PRIVACY NOTICE

Updates effective as of 11 December 2025

We want to provide You with the best possible experience in enjoying every services and/or product we offer, both now and in the future. The privacy and security of Your personal data will always remain a top priority for Us. Therefore, we transparently explain how we obtain, collect, process and analyze, store, rectify and update, display, transfer, delete and/or destroy, and protect Your personal data as described below.

1. GENERAL

From time to time, the Party providing personal data (hereinafter referred to as “You”, “Your” or “Personal Data Subject”) may provide personal data to PT Espay Debit Indonesia Koe (“PT EDIK”) and its Group Company (also known as “DANA”, “We”, “Us”, or “Our”) and may update such personal data. Therefore, We have prepared this Privacy Notice to help You understand how We obtain, collect, process and analyze, store, rectify and update, display, transfer, delete and/or destroy, and protect Your personal data (“Process of Personal Data” or “Personal Data Processing”), both at present and in the future. This effort is made to respect Your right to privacy and to fullfill Our commitment to comply with the personal data protection laws and regulations in force in the Republic of Indonesia (“Applicable Personal Data Protection Laws”)

This Privacy Notice applies to all DANA Personal Data Subjects, including Users who register an account (“Account”) through Our official application, including website (www.dana.id) (collectively referred to hereinafter as the “Application”), unless otherwise governed under a seperate privacy notice. To ensire that the Personal Data Processing carried by Us are effective and efficient, You also bear the responsibility to read, understand, and comply with any other applicable terms and conditions relating to the Personal Data Processing.

2. YOUR CONSENT

2.1 We carry out all activities related to Personal Data Processing based on Your consent, whether in electronic or non-electronic form, in accordance with the Applicable Laws of the Republic of Indonesia and any other regulations issued by the competent Party in the Republic of Indonesia (“Applicable Laws”).

2.2 In the event that the Personal Data Processing requires consent You will be requested to provide consent in a form which may include, but is not limited to, a written statement, ticking a checkbox, or any other form indicating that You agree to such processing.

2.3 You may withdraw Your consent to any Personal Data Processing carried out by Us by providing notice to Us in accordance with this Privacy Notice and/or any other applicable consent to the Personal Data Processing.

2.4 You may also withdraw Your consent to receive certain communications and information from Us by providing notice as set out in the “Further Information” section of this Privacy Notice, or, for Application users, through Help Center, or live chat provided in the Application.

2.5 The withdrawal of Your concent may result in the termination of Our services or Your contractual relationship with Us, with all the rights and obligations arising therefrom remaining fully enforcable. Upon receiving notice of Your withdrawal of consent to the Personal Data Processing, We will inform You of the potential consequences of such withdrawal so that You may decide whether You wish to proceed with the withdrawal. Please note that, for Application users, if You choose to withdraw consent, We may still send You non-promotional messages, such as receipts or information regarding Your Account.

3. OBTAINMENT AND COLLECTION OF PERSONAL DATA

DANA may obtain Personal Data in a limited and specific manner from various sources (for example, from the Data Subject or through third parties) at any time, including when You access or conduct transactions using the Application. If You provide Personal Data relating to another individual (such as Personal Data of Your spouse, family member, friend, or any other party) to Us, You represent and warrant that You have obtained the consent of such individual for Us to Personal Data Processing. We may, at any time, request evidence of such consent from You.

3.1 “Personal Data” means any data regarding an individual who is identified or identifiable, either independently or in combination with other information, whether directly or indirectly, through electronic or non-electronic systems. Personal Data includes, but is not limited to, name, address, date of birth, occupation, telephone number, religion, marital status, email address, bank account and credit card details, gender, identification (including passport or national identity documents) and/or other government-issued identifiers, vehicle information, photographs, nationality, telephone numbers of Users and non-Users stored in Your mobile phone contact list, health data, financial information, and biometric information. Furthermore, any other information, including personal profiles and/or unique identifiers that are associated with or combined with Personal Data, shall also be deemed Personal Data.

