Cookie Notice

1. Introduction

The companies within the TTB Group (the "Company") use cookies ("Cookies") and similar technologies on the Company's websites, applications, and electronic channels to support system functionality, maintain security, improve service performance, and enhance the user experience.

This Cookie Notice has been prepared to explain the types of Cookies used, the purposes for which they are used, consent management, and your rights relating to the use of Cookies.

Where the Company is required to collect your personal data for the purpose of entering into or performing a contract, or for compliance with applicable laws, your failure to provide such personal data, or the provision of inaccurate or outdated personal data, may affect the provision of services, related transactions, or compliance with applicable legal requirements.

2. What Are Cookies and Similar Technologies?

Cookies and similar technologies, such as Web Beacons, Pixel Tags, and Software Development Kits (SDKs), are small data files or pieces of code that are stored on or accessed from a user's device to collect information relating to usage behavior, browsing history, preferences, or online identifiers.

These technologies enable the Company to recognize your device, remember preferences, and collect certain information relating to your use of the Company's websites, applications, and electronic channels, helping to ensure that such platforms operate properly, securely, and efficiently.

For the purposes of this Cookie Notice, Cookies and similar technologies are collectively referred to as "Cookies."

3. Information Collected Through Cookies

The Company may collect certain information through Cookies, including:

• IP Address
• Device Information
• Browser Type and Version
• Operating System
• Date and Time of Access
• Browsing History and Pages Visited
• Cookie Identifiers
• Log Information and other technical information relating to the use of the Company's websites, applications, and electronic channels

The Company will collect such information only to the extent necessary for the purposes described in this Cookie Notice.

4. Types of Cookies and Purposes of Processing

The Company's websites, applications, and electronic channels may also incorporate Third-Party Cookies, such as those provided by analytics providers, social media platforms, or advertising networks. Such third parties may collect information relating to your activities on the Company's websites or electronic channels for analytics, assessment, or personalized advertising purposes.

The processing of such information is governed by the privacy policies of the relevant third parties. As the Company does not control the processing of personal data carried out by such third parties, you are encouraged to review their Privacy Notices and Cookie Notices separately through their respective websites.

5. Disclosure of Information and Data Recipients

The Company will not disclose your personal data to any third party unless there is a lawful basis for such disclosure or your consent has been obtained.

The Company may disclose your personal data to:

• Companies within the TTB Group
• External Service Providers and Data Processors, such as information technology, cloud, marketing, and market research service providers
• Assignees and Parties Involved in Corporate Transactions
• Government Authorities Authorized by Law, including regulatory authorities, police authorities, public prosecutors, and courts
• Business Partners, such as life insurance companies, non-life insurance companies, securities companies, and automobile dealers
• Other Persons or Organizations as Necessary, including associations, non-profit organizations, and social media service providers

Any disclosure will be made only to the extent necessary for the purposes described in this Cookie Notice

6. Retention Period & Cookie Inventory

The Company will retain information collected through Cookies only for as long as necessary to fulfil the purposes described in this Cookie Notice or as otherwise required by applicable laws.

Retention periods may vary depending on the type of Cookie, its intended purpose, and applicable legal requirements. For example, Session Cookies are automatically deleted when you close your browser.

The Company may make available details of the Cookies currently used, including the cookie name, category, purpose, service provider, and retention period, through the Cookie Settings or other channels designated by the Company.

The Cookies used may vary depending on the website, application, product, service, or electronic channel of each company within the TTB Group and may be updated from time to time to support business operations, technological developments, or system enhancements.

7. Consent Management

You may provide, withdraw, or modify your consent preferences relating to non-essential Cookies at any time through the Cookie Banner or Cookie Settings provided by the Company, or through your browser settings.

Please note that disabling certain types of Cookies may affect the functionality of the website or result in certain services or features not operating properly.

The withdrawal of consent will not affect the lawfulness of any processing carried out prior to such withdrawal.

8. Data Subject Rights

Subject to applicable laws, you, as a data subject, have the right to request that the Company take the following actions with respect to your personal data:

• Right to Withdraw Consent
  You have the right to withdraw any consent previously given to the Company at any time, unless such withdrawal is restricted by law or contractual obligations.
  The withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal. However, withdrawing consent may result in your inability to receive certain services, such as marketing communications and promotional information.
• Right to Object to the Processing of Personal Data
  You have the right to object to the processing of your personal data where the Company relies on its legitimate interests as the legal basis for processing or where your personal data is processed for direct marketing purposes.
• Right to Lodge a Complaint
  You have the right to lodge a complaint with the competent authority if you believe that the collection, use, or disclosure of your personal data is not in compliance with applicable laws.
• Right to Rectification
  You have the right to request that the Company rectify your personal data to ensure that it is accurate, complete, and up to date, and to prevent any misunderstanding arising from inaccurate or incomplete information.
• Right of Access
  You have the right to access and obtain a copy of your personal data, as well as to request disclosure of the source from which the Company obtained such personal data where you did not provide the data directly to the Company, except where otherwise restricted by law or where such disclosure may adversely affect the rights and freedoms of other persons.
  The Company may charge a reasonable fee permitted by law, if you are informed in advance. Any such request will be processed in accordance with the conditions, procedures, and timeframes prescribed by applicable laws.
• Right to Data Portability
  You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, request that the Company transmit or transfer such data to another data controller.
• Right to be forgotten
  You have the right to request that your personal data be erased, destroyed, or anonymized where the data is no longer necessary for the purposes for which it was collected, has been unlawfully collected or processed, or where otherwise required or permitted by applicable law.
• Right to Restriction of Processing
  You have the right to request the restriction of the processing of your personal data while the accuracy of the data is being verified or in other circumstances prescribed by applicable law.
  If you are below the age required by applicable law or are otherwise unable to exercise your rights on your own behalf, your lawful representative may exercise such rights on your behalf.

The Company may refuse your request to exercise certain rights were permitted or required by law, where the request may adversely affect the rights and freedoms of others, or where compliance with the request is not possible due to legal or technical limitations. In such cases, the Company will inform you of the reasons for its decision.

9. Contact Information

If you have any questions regarding the use of Cookies or the protection of your personal data, you may contact the relevant Company or its Data Protection Officer (DPO) using the contact information set out below.

The Company may review and update this Cookie Notice from time to time to ensure compliance with applicable laws, regulations, and notifications issued by the relevant authorities. The latest version of this Cookie Notice will be made available on the relevant Company's website at https://www.ttbbank.com/en/policy/privacy or through other appropriate communication channels.

Version: October 2026