1. INTRODUCTION

1.1 Qalo Ya Afrika (hereinafter referred to as 'Qalo', 'we', 'our' or 'us'). We know your privacy is important to you; it is also important to us. Our intention is to be open and honest with you about the information we gather about you, how we use it, and who we share it with. In simple terms, this Notice explains what we do with your personal information.

1.2 We are committed to protecting your privacy. This Privacy Policy (hereinafter referred to as 'Privacy Policy or 'Policy') applies to all persons using our services, website environment (available at QaloYaAfrika.co.za, using any of Qalo application(s), or when you otherwise do business or contact us. This Policy governs our online privacy practices, the methods and types of personal information that we received, collect, disclose and store, how the personal information is used, with whom it may be shared, what choices are available to you regarding the collection, use, and distribution of your personal information, what kind of security procedures are in place to protect the loss, misuse or alteration of the information under our control, your rights regarding your personal information and whom to contact with questions or concerns.

1.3 This Privacy Policy explains how Qalo as well as its affiliates (hereinafter referred to as "Qalo Operators"), including but not limited to legal persons, unincorporated organisations, and teams that provide services, collect, use, process, disclose, share, transfer, and protect personal information obtained through Qalo and its partners. So, the terms we, us, and our, refer to Qalo and Qalo Operators collectively.

1.4 By using our website environment (available at www.Qalo.co.za "Website" or "Platform" as the context may require), our applications, or our services, you ('User' 'You', 'You're') consent to this Policy and to the data practices described in it, in addition to consenting to it explicitly when using the Website. If you do not agree with the data practices described in this Policy, you may choose to stop using our services, or the Website. We periodically update this, Policy. We encourage you to review this Policy periodically.

1.5 Please carefully read this Protection of Personal Information and Privacy Policy, because it applies to the Qalo website or Qalo mobile application, along with related services, information and communications, materials, and any software that we make available that allows you to access relevant services and Qalo software, communication, and mail operations regardless of whether you register or log in to use the services or not. When visiting Platforms, you acknowledge, understand, and consent to all provisions described in this Privacy Policy. We will not use your personal information for any purpose not covered in this Privacy Policy or the Terms and Conditions (including any other business rules of Qalo) without prior

notification to you and your consent. If you do not agree with any part of this Privacy Policy, please stop using services immediately.

2. PURPOSE

2.1 This Policy has been developed for purposes of compliance with the Protection of Personal Information Act 2013 ("POPIA") and other data protection-oriented provisions within applicable regulations, as Qalo offers services to residents in Africa and the Republic of South of Africa. The Policy shall serve as part of your initial customer relationship with us and our ongoing commitments to you.

2.2 In order to promote our services to You, we may send you information about our products, features, promotions, surveys, news, updates, and events. We also aim to tailor our marketing messages to your preferences. If you prefer not to receive marketing communications, you can choose to opt out during the account creation process. Additionally, you have the option to unsubscribe from our marketing emails at any time or submit a support ticket to request removal from our marketing list.

2.3 To oversee and uphold your account within our system and to identify and prevent any fraudulent or unauthorised utilisation of our products and services.

2.4 When you are asked to provide personal information, you may decline, but if you choose not to provide data that is necessary to enable us to make our services available to you, you may not be able to sign up for our services and some features may be limited. If you fail, neglect, and/or refuse to or are unable to provide us any Personal Information which we necessarily need to provide you with services, or that we need to collect by law, we may not be able to provide you services. In this case, we have the right to discontinue the provision of services to you and/or close your account. In such a situation, we will notify you at the earliest.

2.5 Qalo collects certain personal information to enable us to operate effectively, and to provide you with the best experiences on our website and our operations. Qalo prides itself on transparency and as such, you have choices about the personal information we collect.

2.6 Qalo collects the personal information to enhance the quality of products and services that are offered, while also innovating to create new offerings.

2.7 Some of the information we obtain is collected to comply with applicable laws and regulations, of the Protection of Personal Information Act (POPI). This Policy explains:

• The types of information we collect about you
• How we use information about you
• Types of information we disclose to third parties and the types of such third parties
• 0 How we protect your personally identifiable information; and

Qalo Ya Afrika PRIVACY POLICY

Page 2 of 16

• How you may instruct us not to disclose certain information about you that we are otherwise permitted to disclose by law.

