Purpose of the Policy

• This privacy policy has been prepared in accordance with the Personal Data Protection System and relevant regulations in the Kingdom of Saudi Arabia, with the aim of helping our customers know about their personal data processing practices, and to confirm our respect for their privacy.

• This policy focuses on how RasidJack collects, processes, uses, stores, and shares your personal data.

• We affirm our commitment to processing our customers’ personal data legally and applying the highest security standards to protect against unauthorized access, disclosure, or destruction.

• At Rasid, we also emphasize our respect for the privacy of our customers, which is why we have developed this policy to help them understand data collection and processing practices, as we specify the types of information that we collect from them directly when they use RasidJack Products, the Rasid website, or the call center. We also take care to provide guidance on how we use this data.

• This policy may provide certain features of RasidJack Products, promotions, or rewards programs provided by the Rasid Payments Company for Financial Technology.

The field of politics

• This policy applies only to the collection and use of information and data collected through RasidJack Products, and any related information; it collects credit, which is necessary to provide the best services to its customers.

• This policy does not apply to other websites, products, programs, or services that the customer can access outside of RasidJack Products.

• Customer data collected through our website is used to provide Rasid services and will not be processed or used in any way that conflicts with the rights of any customer within KSA.

• This policy does not apply to the data collection and practices of any third parties, who may be contracted to use or apply RasidJack, including, but not limited to, merchants or the customer’s mobile service providers.

Types of Personal Data We Collect

• Rasid may collect non-identifying data, such as the customer’s operating system, hardware version, browser type, device settings, and mobile operator; or Internet service provider, area code, language, time zone, and information about the user’s activities on the RasidJack Products, such as the number of times pages are visited, etc.

• RasidJack may collect identification data from devices on which the Customer installs or accesses the RasidJack Products, such as the location of the devices, including specific geographic areas, such as GPS signals, Bluetooth signals, Wi-Fi signals, and the Customer’s IP address.

• The cookie Rasid may be used to maintain information about the customer’s site session; most importantly, the state of their current web session, and cookies help us recognize the customer, which enhances their experience on the Rasid website. These cookies do not contain any personal or confidential information.

• RasidJack Products keeps a record of all the activities you perform to help us improve product performance and user experience in the future.

• When you carry out transactions using RasidJack Products, the Company will create and maintain records of these transactions.

• Rasid Payments Company for Financial Technology is obligated, in accordance with the directives of the Central Bank of Saudi Arabia, to determine the maximum receipt amount for which it is eligible. To do this, the company collects relevant information about you from Elm Company and the Watheq service to verify the registration and login process.

• This agreement is subject to the payments and services system enforced in the Kingdom, issued by Royal Decree No.: M/26, dated 03/22/1443 AH, corresponding to: 10/28/2021 AD, and the executive regulations for the payments system and services, issued on 11/24/1444 AH, corresponding to: 06/13/2023 AD, as well as any amendments or regulations.

• The privacy policy is subject to the Personal Data Protection Law issued on: 02/09/1443 AH corresponding to: 09/16/2021 AD.

• RasidJack SoftPOS also collects financial identification data when you tap payment cards (such as credit cards, debit cards) to process the transaction with your acquirer bank via the SoftPOS application.

• The information you provide is verified using verification data provided by Elm Company (www.elm.sa), through the 'Yaqeen' service, which relies on the 'Absher' data platform developed by the Ministry of Interior in the Kingdom (www.moi.gov.sa).

• RasidJack Products collect specific identifying data when you register for personal use, such as: name, mobile phone number, and others.

The legal basis and purposes for collecting and using your personal data

Collects and uses data as required by its business functions and services. In most cases, its legal foundations and purposes include the following:

• Compliance with legal obligations: As a payments company, we are bound by various regulatory requirements that may require us to process your personal data, such as: anti-money laundering and identity verification (KYC).

• At RasidJack, we also need to process your personal data to comply with the regulations and instructions issued by governmental, legal, or regulatory authorities within the Kingdom.

• Preparation of a contract: It may be necessary to process your personal data to prepare a contract with you; relates to the following purposes:

• To enable us to provide our products and services to you.

• To manage user identity; when you log in to your account on RasidJack Products.

Legitimate (regular) interests

Where necessary, we process your personal data to fulfill our legitimate and lawful services. The following are examples of legitimate interests.

• Understanding your needs: As a customer, determine your eligibility for our products and services, and understand how you use and interact with those products and services.

• Promoting new financial products and services may be of interest to you.

• Managing our services, including troubleshooting, and systems testing.

• Communicating with you to obtain your opinions about our products and services, including surveys and market research.

• To improve our products, services, and your experience across our Channels, and notify you about major updates and changes to our Channels, including privacy notices, data subject requests, and other policies.

Approval

If we need to process your personal data in a way that is not covered by the legal justifications above, we will do so based on your consent. Please note that you have the right to withdraw your consent at any time, however; Withdrawing your consent will not affect the legality of any operations that took place before your consent was withdrawn. We may need your consent for the following purposes:

• To protect you from fraud; by conducting identity and conflict of interest checks (AML & KYC).

