RCS Group in breach with POPIA Act

I recently received a marketing letter for me to take a loan from RCS Group but my problem is that the letter has my ID number visible on the envelope ,my concern is that anyone can read my ID as it is written in full which is a concern .I feel this is in breach with the POPIA act .kindly advise where I can take up this with because I'm worried about my personal information.