The types of Personal Data that We collect depend on the purpose of collection and the nature of the services requested, and are subject to the Applicable Personal Data Protection Regulations and Applicable Laws. We may carry out Personal Data Processing, including but not limited to:

a. Identity Data, including Account name (user ID), User name, gender, place and date of birth, Identity Card (KTP), telephone number, latest education level, position or occupation, mother’s full name, address as stated on the Identity Card, photographs, and/or biometric data.Data Kontak termasuk alamat, email, nomor telepon dan/atau daftar kontak. b. Transaction Data, including all non-cash transaction history conducted by the User on and/or through the Application. c. Location Data, including Your real-time geographical location information.

We may create, use, analyze, license, and/or disclose aggregated data, such as statistical or demographic data, for the purposes of administering and managing services, including but not limited to Application updates, cooperation with third parties, promotional purposes, trend analysis, and other related purposes. Aggregated data may be derived from Your Personal Data but will not directly disclose Your identity. To ensure this, We will: (i) remove all identifiers in such a way that the data, whether alone or combined with other available data, cannot be linked to or identify any individual; and (ii) aggregate such data with similar data so that the original data forms part of a larger data set.

3.2 Informartion Regarding Children For individuals under the age of 17 (“Child”), We do not knowingly collect or retain any Personal Data or information from a Child without the consent of the Child’s parent(s) or lawful guardian(s). We will close any Account that is used exclusively by a Child and will remove and/or delete any Personal Data of the Child submitted without the valid consent of the Child’s parent(s) or lawful guardian(s).

In the event that You open and submit the Personal Data of a Child to Us, You hereby consent to the Processing of the Child’s Personal Data and agree to be bound by DANA’s terms and conditions on behalf of the Child.

3.3 DANA Collects Your Personal Data The Personal Data that We collect may be provided directly by You or by third parties (for example: when You register or use the Application, when You contact Our customer service, or when there is a contractual agreement with Us), or through other means permitted by the Applicable Personal Data Protection Laws. We will implement adequate information security systems in accordance with the standards of the Applicable Personal Data Protection Laws. Notwithstanding the foregoing, any transmission of information by the Personal Data Subject to Us carries certain risks, and therefore You are also responsible for safeguarding the security of Your Personal Data.

We collect Your Personal Data through several activities, including but not limited to:

a. Information that We collect directly from You or Your mobile device: i. when You register or when You use the Application; ii. when You use, access, and interact with any services available in the Application; iii. when You grant permission on Your device to share information with Our Application; iv. when You use the chat feature in the Application; v. when You enter into any form of agreement with Us; vi. when You contact Us, such as via telephone calls, face-to-face meetings, social media platforms, email, or chat applications (such as WhatsApp); vii. when You link Your Account with Your social media or other external accounts;and/or

b. Information that is collected each time You use the Application When You allow Our Application to collect and access Personal Data, Your device will transmit information that may include Personal Data, including technical data and Location Data, each time You use and/or access the Application in real-time. In certain circumstances, You may be required to activate the Global Positioning System (GPS) on Your mobile device so that We can provide and improve services for You in using the Application. Such Location Data and technical data will be included in anonymous statistics to enable Us to understand how visitors use Our Application.

If You do not agree with the collection of Personal Data, You may choose to withdraw Your consent or disable access by Our Application on Your mobile device. However, this may limit Our ability to provide You with optimal services.

In addition, We may also collect details of Your use of Our Application such as identifiers generated by the Application (user ID), live chats available within the Application, Internet Protocol (IP) addresses used to connect Your device to the internet, connection information such as browser type and version, operating system and platform, login information, and Your activities on Our Application, including the services You use, searches You perform in Our Application, device identity, cookies, and other necessary technical data. We may use such data to track Your activity, understand how You use Our Application, analyze trends, and for other purposes permitted under the Applicable Personal Data Protection Regulations. If You do not agree, You may adjust the settings on Your mobile device or internet browser. However, this may affect the functions available in the Application.

c. Information collected from third parties We may receive information about You, including Your Personal Data, from third parties (including partners, vendors, and other third parties that provide services to Us or cooperate with Us).

