A government website registered with the Digital Government Authority

Privacy policy

1. Overview

The Bank for Social Development is fully aware of the importance of your privacy and personal data, so it is strongly committed to maintaining the safety, security and confidentiality of all relevant information and data for all users.


2. Purpose of policy

The privacy policy outlined here has been developed in line with Personal Data Protection System The policy is designed to illustrate how the Bank addresses your personal data to help you understand why they are collected, used, shared and stored, as well as the steps it takes to ensure that their confidentiality and security are maintained.


3. Personal data collection

The purpose of collecting personal data is directly linked to the legitimate purposes specified in the portal, which must be displayed prior to the collection of personal data. The methods and means of collecting personal information are suitable for the owner ' s circumstances; they are direct, clear, secure and free from deception, misinformation or extortion; if it is proved that personal data collected are no longer necessary to achieve the immediate purpose of collecting them, the portal of the Development Bank.


The Social Development Bank web portal ensures that the following criteria are met before collecting your personal data:

  1. The purpose of collecting your personal data, while ascertaining whether the collection of such data is mandatory or optional, with more information on the processing of data that are not incompatible with the rights and freedom of the holder of personal data.
  2. Identification and contact details of the personal data controller - if possible.
  3. The entity or entities for which personal data will be disclosed and whether such personal data will be transferred, disclosed or processed outside the Kingdom ' s borders.
  4. Possible effects and risks of non-compliance with personal data collection procedures.
  5. Privacy rights and protection of your data as provided for in the system.
  6. Other items provided by regulations according to the nature of the activity carried out by this entity.


In the event of collection of personal data other than its owners, the Social Development Bank confirms that the following requirements are met.

  1. The owner of personal data so agrees, in accordance with the provisions of the Regulations.
  2. Personal data are available for public information or collected from a public source.
  3. 5; font-size: 18px) [The need to collect data for security purposes, implement another system or meet judicial requirements in accordance with the provisions specified in the regulations.
  4. The need to collect or process personal data to protect public health or safety, or the life or health of a particular individual or individuals.
  5. Failure to register or store personal data in coordination that allows for the identification and identification of the author directly or indirectly.

  6. 4. What personal data does the bank collect?


Data TypeData Details
Personal DataName, nationality, photograph, gender, date and place of birth.
Contact DataEmail address or residential address (national address), or business address and contact telephone number.
Identity DataNational ID , Iqama number, passport number, and any other similar data.
Technical DataUsernames, passwords, cookie data, IP addresses, session details, or any other related data.
Financial and Transactional DataAccount numbers, transaction data, balance, data related to loan repayments, and any other transactional related data.
Educational/Employment related DataEducational details, previous employment details, certifications, renumerations, any other data during recruitment or on-boarding stage.
Conversation dataTelephone conversation when you connect with our call center. We also collect metadata such as the date, time and length of a call), conversations over emails or the social media channel you use to connect with our customer service team.
Credit dataPersonal income, credit record, property, asset records, investment, tax identification number, SIMAH report, and any other data relevant to personal credit status.
Biometric dataSignature, handwriting, fingerprint, voice, and face recognition data.
Health dataIn some conditions we may collect medical reports, health condition, whether physical, mental or psychological conditions.

5. How does the Social Development Bank collect your personal data!

We collect data only for legitimate purposes, either directly or indirectly from our accredited external parties, and data that collect a variety of sources, including but not limited to the following, are used.

  1. Web portal of the Social Development Bank.
  2. Application forms.
  3. Digital channels.
  4. Questionnaires and observations shared with potential clients.
  5. Direct communication channels (including telephone channels, e-mails or social communication channels).
  6. I.D. files.
  7. Credit information agencies, government portals, integration channels or accredited entities.
  8. Certification checks from the institutions authorized to submit such data.
  9. Databases provided by official authorities and accredited government sources to update/check your documents.
  10. Legal external parties for the purpose of providing legal products and services that may interest you.
  • Sources available for public access.

  • 6. How does the Social Development Bank process your personal data?

    We collect, use, disclose, retain or otherwise process your personal data with a variety of means, including automatic and manual means, for a number of purposes, including, but not limited to, the following.

    1. Assess and provide banking and financial services to you, or meet our banking obligations, including verifying your customer KYC, verifying the credit situation, verifying identity, etc.
    2. Establish and maintain banking relationships, including client accounts, and provide services, such as access to internal quality and security platforms.
    3. Responding to requests and inquiries received from oversight bodies, government agencies or other accredited partners
    4. Respond to your questions or complaints, including the monitoring of talks and publications on social networks, to identify talks, impressions and complaints about the Bank, as well as to issue notices on changes in the terms and conditions of our products and services.
    5. Use automated techniques, such as engagement identification files, to provide services tailored to your requirements.
    6. Management of our work, including certification management, user access controls for banking services via the Internet and mobile phone, and audit of business operations.
  • Improve our products and services by monitoring and recording our contacts with you, including telephone calls, for training and quality, client questionnaires and more appropriate services.
  • Disclosure, investigation and prevention of financial crimes through surveillance and recording of sound and electronic communications and examination of applications and transactions related to actual or suspected fraud, financial or other criminal activities.
  • 7. Why does the Social Development Bank need your personal data?

