Privacy Notice

Effective Date: 8 October 2025

This Privacy Notice and its Addendums ("Privacy Notice") explain how Seattle's Best Coffee Inc. and its subsidiaries, affiliates, associated companies and jointly controlled entities ("SBC Group and Associates", "Seattle's Best Coffee", "SBC" or "we") handle your Personal Data (as defined under applicable data privacy laws) when you use our Flavor Yield Platform and related services (including mobile applications, websites, softwares or portals) that we own or operate in connection with providing our services, products and solutions ("Services").

It applies to our members, agents, vendors, suppliers, partners, contractors and service providers ("you").

We process Personal Data with your consent or as allowed by law, such as to:

• Meet legal requirements
• Enter into or fulfill our contractual obligations to you
• Fulfill our legitimate interests or in the interest of others

I. Collection of Personal Data

We collect your Personal Data in the ways listed below. We may also combine Personal Data collected via these various channels.

You provide your Personal Data to us

We collect your Personal Data when you provide it to us. For example, when you:

• complete a user registration form or customize your profile (such as your name, contact information and other identification where needed);
• furnish supporting documents, such as proof of identity or eligibility, so that we can support you better as a member on our platform;
• interact with our social media pages (such as your social media account ID, profile photo, and any content you create for publication on our social media channels);
• participate in contests or events organised by us (such as the pictures, audio, or videos you may submit, which may include images of yourself);
• fill up demographic information in surveys (such as your age, gender, and other information you may volunteer such as your marital status, occupation and income information);
• apply for membership tiers or investment products to enable us to assess your eligibility (such as earning statements, bank statements, and relevant information you may volunteer);
• contact us through our various customer support channels (such as chat, messages, emails, call recordings, pictures you submit to support your claim);
• submit reviews, feedback, ratings, media, or other content about a product and/or any Services, that we may associate with and display alongside your public profile page;
• interact with other users in our in-app communication features; and
• provide information through the use of our artificial intelligence ("AI") services, such as when you ask questions to AI-powered chatbots or input data to our AI solutions.

When our Services are used

Personal Data may be passively collected through the normal operation or use of our Platforms. Some examples are:

• your location information;
• transaction information (such as payment method, settlement records, items purchased or paid through our Services);
• usage data (such as features used and content viewed);
• device information (such as hardware model and serial number, IP addresses), file and app names and versions, GPS location, IMEI number, and advertising identifiers or any information that may indicate device or app modification);
• investment and yield data (such as blend selections, harvest period durations, daily yield records, and portfolio history); and
• personal data that may be captured through your interaction with us, our agents, or our platform features.

From other sources

We may collect Personal Data, including but not limited to information about you (such as customer information, contact details, other identification information, and financial data where needed) from other sources. Such sources include:

• SBC Group and Associates;
• referral programmes;
• our business partners, such as payment providers and financial partners;
• insurance and financial providers;
• risk intelligence and fraud assessment providers;
• credit bureaus, payment network providers, alternative credit scoring agencies and any other third party credit reporting organisations;
• publicly available or governmental sources of data; and
• marketing services providers or partners.

When you provide Personal Data of other individuals to us

In some situations, you may provide Personal Data of other individuals to us, such as when you add them as your emergency contact, use the in-app chat, or add them as recipients or beneficiaries of any use of our Services. If you provide us with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used and disclosed as set out in this Privacy Notice.

Sensitive Personal Data

Some Personal Data we collect may be sensitive in nature in certain jurisdictions. This may include your national ID information, religious beliefs, background information (including financial and criminal records, where legally permissible), health data, disability, marital status, location and biometric data, as applicable. We collect sensitive Personal Data only with your consent and/or in strict compliance with applicable laws.

II. Use of Personal Data

Seattle's Best Coffee uses your Personal Data for the purposes below ("Purposes"). Additionally, if you use our Services in various capacities, we may link your Personal Data collected across your various capacities to facilitate your use of our Services and for the Purposes described below.

Providing services and features

Your Personal Data will be used to provide, personalise, maintain and improve our Platforms and Services. This includes using your Personal Data to:

• provide you with Services across our various business verticals, including within and across the SBC Group and Associates where relevant;
• create, administer and update your account;
• process, manage or verify your eligibility for or application of products, services, promotions, rewards and subscriptions;
• conduct due diligence checks, assess and monitor user risk profiles, and perform ongoing risk analysis to ensure compliance with regulatory and operational requirements;
• verify your identity and age (where necessary);
• validate your investments and process payments;
• offer, obtain, provide, facilitate, or maintain investment or financing solutions;
• allow you to participate in the loyalty programmes or marketing activities organized by our merchant-partners and/or in collaboration with SBC;
• personalise your experience (such as to identify your preferences and recommend products and services relevant to you);
• perform internal operations necessary to provide our Services, including troubleshooting software bugs and operational problems, conducting data analysis, testing and research, monitoring and analysing usage and activity trends;
• protect the security or integrity of the Services and any facilities or equipment used to make the Services available;
• enable communications between our users;
• invite you to participate in our events, surveys and studies; and
• enable our partners to manage and allocate resources.

Safety and security

We use your data to ensure the safety and security of our Services and all users. This includes:

• verifying your identity when you log in to the Flavor Yield Platform;
• using device, location, profile, usage and other Personal Data to prevent, intervene, detect and combat fraud or unsafe activities;
• monitoring compliance with our terms and conditions and policies.

User support

We use Personal Data to resolve user support issues. For example, we may:

• investigate and address concerns;
• monitor and improve our user support responses;
• respond to questions, comments and feedback; and
• inform you about steps taken to resolve user support issues.