We may also obtain Your Personal Data, for example, when You link Your Application Account with other systems or media, subject to the terms and conditions of use of such services. When You link Your Application Account with third-party systems or media, such third parties shall also be responsible for Your Personal Data and shall remain fully subject to the Applicable Personal Data Protection Laws and Applicable Laws.

d. Information about third parties that You provide to Us You may provide Us with Personal Data relating to other third parties (such as Your spouse, family members, friends, and/or other individuals) by first obtaining prior consent from the owners of such Personal Data. From time to time, We may request that You provide evidence of such individuals’ consent to You. The obligation to obtain consent from the owners of such Personal Data may be exempted where the request for such Personal Data is for legal purposes.

4. USE OF PERSONAL DATA 4.1 Basis for Personal Data Processing We process Your Personal Data on a lawful basis in accordance with the Applicable Personal Data Protection Laws, namely: a. Explicit Consent We process Your Personal Data for specific purposes based on Your consent or the consent of an authorized party representing You.

b. Contractual Obligations We process Your Personal Data to fulfill obligations under an agreement between You and Us or prior to entering into such agreement with You.

c. Legal Obligation We process Your Personal Data to fulfill Our legal obligations in accordance with applicable laws and regulations.

d. Legitimate Interests We process Your Personal Data to fulfill Our legitimate interests without overriding the rights of the Personal Data Subject, while maintaining a balance between Our interests and Your rights, particularly in efforts to improve the Services.

e. Public Interests We process Your Personal Data to carry out Our responsibilities in safeguarding the public interest, providing public services, and fulfilling Our authority as provided under applicable laws and regulations.

f. Vital Interests We process Personal Data to protect the vital interests of the Personal Data Subject.

4.2 Purposes of Personal Data Processing We may process Your Personal Data for the following purposes as well as other purposes permitted under the Applicable Personal Data Protection Laws and Applicable Laws, including but not limited to: a. enhancing Your experience and the services provided to You, as well as the personalization You apply to the Application;

b. managing Your Application Account, including registering and identifying You as a User, and for the purposes of administering, verifying, managing, or deactivating Your Account;

c. verifying the eligibility and/or suitability of User data for the use of features and functions within the Application, as well as conducting any verification deemed necessary by DANA prior to providing services to You or prior to registering You, which includes processes under the “know your customer” principle;

d. identifying and processing Your Account registration, as well as maintaining and managing Your registration as a User;

e. providing services to You and customer service in relation to the use of the Application, including collaborating with DANA to facilitate payments for the purchase of goods and/or services, delivery and related services for such purchases, charge-backs, sending notifications regarding Your transactions and invoices, and responding to Your questions, feedback, complaints, claims, or disputes;

f. providing services to You in connection with the use of Our Application, namely to facilitate Your ability to identify other Application Users when You access Your mobile phone address book through the Application;

g. improving and developing our offerings through research and the development of new functions in the Application, or new products and services that we may offer from time to time;

h. carrying out cooperation with third parties with the intention that they may: i. assist us in providing our services;

ii. operate our business;

iii. process data on our behalf;

iv. perform internal audits;

v. enable the purchase and/or access to third-party goods and/or services offered in the Application;

vi. process all forms of your activities on the Application or platforms connected to the Application; or

vii. tujuan other purposes insofar as not in conflict with Applicable Law and the Applicable Personal Data Protection Laws. All Third Parties cooperating with us are committed to processing Personal Data they receive from us in compliance with the standards and provisions of Applicable Laws and the Applicable Personal Data Protection Laws.

i. conducting research, statistical analysis, or surveys, whether orally or in writing, to manage and protect our business including information technology infrastructure, to measure the performance of the Application and other services we offer, and to ensure your satisfaction with our services;

j. conducting trend analysis, usage, and other behaviors (individually or in aggregate) that help us better understand how our Users and user groups access and use the Application and commercial activities conducted through the Application, including for service improvements and to better respond to your inquiries and preferences;

k. providing direct marketing information to you in connection with the services we and our affiliates offer, and selected third parties using your Personal Data to contact you, including but not limited to via telephone, SMS, email, WhatsApp, or in-app push notifications;

