gender, government-issued IDs, etc. Appropriately, we endeavor to maintain the confidentiality, integrity and availability of your personal information by employing physical, technological and procedural safeguards. We train our employees to properly handle your information. Whenever we engage other companies to provide services for us, we require them to protect personal information consistent with our own security standards.

How long do we keep your information

Your personal information shall be retained for as long as the purposes for which it was collected which you may have consented to from time to time remain in effect and for such period of time as is reasonably necessary or allowed for BPI and relevant members of the BPI Group of Companies, as applicable, to process and/or retain your personal information under applicable laws and regulations.


In no case shall BPI or the BPI Group of Companies use your personal data outside of the purposes stated herein.

You have rights

In respecting your rights to privacy, you may opt to tell us:

  • to inform you of what we do with your personal information;
  • to provide you with information that we currently have about you, subject to restrictions applied to us as a bank and a company operating in the Philippines by certain laws and regulations, in an easy-to-access format and easy-to-understand language;
  • not to send you marketing materials via email or SMS, not to share your information with our subsidiaries and affiliates or with other companies that we have business with provided that such information is not critical nor required by applicable laws and regulations in maintaining, providing and completing the products or services that you have availed from us;
  • not to process your personal information upon withdrawing consent, unless processing is legally required;
  • to remove and dispose your personal information from our records, as allowed by applicable laws and regulations;
  • to update any personal information upon your advice;
  • to electronically move, copy, or transfer it securely through available means.

We may charge a fee for processing your request/s for access and/or update. Such a fee depends on the nature and complexity of your request. Information on any processing fee will be made available to you prior to making the request.


You may lodge a complaint regarding our use of your personal data and be assured that we will address your concerns promptly. Should we fail to do so, you may address any complaint to our regulators, particularly the Bangko Sentral ng Pilipinas and the National Privacy Commission, consistent with the rights granted to you under applicable laws and regulations.

How to contact us

For any queries, clarifications, comments, or requests regarding any aspect of this Policy, the exercise of your rights pertaining to your personal data or to provide any feedback about our processing of personal data, please send us a message, visit any of our branches, or feel free to contact us through the channels provided below.


Email: privacy@bpi.com.ph


Address: 22F to 28F Ayala Triangle Gardens Tower 2, Paseo De Roxas Corner Makati Avenue Bel-Air, Makati City 1226


We are available to assist you during business hours. 


Our 24 hour BPI Contact Center, Phone: (+632) 889-10000, is also at your service for immediate assistance.

Changes to our Privacy Policy

We may modify or amend this Privacy Policy from time to time to keep up with any changes in relevant laws and regulations applicable to us or how we collect, use, protect, store, share or dispose of your personal information. Any relevant updates will be posted on the BPI website.


Personal Data - refers to all types of personal information. The term collectively refers to personal information, sensitive personal information, and, to the extent possible, privileged information


Personal Information - refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual.


Sensitive Personal Information/Data - refers to personal information:

  • About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations;
  • About an individual's health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings;
  • Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; and
  • Specifically established by an executive order or an act of Congress to be kept classified.


BPI subsidiaries and affiliates - members of the BPI Group of Companies include, but are not limited to, Ayala Plans Inc., BPI Asset Management and Trust Corporation, BPI Capital Corporation, BPI Century Tokyo Lease & Finance Corporation, BPI Century Tokyo Rental Corporation, BPI Direct BanKo, Inc., A Savings Bank, BPI Europe PLC, BPI Express Remittance Centre HK Limited Inc., BPI International Finance Limited, BPI Investment Management Inc., BPI/MS Insurance Corporation, BPI AIA Life Assurance Corporation, BPI Securities Corporation.


Last updated: June 2024

Related information

BPI Europe PLC Data Privacy Statement

BPI IFL Privacy Statement

Need more help?

Get all the help for your banking needs.