Mandatory Consent to Personal(Credit) Information

You may refuse to give consent to the collection, use, inquiry and provision of your personal credit information. Such consent, however, is mandatory to establish and maintain commercial transaction relationships or is a requirement directly related to services provided to you. Hence, you should give consent to the following items if you want to establish and maintain (financial) transaction relationships.

1 Mandatory Collection/Use of Personal(Credit) Information

Contract award/maintenance/execution/management(including data analysis, model development, etc.) Purpose of and improvement, provision of requested services/products, fulfillment of legal obligations, investigation on collection/use disorderly credit activities, conflict handling, phone consultation, complaint handling, ID verification, internal reporting/audit/inspection taking place abroad. -5 years from the end date of (financial) transaction* (Yet, if another relevant law is applicable, the period as prescribed by law)

storage/usage In the above storage period, the end date of (financial) transaction refers to the "date when all period existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled”.

Info. Collected/Used

Personal National ID number, Driver's License number, Passport number, Foreigner identification Registration ID number information I hereby consent to CKI's collection/use of personal identification information. I disagree I agree

Personal (credit) information General Name, contact number(mobile, home, office), address(home,office), email, company name, type personal of Job, job title, gender, nationality, voice data, domestic address registration number, Connecting information Information(CI), data of driver's license issuance, customer no of CKI, Recurring payment information, supplementary card information, General identification information, Other personal information, Employer information, Residential information, Family information ※Recurring payment information, supplementary card information are limited to applicants.

Credit Information on financial transactions such as type, period, amount, line., loan transactions, insurance transaction contracts, financial investments, other financial transactions, Information on financial transactions. information

Credit credit inquiry history, debt readjustment contract, delinquency, default, substitute payment, disorderly worthiness credit activities amount, occurrence/resolution date of disorderly credit activities, disorderly credit information activities information, delinquency information

Credit Total amount of asset/debt/income, Job information, Income information, asset information, Debt capability information, Tax payment information information:

Public Information held by public institutions which can be used to determine customer ID, credit status and information financial capability such as court' s ruling(e.g. individual rehabilitation, bankruptcy, indemnification, registered on the default list), data of national ID issuance, information on administrative penalty, credit grade, personal information, default record, debt restructuring, credit score, public ledger, utility bills payment, national ID registration related information

I hereby consent to CKI's collection/use of Personal (credit) information. I disagree I agree

MSA194 ① v.1.0

2 Inquiry of Personal(Credit) Informarion

Agencies for - Credit information collection agencies: KCIS(Korea Credit information Service) Inquiry - Credit bureaus: NICE, KCB

Purpose of inquiry - Contract award maintenance, execution, management and improvement

If Citibank Korea initiates a (financial) transaction with you based on its inquiry of your information, Validity of consent the consent given will remain valid until the end date of such (financial) transaction. However, if to information Citibank Korea refuses to initiate the (financial) transaction you requested based on its inquiry of inquiry your information, the consent given will become null and void from that moment.

Info. Inquired

Personal National ID number, Driver's License number, Passport number, Foreigner identification information Registration ID number

I hereby consent to CKI's Inquiry of personal identification information. I disagree I agree

Personal (credit) information

General Name, contact number(mobile, home, office), address(home,office), email, company name, type of Job, personal job title, gender, nationality, voice data, Connecting Information(CI), General identification information, information Other personal information, Employer information

Credit Information on loan transactions, insurance contracts, financial investments, other financial transaction transactions, information on commercial transactions information

Credit Disorderly credit activities information, Delinquency information worthiness information

Credit Job information, Income information, asset information, debt information, tax payment information capability information:

Public data of national ID issuance, personal information, delinquency, debt restructuring, credit score, public information ledger, utility bills payment, national ID registration related information

I hereby consent to CKI's inquiry Personal (credit) information. I disagree I agree

*This is not applicable to a supplementary card applicant (supplementary cardholder).

MSA194 ② v.1.0

3 Mandatory Provision of Personal(Credit) Information

(1) Personal(credit) information provided to centralized credit information collection agencies and credit bureaus

- Credit information collection agencies: KCIS(Korea Credit information Recipient Service) - Credit bureaus:NICE, KCB

- To perform duties of credit bureau prescribed by law such as credit assessment and identity verification Purpose of recipient - Perform duties of centralized credit information collection agency prescribed by law such as centralized management and use of credit information

Info. Provided

Personal National ID number, Driver's License number, Passport number, Foreigner identification information Registration ID number

I hereby consent to CKI's provision of personal identification information. I disagree I agree

