these General Terms and Conditions, and the Tariff for one reporting period; d) "ATM () Terminal", or "ATM" shall mean a device for withdrawing of cash, as well as for deposit of cash with issued by Fibank – for the ATMs marked with GENERAL TERMS AND CONDITIONS sticker for deposit function, payment of services, OF FIRST INVESTMENT BANK AD transferring of funds between accounts, or performing FOR ISSUANCE AND USE OF INTERNATIONAL of other payment or non-payment operations; DEBIT CARDS , , V PAY e) "Authorized user" shall mean the Account AND Holder or another individual, indicated in the Application for issuance of an additional card, in whose name, by order of the Account Holder, a Card has been issued to I. DEFINITIONS the Account; f) “Card” shall mean a payment instrument 1.1. For the purposes of these General Terms and agreed between the Bank, the Account Holder and the Conditions, the Application for issuance of a debit card Authorized user within the meaning of the Law on MAESTRO, VISA Electron, V PAY and Debit MasterCard, or the Application for issuance of a debit Payment Services and Payment Systems (LPSPS), representing a debit bank payment card Maestro, VISA card Debit MasterCard PayPass teen/kids, including Electron, V PAY, Debit MasterCard, Debit MasterCard Microcard or the Business Debit Card Application Form, PayPass kids/teen, business debit card VISA Business respectively the Request for issuance of a Digital card Debit or MasterCard Business Debit, issued by the and the Contract under general terms and conditions to Bank to the Authorized user, on which information is any of them (hereinafter generally “the Contract” or stored electronically and which is used repeatedly to according to the context “Contract for card in plastic”, identify the Authorized user on the basis of a plastic “Contract for Digital card”), concluded between the User card, to remotely the Account Holder’s own of payment services (hereinafter the Account Holder) funds (and/or a credit on the account of the Account and First Investment Bank AD, Sofia, 37 Dragan Holder, to the amount and under conditions agreed in Tsankov Blvd., UIC 831094393, holding a universal advance according to a Contract for providing of a bank license № РД22-2257/16.11.2009, issued by the credit-overdraft) on a current (card) account of Bulgarian National Bank, which supervises its activities individuals, and pursuant to these General Terms and (hereinafter the Bank or Fibank), as well as the Conditions; Application for issuance of an additional card and the Contract under general terms and conditions to it, g) "Charges" shall mean all amounts due concluded between the Bank, the Account Holder and according to the Tariff, such as fees, commissions, the Authorized user designated by him (hereinafter expenses, regardless of their type; Contract for additional card), as well as all requests, h) "Current (card) account" or "The applications, declarations, confirmations and other Account" shall mean a bank account, kept by the Bank written agreements thereto, the terms listed below shall in the name of the Account Holder, to which one or have the following meanings: more Cards are issued, including of different types a) “A Contactless Transaction” means any (trademarks), to which the transactions performed with transaction made by a card with the logo PayPass, the Card/s are booked, and from which the principal, PayWave, or by a Digital Card in contactless manner, interest and other expenses due from the Account by approaching/touching a (ATM, Holder are repaid. The Bank shall open the Account by POS). order of the Account Holder, which shall be considered given by signing of an Application for issuance of a b) "Account Holder" shall mean an individual Card as the relations between the parties in connection or legal entity, in whose name a current (card) account with the Account shall be governed by the Bank's is kept. Unless there are additional Cards issued to the General terms and conditions for opening and keeping Account, the Account Holder is also the Authorized of bank accounts and providing of payment services user. In case in the name of the Account Holder has (GTCPS). The Bank shall have the right to officially been issued a Card, all rights and obligations of the close the Account at the expiration of the term of the Authorized user arising from the Contract and the Contract, should it not be renewed; present General Terms and Conditions shall also apply to the Account Holder. c) "Account statement" shall mean a i) “Digital Debit Card” (Digital card) is a type document on a durable medium issued by the Bank to of debit card Maestro issued without a plastic which is the Account Holder, containing information about all intended for use in the country and abroad via NFC payment transactions performed on the Account, Mobile Devices at payment terminals allowing including transactions with each of the Cards issued to contactless transaction. Authorized user of a Digital the Account including the Digital card, as well as data card shall mean a physical person - Account Holder on the amounts, value dates, types, and dates of who has registered for active banking in the Fibank performing of the transactions, and the interests and Mobile Application under the conditions for issuance of fees accrued to the Account according to the Contract, a Digital card in the General Terms and Conditions for 1 use of the FIBANK Mobile Application of First 2.2. These General Terms and Conditions shall Investment Bank AD. constitute an integral part of the Contract, and the j) “Microcard” shall mean an additional card Contract for additional card. issued by Fibank to debit payment card MasterCard PayPass teen/kids in plastic in reduced size which is ІІІ. GENERAL PROVISIONS intended for use at payment terminals allowing contactless transaction PayPass; 3.1. Pursuant to the requirements of LPSPS