3. INFORMATION WE COLLECT FROM YOU

3.1 The kinds of Personal Information we collect will depend on the type of interaction you have with us (for example Telephone calls to us may also be recorded for training and quality assurance purposes). Generally, we collect the following information ('Information') about you if you are:

3.2 Natural Person (Individual customers)

• Identification information, such as your name, email address, and home address (including documents such as current utility bill i.e., electricity, telephone, gas, or mobile phone bill, documents issued by a government department that shows the end user's address, bank statement (not older than 3 months) that shows the end user's address), contact number, date of birth, gender, demographic and location data, billing address, username, along with identification details of documents confirming such details (such as passport, driver's license, National identity card);
• Country of birth;
• ID expiry details;
• Source of funds;
• Purpose of transactions; and
• Method of payments.

3.3 Legal Entity (Corporate customers)

• Copies of Commercial License/Trade License (or equivalent)
• Copies of the Certificate of incorporation
• Copies of Certificate of Incumbency
• Copies of Memorandum of Association (MoA)
• Copies of Share Certificate/Share Register (where details of shareholders are not available in MoA)
• Copies of Documents providing details of Ultimate Beneficial Owners
• Purpose and nature of the intended business relationship. (BOR)
• Copies of identification document of Owner(s) (passports/ID cards)
• Authorisation letter must be taken for a representative of the legal entity who carries out transactions on its behalf
• Copies of documents providing details of the relationship with the company and powers of authorised signatories who have the authorisation to carry out transactions on behalf of the Company along with their identification documents.

Notwithstanding the foregoing we shall further collect the following Information:

• •
• • Information you provide when you participate in promotions offered by us or our partners, respond to our surveys or otherwise communicate with us
• Information about when and where the transactions occur, the names of the transacting parties, a description of the transactions, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions
• Information about the location of your device and some other device specifics, including your hardware model, operating system and version, unique device identifier, mobile network information, and information about the device's interaction with our services Information about how you use our services, including your carrier operating system, connection type, referring URLs, access time, browser type and language, and Internet Protocol ('IP') address, as well as other information which may be collected and used by us automatically through the browser on your device or otherwise
• Information contained in or relating to any communication that you send to us with or without our request, including without limitation.
• Information collected by Cookies and Web beacons (defined below), including using web beacons and sending cookies to your device
• Your connections with others whose personal information we may collect or hold

3.4 Information may also include information we collect about your individual preferences. We may collect the Information in course of your signing up for our services, in course of our identity or account verification process, or course of your use of our services.

3.5 This policy applies to your Information when you use our website and interact generally with us but does not apply to Third-Party Sites. We are not responsible for the privacy policies or content of Third-Party Sites.

3.6 For the avoidance of doubt, unless stated otherwise, this policy will govern our collection of your Personal Information irrespective of the forum. Your continued usage of our website and/or services will be taken to indicate your acceptance of the terms of this privacy policy insofar as it relates to our website.

3.7 We do not knowingly collect data from, or market to, children below the legal age as established under POPIA. By using the services, you represent that you are at least the age of majority or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the services. If we learn that personal Information from users who are less than the age of majority has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

Page 4 of 16

Qalo Ya Afrika PRIVACY POLICY

4. MODE OF COLLECTION

4.1 We usually collect and store information including in paper, the physical and electronic forms provided by you when you communicate with us by telephone, email, web-based form, letter, or other means, including when:

• We provide you with our services via telephone, email, or our website.
• You participate in our functions, events, or activities or on our social media pages
• You request that we provide you with information concerning our products or services.
• You upload or submit information to us or our website; or
• You complete any forms requesting information from you, including on registration with us, complete any survey or provide feedback to us concerning our products or services.

Where practicable we will only collect information from you. However, we will also collect your Information through our partners and third parties who supply services to us or utilise automated tools, whom you have authorised to share such personal information with other parties, including but not limited to, channels such as public databases, credit bureaus, ID verification partners, marketing partners and resellers, advertising partners and analytics providers.

Please note that we use our own and third-party computer servers including our website hosts, data backups, and payment gateway(s), which may be located outside of the Republic of South Africa.

