I/We hereby certify that all the above information is true and correct to the best of my/our knowledge.

That any misrepresentations or falsity within therein will be considered as an act to defraud the Bank. I/We authorize the Bank to verify and investigate the above statements/information as may be required covering this application from above references or from whatever sources the Bank may consider appropriate. I hereby unequivocably allow Welcome Bank, any of its subsidiaries and affiliates and Third Party providers to collect, retrieve, process, use and store data such as name, age, photographs, fingerprints, other biometric data (e.g. facial recognition and voice recognition), mobile number, mobile phone usage data, employment details, income, financial data, financial profile, credit standing, loan payment history, SSS contributions, Philhealth contributions, and other information required in the application form for the purpose of reviewing and processing the Applicant’s loan application.

For this purpose, I/We hereby waive my/our rights on the confidentiality of client information and expressly consent to the processing of any personal information and records relating to me/us that the Bank might obtain from third parties, including government agencies, my/our employer, credit bureaus, business associates and other entities we may deem proper and sufficient in the conduct of our business, sensitive or otherwise, in accordance with Republic Act No. 10173 otherwise known as the Data Privacy Act; Republic Act No. 1405 also known as the Bank Secrecy Law; and Republic Act No. 6426 or the Foreign Currency Deposit Act for the purpose of determining my/our eligibility for the loan/s which I/We are applying for.

I/We further agree that this application and all supporting documents and any other information obtained by the Bank relative to this application shall remain as the Bank’s property whether or not the loan is granted.

I/ We expressly and unconditionally authorize the Bank, to disclose to any other Bank/s or affiliate and other financial Institution any information regarding me/us including the handling thereof to the Bangko Sentral ng Pilipinas, Anti-Money Laundering Council, Credit Bureaus and/or any other governmental body.

I/We agree that all statement/Information gathered about me will be used to determine my/our eligibility for this loan.

I/We also understand that any false statement or concealment of information which may be discovered after the loan has been granted shall be sufficient basis for the Bank to consider the loan due and demandable immediately.

I hereby acknowledge and authorize the Bank: 1) the regular submission and disclosure of my basic credit data (as defined under Republic Act No. 9510 and its implementing Rules and Regulations) to the Credit Information Corporation (CIC) as well as any updates or corrections thereof, and (2) the sharing of my basic credit data in accordance with Republic Act No. 9510 or the Credit Information System Act. (CISA).

※ Applications will be processed under Welcome Bank (WBP) depending on the loan products availed and/or client’s location.

Welcome Bank (Rural Bank), Inc. (“Welcome Bank”) is committed to providing you with competitive products and services to meet your financial needs and help you reach your goals. We are equally committed to protecting the privacy of our customers in accordance to Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, R.A. No. Secrecy of Bank Deposit Act, R.A. 9160 Anti-Money Laundering Act 2001 as amended, Credit Information Corporation (CIC) and other applicable laws of the Philippines. It describes the Company’s privacy policy and practices concerning our customers personal and sensitive information, we collect, process, use and share in the course of the regular conduct of banking.

Welcome Bank is a banking institution duly organized and existing by the virtue of laws of the Republic of the Philippines. We provide our customers with financial products and services such as, but not limited to deposits, consumer and business loans, safety deposit boxes and other innovative products.

When you apply for or avail of our products or services, we will collect personal and sensitive information about you in order for us to offer and provide financial products that is beneficial and suited to your needs from the following:

a. Information we received from your accomplished applications and other bank forms with us

• Name, date and place of birth, address and contact detail, email address; gender, race, religion

• Specimen signatures

• Government issued Ident ification Cards numbers and other details

• Financial information (income, expenses, investments, insurance, bank balances and transaction history, assets and liabilities);

• Employment details/business interests

b. Information we get from submitted documentary requirements of loan products

c. Information we get from audio communications with you; CCTV images and similar recording devices

d. Information about your transaction history with us and other dealings with

e. Information we received from third parties or entities upon conduct of appropriate credit and negative information checks

f. Information we received from your online application with our subsidiaries and affiliates

We collect your personal information or data primarily through your accomplished application forms and documentary requirements submitted to us, conversations, interviews/interaction with our authorized personnel and consented third-party verifications from government and regulatory agencies, financial institutions, accredited outsourced service providers and vendors that we would use for verification and checking of personal, sensitive and privileged information you provided to us.

We collect the personal, sensitive and privileged information for purposes such as but not limited to processing of the banking product and service you choose to avail from us; performance of our daily operational, business and technology-driven functions, marketing and advertisement, sales lead generation; account management, client profiling, and regulatory requirements from financial institutions.

In order for us to conduct our business, Welcome Bank may disclose all of the information we collect, as described above, to other financial institutions with whom we have agreements, to other companies that perform services on our behalf, or to non-affiliated third parties for the purposes of processing and servicing transactions that you request or authorize, so that we can provide you competitive products and services.

