Pursuant to the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On personal data and their protection" and, where applicable, the legislation of the Astana International Financial Center (hereinafter referred to as the AIFC) in the field of data protection, as well as regulatory legal acts adopted in accordance therewith (hereinafter referred to as the Applicable Legislation), I hereby give my consent to:

1. the collection and processing of Data (as defined in paragraph B of this Consent) by:

(a) registration and (or) authorization of the Subject on the website (in the mobile application) of the Operator or in another electronic resource of the Operator;

(b) signing the Consent on paper or electronic media in any way, not limited to affixing a signature (in person), using an electronic digital signature, signing through a one-time code (one-time password) sent by the Operator or its agent to the Subject's mobile phone number by SMS message or in a web or other software application by push notification;

(c) visiting the Operator's offices, where applicable;

(d) visiting the Operator's electronic resources, including by accepting Cookies or other policies, protocols, software and hardware that can record the Subject's data;

(e) using the Operator's products or services.

2. transfer of Data, not limited to personal data, data constituting a banking secret, an insurance secret, a commercial secret in the securities market and other secrets protected by law in favor of the Operator's affiliates, the Operator's agents, and any other third parties (hereinafter collectively referred to as "Third Parties"), when the provision of Data is required in accordance with the requirements of applicable law, for the purpose of providing products and services by the Operator or Third Parties to the Subject, or for the purpose of fulfilling obligations under the agreement between the Operator and the given Third Parties. The Subject agrees that the Data may be included in the databases of the Operator or Third Parties, where the personal data of the Subject may subsequently be processed without any participation of the Operator; provided that the Operator undertakes to require Third Parties to ensure the confidentiality of the transferred Data;

3. cross-border transfer by the Data Operator outside the territory of the Republic of Kazakhstan and the territory of the AIFC to the territory of states in cases where this is necessary for the purposes of collecting and processing the Data stated in this consent.

The Subject agrees that the countries to which the Data may be transferred may have conditions and requirements for storing the Data lower than those provided for by the applicable legislation of the Republic of Kazakhstan / AIFC and the Data operators in these countries will not be able to provide them with adequate protection.

A. In this Consent, "Data" shall not be limited to data/information related to a specific Subject or one determinable on their basis, recorded on electronic, paper and/or other tangible media, including, but not limited to: last name, first name and patronymic (if any); transcription of the name; individual or other identification number (if provided by the Subject to the Operator); full date of birth; details of the identity document (if provided by the Subject to the Operator) and other documents (passport, driver's license, etc.); certificates from government agencies (medical, drug rehabilitation institutions, etc.); telephone number; email address; residential address; image of the Subject (photograph, avatar, etc.) (if provided by the Subject to the Operator); biometric data; identifiers (name of accounts and identifiers selected by the Subject); phone book contacts (when using the Operator's/Third Parties' mobile applications); images from the Subject's device camera; digital documents; audio recording from the mobile device microphone; the Subject's device model and data on its operating system and browser and/or type of Internet connection; the market segment to which the Subject belongs; information on the Subject's tax residency and tax identifier; records of communications with the Operator's customer support and sales representatives; information identifying the Subject's device; public comments by the Subject posted on websites on the Internet; data on the Subject's location obtained via IP address and/or via e-SIM and/or SIM card and/or via GPS (global positioning system); information on websites visited by the Subject on the Internet; information on purchases made by the Subject on the Internet and other metadata for analytics (cookies, etc.); content posted by the Subject or viewed by them on the Internet; as well as publicly available information about the Subject from social networks; information/data constituting a banking secret, an insurance secret, a commercial secret in the securities market and other secrets protected by law; information/data that may be received by the Operator from or in relation to the Subject.

B. The Subject's data is collected and processed for the purpose of (the list is not exhaustive): operations of the Operator and Third Parties in providing financial services, marketing and advertising activities, research, holding promotions, providing (forwarding) to the Subject any information materials, including about products and (or) services and (or) offers of the Operator and Third Parties, as well as other notifications by telephone, fax and other types of communication, as well as through open communication channels (including SMS messages, e-mail, push notifications, voice messages, remote access systems, social networks, etc.), as well as for payment using QR codes or barcodes, for selecting the recipient of payment or service from the phone book contacts, for displaying the avatar/photo of the Subject in the mobile application of the Operator and/or Third Parties, for receiving and providing digital documents of the Subject to/from the digital document service(s), for voice communication with representatives of the Operator/Third Parties; for delivery of goods and provision of services to the Subject; for conducting checks by the Operator/Third Party related to compliance with requirements for combating legalization (laundering) of income and financing of terrorism; to protect the Operator's clients from fraudulent actions of Subjects.

C. The personal data of the Subject may not be distributed by the Operator and (or) Third Parties in publicly available sources, except in cases where the corresponding written consent for these actions has been received from the Subject.

D. This Consent is provided for the entire period of the Operator's activity or until the date when an updated consent is issued and communicated to the Subject.