l. lmanaging risk, conducting creditworthiness and solvency checks, or assessing, detecting, investigating, preventing criminal offenses of fraud, money laundering, terrorism financing, and/or activities potentially violating or violating the Applicable Personal Data Protection Laws and Applicable Laws as well as the interests of DANA, or to protect the integrity of our information technology platform;

m. detecting, investigating, preventing, or remedying violations of terms and conditions of service, privacy notices, any internal policies of DANA applicable from time to time, industry standards, guidelines, the Applicable Personal Data Protection Laws, and Applicable Law;

n. making disclosures required by Applicable Laws and the Applicable Personal Data Protection Laws or the regulations of any country applicable to us or our affiliates, government officials, or other third parties, including associations of which we are a member, payment card or other payment networks, and other relevant industry associations. Disclosures may also be made in connection with subpoenas, judgments and/or court orders, orders of competent law enforcement authorities for investigations or legal processes, or any requirements of any country applicable to us or our affiliates (including anti-money laundering and counter-terrorism financing reporting requirements);

o. making disclosures to prevent harm or financial loss, to report any suspected activity contrary to Applicable Laws and/or to defend against any claims or potential claims brought against us or our affiliates;

p. conducting due diligence and other assessments or evaluations of actual or proposed mergers, acquisitions, financing transactions, or joint ventures;

q. notifying you of any updates to the Application or changes to DANA’s services;

r. identifying and registering you as a User and to administer, verify, deactivate, or manage your Account;

s. developing and improving the quality of the Application to meet your needs and preferences regarding services currently owned or to be developed in the future by DANA;

t. monitoring and analyzing User activities, behaviors, and demographics including habits and usage of various services available in the Application;

u. offering or providing services from partners or affiliates working with DANA to Users;

v. sending information, advertisements, surveys, promotions, coupons, and other information deemed relevant by DANA to you;

w. providing technical assistance or resolving technical and operational issues occurring in the Application;

x. facilitating business asset transactions (which may include mergers, acquisitions, spin-offs, or asset sales) involving DANA and/or DANA’s affiliates;

y. other legitimate business purposes such as protecting you and other Application users from harm, protecting lives, maintaining the security of our products and systems, and safeguarding our other interests, rights, and/or property.

We may also use your information and/or Personal Data in other ways, which will be accompanied by a specific notice provided at the time of collection and/or processing of such data for your approval.

5. DISCLOSURE OF PERSONAL DATA

5.1 We are committed to maintaining the confidentiality of all Personal Data that We store and to preventing any form of misuse of Users’ Personal Data, including in disclosing Users’ Personal Data to any party. However, under certain circumstances, We may provide, announce, transmit, transfer, disclose, and/or display your Personal Data to third parties (whether within or outside your country of residence) for the purposes set out in Section 4 above, as follows: a. our subsidiaries and affiliated companies;

b. agents, contractors, and third-party service providers that collaborate with DANA in providing Our services;

c. entities with whom We have business referral relationships or other commercial agreements, including third parties and entities wholly or partially owned by Us;

d. other organizations, such as associations of which We are a member, card networks, payment networks, or financial institutions, to or through whom payments are made using DANA, or other entities that enable Users to use the Application;

e. financial institutions, banks, receiving agents, financing institutions, and credit agencies;

f. professional advisors, law enforcement agencies, insurance companies, governments, and other authorities or institutions where DANA is required to make disclosures in accordance with Applicable Law or the regulations of the organization in which We are registered;

g. entities involved in mergers, acquisitions, financing transactions, or joint ventures with Us.

5.2 In addition to the disclosures set out above, DANA may disclose and share Users’ Personal Data for any purpose or with any party, including parties outside the country, after obtaining the User’s consent and in accordance with Applicable Laws and the Applicable Personal Data Protection Laws.

6. DIRECT MARKETING ACTIVITIES We may use Your Personal Data for direct marketing activities (Direct Marketing) from time to time, in accordance with the scope and methods fully set out in this section and the provisions of Applicable Laws and the Applicable Personal Data Protection Laws, including but not limited to: a. The Personal Data We obtain may be used in direct marketing and promotional activities;

b. We may market services that are relevant to You, such as services offered by Us, Our affiliates, Our business partners, and/or third parties that collaborate with Us, and/or act on Our behalf;

c. We may provide Your Personal Data to certain third parties for use in marketing their goods and/or services and/or offerings, including:, (i) Our affiliates, (ii) Our subsidiaries; (iii) some or all companies within the PT EDIK group; and/or (iv) Our business partners or third parties that collaborate with Us.