We also collect information from your computer or mobile device automatically when you browse our website. This information may include:

• O the date and time of your visit;
• O your domain;
• locality;
• operating system;
• the server your computer or mobile is using to access our Website;
• your browser and version number;
• 0 search terms you have entered to find our Website or access our Website;
• pages and links you have accessed both on our Website and other websites;
• the pages of our Website that you access;
• the device you use to access our Website; and your IP Address.

While we do not use some of this information to identify you personally, we may record certain information about your use of our websites such as which pages you visit and the time and date of your visit, and that information could potentially be used to identify you. It may be possible for us to identify you from information collected automatically from your visit(s) to our website. If you have registered an account with us, we will be able to identify you through your username and password when you log into our website. Furthermore, if you access our website via links in an email, we have sent you, we will be able to identify you.

Qalo Ya Afrika PRIVACY POLICY

Page 5 of 16

The device you use to access our website may collect information about you including your location using longitude and latitude coordinates obtained through GPS, Wi-Fi, or cell site triangulation. For information about your ability to restrict the collection and use of such information, please use the settings available on your device.

We will retain your Information for a period of 5 years after termination of the business relationship as defined in POPIA, and The Financial Intelligence Centre Act (FIC)

5. HOW WE SHARE AND USE YOUR INFORMATION

We shall share and use your information with and for:

• O Any person that works with us as well as the companies that form part of the QALO Group.
• To our related entities, employees, officers, agents, contractors, other companies that provide services to us, sponsors, government agencies, or other third parties to satisfy the purposes for which the information was collected or for another purpose if that other purpose is closely related to the primary purpose of collection and an individual would reasonably expect us to disclose the information for that secondary purpose.
• Any entity that forms part of QALO to process your payments that you have authorised and to provide you with the goods and services that you have opted for.
• • Any financial and other institutions to facilitate authorised payment processing and to deliver our range of products and services.
• Entities and firms that offer services to us, encompassing technical infrastructure, marketing, and analytics, as well as web and app development.
• 0 Entities and organisations that support us in the realm of fraud prevention services and to aid us in identity verification and safeguarding against fraud or financial misconduct, taking appropriate actions as warranted by the outcomes of such investigations.
• Our professional advisers, consultants, and other similar services.
• Any financial and other institutions to facilitate authorised payment processing and to deliver our range of products and services.
• The selected and trusted group of third party/parties to fulfil our obligations under our contract with you and to meet government, regulatory, and law enforcement requests, and to continue providing you with the services. We will only disclose your personal information to third-party service providers under strict terms of confidentiality. We do not allow our third-party service providers to use your personal information for their purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions. The third parties
• who help us to verify the identity of our clients and customers, and other software service providers who assist us to provide the services we provide to you.
• who help us analyse the information we collect so that we can administer, support, improve or develop our business and the services we provide to you including cloud hosting services, off-site backups, and customer support.

Page 6 of 16

Qalo Ya Afrika PRIVACY POLICY

• 0 Who shall use your information to let you know about goods and services which may be of interest to you by the applicable laws.
• The merchants and the recipients of funds to identify you as the sender of the funds and to a party who sends you funds in connection with a transfer to you of funds.
• Law enforcement or government agency or is required by law, or legal processes, such as a subpoena, court, or another legal process with which we are required to comply, including about our obligations under applicable privacy laws and regulations.
• Enforcing the terms of this policy or to enforce any of our terms and conditions with you.
• 0 Our professional advisers such as consultants, bankers, professional indemnity insurers, brokers, and auditors so that we can meet our regulatory obligations, and administer, support, improve or develop our business.
• Any other person, with your consent (express) to;
• Facilitate the sale of all or a substantial part of our assets or business or to companies with which we propose to merge or who propose to acquire us and their advisers.
• Protect the interests of our users, clients, customers, and third parties from cyber security risks or incidents and other risks or incidents; and Maintain the integrity of our Website and protect our rights, interests, and property and those of third parties.
• In addition to the above recipients, we will disclose your personal information if we are requested to do so by law or if the disclosure is made in connection with either the normal operation of our business in a way that you might reasonably expect, for example, if such disclosure is incidental to IT services being provided to our business or for the resolution of any dispute that arises between you and us.

In the event of a proposed restructuring or sale of our business (or part of our business) or where a company proposes to acquire or merge with us, we may disclose personal information to the buyer and their advisers without your consent subject to compliance with the applicable privacy regulations. If we sell the business and the sale is structured as a share sale, you acknowledge that this transaction will not constitute the 'transfer' of Personal Information.

