Terms and Conditions

Introduction and Scope

What are these Terms about?

These Terms set out the rights, obligations, and rules governing the use of Jet Bank's Digital Banking platform.

The Digital Banking service is available to you provided that:

• You hold at least one active current account with Jet Bank; and
• You have successfully registered for the Digital Banking service.

By accessing or using Jet Bank's Digital Banking service, you confirm that you have read, understood, and accepted these Terms.

Definitions

To ensure clarity, the following definitions apply throughout these Terms.

What is "Digital Banking"?

"Digital Banking" means the electronic banking platform provided by Jet Bank, which enables you to access your accounts and banking products through Jet Bank's mobile application ("Mobile Banking").

Digital Banking may include, without limitation:

• Viewing account balances;
• Accessing transaction history and account activity;
• Initiating fund transfers;
• Making bill payments; and
• Any other services that Jet Bank may make available through this platform.

What is "Digital Banking Mobile"?

Digital Banking Mobile is the Digital Banking service provided through the Jet Bank mobile banking application.

Who is considered a "Client"?

A Client is an individual customer of Jet Bank who:

• Holds at least one active account with the Bank; and
• Has successfully applied for and been granted access to Digital Banking.

What is a "Business Day"?

A Business Day is any day on which banks are open for business in the Republic of Albania, excluding Saturdays, Sundays, and official public holidays.

What is a "Client Device"?

A Client Device is any compatible device used by you to access the Digital Banking service, including, without limitation:

• Mobile phones or tablets;
• The necessary computer programs (software) and applications, including downloaded applications; and
• Communication networks, including public communication networks.

Client Devices may operate on Google Android or Apple iOS operating systems.

What is a "Supported Operating System"?

A Supported Operating System is the operating system or software environment that must be installed on the Client Device in order to use the Digital Banking services.

Such operating system must be:

• Duly licensed;
• Configured in accordance with the applicable technical requirements; and
• Regularly updated in line with applicable security standards and best practices.

What is a "Rooted Device"?

A Rooted Device is any mobile device on which the restrictions or security mechanisms imposed by the manufacturer or the operating system have been removed, bypassed, or altered, thereby increasing the device's exposure to unauthorized access, manipulation, or interference.

What are "Malicious Applications"?

Malicious Applications means any program, application, code, or software component that is designed, used, or has the capability to:

• Access, process, copy, modify, transmit, or otherwise misuse, without authorization, data stored on the Client Device;
• Interfere with, compromise, or impair the normal and secure operation of the device or any installed applications, including Jet Bank's Digital Banking application; or
• Enable unauthorized access by third parties to data, security credentials, or system functionalities.

What are "Security Elements"?

Security Elements are the authentication and authorization tools used to access and operate the Digital Banking service, as well as to verify the Client's identity and authorize Transactions.

Security Elements may include, individually or in combination:

• SMS OTP (one-time password);
• PIN Code;
• Biometric authentication;
• Mobile Token; and
• Any other authentication mechanism introduced by Jet Bank in accordance with applicable law and security standards.

Security Elements are personal to the Client and may not be disclosed to or used by any third party.

The Client bears full responsibility for safeguarding the confidentiality and security of the Security Elements and for ensuring that the Device used for authentication remains under the Client's exclusive control.

The successful use of any Security Element shall be deemed verification of the Client's identity and authorization of the relevant action or Transaction, except where proven otherwise or where mandatory applicable law provides otherwise.

What is an "SMS OTP"?

An SMS OTP (One-Time Password) is a unique, confidential, and single-use code generated by the Bank and sent to the mobile phone number registered by the Client.

The Client bears full responsibility for maintaining exclusive control over the registered mobile number and for ensuring that it is not accessible to unauthorized persons.

SMS OTP is used to verify the Client's identity and as part of the process for the registration, activation, or authorization of other Security Elements and/or Transactions.

What is a "PIN Code"?

A PIN Code is a personal numeric code of at least six (6) digits created by you during activation of the mobile application or another security feature.

