GENERAL TERMS AND CONDITIONS OF USE FOR QUICKIPAY MERCHANTS 1. General

1.1 This document includes the general terms and conditions under which the QuickiPay Company(s) and the Merchant enter into a payment management mandate (hereinafter “TCG” or “Agreement”).

1.2 The natural or legal person that contracts the QuickiPay Services is called the “Merchant”.

1.3 The QuickiPay Services are those defined in clause three (3) of this Agreement.

1.4 The QuickiPay Companies are the companies that provide QuickiPay Services, in seven (7) countries: Colombia, Argentina, Brazil, Mexico, Chile, Peru and Panama, (hereinafter the “QuickiPay Countries”).

1.5 The Merchant contracts the QuickiPay Services with one or several QuickiPay Companies, depending on whether it processes your payments in one or several QuickiPay Countries. In such a way that if you process your payments in a single QuickiPay Country, you create a single legal relationship with the QuickiPay Company incorporated in that QuickiPay Country, said QuickiPay Company being your counterparty. If, on the other hand, you process your payments in more than one QuickiPay Country, you create an independent legal relationship with each QuickiPay Company incorporated in each of the QuickiPay Countries in which you process your payments, thus having two counterparties. (As an example, if the Merchant processes your payments in Colombia, its counterparty is QuickiPay Colombia S.A.S. but if it processes your payments in Colombia, Argentina and Chile, its counterparty is QuickiPay Colombia S.A.S. for payment processing in Colombia, E-Payments S.A. for payment processing in Argentina and Dineromail Chile S.A. for payment processing in Chile).

1.6 The applicable law to settle disputes arising between the Merchant and the QuickiPay Company(s), will be that of the country of domicile of the QuickiPay Company that is its counterparty for the dispute in question.

1.7 Regardless of your domicile, the Merchant will receive payments in the QuickiPay Countries in which you have a Virtual Account, through the local payment methods enabled by QuickiPay in said countries.

1.8 QuickiPay may, at its discretion, enable the Merchant to receive payments with credit cards issued by an issuing bank that does not have a presence in the QuickiPay Countries where the Merchant processes your payments.

1.9. To enjoy the QuickiPay Services, the Merchant will carry out a technical implementation in accordance with the integration manuals and technical help material made available at http://developers. QuickiPay latam.com or any url that replaces the previous one. It will be the Merchant’s responsibility to make the necessary adjustments and technical developments in its system and websites in order to properly implement the QuickiPay system. 2. Modifications to the Agreement

2.1 QuickiPay will modify this Agreement by notifying the Merchant of the changes in question to its registered email and/or in the Merchant Portal. 2.2. QuickiPay will give the Merchant a period of thirty (30) calendar days to accept or reject the change in question, after which the change will become effective. 2.3 If the Merchant rejects the modification during the period indicated for its entry into force, QuickiPay will terminate the Agreement and disable your QuickiPay Account. The Merchant will not receive any compensation for the termination in question.

2.4 The silence of the Merchant, after the period indicated for the entry into force of a modification, will be presumed as tacit acceptance of the same.

2.5. The Merchant will periodically consult your email and the Merchant Portal in order to review the modifications to this Agreement. 3. Services

3.1 QuickiPay is a payment service provider that provides the Merchant with the following services: (A) Grants an exclusive and revocable license to use a technological platform for online payment processing resulting from the online sale of goods and services (the “QuickiPay Platform”). (B) Enables you to pay for the goods and services offered to your buyers through various means of payment. (C) Executes the validation of transactions paid by credit card in order to mitigate the risk of fraud due to identity theft of cardholders. D) Collects, on behalf of and on behalf of the Merchant, the payments resulting from the transactions in question. E) Transfers, to the Bank Account of the Merchant, the amounts collected on the occasion of said payments in various ways, through our Websites, Applications, Platforms or product or service offerings. For example, you may provide us with your personal information in the following situations: · When you provide us with your contact information so that we can communicate with you about our services and products; · When you enter into a contract or confirm your identity with us (either by email, telephone, or through electronic verification); ·