Personal (credit) information

General Name, contact number(mobile, home, office), address(home,office), email, company name, type of Job, personal job title, gender, nationality, General identification information, Other personal information, Employer information information

Credit Information on loan transactions, other financial transactions, information on commercial transactions transaction information

Credit Disorderly credit activities information, Delinquency information worthiness information

Credit Job information, Income information, asset information, debt information, tax payment information capability information:

Public Personal information, delinquency information, debt restructuring information, national ID registration information related information

I hereby consent to CKI's provision of Personal (credit) information. I disagree I agree

MSA194 ③ v.1.0

(2) Personal(credit) information provided to Credit Finance Association (Crefia) etc. - Association: Crefia - State institution : Financial service commission, Financial supervisory service, Ministry of the interior and safety, National Tax Service, Korea Customs Service, National Health Insurance Corporation, other Recipient institutions with legally-mandated duties - Monoliners and bank card companies : Lotte Card, BC Card, Samsung Card, Shinhan Card, Woori Card, Hana Card, Hyundai Card, KB Card, NH bank and CKI - Merchant : Merchants involved in disputes

- To perform legally-mandated duties according to relevant laws such as the Act on the Submission and Management of Taxation Data and the Specialized Credit Financial Business Act Purpose of recipient - To establish and maintain credit card usage contracts, provide services requested by customers, exchange information between card companies, and to settle disputes involving merchants

- Association and state Institution: As prescribed by relevant laws applicable to such institutions - Monoliners and bank card companies: 5 years from the end date of (financial) transaction between you and the recipient - Merchant: Until any dispute involving merchants is settled (Yet, if another Storage/usage relevant law is applicable, the period as prescribed by law) period In the above storage period, the end date of (financial) transaction refers to the "date when all existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled.”

Info. Provided

Personal National ID number, Driver's License number, Passport number, Foreigner identification Registration ID number information I hereby consent to CKI's provision of personal identification information. I disagree I agree

Personal (credit) information General Name, contact number(mobile, home, office), address(home,office), email, company name, type of Job, personal job title, gender, nationality, voice data, Connecting Information(CI), Merchant information, General information identification information, Other personal information, Employer information

Credit Information on loan transactions, other financial transactions, information on commercial transactions transaction information Credit Disorderly credit activities information, Delinquency information worthiness information

Credit Job information, Income information, asset information, debt information, tax payment information capability information:

Public data of national ID issuance, national ID registration related information, credit grade, credit score, information delinquency, debt restructuring, utility bills payment, public ledger

I hereby consent to CKI's provision of Personal (credit) information. I disagree I agree

MSA194 ④ v.1.0

(3) Personal(Credit) information provided for maintaining services requested by the customer (Applied to customerrequestedservices only)

- Recurring payment for communication fees : KT, LG U+, SKT - Conversion of Point and miles : Seoul green trust, UNICEF, Korea Breast Cancer Foundation, Habitat, KAL, Asiana Recipient - Transportaion card : Tmoney, ebcard, Mybi, Korail, Munhak development, SamwonFA, Korea Expressway Corporation, DGB Upay - Hipass : Korea Expressway Corporation

Purpose of recipient - Implement and maintain services requested by customers

- Communication fees · Conversion of Point and miles ·Transportation · Hipass: Until the end date of transaction between you and the recipient, or the point of consent withdrawal(Yet, if another relevant law is Storage/usage applicable, the period as prescribed by law) period In the above storage period, the end date of transaction refers to the "date when the membership is terminated, or the creditor/debtor relationship expires."

Info. Provided

Personal (credit) information General name, address(home, office), mobile, Connecting Information(CI) personal information

Credit card no, credit card no, expiry date transaction information

I hereby consent to CKI's provision of Personal (credit) information. I disagree I agree

(4) Personal(Credit) information provided for internal reporting, audit and inspections abroad

- Citigroup HQ and CKI affiliates and overseas regulatory institutions (OCC, Recipient Fed(US)) *Check out for more details on CKI affiliates at www.CKI.co.kr

Purpose of recipient - Used as internal reporting/audit/inspection materials

-5 years from the end date of (financial) transaction* (Yet, if another relevant law is applicable, the period as prescribed by law)

Storage/usage In the above storage period, the end date of (financial) transaction refers to the "date when all period existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled.”

MSA194 ⑤ v.1.0 Info. Provided

Personal (credit) information

General Name, contact number(mobile, home, office), address(home,office), email, company name, type personal of Job, job title, gender, nationality, voice data, domestic address registration number, Connecting information Information(CI), data of driver's license issuance, customer no of CKI, Recurring payment information, supplementary card information, General identification information, Other personal information, Employer information, Residential information, Family information ※ Recurring payment information, supplementary card information are limited to applicants.