6. WE PROCESS AND USE AGGREGATED, ANONYMISED, AND DE-IDENTIFIED DATA

We may also create, process, collect, use, and share aggregated, anonymised, or de-identified Information such as statistical or demographic data for any purpose which may be derived from your Personal Information. We may use this data to comply with legal or regulatory obligations and for any business purpose, including to better understand users' needs and behaviours, improve our products and services, conduct business intelligence and marketing, and detect security threats.

We may share such Information with members of our group, service providers, and our key partners. Some of these third parties may be in a jurisdiction outside South Africa as stated in this Policy, in which case we will take all necessary steps to ensure that your Personal Information is treated securely and that such transfers are permitted under the applicable data protection laws.

We may also use any or all the personal information above to administer and manage our business in general, to detect and prevent misuse of our services (including fraud and unauthorised payments), and to enforce our Terms and Conditions or any other contract to which we may be a party to.

7. HOW WE SHALL SECURE YOUR PERSONAL INFORMATION

We place a significant emphasis on ensuring the security of your personal data.

We regularly assess and implement appropriate and reasonable technical and organisational security measures to ensure the safety of your personal information.

Our employees undergo training to handle personal data securely and with the utmost respect. Failure to adhere to these standards may result in disciplinary actions. While we take measures to safeguard your personal data, we cannot guarantee its absolute security. In the event of a data breach, please refer to the "Data breaches" section below. It is essential for you to take responsibility for securing your account login credentials and complying with QALO Terms of Use regarding account security.

8. CONSENT MECHANISM

By creating an Qalo Account, you are consenting to our processing, storage, utilisation, and sharing of your personal information in accordance with this Privacy Policy. If you disagree with any aspect of this Privacy Policy or the Terms and Conditions, or if you wish to withdraw any previously given consent, please contact us @QaloYaAfrika.co.za. It's important to note that if you withdraw any essential permissions or revoke consent for processing and storing information such as your Qalo Account data, Financial and KYC Information, or any other information required to offer you our Services, we may be required to discontinue providing those Services to you.

9. RETENTION OF PERSONAL INFORMATION WITHOUT CONSENT

In certain cases, we may process your personal information without your explicit knowledge or consent, but only in cases where such processing is mandated or allowed by applicable law.

We will keep your information for a period of 5 years after termination of the business relationship to serve our legitimate business interests. These interests include meeting legal requirements, preventing fraud, resolving disputes, upholding agreements, safeguarding the interests of Qalo and its customers, and as mandated by applicable laws.

10. MARKETING

10.1 We may contact you with information regarding our products, services, news, and promotions, or engage in communication for marketing purposes through various channels such as email, push notifications, in-app messages, text messages, or other means. Our marketing communications will always adhere to relevant laws, including consent and opt-out regulations.

You have the option to opt out of receiving marketing communications at any time. This can be done by selecting the "Unsubscribe" option, which is included in all marketing messages sent to you. Additionally, you can manage your communication preferences by accessing your account settings within our app or on our website.

10.3 It's important to note that opting out of marketing content will not affect your receipt of critical communications related to the security or functioning of your account.

11. THIRD-PARTY ADVERTISING AND ANALYTICS

Our websites or communications may contain links to other third-party websites which are not owned or operated by us and are regulated by their privacy policies. If you click on a third-party link, you will be directed to that third party's platform. We strongly advise you to review the privacy policy of every platform you visit. We are not responsible for the privacy policies of these third-party websites, regardless of whether they were accessed using the links from our website. We have no control over and assume no liability for the content, privacy policies, or practices of any third-party platforms or services.

12. CONSENT FOR PERFORMANCE OF CONTRACT; LEGAL OBLIGATIONS

You grant consent for the processing of your personal information. This processing will be done to fulfil all legal obligations stemming from contracts involving you, or to provide services that you have contracted us to deliver, or to take necessary actions upon your request before entering a contract with you.

When you apply for or sign up for our services, you grant us the authorisation and consent to obtain information about you from third parties and share such information with them. This process is carried out in the context of identity or account verification, fraud detection, collection procedures, or as otherwise permitted or mandated by applicable law.