When you order our products directly or through our designated providers (such as marketplaces or credit providers) or by opening an account with us; · If you scan a QR code that asks you to provide us with your personal information to provide you with the service of processing a payment on behalf of one of our

merchants, or if you are using one of our proprietary payment products; · If we request your contact and payment information through our webcheckout, payment sites and/or through similar channels; ·

If you participate in a contest, offer or survey or if you request that marketing material be sent to you. ·

When you send us a support request through one of our support channels, or · When you access and navigate our Website(s), Applications and Platforms. For more information see our Cookies Policy. 2. If we collect personal information from third parties or publicly accessible sources.

We obtain personal information from third parties or, if publicly available, as permitted by applicable law, including information from: Our merchants, payment industry partners, and financial institutions. For example, a business could offer you several payment options for its goods or services (credit, debit or hybrid card, electronic funds transfer (TEF), wallet, mobile money, loyalty credits), and the payment will be disbursed to the Merchant bank account at an authorized financial institution. In such situations, merchants, payment industry partners, and institutions

Financieras are responsible for your personal information, but we collect such personal information in order to carry out the payment transaction. We recommend that you read the privacy policies of these third parties to learn more about how they treat your personal information. · From platforms and social networks when you authorize it. For example, according to the configuration of your networks

social media, if you choose to connect your social media account with a Quickipay product, certain information from your social media account will be shared with us (which may include information that is part of your profile); · From financial institutions and fraud prevention agencies for the purposes of conducting risk and fraud assessments or analysis. For example, before providing you with products, services, or financing (as applicable), we conduct verifications to prevent fraud and money laundering, and to confirm your identity. These verifications require us to collect your information; · From third parties with whom we have entered into contracts to support our business operations; ·

From sources of public access, in accordance with the legislation in force in your country; · From credit reference agencies or centers, financial information operators or banks, in accordance with current legislation. For example, if Quickipay offers credit or loan products in your country, certain credit reference agencies or clearinghouses will provide us with certain information about you for the purpose of conducting a credit check or assessment, or

From third parties, within the group of companies to which Quickipay belongs, that is, Prosus N.V., https://www.prosus.com/ including its affiliates and subsidiaries, subject to current legislation. 4. WHAT ARE THE LEGAL BASES ON WHICH WE RELY TO PROCESS YOUR PERSONAL INFORMATION?

We process personal information only if we are validly entitled to do so. In general, we use your personal information in the following cases: · When it is necessary to do so for the fulfillment of a contract established with you directly or indirectly; · It is necessary for our legitimate interests (or the legitimate interests of a third party). We make sure that your fundamental rights take precedence over our legitimate interests; ·

We use your personal information in order to comply with our legal obligations, for example by ensuring that your personal information is used to comply with anti-bribery and anti-money laundering requirements. We could request your explicit consent if the current legislation requires us to do so. For information about when and where explicit consent is required, please click here and choose the appropriate country. in some In different countries, there may be additional legal bases for the processing of personal information. The foregoing depends on the applicable law and the products and services that are offered to you.

5. PURPOSES FOR WHICH Quickipay MAY PROCESS YOUR PERSONAL INFORMATION 1. Verify, authenticate and authorize the use of our products or services Carry out risk assessments and the “know your customer” process in order to authenticate and authorize the use of our products or services depending on whether you are a business, consumer or customer and the product or service you choose. The type of personal information that is required typically includes Identity, Contact, and Financial information. This is necessary for Quickipay to evaluate your contract request and to comply with our legal obligations under certain laws.