7. SECURITY MEASURES AND DATA RETENTION We retain Your Personal Data as long as necessary to provide and optimize the services We offer and for business purposes in accordance with Applicable Laws, including but not limited to: a. maintaining the performance and quality of services in the features of the Application;

b. making business decisions based on the data You provide for the development of Our products and service quality;

c. resolving outstanding issues related to Your Account, such as chargebacks, refunds, or other disputes, where We will retain Your Personal Data until such issues are resolved;

d. fulfilling Our legal, tax, audit, and accounting obligations, where We will retain the necessary Personal Data for the period required by applicable law; and/or

e. other purposes as mentioned above for as long as necessary for Our legitimate business interests, such as preventing fraud or ensuring Your safety as a DANA User.

We take all reasonable and maximum steps, including technical, administrative, and physical safeguards, to ensure the reliability of every employee, partner, consultant, or vendor who has access to Personal Data. We will ensure that such access is strictly limited, relevant, and in compliance with Applicable Laws to protect the Personal Data We process from risks of loss, misuse, unauthorized access, disclosure, alteration, deletion, and/or destruction.

For the purpose of protecting Personal Data, We will verify the Personal Data obtained to ensure its accuracy, completeness, and consistency, except for Personal Data that has already been verified for accuracy and publicly displayed or disclosed by electronic systems for public service. Verified Personal Data will then be retained as long as necessary for the purposes set forth in this notice and in accordance with the requirements of Applicable Laws.

DANA will cease to retain or will delete and/or destroy Your Personal Data, in the event of an official request for deletion and/or destruction of Personal Data submitted by You to Us, subject to Applicable Laws and the Applicable Personal Data Protection Laws.

8. APPLICATION OF PRUDENTIAL PRINCIPLES

8.1 We strongly encourage You to exercise utmost care in safeguarding the security and confidentiality of Your Personal Data, including by: a. preventing unauthorized parties from accessing, receiving, storing, and/or collecting Your Personal Data, such as by keeping the security and confidentiality of your PIN, password, and/or accounts that provide access to Your Personal Data;

b. paying careful attention to the media You use to store, upload, transmit, submit, and/or share Your Personal Data; and

c. applying prudential principles by at least signing confidentiality agreements with parties You entrust to receive and store Your Personal Data, or requiring such parties to have and implement a privacy policy/notice that does not conflict with Applicable Law, and entrusting Your Personal Data only to parties with credibility and integrity in protecting Personal Data.

8.2 Use of the Internet Please be aware that using the Internet to transmit, share, upload, or submit Your Personal Data is not entirely secure, as the Internet can be accessed by anyone and there are risks associated with the provision and use of the Internet outside of Our control and supervision. If Users use devices that may be accessible to others (public devices), they should choose not to save their login information (e.g., User ID and password) on such devices.

8.3 Use of PINs and Passwords You may set up a PIN or password on the Application to protect Personal Data from unauthorized access. You are responsible for the security of the device You use and for the confidentiality of Your Account details, including passwords, PIN codes, and One Time Passwords (OTPs), from anyone. Neither We nor third parties acting on Our behalf will know or ever request Your password by any means, including via phone, email, or online/offline communication in any form.

9. THIRD PARTY SERVICES AND WEBSITES The DANA Application may provide links to other websites and services (including applications operated by third parties) for the convenience and information to You. These services and websites may operate independently from Us and may have their own privacy policies/notices. We recommend You to read such policies/notices before using those third-party services or engaging in any activities on those websites. The provision of links to other websites and services is for informational purposes only. We do not provide any support or warranties regarding the content and information contained in such links.