The PIN Code is used to:

• Access the mobile application;
• Access and manage Security Elements; and
• Authorize payments and Transactions initiated through Mobile Digital Banking.

What are "Biometrics"?

Biometrics are authentication methods based on your unique biological characteristics, such as fingerprint or facial recognition, registered on your Device and enabled for Digital Banking.

Biometric Authentication is used to:

• Securely access the mobile application;
• Verify your identity; and
• Approve Transactions or instructions within Mobile Digital Banking.

Biometric Authentication is available only on Devices that support such technology and only where enabled by you.

You are responsible for ensuring that biometric data registered on your device belongs solely to you.

What is a "Mobile Token"?

A Mobile Token is a digital security mechanism embedded within the Bank's mobile application, which generates or confirms authentication credentials for identity verification and Transaction authorization.

The Mobile Token is used to:

• Generate one-time authentication codes;
• Approve Transactions and sensitive actions; and
• Enable secure access to Digital Banking services.

The Mobile Token is linked exclusively to your registered Device and is activated following successful identification. You are responsible for ensuring that any approval or confirmation made through the Mobile Token is initiated by you.

What are "Daily Limits"?

Daily Limits are the maximum total amount of payments that may be initiated by you and executed by the Bank within a single calendar day (00:00 to 23:59).

What are "Transaction Limits"?

Transaction Limits are the maximum amount permitted for a single payment transaction executed through Digital Banking.

1. Use of Jet Bank Digital Banking

Who can use Digital Banking?

You may use Jet Bank's Digital Banking service provided that you hold at least one active current account with Jet Bank.

What does Digital Banking allow me to do?

Digital Banking enables you to:

• Access information relating to your accounts; and
• Initiate banking transactions ("Transactions").

The service may be accessed through electronic communication channels, including the internet, fixed telecommunications networks, and mobile networks.

2. Access to and Use of Jet Bank Digital Banking

How do I register for Digital Banking?

You may initiate the registration process directly through the Jet Bank mobile application.

What information do I need to provide?

During registration, you must provide all information requested by the Bank.

The information provided must fully correspond to the data recorded with the Bank.

What happens if my information does not match the Bank's records?

If the information provided does not correspond to the Bank's records, the registration process will not be completed.

Registration will proceed only once any discrepancies have been resolved and your identity has been fully verified.

How do I access the app securely?

Upon activation of your account:

• You will create a personal PIN Code; and
• You may enable biometric authentication (such as fingerprint or facial recognition), where supported by your Device.

Your PIN Code and biometric authentication together constitute your Security Elements.

Each time you access or use Jet Bank's Digital Banking services, you must authenticate yourself using one of the available Security Elements.

The successful use of a Security Element shall be deemed verification of the Client's identity and authorization of the relevant action or Transaction, except where mandatory applicable law provides otherwise.

Electronic orders and instructions executed through Jet Bank's Digital Banking using the Security Elements shall have the same legal validity and evidentiary value as orders given in written form and signed by hand.

Does the Bank know my PIN or biometric data?

The Bank does not have knowledge of, nor access to, your PIN Code or your biometric data.

You are solely responsible for:

• Maintaining the confidentiality of your Security Elements;
• Protecting them against unauthorized use; and
• Ensuring that biometric authentication is enabled only on a secure Device under your exclusive control.

Can I change my Security Elements?

You may:

• Change your PIN Code at any time after authenticating within the application;
• Enable or disable biometric authentication through your Device or application settings, where supported.

The Client is strongly advised to update the PIN Code periodically and to ensure that biometric authentication mechanisms remain properly configured and are used securely.

Can the Bank suspend or cancel my Security Elements?

The Bank may suspend or deactivate any Security Element at any time, in particular in cases of:

• Suspected fraud;
• Security breaches or risks;
• Regulatory obligations; or
• Misuse of the service.

Such suspension or deactivation may take effect immediately. In such cases, you may temporarily lose access to Jet Bank's Digital Banking services until the re-authentication or reactivation procedures have been completed.