    We need your personal data to provide you with the products and services appropriate to your requirements, and after sending the application form to us or joining our client list, we have certain legal obligations to process your personal data, including examples of possible consequences and risks that may arise when we do not meet your required personal data.

    1. We are unable to comply with statutory or regulatory obligations.
    2. We can't provide you with our products and services.
    3. We are clear in our application forms the personal data required of you by placing the star mark in front of the mandatory fields.
    4. We also collect data in the form of identification files linked to our automated systems; we use the links definition files to collect and store information on how you use the Internet for the social development bank and government digital services.
    5. 5; font-size: 18px " > The Social Development Bank defines the following legal grounds (but not limited to) for collecting and processing personal data:
    6. Legal obligation: We process personal information to comply with a particular legal obligation, or to fulfil regulatory obligations or authorizations and public interest.
    7. Contractual Convention: If personal data are to be processed for the conclusion or implementation of our contractual convention with you.
    8. Actual interests: in the event that the treatment has achieved actual interests for you, it is impossible - or impossible - to contact you.
    9. Data available for public access: if personal data are available for public information or collected from public sources.
    10. Legitimate interests: if we need to pursue our legitimate interests, without prejudice to your rights and interests, and without addressing your sensitive data.
    11. Regulations and regulations: If we need to comply with regulations and regulations applicable to us,
    12. Vital interests: if your vital interests and/or vital interests of the Kingdom are to be protected.
    13. Public interests or formalities: public interest or formal request by a particular party in accordance with its roles.
    14. Okay: We will not process your personal data/information until your express consent is taken, except for the reasons allowed by the system.
    15. 8. Mandatory or voluntary collection of personal data

      We need your personal data to provide you with the services or products you require; after selecting any of our products or services and joining our client list, we have certain legal obligations to process your personal data, and if we do not provide the required personal data, we will not be able to comply with legal or regulatory obligations, nor will we be able to provide you with our products and services.I'm sorry.

      When we collect your data using digital models or requests, we clarify the personal data to be submitted by placing the star mark (*) in front of mandatory fields, and for non-mandatory data fields, you have the freedom to choose not to provide us with those data.I'm sorry.

      9. Connecting file policy

      Connecting ID files are information that the website transmits to the client's identifier file file, and the attachment identifiers published by the bank portal cannot access your computer/your devices and obtain information about you or your family.

      The Bank for Social Development basically publishes the types of association identification files:

    CategoryDescription
    Strictly Necessary CookiesThese cookies are essential to enable navigation around SDB’s website and web features.
    Performance CookiesThese cookies collect information about customer visit and often visited sites.
    Functionality CookiesThese cookies allow a site to remember customer choices (such as language, or the region) and provide more enhanced, personal features.


    10. Security of your personal data.

    Your personal data will not be processed without taking sufficient steps to verify their accuracy, completeness, timeliness and relevance to the purpose for which they were gathered in accordance with the provisions of the RegulationsI'm sorry.

    The Bank for Social Development is committed to protecting your personal data; it implements internal technical and regulatory measures to maintain the integrity and security of personal data, including encryption, concealment of identity and physical and logical security measures; we ask our staff and any external parties acting on our behalf to comply with strict compliance standards, including the approval of contractual obligations to protect any personal data.I'm sorry.

    11. Disclosure Your personal data.

    Your personal data are processed and disclosed internally in the bank according to the products and services I have chosen. The Social Development Bank discloses data externally only according to the legal basis and purpose specified, and the Bank may share its personal data externally with the following stakeholders, for example, but not limited to

    Public or regulatory bodies and bodies: We may be legally bound to share your information as a response to legal or court orders issued by the Government.

    We may also disclose your information to the competent authorities when we are required to disclose information under the established regulations or regulations, or at the request of those authorities.I'm sorry.

    Business partners: partners we cooperate with, including financial technical applications and banks, which allow us to improve our services and provide you with the capacity to make faster and more efficient payments.I'm sorry.

    Servicing companies: companies that provide services for us or on our behalf, such as insurance companies, companies that apply to the bank to operate our services, basic service providers and others, all of which are also committed to protecting your information.I'm sorry.

    Any other external parties: In addition to the disclosures contained in the privacy policy described here, we share information on you with external parties when your consent to such participation is provided or requested separately.I'm sorry.

    Under exceptional circumstances, your information may be made available to government officials, yet it will not be made available to the public without your prior consent.I'm sorry.

    Your personal data will only be disclosed in the following cases.