and the k) „Mobile Device” shall mean a of type regulations for its implementation concerning the portable electronic equipment (mobile phone, etc.) provision of preliminary information, the Bank shall which by its operating system can use various make these General Terms and Conditions, the Tariff applications, is provided with various types of radio and the GTCPS available to its customers in an connection, and allows Internet connectivity. A NFC accessible way, allowing them sufficient time for making Mobile Device is a mobile device with near field an informed decision for the use of the service communication (NFC) capability allowing contactless concerned, respectively for concluding of a contract, data exchange for the purpose of making contactless including through announcing them on the Bank’s payments; website at www.fibank.bg, or in another manner on a l) "Off-line mode" shall mean a mode where durable medium, in the form of intelligible text in the card payment transaction is performed without Bulgarian language and in accessible format. requiring approval in real time by the authorization 3.1.1. Upon request, the Bank may provide the system of the issuer or of his servicing card system preliminary information in a manner different from those operator, or by an international authorization system specified in item 3.1., subject to charges according to the Tariff. m) "On-line mode" shall mean a mode in 3.2. (1) The Card is intended for use in the country and which each card payment transaction is immediately abroad through terminal devices, marked with the approved by the authorization system of the payment commercial brand of the respective Card – Maestro, service provider issuing the card, or of his servicing VISA Electron V PAY, Debit MasterCard, VISA card system operator, to which authorization system the Business Debit or MasterCard Business Debit, as the terminal device where the payment transaction is Bank shall be obliged, by order of the Authorized user, performed is connected via a telecommunications to perform the following transactions: medium; 3.2.1. payments for goods and services or n) "POS (Point of Sale, Point of Service) withdrawing of cash through a POS; Terminal", or "POS shall mean a device, through 3.2.2. payments for goods and services, and which payment for goods and services or withdrawing transfers between accounts through virtual POS of cash are performed, as well as other payment or terminals; non-payment operations, according to the sign of the 3.2.3. withdrawing of cash through ATMs; service indicated on the device, through the use of a payment card; 3.2.4. deposit of cash through Fibank ATMs with deposit function in the country;

3.2.5. transfers between accounts and o) "Terms and Conditions (Tariff)" shall payments for services through ATMs in the country, mean the Tariff of fees and commissions of First provided the technical possibility for that is ensured by Investment Bank AD, adopted by the Managing Board the respective card operators; of the Bank, including the Bulletin of Interest Rates accrued by the Bank on bank accounts in local and 3.2.6. references and other payment and non- foreign currency (hereinafter Bulletin of Interests or payment operations. Interest Bulletin), together with all amendments and (2) The Digital Card is intended for use in the country additions thereof as at the date of their application; and abroad at payment terminals (ATM, POS) allowing contactless transactions. No payments can be made ІІ. SUBJECT with the Digital Card over the Internet, or by other remote means of communication, that require the 2.1. These General Terms and Conditions shall govern physical presence of the card. the relationship between the Bank, the Account Holder and the Authorized user in connection with: (3) The Microcard is intended for use in the country and abroad at payment terminals allowing contactless 2.1.1. the issuance, use, servicing and administration of transactions. No payments can be made with the Digital the debit card; Card over the Internet, or by other remote means of 2.1.2. for the Digital Card - terms of use, maintenance, communication, that require the physical presence of management and the termination of the Agreement, as the card. well as for the conditions for granting the General Terms 3.3. The Bank shall have the right to expand or limit the and Conditions of the Bank for electronic banking “My scope of services which the Authorized user can use Fibank” shall apply. with the Card, to change the terms, including the price based on changes in the current legislation, the market conditions, for security reasons or due to improvements 2 in the respective service. The Bank shall notify the 4.1.4. Upon request of a legal entity or sole users of the changes, new services and special terms trader (hereinafter Merchant) who is Account Holder and conditions for their use, by publishing them on the of an Account, and on the basis of a Contract website of the Bank, and shall not bear responsibility for concluded between the Bank, the Merchant and an any damages or lost profits resulting from limiting the Authorized user designated by the latter, the Bank scope of services. shall issue to the Account of Merchant corporate debit cards Maestro, VISA Electron or Debit 3.4. The Bank accepts to make payments from the MasterCard, business debit card VISA Business Account under the conditions of an overdraft, if this is Debit or MasterCard Business Debit (corporate or expressly agreed between the parties in a separate business cards, hereinafter just Cards) in the name Contract. Payments can be made up to the amount of the of Authorized user - individual. By using the cards agreed overdraft limit on the Account, regardless of the these Authorized users shall be able to dispose of number of cards issued to it, including Digital Cards. the balances on the Account of the Merchant.