Application and marketing materials may contain links to websites operated by third parties. In such cases, We shall not be responsible in any way for these websites or for the collection, use, maintenance, sharing, storage, and/or disclosure of data and information by such third parties. Please review the terms and conditions and privacy policies/notices of the respective third-party websites to understand how they collect, store, and/or use Your Personal Data.

10. USER RIGHTS AS THE DATA SUBJECT DANA acknowledges that You are a Personal Data Subject with certain rights under the Applicable Laws and Applicable Personal Data Protection Laws. You may request Us to correct and/or update, delete, or destroy Your Personal Data under Our control, which can be processed through the Help Center or live chat available in the Application, or via notices directed to the “Further Information” section in this Privacy Notice.

10.1 User Rights a. Access to Personal Data History and Copies You have the right to request access to the history of and obtain copies of Personal Data previously provided to Us. In such cases, We will provide the information in a format determined by Us, taking into account compatibility and prevailing practices. Requests can be submitted via the Help Center or live chat in the DANA Application, or in the “Further Information” section of this Privacy Notice. b. Correction or Updating of Personal Data You may submit a request for the deletion and/or destruction of Your Personal Data previously provided to Us that is no longer relevant or in accordance with the Applicable Laws. Such requests can be processed via the Help Center or live chat available in the DANA Application, or via notices directed to the “Further Information” section in this Privacy Notice. Upon receipt of Your request and completion of the necessary verification process, We will inform You of the deletion and/or destruction of such Personal Data in accordance with the Applicable Personal Data Protection Laws and Applicable Laws. c. Deletion and/or Destruction of Personal Data You may request the deletion and/or destruction of Your Personal Data that has been submitted to Us and is no longer relevant or in accordance with the Applicable Laws. Requests can be processed via the Help Center or live chat in the DANA Application, or via notices directed to the “Further Information” section in this Privacy Notice. Upon receipt and completion of the necessary verification process, We will inform You of the deletion and/or destruction of such Personal Data in accordance with the Applicable Personal Data Protection Laws and Applicable Laws. d. Withdrawal of Consent for Personal Data Processing Users may request the withdrawal of consent for the processing of Personal Data previously provided to Us, to the extent such processing is based on consent. Requests may be submitted via the Help Center or live chat in the DANA Application, or via notices directed to the “Further Information” section in this Privacy Notice. We will cease such processing in accordance with the Applicable Laws. e. Objection and/or Refusal of Personal Data Processing Users have the right to object to and/or refuse the form and/or results of the processing of their Personal Data, in certain cases as stipulated in the Applicable Laws. Objections can be submitted via the Help Center or live chat on the Application. We will review and process the request in accordance with the provisions of applicable laws and regulations. f. Restriction of Personal Data Processing Users may submit a request to restrict the processing of their Personal Data under certain circumstances as stipulated in the Applicable Personal Data Protection Laws and Applicable Laws, including when the data is considered inaccurate or while a deletion process is ongoing. Requests for restriction can be submitted via the Help Center or live chat in the DANA Application, or via notices directed to the “Further Information” section in this Privacy Notice. g. Claims and Compensation for Personal Data Violations Users have the right to file claims and/or seek compensation for unlawful processing of Personal Data by Us and/or parties working with Us. Claims or compensation requests may be submitted in accordance with the Applicable Personal Data Protection Regulations and Applicable Laws through available dispute resolution mechanisms, including the authorized data protection authority or courts. h. Data Portability Users may request their Personal Data in a structured and commonly used format to transfer it to another service provider, in accordance with the Applicable Personal Data Protection Laws and Applicable Laws. Requests for data portability can be submitted via the Help Center or live chat in the DANA Application, or in the “Further Information” section of this Privacy Notice.

10.2 Refusal to Fulfill User Rights We reserve the right to refuse Your requests regarding Your Personal Data under Our control if: a. Such Personal Data does not belong to You; b. The request is deemed irrelevant, inappropriate, and/or contrary to the Applicable Laws and/or Applicable Personal Data Protection Laws.