2. Processing payment transactions made through our Platforms The types of personal information necessary to provide a service or product and the legal reasons depend on the specific means of payment available in your country through Quickipay. Quickipay offers a wide variety of local and international payment methods, subject to specific terms of service for each product (contracts) and legal obligations. For example, if Quickipay offers card payment processing as a payment aggregator on a Platform, Quickipay processes personal information received from merchants, such as detailed transaction information and whether the payment is made by card (the detailed cardholder information, such as the name on the card) in order to complete the payment you make to the merchant for the purchase of a product or service. Quickipay often acts as a processor of personal information on behalf of the merchant, acting as the data controller. In other cases, certain payment transactions require you to provide us with the information directly.

staff on our Platform so that we can process a transaction; in this case our purpose is to process the payment for you. Click here and then on the option to select the country of your choice for detailed information specific to the payment methods available in your country. 3. Protect our business and ensure compliance with the law We process personal information to comply with the requirements of the law,

applicable regulations, standards, rules, codes and requirements of financial institutions with which Quickipay must comply. This includes: · ·

Authenticate and validate payments to mitigate and protect against phishing or fraud. To achieve this, some of your personal and non-personal information may be collected directly by Quickipay or provided to Quickipay by merchants. Quickipay will use this personal information to enter fraud systems available for such validation and will be maintained there for future reference and cross referencing of

information to validate payments; · Consult and report your personal information and the behavior of your monetary obligations to operators or credit, financial, commercial or service risk centers legitimately

incorporated or to other financial institutions in accordance with applicable law; · · Verify your identity and compare your information in order to confirm the accuracy in the information obligations according to the applicable law or the rules of the

payment systems; · · Treat your personal information if you exercise your right of ignorance about purchases made or if your transaction is subject, for example, to a payment or refund dispute from a financial institution, and · ·

Process your personal information to ensure the continuity of our business and adequate recovery from failures in our Websites, Applications, Platforms, services and products.

4. Managing our relationship with you If you contact us or otherwise provide us with your Contact Information (for example, by registering or completing an inquiry form on our Website(s), or by subscribing to receive support and communication about the status of one of our services or security or fraud control alerts), we may process your personal information in order to:

Inform you about the products or services you have with us and any changes to such products or services and any related legal documents; · Notify you in the event of any interruption in services or products; · Ask you for information on how to improve or develop services or products, and other effective ways to communicate with you; · Provide you with support service and problem solutions or to communicate or send you notifications specifically related to the services or products that we offer you.

emos; · Use your personal information in transaction control or fraud reports (or both) as part of fulfilling our contract.

You have the ability to unsubscribe from such reports subject to the terms of our agreement. Be sure to check with your finance team before unsubscribing. 5. Marketing our products and services and related services to you We may use personal information to promote our products and services and to notify you about events, offers, promotions, marketing programs and other similar marketing campaigns. See Section 7. 6. Conduct research, develop, and improve our products and services We may use the personal information we collect to: Research and obtain insights into market trends and needs, and develop or innovate our technologies, products, and services to meet those trends and needs.

We can use machine learning and artificial intelligence techniques to conduct research that allows us to acquire such knowledge; · Analyze the use that visitors make of our Websites, Applications, products or services in accordance with this Global Privacy POLICY and our Cookies Policy; · Improve and personalize our relationships with businesses and customers; ·

Provide insights and statistical reports to merchants, based on the data we receive from them; ·

Use your personal information in accordance with applicable laws and regulations in order to provide credit analysis and related credit services. 6. TO WHOM DO WE DISCLOSE YOUR PERSONAL INFORMATION OR WITH WHOM DO WE SHARE IT? ·

We may share personal information with internal third parties, which correspond to third parties of the group of companies to which Quickipay belongs, that is, Grupo Prosus https://www.prosus.com/companies. We may disclose your personal information to those companies in order to: o Provide technical and support services to such internal third parties and receive some of these services from them; o Contribute to research, analysis and study of data to improve the products and services that Quickipay and other internal third parties respectively provide. · We may share your personal information with external third parties such as: o Merchants in accordance with our service agreements (also known as our terms and conditions or contracts).

