DATA PRIVACY NOTICE AND CONSENT FORM

CLIENT (the term CLIENT shall be used whether CLIENT is only one or numerous, and shall General Banking Law of 2000, RA 7653 or “The New Central Bank Act”, and RA 9510 or “Credit
also mean “I”, “WE”, ME”, “MY”, or “DEPOSITOR” and such other terms as may have been Information System Act”, RA 10173 “The Data Privacy Act of 2012” and such amendatory laws,
intended to refer to CLIENT in the relevant document/s) understands that CTBC Bank and under other relevant laws, rules, and regulations. The CLIENT acknowledges that
(Philippines) Corp. (“BANK”) is committed to continuously improve its products and services, disclosure of information may be made pursuant to the circumstances set forth in Section 310
and pursue its business plans. To achieve these, and to be able to perform its contractual of the Manual of Regulations for Banks (MORB), as follows: (a) disclosure of information with
obligations and comply with applicable law/s and/or regulatory issuance/s, the Bank shall have the consent of the borrower or consumer; (b) release, submission or exchange of customer
to disclose and to make available to its affiliates, counterparties, telecommunications information with other financial institutions, credit information bureaus, lenders, their
companies, third party service providers such as credit scoring and data analytics companies, subsidiaries and affiliates; (c) upon orders of court of competent jurisdiction or any government
and other relevant third parties wherever situated, on a confidential basis any information office or agency authorized by law, or under such conditions as may be prescribed by the
pertaining to CLIENT’S banking relationship with the Bank such as but not limited to deposit/s, Monetary Board; (d) disclosure to collection agencies, counsels and other agents of the bank
investment/s, loan/s, service/s, broker customer account/s, and product/s including information to enforce its rights against the borrower; (e) disclosure to third party service providers solely
that CLIENT had provided and may hereafter provide in connection with the above-mentioned for the purpose of assisting or rendering services to the bank in the administration of its lending
banking relationship, and other information relating to the CLIENT and other persons including business; and (f) disclosure to third parties such as insurance companies, solely for the purpose
without limitation telecommunications usage data, credit scores, whose Personal Data were of insuring the bank from borrower default or other credit loss, and the borrower from fraud or
voluntarily provided by the CLIENT, such as but not limited to CLIENT’s relative(s), partner(s) unauthorized charges.
and beneficiaries (singly or collectively, “CLIENT’s Contacts”) and such information which the
Bank may have directly or indirectly gathered and may hereafter gather through its own CLIENT also acknowledges that he/she/they is/are aware that he/she/they and his/her/their
verification and validation, through the public domain, and/or through other legally permissible Contacts are entitled to certain rights in relation to the Personal Data that may be collected
methods and means. from him/her/them (and by him/her/them from his/her/their Contacts), including the right to
access, correction, and to object to the processing, as well as the right to lodge a complaint
CLIENT hereby agrees, consents, and authorizes the Bank or any of its agents to collect, use, before the National Privacy Commission in case of violation of his/her/their rights and
disclose, transfer, store, obtain, record, share, update, modify, monitor, and/or process his/her/their Contacts’ rights as data subject. CLIENT warrants that he/she/they has/have
(collectively, “Process/Processing”) CLIENT’S confidential information, personal information, obtained the Consent of his/her/their Contacts for the Processing of their Information for the
and sensitive personal information, as defined under RA 10173 “The Data Privacy Act of 2012” above Purposes and disclosure to the Recipients. Furthermore, if CLIENT has any feedback or
and its implementing rules and regulations and any of its amendments, as well as other laws inquiries relating to his/hers/their/its Information, CLIENT may send an email to
relevant to the confidentiality of bank deposits and investments, and data privacy and protection dataprivacyofficer@[Link].
(collectively, “Information”), whether manually or in electronic or digital form, in relation to any
and all information CLIENT voluntarily provided in the BANK’s forms and/or documents such as CLIENT undertakes to immediately inform the BANK should he/she/they have any updates or
application forms, account opening forms, loan documents, written or electronic changes on his/her Information through the branch of account or contact the BANK’s Customer
communications, and/or otherwise possessed, or collected or gathered by the BANK through Care Unit at +63 (2) 8840-1234 (Metro Manila); 1-800-10-8401234 (Toll-Free from other
its own verification and validation, through the public domain, and/or through other legally provinces through PLDT); or customercare@[Link]. The consent and authority
permissible methods and means, for one or more of the purposes, which in summary includes herein given shall apply to such updates and/or changes in the Information.
