Consent to the collection and processing of personal data

1. Of my own free will and in my own interest, I give consent to VTB Bank (Kazakhstan), BIN 080940010300 (hereinafter – the Bank) (or the Bank’s legal successor):

• to the collection and processing of my personal data (including last name, first name, patronymic (if any), nationality, gender, date and place of birth, individual identification number, legal address, place of residence, phone number, identity document number, marital and social status, ownership of movable and immovable property, education, occupation) and biometric personal data (hereinafter – personal data) (both by automated means and without them), including the Bank’s actions to obtain my personal data, verify, update, store them from a state database(s) ("SDB") and/or any other information systems, including through credit bureaus, SDB services, and SDB operators/owners;

• to the provision by credit bureaus to the Bank of personal data from the SDB, to the receipt by credit bureaus and the Bank of my personal data from SDB operators/owners, to the provision by SDB operators/owners of my personal data from all SDBs to the credit bureau and the Bank directly and/or through third parties, and to the provision by a person authorized by the Government of the RK to render public services of personal data to the credit bureau and the Bank via credit bureaus, including in the future;

• to the disclosure/use/transfer (including cross-border transfer) to the extent necessary of any information held by the Bank, including my personal data and/or banking secrecy, to third parties, including members and affiliates of the VTB Group, as well as to the performance by the Bank and third parties of any actions with my personal data, including access, collection, systematization, accumulation, verification, storage, updating, modification, use, distribution, anonymization, blocking and destruction of my personal data for the purposes of properly analyzing the information I provide, establishing business relations, timely preparation and signing by me of all necessary documents, fraud prevention, audit, reporting, and the provision of services by the Bank and/or any third party;

• to taking photographs and/or audio and/or video recordings, as well as to the collection/verification/update/storage/use/copying/transfer and reproduction, including in the presence of third parties, of my image (photo/video with or without sound) and/or voice message(s).

2. I confirm, and in the absence thereof I guarantee, that I have obtained the consent of third parties whose information I provide to the Bank in any form, for the transfer of their data to the Bank and for its collection.

3. I undertake to notify such persons accordingly.

4. This Consent also applies to information that will be received by the Bank in the future.

5. This Consent is provided until the expiration of the retention periods for personal data and/or documents (including in electronic form) containing such data, established by the legislation of the Republic of Kazakhstan, as well as by the legislation of foreign states affecting the Bank’s activities, and/or by the Bank’s internal documents, or until it is revoked by sending a written notice to the Bank at least 1 (one) month before revocation, except where this contradicts the legislation of the Republic of Kazakhstan or if I have any outstanding obligations to the Bank. In this case, I grant the Bank the right to continue processing my personal data for the purpose of completing the provision of the banking service (operation), and if the continuation of processing is required by applicable law, including the law of foreign states affecting the Bank’s activities (in such a case, processing is carried out to the extent necessary to comply with legal requirements) and by the Bank’s internal documents.