For example, to process a card payment, we may need to share a buyer’s credit card details with the merchant with whom the payment is associated. If you purchase goods or services through Quickipay’s services, we also provide your credit card billing address to the merchant to help you complete the payment transaction. o Authorized financial institutions and allied banks with whom we partner to jointly create and offer products and services. Depending on the type of payment chosen by the customer, payer or buyer, Quickipay will share the information with the financial institutions that validate and process each means of payment for your corresponding approval, validation and settlement. This means that your personal information may be collected for such purposes by financial institutions issuing the means of payment, acquiring financial institutions, payment processing networks, franchises such as Visa, MasterCard, American Express and

Diners Club. o Operators of financial databases and/or risk centers or credit or financial information to report financial information and carry out the mandatory credit rating in order to determine the respective viability, according to what is strictly

allowed by law. o Service providers or contractors that support our business operations. o Companies we plan to merge with or may be acquired by, in which case we will require the newly formed entity or acquiring entity to comply with this Privacy Policy in its entirety with respect to your personal information. o In compliance with the law or by order of an administrative authority, fraud detection agencies or other third parties and when the law obliges us to do so (by subpoena, court order or similar legal procedure). o International organizations with which we partner to offer and/or develop products and services subject to the requirements of this Policy and the laws

applicable. Quickipay adopts all reasonable measures to guarantee that any third party involved in the processing of your personal information has established the necessary technical and organizational measures, including the respective commission or transmission and data transfer contracts, when applicable.

vibe. If required by applicable law, we can provide you with a list of our sub-processors or suppliers, for which you should contact us at protecciondedatos@Quickipaylatam.com. 7. MARKETING You may receive marketing communications from

Quickipay, for example, if you: · Have requested additional information about us; · You have provided us with your Contact Information to obtain content or communications from us, including research papers, ideas or studies conducted by us; · You have subscribed to Quickipay’s products or services, or · You have linked to a promotional campaign, offer, survey or loyalty program and have provided your detailed contact information to participate in any activity.

Quickipay may perform these marketing activities directly or through promoters. The provision of such marketing activities is subject to the applicable laws of the country where the marketing and communication activity is carried out. We keep a record of the Personal Marketing and Communications Information that we use. You have the right to stop receiving such advertising by clicking on the opt-out or unsubscribe link(s) included in such advertising communications from

Quickipay. In accordance with locally applicable laws in the country of the respective Quickipay subsidiary, your consent may be required before you receive marketing communications from Quickipay. Quickipay may also use Personal Information for Marketing and Communications to improve and personalize the content of our advertisements, promotions and advertising that may be of interest to you. 8. COOKIES AND SIMILAR TECHNIQUES

Quickipay uses cookies, web beacons and similar techniques (“cookies”) when you access our Websites or Applications. A cookie is a small text file that contains a string of alphanumeric characters (numbers and letters). Here we explain how to use cookies on each of our relevant Websites or Applications and the possibilities that you as a visitor to each Website or Application have regarding the use of cookies (our Cookies Policy for the Website or Application from which are reading this Privacy Policy). 9.

INTERNATIONAL DATA TRANSFERS We are a global company with a global footprint. Your personal information may be processed locally in the country where you work or reside or in any other country where we are present or our approved third party service providers operate globally, as permitted by law. If your personal information must be moved outside of the European Economic Area or another country that restricts transfers of personal information, we use the standard contractual clauses of the

European Commission or other transfer mechanism in accordance with local regulations, such as consent, to ensure that your personal information is kept at an adequate or similar level of protection to that employed in your home country. 10.

DATA RETENTION

Quickipay may store your personal information for as long as it is necessary to fulfill the purposes for which it was collected. Quickipay’s retention of personal information is determined by considering compliance with legal (contractual or regulatory) accounting and reporting requirements. For example, for the prevention of fraud and money laundering, the fight against corruption and the financing of terrorism. Quickipay also takes into account the terms established by commercial or data privacy laws, as well as by other relevant laws in the different countries where Quickipay provides its services. 11. WHAT ARE YOUR RIGHTS AS A HOLDER OF