You have the option to revoke this consent at any time. Please note that withdrawing your consent will not impact the legality of processing that occurred based on your previous consent. The withdrawal of consent will become effective within 30 calendar days of your request submission. If you wish to make such a request, kindly contact us at suport@Qalobank.com

We provide detailed, clear, and easily revocable explanations about the specific information we gather, how we collect it, the reasons behind its collection, how we share it, and the duration for which we retain it in this Policy.

We will store your data only for the duration necessary to fulfil our obligations or achieve the intended purposes for which the information was gathered, and in accordance with applicable law. The determination of the appropriate retention period will consider factors such as the quantity, nature, and sensitivity of the data; potential risks associated with unauthorised use or disclosure of the data; the purposes for which we process the data and whether alternate methods can achieve those purposes; and relevant legal requirements. Unless required otherwise by the law, upon the conclusion of the retention period, we will either delete personal data from our systems and records or take suitable measures to ensure their proper removal from our system.

13. YOUR DATA PROTECTION RIGHTS

13.1 Right to be informed: This means you have a right to know

1. The identity and contact details of the Company
2. The purposes of processing your personal information as well as the legal basis for the processing
3. The legitimate interests pursued by us or by a third party who processes your personal information
4. Recipients or categories of recipients of your personal information
5. Our intention to transfer your personal information to a third country or international organisation and reference to the appropriate safeguards and the means to obtain their copy.
6. The period for which your personal information will be stored, or if that is not possible, the criteria used to determine that period
7. Whether the provision of personal information is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obligated to provide the personal information and of the possible consequences of failure to provide such data
8. The existence of automated decision-making, including profiling and meaningful information about the logic involved.

Page 10 of 16

Qalo Ya Afrika PRIVACY POLICY

Page 11 of 16 Qalo Ya Afrika PRIVACY POLICY Where we intend to further process your personal informaDon for a purpose other than that for which the personal informaDon was collected, we must explain you, before such further processing, with informaDon on those other purposes and with any other relevant informaDon.

13.2 Right of access: This is your right to see what personal informaDon is held about you by us. ParDcularly you have the right to:

1. Receive confirmaDon as to whether your personal informaDon is being processed
2. Access your personal informaDon which we are processing along with the purposes of the processing; the categories of personal informaDon being processed; the recipients or categories of recipients to whom the personal informaDon has been or will be disclosed; the envisaged period for which the personal informaDon will be stored, or, if not possible, the criteria used to determine that period; where the personal informaDon is not collected from you, any available informaDon as to their source.
3. Where your personal informaDon is transferred to a third country or an internaDonal organisaDon, you have the right to be informed of the appropriate safeguards relaDng to the transfer.
4. d. A copy of your personal informaDon being processed; and
5. e. Any further copies requested by you, upon paying a reasonable fee.

13.3 Right to recNficaNon: This is your right to have your personal informaDon corrected, recDfied, or amended if what is held by us or a third party onboarded by us is incorrect/ inaccurate in some way.

13.4 Right to erasure: This is your right, under certain circumstances to ask for your personal informaDon to be deleted. This would apply if your personal informaDon is no longer required for the purposes it was collected for, your consent for the processing of that data has been expressly withdrawn, or where your personal informaDon has been unlawfully processed. Once deleted all your data will be removed from our systems and will not be recoverable.

13.5 Right to withdraw consent: If you wish for the Company to stop processing your personal informaDon, it is your right to withdraw consent, prevenDng the Company from further processing the same personal informaDon.

13.6 Right to restrict processing: This is your right to ask for a temporary halt or pause in processing your data, such as in the case where a dispute or legal case must be concluded, or the data is being corrected.

13.7 Right to erasure: This is your right to ask for your personal informaDon supplied directly to us, which we have processed under your consent, under a contract, or by automated means, to be provided to you in a structured, commonly used, and machine readable or electronic format.

Page 12 of 16 Qalo Ya Afrika PRIVACY POLICY 13.8 Right to data portability: This is your right to object to the further processing of your personal informaDon which is inconsistent with the primary purpose for which it was collected, which includes profiling, automaDon, and direct markeDng.

13.9 Right to object: This is your right to object to the further processing of your personal informaDon which is inconsistent with the primary purpose for which it was collected, which includes profiling, automaDon, and direct markeDng.