    1. In case you agree to disclose it in accordance with the rules.I'm sorry.
    2. 5. font-size: 18pxI'm sorry.
    3. If the person requesting disclosure is a public domain, for security purposes or for the application of another system, or for meeting judicial requirements in accordance with the provisions specified in the implementing regulationsI'm sorry.
    4. If such information is to be disclosed to protect public health, public safety or the life or health of a particular individual or individualsI'm sorry.
    5. If the disclosure of such information is limited to subsequent processing in such a way that it does not specifically identify the owner of the personal data or any other individualI'm sorry.
    6. The Social Development Bank may not disclose your personal data if the disclosure threatens the security of the Kingdom or damage its reputation, is contrary to its interests or affects its relations with other States, and we will also refrain from sharing information in case the integrity of the individual is endangered.I'm sorry.

      12. Transfer of personal data to Out.Kingdom

      The Bank may transmit personal data to other States for compliance purposes, or to our service providers who maintain operations in States outside the borders of Saudi Arabia.I'm sorry.

      When transferring personal data, we shall ensure that they are provided with an appropriate level of protection and that the transfer is carried out in accordance with the system, including the reliance on adequate and appropriate decisions of the data protection authority concerned, the use of standard contractual clauses for the transmission of personal data, and you can see further details on the protection given to your data when transported by contacting us through the contact details below.I'm sorry.

      13. Your rights

      The Bank for Social Development is committed to ensuring accountability and transparency in its operations. According to the regulations in force for data protection, the Bank is keen to ensure that the rights of data owners are guaranteed in accordance with established regulations and standards, as follows.

      1. Right to know: You have the right to be briefed on the collection and use of your personal data, including the reason and manner in which your personal data is collected, the purpose of which it is addressed, and who you will be involved with.

      2. Right to seek access to personal data: you have the right to have access to your personal data available to the Bank in an orderly, read and clear form.

      3. Right to obtain a copy of personal data: You are entitled to obtain a copy of your personal data available to the Bank in an orderly, read and clear form.

      4. Right to request correction: you may request the correction of your personal data (if not accurate), complete (if incomplete) or update them (if not updated).

      5. Right to seek destruction: you are entitled to request the destruction of your personal data when:

      - See that we no longer request data for the purposes for which they were obtained.

      - Objection based on a good reason to our use of your personal data, processing data based on your consent, or deciding to cancel the approval of the use and processing of your personal data.

      - Our use of your personal data runs counter to the system or any other legal obligations.

      6. The right to renounce consent: You are entitled to amend/Absolute the approval of the collection and processing of your personal data unless it requires legal or formal requirements, contractual necessity and public interest otherwise, and the reversal of consent does not affect the processing of personal data based on another regular basis rather than approval.



      14. Minors and missing or underprivileged.

      The use of the Bank ' s website and its applications shall be restricted to persons under 18 years of age and/or to persons with disabilities; if the owner of personal data is under 18 years of age, missing or deficient, the consent of one parent or guardian must be taken on his behalf, as the Bank requires approval to collect and process the personal data of the personal data holder.

      15. Storage your data. Personality, retention and destruction

      We store and maintain your personal data for any time required by the regulations, as long as your personal data are necessary for the purpose of collecting or processing them, or are required under the system, or when needed for our legitimate purposes, such as maintaining records for analytical or review purposes, responding to queries or complaints, controlling fraud, defence or taking specific regulatory action, and responding to requests from regulatory bodiesI'm sorry.

      The Bank for Social Development is disposing of your personal data once the purpose of collecting them has expired, however, the Bank may retain such data after the end of its collection if all that leads to the identification of the owner is removed in accordance with the regulations specified in the Regulations.I'm sorry.

      Under exceptional circumstances, the Bank for Social Development may retain your information for longer periods of time, especially when we need to prevent or dispose of its damage on the basis of an order of the Court, or an investigation by our competent authorities, law enforcement agencies or regulators, the purpose of which is to enable us to submit your records as evidence if warranted.I'm sorry.


      16. Your responsibility for data processing

      It is the responsibility of ascertaining that the personal data it provides us is accurate and up-to-date, and you must inform us if any statement changes as soon as possible.

      If the bank gives personal data to another person (as a person designated by law on behalf of a person, dependant or otherwise), you must inform him of the privacy policy outlined here, and obtain approval of the Bank ' s use of its personal data for the specific purpose.


      17. Private policy updates

      The Bank reserves the right to make changes to this policy at any time and for any reason, and we will notify you of any changes by updating the history of the latest update contained in the introduction of this policy.

      Any changes or amendments shall apply immediately after the updated policy is posted on the site.

      We recommend that you review this policy on a regular basis to keep an update on it.I'm sorry.

      18. Keep with us.

      Maintaining the privacy and confidence of our clients is crucial for the Social Development Bank. If you have any query regarding the processing of personal data or wish to exercise any of the rights previously received, please contact us on the following e-mail address: dmo@sdb.gov.sa


    Do you have any questions

    If you have any questions, please contact us

    Last Modified Date 23/06/2026 - 7:04 AM Saudi Time

    3%Of users said Yes655Comments
    Was this page helpful?