MyFlashPay Privacy Notice

Last Modified: November 2025

WHAT DOES MYFLASHPAY DO WITH YOUR PERSONAL INFORMATION?

Why?

We collect your personal information to provide and improve our services, verify your identity, comply with legal obligations, and support secure and lawful financial transactions. The reasons we collect data include:

To establish and maintain a customer relationship
To enable money transfer services and related features
To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory requirements
To fulfil your requests and communicate with you about your transactions
To enhance user experience, improve our products, and ensure website and service functionality
To prevent fraud and protect against unauthorised or illegal activity

In the section below, we list the reasons financial companies can share their customers’ and consumers’ personal information; the reasons MyFlashPay chooses to share; and whether you can limit this sharing. We use administrative, technical, and physical security controls, including:

Encrypted transmission of sensitive data
Access restricted to authorised personnel
Partnering only with regulated and compliant third-party providers (e.g., Nsano and Persona)

Reasons we can share your personal information

Does MyFlashPay share?

Can you limit this sharing?

For our everyday business purposes - such as to process your transactions; detect and prevent fraud and other illegal activities; maintain your account(s); cooperate with criminal or government investigations; respond to court orders and subpoenas; report to credit bureaus; gather information about website access, usage and performance; enhance your consumer experience; validate your identity or your creditworthiness; in the event MyFlashPay were to become involved in a merger, acquisition or any form of sale of some or all of its business; or as otherwise permitted or required by law.

Yes

For our marketing purposes - to offer our products and services to you

Yes

Know Your Customer (KYC) documentation

Yes

For our affiliates' everyday business purposes

- information about your transactions and experiences

Yes

For our affiliates' everyday business purposes

- information about your creditworthiness

We don’t share

For our affiliates to market to you

We don’t share

For nonaffiliates to market to you

We don’t share

To limit our sharing

Email: [email protected]

for registered users, visit us online at www.myflashpay.com, log into your account profile, and edit your profile settings.

Questions?

Visit www.myflashpay.com and click on the Contact tab.

What?

To provide our services and comply with legal obligations, we collect certain personal information from you. This information enables us to:

Process your money transfers and payments
Verify your identity and prevent fraud
Comply with regulatory and anti-money laundering (AML) requirements
Communicate with you about your transactions and account
Improve our services and customer experience

The types of personal information we may collect and process include:

Identification information: Full name, date of birth, Social Security number (where applicable), passport or ID details
Contact information: Email address, phone number, mailing address
Financial information: Account balances, transaction history, credit or debit card details
Technical data: IP address, browser type, operating system, device ID, and cookie identifiers
Verification data: Information provided through third-party verification partners

We may transfer and store your personal information by computers or other transfer or storage devices in the United States and elsewhere.

How?

Financial companies

share customers’ and consumers’ personal information to run their everyday business.

Who we are

Who is providing this notice?

MYFLASHPAY INCORPORATED

What we do

How does MyFlashPay protect my personal information?

To help protect your personal information from unauthorised access and use, we endeavour to use reasonable security measures that comply with federal law. These measures can include physical, electronic and procedural safeguards such as computer safeguards and secured files and buildings. We also endeavour to limit personal information access to only employees, agents and representatives who need to know. Please know, however, that no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

Why can’t I limit all sharing?

Federal law gives you the right to limit some but not all sharing related to:

affiliates’ everyday business purposes -information about your creditworthiness
affiliates from using your information to market to you
nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing. See other important information for more on your rights under state law.

Definitions

Affiliates

Companies related by common ownership or control. They can be financial and non-financial companies.

Nonaffiliates

Companies not related by common ownership or control. They can be financial and non-financial companies.

Non-affiliates we share with can include financial companies such as MyFlashPay agents or authorized delegates that offer our services, banks, credit card companies, brokerage houses, mortgage lenders and mortgage originators; non-financial companies such as retailers, direct marketers, auto dealers, utility companies, membership clubs and other providers of goods and services; non-financial companies that provide products and services complementary to MyFlashPay services or the locations that offer such services; government agencies; third parties as necessary to process transactions that you have requested or authorized; and otherwise as permitted or required by law.

Joint marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

Our joint marketing partners include MyFlashPay agents or authorized delegates, and companies that provide products and services complementary to MyFlashPay services or the locations that offer such services.

Other Important Information

STATE PRIVACY LAWS

We will comply with state privacy laws to the extent they apply to MyFlashPay services.

California residents: In accordance with California law, we will not share information we collect about you with companies outside of MyFlashPay except as required or permitted by law. For example, we may share information to service your accounts, complete requested transactions, or to provide rewards or benefits to which you are entitled.

Nevada residents: This notice is provided to you pursuant to state law. Nevada state privacy laws permit us to make marketing calls to existing customers, but if you prefer not to receive marketing calls, you may be placed on our internal opt-out list by calling us at +1 866-331-0036 or you may also contact the Nevada Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Ste 3900, Las Vegas, NV 89101; telephone 702-486-

3132; email: [email protected]

Texas residents: If you have a complaint, first contact MYFLASHPAY INCORPORATED via email: [email protected] If you still have an unresolved complaint regarding the company’s money transmission or currency exchange activity, please direct your complaint to the Texas Department of Banking: 2601 North Lamar Boulevard, Austin, TX 78705-4294; 1-877-276-5554 (toll free); www.dob.texas.gov.

Vermont residents: In accordance with Vermont law, we will not share information we collect about you with companies outside of MyFlashPay except as required or permitted by law. For example, we may share information to service your accounts, complete requested transactions, or to provide rewards or benefits to which you are entitled.

CHILDREN’S PRIVACY

Our website is not directed at children under the age of 13. MyFlashPay does not knowingly collect or maintain information from persons under the age of 13.

EXTERNAL WEBSITES

Our website may be linked to or from third party websites. MyFlashPay is not responsible for the content or privacy practices of websites that are linked to or from our website.

MARKETING COMMUNICATIONS

We may use your name, email, and phone number to send you:

Transactional updates
Promotional offers
Service improvement surveys

You can opt out at any time by:

Clicking unsubscribe in emails
Updating preferences in your account profile
Emailing [email protected]

COOKIES

Some of our web pages may contain "cookies," or data which are sent to your web browser and stored on your computer. We use:

Essential cookies to ensure platform security and availability
Analytics cookies (e.g., Google Analytics) to understand behaviour
Marketing cookies for targeted advertising campaigns

You may manage cookie preferences via your browser or in-app settings. We do not currently respond to “Do Not Track” browser signals.

ADVERTISING ON THIRD-PARTY SITES

We may rely on third parties to deliver advertisements about goods and services that may be of interest to you. These companies may place or recognize a unique cookie on your browser (including pixel tags). They may also use these technologies, along with information they collect about your online use, to recognise you across the devices you use, such as a mobile phone and a laptop.

“DO NOT TRACK” SIGNALS

MyFlashPay does not follow web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information about an individual consumer’s online activities over time and across third-party websites or online services.

CHANGES

MyFlashPay reserves the right to modify this Privacy Statement. To the extent required by applicable law, we will notify you and give you the opportunity to opt out of changes in the way we use or disclose personal information you previously have provided. You can get an updated Privacy Statement by calling