• Marketing and advertising communications with you; you may opt out of receiving such communications at any time; by contacting us using the communication channels included in this Privacy Policy.

We confirm that any personal data we receive will be used for the purposes set out in this privacy policy, or in any other Policy provided to you, except as permitted by laws and regulations, and we will not process your personal data in a manner that is inconsistent with this policy.

Disclosure of Your Personal Data

• We share your personal data with our employees who have access to it; to carry out their duties, we may share your personal data with our affiliates to prepare a contract with you.

• We may also share your personal data with service providers involved in providing the information or services you requested from us; this is for legal purposes, to help us carry out our business and provide our services.

• We rely on these trusted third parties for a range of business operations and delivery services, and we have agreements with these service providers to protect the confidentiality of your personal data.

• We assure you that we do not share your personal data with third parties for their own marketing purposes; except with your express consent.

• We may share your data with any of the following parties:

• Regulatory and judicial authorities to comply with any obligations and requirements issued by legal and regulatory authorities.

• Any other service providers for the purposes of providing products or services to you, improving our products and services, improving your experience across our channels, and promoting new products and services that may be of interest to you.

Protection of Your Personal Data

• RasidJack ensures that your personal data is adequately protected by using the necessary physical, technical, administrative, and procedural security measures to prevent unauthorized access during its collection, use, disclosure, copying, modification, or disposal. We protect your data in accordance with the data protection laws applicable in the Kingdom of Saudi Arabia.

• To maintain the security of your personal data, RasidJack has put in place several technical and organizational measures. Technical measures include the necessary procedures to address Internet security, the risk of data use, data alteration, data leakage, and unauthorized access, taking into account the risks posed by data processing and the nature of the personal data being processed.

• Regulatory measures include restricting access to personal data to only authorized persons who have a legitimate need to know it for the purposes of processing operations.

Retention of Your Personal Data

Rasid Payments Company for Financial Technology is committed to keeping your identifying data, including transaction records, on a local server located in the Kingdom of Saudi Arabia to ensure ease of access and compliance with applicable legislation and regulations regarding keeping your personal data in the Kingdom. Therefore, we will retain your personal data in an identifiable form only for the period necessary to fulfill the purposes set out in this privacy notice (unless a longer retention period is required or permitted by law). We will retain your personal data after the purposes of collection have ended in the following cases.

• If there is a legal or regulatory basis and requirement to retain your data for a certain period, in which case the data will be destroyed upon the expiration of this period or when the purpose of collection has been achieved, whichever is longer.

• If your data is closely related to a case before a judicial authority and retention of your data is required for this purpose, in which case the data will be destroyed once the judicial proceedings are concluded.

Data Subject Rights

Regarding your data, you have the following rights:

• The right to be informed of the legal basis, justification, and purpose for collecting your personal data.

• The right to access the personal data we hold about you.

• The right to request your personal data in a readable, legible format.

• The right to request correction and/or modification of your personal data.

• The right to object or restrict processing; where you object to the accuracy of the personal data we hold.

• The right to request the destruction of your personal data.

• The right to withdraw your consent; to the extent any of your personal data has been collected based on consent.

• The right to file a complaint with the competent authorities.

Possible consequences and risks that may arise if you do not provide or disclose your personal data.

The personal data required by Rasid Payments Company for Financial Technology is necessary to provide services. Therefore, we may be unable to comply with our legal or regulatory obligations to provide you with our products and services.

Changes in Policy

RasidJack works to update this policy, in whole or in part, to recognize any changes in the relevant laws and regulations.

Use of Cookies

To improve your experience, our site uses a standard technology called 'cookies' to collect information about how our site is used safely, and to ensure fraud prevention. The use of cookies is necessary for the operation of our site.

How to Contact Us

You can contact us through the following means and channels:

• Email: Customercare@rasid.com.sa

• Phone: 8001240248 , 920023799

• Through social media.

• Through our website.

• RasidJack applications.

Our location

Rasid Payments Company for Financial Technology Headquarters, Al Malqa, Riyadh, 13521 Kingdom of Saudi Arabia

Disclaimer

• This privacy notice is intended to explain our policy. This notice is not intended to impose any contractual or other legal rights and does not impose any obligation on us to any third party.

• When you log in to third-party websites, you will not be subject to this Notice.

• Furthermore, we are not responsible for the content of third-party websites, and do not represent them.

• Therefore, we recommend that you review the privacy notice of each site you visit.

• This privacy notice complies with the laws, regulations, and instructions of the relevant regulatory authorities in the Kingdom of Saudi Arabia and must not conflict with any Saudi laws and regulations.

• By using or accessing RasidJack Products, you agree to the practices described in this policy.

• It is also your responsibility not to disclose any personal or financial information related to the services provided to you by Rasid Company; to others under any circumstances and at all times.