Credit Total amount of asset/debt/income, Job information, Income information, asset information, Debt capability information, Tax payment information information:

I hereby consent to CKI's provition of Personal (credit) information. I disagree I agree

Card Applicant name : (Signature)

Date : . . Designee name: (Signature)

MSA194 ⑥ v.1.0 Mandatory Provision of Personal(Credit) Information [Provision of Co-brand Card Services]

1 Mandatory Provision of Personal(Credit) Information

(1) Provision of KAL/Asiana Co-Brand Card Services

Recipient - KAL / Asiana

Purpose of recipient - Each airlines membership subscription and mileage accumulation - 5 years from the end date of (financial) transaction between you and the recipient (Yet, if another relevant law is applicable, the period as prescribed by law) (Yet, airline membership is retained) Storage/usage In the above storage period, the end date of (financial) transaction refers to the "date when all period existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled.”

Info. Provided

Personal (credit) information General name, date of birth, gender, Contact number(mobile, home, office), address(home,office), email, Airlines personal membership number, Connecting Information(CI) information

I hereby consent to CKI's provision of Personal (credit) information. I disagree I agree

(2) Provision of Shinsegae/Shinsegae Asiana Co-Brand Card Services

- shinsegae, Gwangju Shinsegae, Daejeon Shinsegae, Emart, Shinsegae Recipient Dongdaegu CTC, *Asiana Airlines

- Instant discount at SSG Department Stores and affiliates, SSG Point Purpose of recipient - Mileage membership/ subscription and accumulation (only for SSG - AsianaAirlines co-brand card)

- 5 years from the end date of (financial) transaction between you and the recipient (Yet, if another relevant law is applicable, the period as prescribed by law) (Yet, Shinsegae points/Asiana Airlines membership are retained) Storage/usage period In the above storage period, the end date of (financial) transaction refers to the "date when all existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled.”

MSA194 ⑦ v.1.0 Info. Provided

Personal (credit) information General name, date of birth, gender, contact number(mobile, home, office), address(home,office), email, Airlines personal membership number (only for SSG -AsianaAirlines), Connecting Information(CI) information

Credit card number transaction information

I hereby consent to CKI's provition of Personal (credit) information. I disagree I agree

(3) Provision of Gallaria/Daegu Dept. Store Co-Brand Card Services

Recipient - Daegu Department Store Co. / Hanwha Galleria

- Each department store instant discount and points membership subscription Purpose of recipient and accumulation

- 5 years from the end date of (financial) transaction between you and the recipient (Yet, if another relevant law is applicable, the period as prescribed by law) (Yet, Hanwha Galleria/Daegu Dept. Store membership is retained) Storage/usage period In the above storage period, the end date of (financial) transaction refers to the "date when all existing contracts with the bank (loan/deposit, domestic/foreign exchange, card and third-party guarantee, etc.) are terminated and services (safe deposit box, safe deposit of securities certificates, FX bank designation, electronic financial transactions incl. internet banking, etc.) end, or when any dispute involving credit/debt is settled.”

Info. Provided

Personal (credit) information General name, date of birth, gender, contact number(mobile, home, office), address(home,office), email, personal Connecting Information(CI), card number information

I hereby consent to CKI's provition of Personal (credit) information. I disagree I agree

(4) Provision of KakaoBank Co-Brand Card Services

Recipient -Kakao Bank Corp.

- Conclusion,maintenance, and management of co-brand card contract, user Purpose of recipient experience improvement, fee settlement, complaint handling, performance of statutory obligations, etc.

- The provided information shall be destructed upon the termination of Storage/usage service or within 6 months from the membership attrition. period (If there is a specific term stipulated in the governing laws/regulations, the term will be applied.)

MSA194 ⑧ v.1.0 Info. Provided

Personal (credit) information

General customer number, payment account, due date personal information

Credit co-brand card issuance status, card account status, card closure information, card holding status, transaction eligibility for promotion, due amount information

I hereby consent to CKI's provition of Personal (credit) information. I disagree I agree

※ You can withdraw your consent for the provision of personal credit information anytime on our website (www.citibank.co.kr) or via Customer Center (1566-1000) if it is to be used for purposes other than evaluating your credit worthiness, etc. ※ After you have given consent, if your personal (credit) information is provided for the same purpose or within the existing scope of utilization to keep it accurate and up to date, additional consent will not be required.

Card Applicant name : (Signature)

Date : . . Designee name: (Signature)

MSA194 ⑨ v.1.0