PERSONAL INFORMATION? We make sure that you can exercise your rights as the owner of personal data in accordance with applicable privacy and data protection laws. This means that Quickipay seeks to provide reasonable assistance in responding to data subject requests regarding the processing of personal information and the rights to access, delete, delete, modify, and revoke consent to the processing of personal information. Depending on the laws applicable in your country, the data protection regulations may contemplate different rights in favor of the holders of personal data. For example, within the framework of the General Data Protection Regulation (RGPD), you can exercise the following rights: o Access your personal information (right of access): you have the right to ask us if we treat your personal information and you can ask us to provide detailed information about the personal information we process about you (as required by applicable law). o Correct or rectify your personal information: it can be ask us to correct or change the inaccurate personal information we process about you.

o Delete your personal information: You can ask us to delete or erase personal information in certain circumstances if the personal information is no longer necessary for the purposes for which it was collected (subject to local legal data retention obligations). o Revoke your consent: you can withdraw the processing consent you have given us and prevent further processing if there are no other legal reasons (including legitimate interests) for the processing of your personal information. o Limit the processing of your personal information: You can request that the processing of certain personal information be limited in certain circumstances, as an objection to our processing of your personal information based on our legitimate interests. o Request data portability: you can ask us to transmit to a third party the

personal information that you have provided to us, in a machine readable format. o Object to automated decision-making, including profiling, if such decisions have a legal effect on you. o File a complaint: You can file a complaint about our treatment of your personal information with the data protection regulator or the corresponding authority in your country. In the case of the EEA (European Economic Area), you can find the full contact details of your corresponding National Data Protection Authority at: https://edpb.europa.eu/about-edpb/board/members_en Send a request to [privacy@Quickipay.com] if you wish to exercise any of the aforementioned rights. In certain situations these rights are limited, for example if we are legally required to process your personal information and this may limit your ability to use some of our products and services. If you have any questions about the rights and options available to you in your country outside the EEA, you can click here for additional information in this regard. 12. SECURITY: HOW WE PROTECT AND STORE PERSONAL INFORMATION The security of your personal information is important to Quickipay.

Quickipay adopts legal, technical and organizational measures that it considers necessary to maintain the confidentiality and security of your personal information with due respect to the applicable obligations and exceptions in accordance with current legislation. In addition, Quickipay complies with payment industry standards regarding the protection of payment card information. Each local company is regularly audited to maintain the highest level of security certification with the Payment Card Information Security Standards Council (PCI) for card data protection.

Quickipay regularly reviews its Policies regarding the collection, storage and treatment of your personal information, including physical security measures to prevent fraudulent or unauthorized alteration, loss, consultation, use or access to your personal information.

Quickipay has established procedures to handle a breach of personal information and will notify you and any relevant regulator or authority of a breach where we are legally required to do so. 13. MINORS Quickipay does not voluntarily or actively collect, use or disclose personal information from minors, in accordance with the equivalent minimum age in the corresponding jurisdiction, without the prior consent of the parents or guardians of the child or adolescent. Quickipay’s services are not intended for, or designed for, use by minors. If we learn that we have collected personal information from a minor without first obtaining verifiable parental consent, we will take steps to delete the information as soon as possible. 14. MODIFICATIONS TO THE PRIVACY POLICY

AND YOUR OBLIGATION TO NOTIFY US OF CHANGES IN YOUR DATA This Global Privacy Policy may change over time. The most recent version of this Global Privacy Policy has been posted on this Website. This version was published on May 14, 2020 and was last modified on May 14, 2020. We will notify you of any changes to this Privacy Policy.

Global Privacy by posting on our Website. You can download a copy of this Global Privacy Policy from your browser to save or print it. To access the particular privacy provisions by country required under applicable law, click here. Any changes in the particular privacy conditions of a country will be published on the websites of our local companies. The

particular privacy provisions of the country shall prevail if there is any difference. It is very important that any personal information we hold about you is correct and up-to-date. Please inform us of any changes to your personal information. 15. HOW TO CONTACT US The controller of this Website is MIH Quickipay BV, with registration number 521179839. Quickipay has appointed a Global Privacy Officer (CPO) and a Data Protection Officer (DPO). acronym in English). You can contact us via email, privacy@Quickipay.com. Click here to find out if there are particular privacy provisions for your country and detailed contact information for the local Quickipay company in that country.