4.1.5. The Bank reserves its right to refuse the issuance of a Card without giving reasons for that. ІV. ISSUANCE OF A CARD 4.2. The Card is personal, issued to an individual – 4.1. Upon request of the Account Holder, the Bank Authorized user, and may be issued as Maestro, issues a Card to the Account, to which effect the Bank Maestro PayPass, VISA Electron, VISA Electron and the Account Holder shall sign a contract. payWave, V PAY, Debit MasterCard, VISA Business 4.1.1. Upon request of the Account Holder, the Debit or MasterCard Business Debit. Bank issues basic or additional debit cards to the Account, which may be of different types, including in 4.3. Every Card is issued with a unique personal the name of third parties (Authorized users) designated identification number (PIN). The PIN is a combination of by the Account Holder, to which effect the Bank, the at least four digits and is used to identify the Authorized Account Holder and the Authorized user shall sign a user when performing transactions pursuant to these contract. Authorized users shall be entitled, by the use General Terms and Conditions. of the additional cards, to dispose of the available 4.4. The PIN for every Card is automatically generated balances on the Account, and/or of the amount of the at the time of its issuance. The Bank ensures its overdraft, provided that such has been agreed. confidentiality until receiving of the Card and the PIN to 4.1.2. At the request of the Account Holder, the it by the Authorized user. Bank shall issue Debit MasterCard PayPass teen Cards 4.4.1. The Bank shall store the Card and the to minors (14 to 18 years of age), with the consent of PIN to it and make them available for receipt by the their legal representative (parent/guardian). A Debit Authorized user for six months from the date of their MasterCard PayPass teen Card may be issued to an issuance. In the event that the Card is not received by Account in BGN kept in the name of the legal the Authorized user within that period, the Card and the representative, or in the name of the minor with the PIN to it shall be destroyed. consent of their legal representative, with the two of them setting the limits for the Card. At the request of the 4.5. The Card and the PIN to it are given personally to Account Holder, the Bank shall issue Debit MasterCard the Authorized user and for Debit MasterCard PayPass PayPass kids Cards to minors (7 to 14 years of age) of kids – to the legal representative (Account Holder of the whom the Account Holder is legal representative Account). The PIN can be changed at any time by the (parent/guardian). A Debit MasterCard PayPass kids Authorized user with a new combination, known only to Card may be issued to an Account in BGN kept in the him, through an ATM of the Bank installed on the name of the legal representative, with the latter setting territory of the country. the limits for the Card. All transactions indicated in item 4.6. In the event that the Authorized user forgets his 3.2. may be performed with a Card the Authorized user PIN, the Bank shall issue at his request a new Card of which is a minor of the above categories, with the with a new PIN, which it shall submit to the Authorized exception of the transactions indicated in items 3.2.2., user within 10 working days, under the terms of items 3.2.4. and 3.2., para. 2. Relations between the Parties 4.4. and 4.5. of these General Terms and Conditions. in connection with the issuance of the Card, the For the issuance of a new card with a new PIN, the conditions for its use, the responsibilities and limits, Account Holder shall pay the Bank a fee according to shall be determined by an Agreement, signed between: the Tariff. the Account Holder who is a legal representative, in the case of a minor 7 to 14 years of age, or the Account 4.7. For security reasons, the Authorized user shall be Holder, the Authorized user, with the consent of their required to sign in ink on the indicated place on the legal representative, and the Bank in the case of a back of the Card at the time of its receipt. minor 14 to 18 years of age. 4.8. The Card is property of the Bank and the 4.1.3. An additional Microcard may be issued to Authorized user shall be obliged, upon expiration of its the Debit MasterCard PayPass kids and Debit validity or termination of the Contract, to return it to the MasterCard PayPass teen cards. The Bank may offer Bank. silicone bracelets, key rings and other accessories to the Microcard chosen by the Account holder/ 4.9. The name of the Authorized user as stated in his identity document (and the name of the Merchant in the Authorized user. 3 case of corporate debit cards), the Card number and combinations (such as a phone number, date of birth, the date of expiration of its validity are embossed on its car registration number, etc.). front side. In the event of change in his name, the 5.3.3. keep his CVC2/СVV2 code (for plastic Authorized user shall be obliged to submit a request for cards) and the number of his Card in secret, and not reissuance of the Card, and pay the respective fee disclose them to third parties except for the purposes according to the Tariff. specified in item 6.2.1., where these details are required 4.10. The Bank shall officially activate the Card for confirmation of the payment. following its submission to the Authorized user.