We may also disclose non-public personal information about you under circumstances as permitted or required by law. These disclosures typically include information to process your transactions on your behalf, conduct the operations of our Bank, and follow your instructions as you authorize, or protect the security of our financial records. To protect our privacy policy, we only work with companies that agree to maintain strong confidentiality protections and limit the use of information we provide. We do not permit these companies to sell the information we provide to other third parties.

Welcome Bank (Rural Bank), Inc., engages the services of Finance Technology Inc., directly or through its Partners, may collect, retrieve, process, use and store his/her personal data such as name, age, photographs, fingerprints, other biometric data (e.g., facial recognition and voice recognition), mobile number/s, mobile phone usage data, employment details, income, financial data, financial profile, credit standing, loan payment history, and other information required in the application form for the purpose of reviewing and processing the Applicant’s loan application. The Applicant consents to the collection of his/her personal data from the Applicant her/himself, or from other personal information controllers such as, but not limited to, telecommunications companies, for credit scoring purposes. The Applicant’s personal data such as mobile number, email address, and address, will be shared to a credit scoring service provider for credit investigation, credit scoring, data analytics, and data profiling, which includes the regular updating of the Applicant’s credit score. The personal data secured may also be used for direct marketing of products and services of Partners

We may disclose non-public personal information about you to the following third parties as mandated by law:

- Government agencies, such as Bangko Sentral ng Pilipinas, Anti-Money Laundering Council, Philippine Deposit Insurance Corp., Securities and Exchange Commission, Bureau of Internal Revenue, National Privacy Commission, Insurance Commission, Credit Information Corp.

- Organization of financial institutions, i.e. BAP, Credit Bureau, Inc., RBAP,

- Affiliates of the Company that run financial businesses.

- Accredited collection agency and/or law firm in case of delinquency.

If you closed or terminate your account with Welcome Bank, we will not share information we have collected from you except as permitted or required by law.

We maintain physical, digital or electronic copy of your data to store your personal, sensitive and privileged information and adopt the necessary information security measures in the protection of your data as required and in compliance with the Data Privacy Act.

We restrict access to non-public personal information about you to any persons that may not be authorized by you and our Management.

We will store your nonpublic personal information under our custody for five (5) years from the date of termination of your account consistent with Rule 9.B of 2016 Implementing Rules and Regulations of RA 9160, as amended, except when you are subject of a case where your personal information must be retained and safely kept beyond the five-year retention period until it is decided with finality by courts of competent jurisdiction or officially confirmed by the AMLC Secretariat and until such time the fulfilment of the purpose of which the data is collected and other purposes that you may have consented remain in effect and no longer required nor necessary to keep your information for any legal, regulatory and business purposes.

Welcome Bank would like to make sure that you are fully aware of your data protection rights and every user is entitled to right to request for a copy of your bank maintained personal information and we may charge processing fee depending on the nature and time spent in servicing your request.

- Right to be informed whether your personal information shall be, are being or have been processed.

- Right to object to the processing of your personal information. This processing may be for direct marketing, automated profiling, and in case of amendment in the process.

- Right to access any of the personal information you provided.

'

- Right to rectification / correction of any error or inaccuracy with the personal information being collected from you.

- Right to remove / withdraw any of your personal information from our records if ever you find it inappropriate or in violation of your privacy.

- Right to indemnify for any damages you sustained due to inaccurate, false, unlawfully obtained or unauthorized use of your personal information.

- Right to data portability. You may request from us a copy of your personal information in an electronic or structured format that is commonly used and allows you for further use.

- Right to file a complaint with the National Privacy Commission.

Welcome Bank keeps its privacy policy under regular review and amend this Privacy Statement to align with the changes in relevant laws and regulations applicable. Any relevant updates and changes will be posted on Welcome Bank website.

You as the data subject is enjoined to be one with Welcome Bank in ensuring protection of your data privacy. You are equally responsible to employ information security measures in ensuring that your personal account details, passwords, username and PINs are not disclosed or written that is easily accessible to others. To regularly change your passwords and make it difficult as well as keeping yourselves updated.

You are to notify us in writing through email at customer service hotline to be duly acknowledged by us for any clarifications, queries or requests relative to this Privacy Notice and in the exercise of data privacy rights with accompanying relevant documents to support your request.

Call us at (02) 8866-7345

or email our Data Protection Officer at:

dpo@welcomebank.com.ph

We would like to secure your consent on the general use and sharing of information obtained from you in the course of your transaction/s with any members of Welcome Bank, its affiliates and subsidiaries of from accredited third-party service providers. These data, which include your personal and sensitive information, may be collected, processed, stored, updated, or disclosed by Welcome Bank (i) for legitimate purposes, (ii) to implement transactions which you request, allow, or authorize (iii) to offer and provide new or related products and services of Welcome Bank, affiliated/Non Affiliated Third Parties and (iv) to comply with Welcome Bank’s internal policies and its reporting obligations to governmental authorities under applicable laws.