but are not limited to the following:
(a) processing of application for various services and products of the BANK as well as CLIENT understands that if he/she/they do not promptly provide Information which the BANK
services and products of its business partners ("third parties"), including without limitation, reasonably requested, or withdraw any consent to Information which the BANK is required to
performing know-your-client (KYC) and customer identification procedures to establish your process, store, update, disclose, or transfer for the above Purposes and recipients, the BANK
identity, conducting credit checking and verification; has the option and hereby reserves the right not to pursue its relationship with CLIENT without
(b) administering and/or managing relationship and/or account(s) with the BANK; and any liability to CLIENT nor to any third party.
(c) providing marketing, advertising, and promotional information of various
products/services that the BANK, its business partners, and related companies may offer CLIENT hereby agrees and acknowledges that the above consent shall remain valid, and that
(“Marketing purpose”) through short messaging service, voice/telephone or mobile calls, the Information will be retained in the Company’s records upon opening of the Account and until
email messages, fax messages, and /or postal mail; ten (10) years after closing of the Account or last transaction involving the Account, or
(d) conducting studies, research, automatic and manual profile analysis, behavioral termination of my/our relationship with the BANK in whatever manner, unless such consent is
modeling (including without limitation, training and back-testing machine learning algorithms otherwise revoked in writing, whichever comes earlier. However, if the Account becomes subject
of third-party service provider’s software with the use of your historical loan/ credit/ financial of investigation or litigation in court, or administrative body or regulatory agency, the ten (10)
data) on your values, scores, metrics from your Information, preferences, financial behavior year period shall be reckoned from the date of finality of judgment of the court or of the
across product interactions, along with market trends; administrative or regulatory agency. CLIENT agrees that the Information will be
(e) such agreement, consent, and authority to disclose and provide such Information shall deleted/destroyed by the BANK after this period in accordance with applicable laws and
include the following Recipients and Purposes: regulations.
(i) the BANK’s accredited service providers, the BANK’s affiliates, including its Parent
Bank, counterparties, telecommunications companies, third party service providers such CLIENT agrees that the BANK shall not be liable to CLIENT, and that CLIENT shall save the
as credit scoring and data analytics companies and other third parties whether situated BANK free and harmless from, and indemnify and reimburse the BANK and its Directors,
within or outside the Philippines for purposes of servicing the needs of CLIENT, and/or to Officers, Shareholders, Employees, and Representatives for any and liabilities, claims,
enable the BANK to perform its contractual obligations. assessment penalties, costs, and expenses of any kind whatsoever, that may be imposed
(ii) regulatory authorities situated within or outside the Philippines which disclosure may and/or incurred by CLIENT relative to, or in connection with the consent and authority to
be necessary or incidental to the conduct of business by the BANK, its Parent Bank, Process, and/or to the disclosure of such Information mentioned herein including those of the
BANK’s affiliates, and/or service providers, and/or counterparties; CLIENT’s Contacts, affiliates, counterparties, telecommunications companies, third party
(iii) such other Recipients now existing and may hereafter exist, for the purpose of service providers such as credit scoring and data analytics companies, and other relevant third
servicing the requirements of the CLIENT and/or to enable the BANK and/or its Parent parties wherever situated, documents, and/or records for the Purposes and to the Recipients
Bank, its affiliates, counterparties, and/or service providers, whether these recipients are and such other persons and entities in connection with the account, and in connection with any
located within or outside the Philippines, to conduct their businesses, perform their discontinuance of the relationship between CLIENT and BANK regardless of which party
contractual obligations, and/or comply with regulatory requirements (collectively the initiated such discontinuance.
“Purposes”, and the “Recipients”).

Accordingly, CLIENT hereby gives his/her/their consent and authority to disclose to the Roland T. Mago
_________________________________________________
Recipients and for the Purposes, any and all Information pertaining to CLIENT’s existing and Client’s Signature over Printed Name
future deposits, investments, and transactions with the Bank, which Information may be referred May 21, 2025
to as confidential and/or disclosures of which are generally prohibited under the relevant secrecy
laws, including but not limited to RA 1405 or “An Act Prohibiting Disclosure of or Inquiry into,
Date: ________________________
Deposits With Any Banking Institution and Providing Penalty Therefore”, RA 6426 or “An Act
Instituting a Foreign Currency Deposit System in the Philippines, and for Other Purposes”, the