13.10 Rights in relaNon to automated decision-making and profiling: This is your right not to be subject to a decision based solely on automated processing. We aim to respond to all legiDmate requests without undue delay and within thirty (30) calendar days of receipt of any request from you. Occasionally it may take us longer than thirty (30) calendar days, if your request is parDcularly complex, or if you have made duplicated or numerous requests. In this case, we will noDfy you of receipt of such request(s) and keep you updated as to the status of progress concerning such request(s). If you wish to exercise any of them, please contact us at support@QaloYaAfrika.co.za . We may need to request specific informaDon from you to help us confirm your idenDty and ensure your right to access your personal informaDon (or to exercise any of your other rights). This security measure is to ensure that your personal informaDon is not disclosed to any person who has no right to receive it.

14. LEGAL RECOURSE TO RELEVANT AUTHORITIES

14.1 If there has been a potenDal violaDon of the POPI Act, you have the right to file a complaint with the InformaDon Regulator of South Africa at any Dme. 14.2 However, before reaching out to any such authority, we would appreciate the opportunity to address and resolve your concerns. Please contact us as the iniDal step in resolving your complaint promptly and to your saDsfacDon. You can reach us via email at support@QaloYaAfrika.co.za

15. WE DO NOT MISUSE YOUR PERSONAL INFORMATION

15.1 Without your explicit consent, we do not engage in the sale, trade, or transfer of your informaDon, whether it is public or private, for any purpose whatsoever. 15.2 We collect, process, and uDlise informaDon about you for the following purposes:

Page 13 of 16 Qalo Ya Afrika PRIVACY POLICY

• To deliver our products and services to you, which includes processing your transacDons and carrying out your requests to uDlise our services.
• To enhance, personalise, and facilitate your uDlisaDon of our products and services.
• To gauge, tailor, and enrich our services, encompassing the design, content, and funcDonality of our website, as well as monitoring and assessing trends and usage in connecDon with our services.
• To conduct research, verify and ensure the accuracy of informaDon, compile and analyse staDsDcs perDnent to our business operaDons.
• To enhance our customer service and effecDvely manage our relaDonship with you.

15.3 Subject to your prior consent, we may send you periodic emails containing news, updates, and informaDon related to our services. AddiDonally, we may conduct surveys to gather feedback. These communicaDons aim to keep you informed about our products, services, promoDons, discounts, incenDves, and rewards, which may be offered by us or carefully chosen partners. These communicaDons will be based on your chosen communicaDon preferences, as well as applicable legal requirements, and will be directed to the email address you provided for such purposes.

15.4 We use your informaDon for various purposes, including but not limited to:

• Managing our internal informaDon processing and IT systems.
• OperaDng our website and providing our services, with a focus on ensuring their security.
• Maintaining backups of our databases and complying with our internal policies, procedures, and privacy laws.
• CommunicaDng with you, which includes delivering requested informaDon and support, technical noDces, security alerts, and administraDve messages. It also involves resolving disputes, collecDng fees, and assisDng with service-related issues.
• Establishing, exercising, or defending legal claims, whether in court proceedings or other legal procedures, to protect our rights, your rights, and the rights of others.
• Managing and miDgaDng risks, obtaining professional advice, and fulfilling our legal obligaDons as required by law or through wriKen agreements with third parDes.
• Displaying transacDon history for your reference.
• ProtecDng the rights, property, security, or integrity of our services.
• FacilitaDng corporate acquisiDons, mergers, or transacDons.
• Developing new products and services.
• ProtecDng our rights, enforcing our Terms and CondiDons or other applicable agreements or policies, verifying your idenDty, invesDgaDng and prevenDng fraud, security breaches, and other potenDally prohibited or illegal acDviDes, and complying with any relevant laws, regulaDons, or legal processes.

16. SECURITY PRECAUTIONS AND MEASURES

16.1 We are deeply commiKed to ensuring the security of your informaDon. To prevent any unauthorised access or disclosure, we have implemented robust physical, electronic, and managerial procedures to protect and secure the data we collect online. We adhere to industry-standard technical measures, and we require our affiliates and vendor partners to employ data encrypDon technology. Here are some of the specific measures we take:

