Agreement for the collection and processing of personal data

1. of my own free will and in my own interest, I provide consent to Subsidiary JSC VTB Bank (Kazakhstan), BIN 080940010300, (hereinafter referred to as the Bank) (the legal successor of the Bank):

• for the collection and processing of my personal data (including last name, first name, patronymic (if any), nationality, gender, date and place of birth, individual identification number, legal address, place of residence, subscriber number of a communication device, number of an identification document, marital and social status, availability of movable and immovable property, education, profession) and biometric personal data (hereinafter referred to as personal data) (both by means of automation and

• for the provision by the credit bureau to the Bank of personal data from the SDB, the receipt by the credit bureau, the Bank of my personal data from the SDB from the operators/owners of the SDB, the provision by the operators/owners of the SDB of my personal data from all SDBs of the credit bureau and the Bank directly and/or through third parties, as well as for the provision by a person authorized by decision of the Government of the Republic of Kazakhstan for the provision of public services of personal data to the credit bureau and the Bank through credit bureaus, including in the future;

• to disclose/use/transfer (including cross-border transfer) to the required extent of any information available to the Bank, including constituting my personal data and/or bank secrets, to third parties, including members and affiliates of the VTB Group, as well as the Bank and third parties carrying out any actions with my personal data, including actions to access, collect, systematize, accumulate, confirm, store, update, change,

• to take photographs (photo frames) and/or sound and/or video recordings, as well as to collect/confirm/update/storage/use/copy/transfer and reproduce, including in the presence of third parties, my image (photo/video with/without sound) and/or voice message(s).

2. I confirm, and in case of absence, I guarantee the receipt and availability of consents of third parties, information regarding which I provide to the Bank in any form, for the transfer of their data to the Bank and for their collection

3. I accept the obligation to notify such persons about this

4. This Consent also applies to information that will be received by the Bank in the future.

5. This Consent is provided until the expiration of the storage period for personal data and/or documents (including in the format of electronic documents) containing them, established by the legislation of the Republic of Kazakhstan, as well as the legislation of foreign states influencing the activities of the Bank, and/or the internal document of the Bank, or until its withdrawal by sending an appropriate written notice to the Bank at least 1 (one) month before the withdrawal of consent, except in cases where this contradicts the legislation of the Republic of Kazakhstan, or in the presence of any of my