403
Marketing should always be OPT-IN by default, but these extra steps to opt out is truly asshole design.
Oh, and on the opt-out confirmation screen, you get two options: Yes or No. The button colour for "yes" is white, and the “no” button matches the “save” button on the previous screen, so it's easy to accidentally cancel the opt-out. Double-asshole design!
I've had accounts with no fewer than 5 different banks (personal and business accounts), and as shitty as this bank's opt-out process is for marketing, they have been fine to bank with.
Several others won't even give you the same opt-out options, will take a monthly fee, and will still mine your data at every turn.
With banks, it seems to be "choose the least evil one". 🤑