Page 14 of 16 Qalo Ya Afrika PRIVACY POLICY

• Physical Measures: We store materials containing your personal informaDon in secure, locked faciliDes.
• Electronic Measures: Electronic records containing your personal informaDon are stored in computer systems and storage media with stringent login restricDons.
• Management Measures: Only authorised employees with a clear understanding of our internal confidenDality rules are allowed access to your personal informaDon. We have also established strict physical access controls for our premises and files.
• Technical Measures: We use encrypDon technologies like PCI Scanning and Secured Sockets Layered EncrypDon for transmimng and storing your personal data. We employ various general security technologies and management systems to minimise the risk of unauthorised access, disclosure, damage, misuse, or alteraDon of your informaDon. Our web server is protected by a firewall.
• Other Measures: We regularly scan our faciliDes for security vulnerabiliDes to ensure their integrity. Your personal informaDon is stored behind secure networks and can only be accessed by a limited number of individuals who have been granted special access rights and are bound to maintain confidenDality.

16.2 While we make every effort to secure your data, it's important to note that no method of transmission over the Internet or electronic storage can be guaranteed 100% secure. Nevertheless, we are dedicated to safeguarding your data and limiDng access to it.

16.3 We do not guarantee that your data will never be accessed, disclosed, altered, or destroyed due to breaches of our physical, technical, or managerial safeguards. We advise you to verify the legiDmacy of any website requesDng financial or payment informaDon related to our services, as there is a risk of impersonaDon by hackers.

16.4 If you receive any suspicious communicaDon or requests, please do not provide your informaDon and report it to us immediately at support@QaloYaAfrika.co.za. NoDfy us promptly at if you become aware of any unauthorised access to or use of your account.

16.5 As we cannot guarantee against all possible risks, it's essenDal to take steps to protect your personal informaDon, including selecDng a strong and unique password and not sharing it with third parDes.

16.6 AddiDonally, please be aware that we cannot ensure the security or confidenDality of data transmiKed via the internet, email, phone, WhatsApp, SMS, or other wireless connecDons, as we have no control over the data's protecDon once it leaves and unDl it reaches our systems. If you suspect your data's security has been compromised, contact us at support@QaloYaAfrika.co.za

Page 15 of 16 Qalo Ya Afrika PRIVACY POLICY

16.7 In the unlikely event of a data breach with a significant impact on your rights, we will promptly inform you of the breach's nature, potenDal consequences, and the measures we have taken to address and miDgate its effects. Please reach out to us at support@QaloYaAfrika.co.za in such a scenario for further informaDon and advice on miDgaDng potenDal adverse effects.

16.8 We also conduct comprehensive security risk assessments to enhance the effecDveness of our risk miDgaDon controls and protect your data's integrity.

17. HOW CAN YOU CONTACT US

17.1 If you have any quesDons or concerns regarding this policy, if you want to access or recDfy the informaDon we have on record about you, or if you wish to file a complaint, please get in touch with us in wriDng at support@QaloYaAfrika.co.za

17.2 To provide you with access to your informaDon, we may request certain details from you, including but not limited to verifying your idenDty. Depending on the nature of the request, there might be a fee associated with accessing your Personal InformaDon. We will noDfy you of any applicable fees before proceeding with your request. We aim to handle all requests for Personal InformaDon within a reasonable Dmeframe, ideally within 14 days, but in any case, no later than 30 calendar days from the date of your request.

17.3 If you want to have your personal informaDon removed, please reach out to us using the contact informaDon provided above. We will take reasonable steps to delete the informaDon, unless we are required to retain it for legal or audiDng purposes. It's important to note that in cases where personal informaDon is stored on a blockchain, it may be impracDcal, unfeasible, or impossible to completely delete.

17.4 You may also have the ability to view, access, edit, or delete (where possible) your personal informaDon through your user dashboard on our website. However, please be aware that certain data or informaDon may be restricted from ediDng or deleDon to ensure your conDnued access to our website.

18. CHANGES TO THIS POLICY

18.1 From Dme to Dme, we may revise, amend, or supplement this Policy to reflect necessary changes in law, our personal informaDon collecDon and usage pracDces, the features of our offerings, or certain advances in technology. If any material changes are made to this Policy, the changes may be prominently posted on our Website. However, the onus is also on you to occasionally familiarise yourself with the contents of this Policy, for your informaDon, and parDcularly to do so every Dme you access our website, play the game or make use of our services.

Page 16 of 16 Qalo Ya Afrika PRIVACY POLICY

18.2 Changes to this Policy are effecDve when they are published.