ICICI Bank — ICICI BANK SHARING PERSONAL INFORMATION WITH IMINT WITHOUT CUSTOMER APPROVAL

Recently I have seen that my reward points were missing & after talking to ICICI BANK, I have found that they have started a new venture called I-imint & they are forcibly transfering customer personal data to i-mint for business purpose. Terms & conditions Of i-mint says that you will be subjected to profiling, ambush/targeted advertising.

CAN ICICI BANK transfer personal details of a customer to a businees venture with out customers explicit authorization ? Can they use customer personal data for a business enture ? Incidently looks like i-mint is owned by ICICI Bank ?

Is this legal ? Can they share personal customer data for business purpose with out authorization ?