When are transactions reflected in my account?

Debits and credits are reflected in the relevant account based on the value date determined by Jet Bank for the respective Transaction, in accordance with Jet Bank's applicable Terms and Conditions.

3. Payment Orders and How They Are Executed

What happens when I submit an order?

Once you have authenticated using the relevant Security Element, Jet Bank is entitled to rely on the payment order as authentic and valid.

Jet Bank is not required to verify:

• The accuracy;
• The completeness; or
• The correctness

of the information provided by you, except where mandatory applicable law provides otherwise.

You bear full responsibility for the accuracy, completeness, and correctness of all information submitted when initiating a payment order.

Jet Bank shall not be liable for any loss or damage arising from inaccuracies, errors, or omissions in the information provided by you.

Can the Bank request additional confirmation?

Jet Bank reserves the right, at any time, to request additional confirmation, including written confirmation, in relation to any payment order submitted through Digital Banking.

Jet Bank may impose restrictions in relation to:

• The amount of payment orders;
• The type of Transactions;
• Applicable limits; or
• The number of Transactions that may be carried out within a specified period.

Such restrictions shall be applied in accordance with:

• Jet Bank's internal policies and procedures;
• Security requirements; and
• Applicable laws and relevant regulatory acts.

Can transactions be delayed or interrupted?

During the use of Jet Bank's Digital Banking services, delays or interruptions in the processing and/or execution of Transactions may occur due to:

• Defects or malfunctions in the Digital Banking system;
• Internet connectivity issues;
• Interruptions or disruptions in electronic communication networks; or
• Other technical factors beyond Jet Bank's reasonable control and direct influence.

The execution of Transactions may be affected by such circumstances, and Jet Bank shall not be liable for delays or interruptions resulting from circumstances beyond its effective control, except where mandatory applicable law provides otherwise.

What services are available through Jet Bank?

Through Jet Bank's Digital Banking, you may:

• View information relating to your accounts and cards, including account balances and Transaction history;
• Perform fund transfers within Jet Bank, including between your own accounts or to third-party accounts;
• Initiate domestic and international transfers outside Jet Bank;
• Make bill payments, including credit card payments, utility services, telecommunications operators and public institutions;
• Apply for the opening of term deposits;
• Perform foreign exchange transactions between your accounts; and
• Use any other banking service or product that Jet Bank may make available through Digital Banking, subject to the relevant contractual terms and conditions.

Jet Bank reserves the right to add, modify or discontinue specific services at any time, in accordance with applicable law and the relevant contractual terms.

4. Your Obligations When Using Jet Bank Digital Banking

Can I cancel or change a transaction after it has been executed?

Once a payment order has been initiated and executed by Jet Bank, it may not be revoked, cancelled or amended, except where otherwise provided by applicable law.

What technical requirements apply?

In order to use Jet Bank Digital Banking, you must have appropriate devices and technical infrastructure.

Jet Bank shall not be liable for:

• The security;
• The functionality; or
• The suitability

of your device, software, or internet connection.

By using Digital Banking, you confirm that you are familiar with the devices, software and applications required to access the service and to initiate or execute Transactions.

Who owns the Jet Bank system?

All intellectual and industrial property rights relating to Jet Bank's Digital Banking system — including software, applications and any related materials — are the exclusive property of Jet Bank.

You are not permitted to:

• Copy or reproduce the application;
• Modify, interfere with or manipulate the system;
• Attempt to access or use any functionalities, data or components of the system without authorization; or
• Use the service for any unlawful or unauthorized purpose.

Digital Banking may not be used for any unlawful or unauthorized purpose.

What happens if I breach these Terms?

You shall be liable to Jet Bank for any breach of these Terms, as well as for any act or omission committed by you or by persons acting with your authorization that results in damage to Jet Bank.

Who bears the risk of security or network issues?

You are responsible for the safeguarding and proper use of your Security Elements. In the event of theft, loss or unauthorized use of such Security Elements, your liability shall be determined in accordance with applicable law.

