The mada Pay Privacy Policy describes how we treat personal information when you use mada Pay. mada Pay is offered to mada cardholders and your use of it is subject to your card Issuer Privacy Policy.

Your use of mada Pay is governed by the mada Pay Terms of Service, which describes in more detail the Services covered by this Privacy Notice. Capitalized terms are not defined in this mada Pay Privacy Notice shall have the meaning ascribed to them in the mada Pay Terms of Service.

Information we collect

In addition to the information listed in the Card Issuer Privacy Policy we may also collect the following:

• Registration information - When you sign up for mada Pay, you are creating an association between a mada Pay platform and your Bank Account. Depending on the mada Pay services you use, in addition to the information listed in your card Issuer Privacy Policy, you may be asked to provide the following information: Credit or Debit card number and card expiration date, Card Security code, address, phone number, government-issued identification number. In some cases, we may also ask you to send us additional information or to answer additional questions to help verify your information.

• Transaction information - When you use mada Pay to conduct a transaction, we may collect information about the transaction, including but not limited to: Date, time and amount of the transaction, the merchant's location and description, a description provided by the seller of the goods or services purchased, the names of the seller and buyer (or sender and recipient), the type of payment method used, your description of the reason for the transaction, and the offer associated with the transaction, if any.

How we use the information we collect

We use the information you provide to us in order to provide you with mada Pay for customer service purposes, and to protect you from fraud, phishing or other misconduct. Such information may also be used to assist third parties in the provision of products or services that you request from them. We also use the information to review your mada Pay activities to determine whether you continue to meet the terms of the service, to make decisions about your future mada Pay transactions, and for other legitimate business needs related to the mada Pay transactions initiated by you.

Your registration information is stored in an association within your mada Pay wallet and your registration of a payment method will be stored on mada’s servers. In addition, certain data elements may also be stored on your mobile device. We may retain the information you provide for extended periods of time for the purpose of complying with legal process and regulatory obligations.

Information we share

We will only share your personal information with Issuer Banks outside of mada in the following circumstances:

• As necessary to process your transaction and maintain your account.
• To complete your registration for a service provided by a third party.
• To inform a third party merchant, whose site or app you visit, whether you have a mada Pay account that can be used for making payment to that merchant.
• In case any governmental authorities request any information under Saudi court order.

For example, when you make a purchase or transaction using mada Pay, we make certain personal information about you available to the merchant you purchase from or transact with.

When you visit a participating merchant site or app, the merchant may check whether you have mada Pay wallet with an eligible form of payment that can be used to pay the merchant, in order to reduce the likelihood that you will see unusable features on sites or apps.

Any information you provide directly to a third party merchant, website or application is not covered by this privacy notice. We are not responsible for the privacy or security practices of merchants or other third parties with whom you choose to share your personal information directly. We encourage you to review the privacy policies of any third party to whom you choose to share your personal information directly.

The information that we collect, including information obtained from third parties, is shared with your Issuer Banks.

We will not share your personal information with anyone outside of mada or outside your Issuer Bank except as described in this privacy notice. As explained above, mada Pay is a product offered to eligible mada cardholders.

Information security

The security of your mada Pay wallet depends on you keeping your password(s), PINs, and other access information confidential. If you share your private information including the mobile device itself with a third party, he or she may have access to your bank account and your personal information. Unauthorized payment transactions could result.

It is your responsibility to control access to your mobile device and the mada Pay application on your device, including keeping your password(s) and/or PIN confidential and not sharing it with anyone. It is also your responsibility to alert your Issuer Bank if you believe that the security of the information in the mada Pay application, or your bank card details have been compromised. Keeping your bank card details safe is your responsibility to avoid transactions that are not authorized by you as the genuine cardholder. When you do a transaction you acknowledge that you are the authentic user of the mobile device that is being used and digitized card within the mada Pay wallet.

Important notes:

• For more information, please refer to your issuer terms and Privacy Policy of the digital cards provisioned in mada Pay since these are not covered in these terms.
• For disputes relating to payment transactions conducted using mada Pay, contact your Payment Instrument's issuer and follow the appropriate merchant procedures adopted for claim submissions according to Saudi laws.