Privacy Policy

Of

Sunlife Insurance Company Limited

Effective Date: Duly approved in the 234^th Board of Directors Meeting held on October 30, 2025.

Sunlife Insurance Company Limited (“the Company”, “we”, “our”, or “us”), a publicly listed company, is committed to upholding the highest standards of integrity, transparency, and accountability in protecting the personal information of our policyholders, shareholders, employees, and website visitors.

This Privacy Policy outlines our practices regarding the collection, use, storage, and disclosure of personal data in accordance with the Information and Communication Technology Act, 2006 (as amended), data protection principles, and the Corporate Governance Code, 2018, issued by the Bangladesh Securities and Exchange Commission (BSEC).

Information Collection

The Company may collect personal and identifiable information, including, but not limited to:

• Name, address, contact details, National ID, or TIN number;
• Policy or proposal details, payment records, and claim information;
• Shareholder identification and communication details; and
• Information provided voluntarily through our website, email, or customer service channels.

Purpose of Data Use

Collected information is used for the following legitimate business and regulatory purposes:

• Administering insurance policies, claims, and related services;
• Communicating with policyholders and shareholders;
• Fulfilling statutory and regulatory obligations under IDRA, BSEC, DSE, CSE, and other authorities;
• Enhancing service quality, customer support, and operational efficiency; and
• Protecting the company’s legal rights and preventing fraud or misuse.

Data Disclosure

The Company maintains strict confidentiality of all personal information and does not disclose such data to any third party, except:

• When required by applicable laws, court orders, or competent regulatory authorities; or
• To authorized agents or service providers engaged under confidentiality and data protection obligations.

Data Security and Retention

Appropriate administrative, physical, and technological safeguards are in place to protect data from unauthorized access, alteration, or loss. Personal information is retained only as long as necessary to fulfil the stated purposes or as required by law.

Rights of Data Subjects

Individuals have the right to request access, correction, or deletion of their personal information held by the company, subject to proper verification and compliance with applicable laws.

Policy Review and Updates

This Privacy Policy is reviewed periodically to ensure consistency with legal and regulatory requirements. Any amendments or updates will be published on the company’s official website with a revised effective date.

Compliance and Governance

In line with the BSEC Corporate Governance Code (2018), this Privacy Policy has been reviewed and endorsed by the management and approved by the Board of Directors of Sunlife Insurance Company Limited to ensure adherence to ethical, transparent, and responsible data management practices.

Contact Information

For any privacy-related queries, please contact:

The Company Secretary

Sunlife Insurance Company Limited

Nafi Tower, Level- 09 & 10, 53 Gulshan Avenue, Gulshan- 1, Dhaka- 1212

Email: secretary@sunlife.com.bd, info@sunlife.com.bd

Website: www.sunlife.com.bd