Jet Bank shall not be liable for delays, errors or interruptions resulting from:

• Internet connectivity issues;
• Disruptions in electronic communication networks; or
• Third-party interference during data transmission,

where such circumstances are beyond Jet Bank's reasonable control.

5. Confidentiality

How does the Bank treat my information?

Jet Bank treats as confidential any information you provide through Digital Banking.

Jet Bank uses and processes your personal data solely for:

• The provision of banking services;
• The execution of payment orders; and
• Compliance with legal and regulatory obligations.

Such processing may include the recording, storage and archiving of data.

Personal data is processed in accordance with applicable data protection laws.

Do I have confidentiality obligations?

Any information displayed to you or made available through Jet Bank's Digital Banking is for your personal use only.

You must not disclose, distribute or make such information available to any third party without authorization.

You are required to take reasonable measures to protect this information from unauthorized access or use.

6. When Is the Bank Responsible?

Is the Bank responsible for confidentiality breaches caused by technical issues?

Jet Bank shall not be liable for any breach of confidentiality resulting from unauthorized interventions or technical malfunctions, provided that such circumstances are not the result of Jet Bank's fault, negligence or willful misconduct in the administration or operation of the Digital Banking system or its official website.

Where a breach of confidentiality results from Jet Bank's error, negligence or willful misconduct, its liability shall be determined in accordance with applicable law.

What happens in cases of force majeure?

Jet Bank shall not be liable to you or to any third party for delays, failure to perform services, or damages arising from force majeure events that render the performance of contractual obligations impossible.

Force majeure shall mean events or circumstances:

• Beyond the control of the parties;
• Which could not have been reasonably foreseen or avoided despite the adoption of reasonable measures; and
• Which are outside the reasonable control of the parties.

Can the Bank rely on my authenticated orders?

If a payment order is submitted through Digital Banking and confirmed using your Security Elements, Jet Bank shall be entitled to treat such order as valid and as having been issued by you.

Jet Bank is not required to carry out any additional verification of your identity or of the accuracy of the information entered by you, except where otherwise required by applicable law.

Jet Bank shall not be liable for any loss or damage arising from:

• Errors or inaccuracies in the payment order details entered by you;
• Unauthorized use of your Security Elements or device where you have failed to safeguard them appropriately;
• Fraud committed by persons not acting on behalf of Jet Bank; or
• Interruptions or delays in electronic communication networks beyond Jet Bank's control.

Nothing in this section shall exclude or limit Jet Bank's liability where such liability cannot be excluded under applicable law, including in cases of:

• Fraud;
• Willful misconduct by Jet Bank;
• Gross negligence; or
• Any other circumstance where liability may not be lawfully excluded.

Is the Bank liable for indirect losses?

Jet Bank shall be liable in accordance with applicable law.

To the extent permitted by law, Jet Bank shall not be liable for losses that are not the direct result of its actions, including indirect damages or consequential financial losses arising as a subsequent effect of a particular situation.

Can the Bank restrict operations for security or compliance reasons?

Jet Bank reserves the right to impose restrictions or temporarily suspend the execution of certain actions through Digital Banking where this is necessary for:

• Compliance with applicable laws and regulations;
• The protection of account or system security;
• The prevention of unauthorized or suspicious use; or
• The enforcement of Jet Bank's internal rules and policies.

7. Fees and Payments

Do I have to pay fees when using Jet Bank Digital Banking?

You are required to pay the fees and commissions relating to:

• The use of the Jet Bank application; and
• The banking services and Transactions carried out through Digital Banking.

Such fees and commissions shall apply in accordance with:

• The applicable Jet Bank Terms of Business; and
• Annex 1 — Terms and Conditions, which forms an integral part of the Current Account Agreement.

8. Transfers and Foreign Exchange

Which exchange rate applies to my transfer?

Where a transfer involves currency conversion, the exchange rate published by Jet Bank and in force on the date of execution of the transfer shall apply.