11. PERSONAL DATA STORED BY AUTHORITIES Please note that there is a possibility that some of Your Personal Data may be stored by other parties, including government institutions, in certain ways. In this regard: a. We may be required under the applicable laws and/or by authorized institutions/authorities to transmit or share Your Personal Data with such authorized institutions/authorities and/or other parties appointed by them; b. In connection with clause (a) above, You hereby acknowledge and agree that the storage of Your Personal Data by the authorized institutions/authorities and/or other parties appointed by them shall follow the data storage policies and standards applied by such authorized institutions/authorities and/or appointed parties; c. You hereby acknowledge and agree that We shall not be responsible for the security and confidentiality of Your Personal Data stored by the authorized institutions/authorities and/or other parties appointed by them, and You release Us from any claims and/or losses related to any breach of security or confidentiality of Your Personal Data stored by such authorized institutions/authorities and/or other parties appointed by them.

12. LIMITATION OF DANA’S LIABILITY DANA is committed to providing Our services reliably and securely, and is responsible for ensuring the security, confidentiality, and accuracy of Personal Data. However, this provision shall not apply in cases where it can be demonstrated that: a. force majeure event has occured; b. there is an error and/or negligence by the User that causes Personal Data to be accessed, disclosed, lost, or destroyed without authorization; and/or c. the Personal Data Processing has been carried out based on valid instructions and legal grounds..

13. CHANGES TO THIS PRIVACY NOTICE We may review and amend this Privacy Notice at Our discretion from time to time, to ensure that it remains consistent with Our future developments and/or changes in legal or regulatory requirements. If We decide to amend this Privacy Notice, We will notify You of such changes through a general notice published on the Application, push notifications while You use the services, and/or Our official website. You agree that it is Your responsibility to review this Privacy Notice regularly to obtain the most up-to-date information regarding Our Personal Data Processing practices, and that Your continued use of the Application, services, or website, communications with Us, or access to and use of services after changes to this Privacy Notice will be deemed as Your acceptance of this Privacy Notice and all its amendments.

14. STOP RECEIVING NOTIFICATIONS, MARKETING, AND PROMOTIONAL ACTIVITIES

We and/or Our partners may send You direct marketing communications, advertisements, promotions, and/or other marketing materials via in-app push notifications, messages within the Application, mail, phone calls, SMS, social media, and/or email if You have consented to subscribe to Our mailing list and/or that of Our partners. You may choose to stop receiving such marketing communications at any time by sending a notice to the “Further Information” section in this Privacy Notice, or for Application users, via Help Center or live chat available in the Application. Please note that if You choose to opt-out, We may still send non-promotional messages, such as information regarding Your Account activities.

15. OTHER PROVISIONS

15.1 This Privacy Notice is subject to, governed by, and shall be implemented in accordance with the Applicable Laws and the Applicable Personal Data Protection Laws.

15.2 In the event of any dispute regarding the interpretation or implementation of this Privacy Notice, Users agree to first resolve the dispute through deliberation. If no agreement is reached within thirty (30) business days through such deliberation, the dispute shall be resolved by referring to the dispute resolution mechanism in accordance with the Applicable Laws.

15.3 This Privacy Notice is prepared in both Indonesian and English. In the event of any inconsistency and/or conflict between the English version and the Indonesian version, the Indonesian version shall prevail, and the English version shall be considered adjusted to the Indonesian version.

15.4 In the event that PT EDIK undergoes a merger, spin-off, acquisition, consolidation, or dissolution, We will notify Users regarding the transfer of Personal Data before and after the merger, spin-off, acquisition, consolidation, or dissolution.

16. FURTHER INFORMATION If You have any questions or complaints regarding this Privacy Notice or if You wish to exercise Your rights with respect to Your Personal Data, You may contact us via:

PT ESPAY DEBIT INDONESIA KOE (DANA Indonesia)

Capital Place Office Tower Lantai 18

Jalan Jend. Gatot Subroto Kav 18, Jakarta Selatan 12710 Jakarta, Indonesia

Live chat feature on DANA application : DIANA

Telephone : 1500445

Email : help@dana.id

Email for merchant : merchant.services@dana.id

By agreeing to this Privacy Notice, You acknowledge that You have read and understood this Privacy Notice and agree to all the terms and conditions contained in it. You have also given Your consent to DANA to process your personal data in accordance with this Privacy Notice.