Research, development and security

We may use the Personal Data we collect for testing, research, analysis, machine learning, and product development. This allows us to understand and analyse your needs and preferences, protect your Personal Data, improve and enhance the safety and security of our Services, develop new features, products and services, and facilitate the development of investment and finance solutions.

Legal purposes

We may use the Personal Data we collect for legal purposes such as to:

• prevent, detect, investigate, resolve or prosecute fraud or crimes;
• comply with court orders or other legal, governmental or regulatory requirements;
• enforce our Terms of Service or other agreements; and
• enforce or protect our rights, interests or properties in the event of a claim, investigations, complaints or dispute in any jurisdiction.

Marketing and promotions

We may use your Personal Data to send you marketing communications relating to customised products or services, or SBC's partners', sponsors' and advertisers' products, services, events or promotions. For example, we may:

• send you special offers that may be of interest or relevance to you across all of SBC's service offerings;
• send you alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and
• notify, invite and manage your participation in our events or activities.

If you wish to unsubscribe from such marketing communications, please click on the unsubscribe link in the relevant email or message. Alternatively, you may also update your preferences in the App settings. Please note that while you may opt out of marketing or promotion communications, SBC may still send you account and/or service-related messages.

III. Disclosure of Personal Data

We may disclose your Personal Data with various parties only as needed for the Purposes. These parties include:

Other users

For example, if you leave a rating and review of any product or blend, your profile picture, feedback, content, and username may be available to the public and other users.

With third parties

We may provide Personal Data to our vendors, consultants, marketing partners, research firms, and other service providers or business partners. This includes:

• payment processors and facilitators;
• debt collectors;
• credit bureaus, payment network providers, alternative credit scoring agencies and any other third party credit reporting organisations;
• background check and anti-money laundering service providers;
• risk intelligence and fraud assessment providers;
• cloud storage providers;
• advertising and marketing partners and platform providers;
• data analytics providers;
• research partners, including those performing surveys or research projects in partnership with SBC or on SBC's behalf;
• insurance and financing partners; and
• service providers who perform identity verification services.

With our legal advisors and governmental authorities

We may share your Personal Data with our legal advisors, law enforcement officials, government authorities and other third parties to fulfil legal purposes, or in any of the following circumstances:

• where it is necessary to respond to an emergency that threatens the life, health or safety of a person; or
• where it is necessary in the public interest.

Business transfers

We may share your Personal Data with other parties, in connection with any acquisitions, sales, mergers, joint ventures, consolidation, restructuring, financing or any other type of business transactions. Your Personal Data will however remain subject to our obligations made in any pre-existing Privacy Notice that you have agreed to.

IV. Retention of Personal Data

We retain your Personal Data for the period necessary to fulfill the Purposes outlined in this Notice unless a longer retention period is required or allowed by law. Retention periods differ depending on things like the nature of the data, why it is collected and processed, and relevant legal or business needs.

Once your Personal Data is no longer necessary for the Services or Purposes, we take steps to erase, destroy, anonymise or prevent access or use except where needed for legal compliance, safety, security, fraud prevention and detection, in line with applicable laws.

V. International Transfers of Personal Data

Your Personal Data may be transferred from your current location to another jurisdiction for various reasons such as centralized data processing and storage, regional back office operations and support and service delivery.

We ensure these transfers comply with applicable laws and regulations. This includes having a lawful basis for transfer, conducting impact assessments and putting appropriate technical and organizational safeguards to ensure an adequate level of protection for your Personal Data.

VI. Cookies and Related Technologies

SBC, and third parties with whom we partner, may use cookies, web beacons, tags, scripts, local shared objects such as HTML5, advertising identifiers and similar technologies (collectively, "Cookies") in connection with your use of our Platforms.

Cookies may be used for various purposes such as to:

• provide the essential, basic functions of the use of our Platforms or Services;
• authenticate you, or remember your user preferences and settings;
• deliver and measure the effectiveness of advertising campaigns;
• analyse site traffic and trends; and
• enhance user interface and experience.

You may adjust your internet browser settings to disable, block or deactivate cookies. Please note that refusal or removal of some cookies could affect the availability, functionality or use of our Platforms or Services.

VII. Protection of Personal Data

We implement reasonable legal, physical, organisational and technical measures to ensure that your Personal Data is protected. This includes measures to prevent loss, unauthorized access or misuse of your information. We limit access to your Personal Data on a need-to-know basis. Those processing your Personal Data will only do so in an authorised manner and are required to treat your information with confidentiality.

Nevertheless, please understand that the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the absolute security of your Personal Data during online transmission.

VIII. Your Privacy Rights

In accordance with applicable laws and regulations, you may be entitled to:

• inquire about the processing of your Personal Data and be provided with a copy of it;
• request correction or deletion;
• restrict or object to processing;
• withdraw consent (where processing is based on consent);
• request a transfer of your data to another organisation, in a machine-readable form; and
• complain to the relevant data privacy authority if you believe your rights were violated and we failed to address your concerns.

If you choose not to provide your Personal Data or later withdraw consent you may be unable to access certain services or features of the App. However, we may continue to process your data as required or permitted by law.

IX. Amendments and Updates

Seattle's Best Coffee may update this Privacy Notice at any time. It is your responsibility to review the Privacy Notice regularly. Your continued use of the Platforms or Services following the modifications, updates or amendments to this Notice shall constitute your agreement to be bound by such amendments.

X. How to Contact Us

If you have any queries about this Notice or would like to exercise your rights, please direct your mail to our Data Protection Officer:

The original of this Notice is written in the English language. In the event of any conflict between the English and other language versions, the English version shall prevail.