If the transfer is executed on a date later than the date on which the payment order was initiated, the exchange rate in force on the actual execution date shall apply.

Such rate may differ from exchange rates published by Jet Bank at other times.

Who pays fees related to transfers?

For domestic and international transfers, fees and commissions may be charged by Jet Bank, as well as by banks or other institutions involved in the processing of the payment.

The allocation of fees shall be determined based on the option selected by the Client at the time the transfer is initiated and in accordance with the rules of the relevant payment system.

Depending on the selected option, fees may be:

• Borne in full by the Client;
• Shared between the parties; or
• Deducted in full or in part from the transferred amount.

All fees and commissions shall apply in accordance with the applicable Jet Bank Terms of Business and the rules of the relevant payment system.

What happens if a transfer is returned unpaid?

If a transfer is returned by the beneficiary or by the beneficiary's financial institution, the returned amount shall be credited to the Client's account following processing by Jet Bank.

Any fee, commission or charge applied by Jet Bank or by other parties involved in the payment chain in connection with the original transfer or its return may be deducted from the returned amount.

Such deductions shall be made in accordance with the applicable Jet Bank Terms of Business and the rules of the relevant payment system.

Can the Bank change exchange rates?

The Bank may modify exchange rates within Jet Bank at any time.

The Bank may also limit or restrict orders in accordance with Clause 4.2 of these Terms.

9. Other Important Legal Terms

How is my personal data protected?

Jet Bank processes personal data in accordance with applicable data protection legislation.

Data processing is carried out in compliance with:

• Law No. 124/2024 "On Personal Data Protection";
• The relevant implementing by-laws; and
• Regulation (EU) 2016/679 (GDPR), where applicable.

Detailed information regarding:

• The categories of personal data processed;
• The purposes and legal bases for processing;
• Data retention periods; and
• Data security and protection measures

is available on Jet Bank's official website.

Am I responsible for paying transaction-related expenses?

You are required to pay, in a timely manner, all fees, commissions and charges relating to Transactions carried out through the Jet Bank application, to the extent such amounts are specified as payable by you under the applicable terms and conditions.

If the Bank delays enforcing a right, does it lose that right?

Any delay, tolerance, or failure by Jet Bank to promptly exercise a right granted under law or contract shall not constitute a waiver of that right.

Jet Bank shall be entitled to exercise such right at a later time, in accordance with applicable law and the relevant contractual terms.

What happens if part of these Terms is found invalid?

If any provision of these Terms is declared invalid, unlawful or unenforceable by a competent authority, the remaining provisions shall remain in full force and effect, and the invalid provision shall be deemed severed from the rest of the Terms without affecting their validity.

An exception shall apply where the invalid provision is essential to the contractual relationship between the Parties, to such an extent that its absence renders the continuation of that relationship impossible.

Do these Terms replace previous agreements?

These Terms, together with:

• Any accompanying documents and declarations;
• The relevant annexes; and
• The applicable Jet Bank Terms of Business,

constitute the entire agreement between you and Jet Bank in relation to the Transactions governed by this contract.

These Terms supersede and replace any prior agreements, understandings or arrangements between the Parties relating to the same subject matter.

What does accepting these Terms mean?

By accepting these Terms, and in accordance with the Civil Code of the Republic of Albania, applicable Albanian legislation and the regulatory acts of the Bank of Albania, you declare that you have carefully read, understood and accepted these Terms, and that you have familiarized yourself with the applicable Jet Bank Terms of Business.

Is this document legally binding if accepted electronically?

These Terms are drafted in the English language and are accepted in electronic form through authentication means and/or legally valid electronic signatures, in accordance with applicable Albanian law.

Electronic acceptance of these Terms shall have the same legal effect and evidential value as a handwritten signature and shall create a legally binding contractual relationship between the Client and Jet Bank in accordance with applicable law.

Any electronic version stored or made available by the Bank shall constitute valid evidence of the contractual relationship.