4.11. The Authorized user shall be obliged to protect VІ. OPERATIONS WITH THE CARD the Card from bending, breaking, demagnetizing, and other mechanical damage. 6.1. The Card entitles the Authorized user to perform non-cash payments for goods and services at 4.12. The issuance of Digital Cards is done under the merchants in the country and abroad, in on-line or off- General Terms and Conditions for electronic banking “My line mode, through terminal devices, marked with the Fibank”. brands of the respective Card – Maestro, VISA

Electron, V PAY, Debit MasterCard, VISA Business Debit or MasterCard Business Debit and for the Digital V. CONDITIONS FOR USE OF THE CARD card and Microcard at payment terminals allowing contactless transaction. 5.1. The Card can only be used personally by the Authorized user. The Card may not be borrowed, 6.2. When using the Card for payment of goods and transferred, or made available to third parties in any services at a terminal device, the Authorized user shall, way. The Card number, displayed on its front side, must before confirming the transaction, make sure that the not be communicated to third parties, except for payment amount is correct, then enter his PIN when transactions under item 6.2.1. such is required for payment at a terminal device and/or sign the document for the transaction (receipt, voucher, 5.2. When using the Card at a terminal device by the other), which is presented to him by the person way of inserting it in/swiping it through/tapping the receiving the payment. The signature on the document device, and in cases when the terminal device so for the performed transaction must correspond to the requires – also by entering a PIN and/or placing a signature placed on the back of the Card/the signature on the document for the transaction, as well identification papers of the Authorized user. When using as by providing the CVC2/CVV2 code when paying for the Card at a terminal device by the way of inserting it goods and services ordered by Internet (for Maestro, in/swiping it through/tapping the device, by entering the VISA Electron, Debit MasterCard, VISA Business Debit PIN of the Card, respectively by placing a signature on or MasterCard Business Debit) the Authorized user the document for the transaction, the Authorized user identifies himself and authenticates the respective confirms the amount of the payment and orders the transaction, gives his agreement for it and orders the Bank to debit the Account with this amount and transfer Bank to execute it, which unconditionally binds him with it to the account of the payee. The person receiving the the consequences, releasing the Bank from any payment order has the right to request the Authorized responsibility for damages or lost profits resulting from user to identify himself by presenting an identity its execution. document. Security 6.2.1. (For plastic cards) When paying for goods or services ordered through Internet etc., the 5.3. The Authorized user must take all reasonable steps Authorized user normally performs the transaction by to keep the personalized security features of the Card, stating his name, the number of the Card and its term including: of validity, including the CVC2/CVV2 – the last three 5.3.1. store the Card, respectively the digits of the code written in italics on the paper strip on Microcard (the Mobile device – for Digital card) the back of the Card, as well as, where necessary, any responsibly and with good care, taking all necessary other information according to the rules of the card precautions against its damage, destruction, loss, organizations. By inputting the necessary data the tampering, theft, or usage in any illegitimate way Authorized user identifies himself, confirms the amount different from the conditions for its issuance and use; of the payment and orders the Bank to debit the 5.3.2. keep his PIN and 3D password (in case Account with this amount and transfer it to the account of using “3D Card Security Service”) in secret and take of the payee. all necessary measures to prevent third parties from learning it. The Authorized user must not store his 6.3. When paying with a Card bearing the Maestro PIN/3D password in any way that allows other persons PayPass, Debit MasterCard, respectively the VISA to learn it, including not to write it on the Card/the Electron payWave logo or Digital card at POS terminals Mobile device itself, or on any object which he carries in the country and abroad marked with the PayPass, together with the Card/ the Mobile device, even in respectively payWave service logo, contactless random order. The PIN/3D password selected by the payment may also be ordered by tapping the POS Authorized user must not consist of easily detectable device, without it being necessary to insert/swipe the card/the Mobile device through it (). 4 6.3.1. When the contactless payment is within devices on the territory of the country or abroad, the limits approved by the international card marked with the brands of VISA Electron or V PAY. organization for the respective country, the order is 6.7. For any cash withdrawal/deposit from/through an usually accepted without entering the PIN and/or ATM on the territory of the country, the Authorized user signing a document for the performed transaction, and may request the issuance of a receipt by activating the can also be executed in off-line mode. respective command. 6.3.2. When the contactless payment is above the limits approved by the international card 6.8. The Bank shall execute the transactions ordered organization for the respective country, the order is through the Card by debiting the Account of the accepted and executed in on-line mode up to the Account Holder with the amounts of the respective withdrawal/payment limits set for the Card, pursuant to payments in the order of their receipt by the Bank. items 6.12, respectively 6.13 of these General Terms 6.9. The normal time period within which the Bank shall and Conditions, as well as subject to item 6.2. debit the Account is up to 1 working day after 6.3.3. By signing the application for issuance of performing of a transaction in the country, and up to 10 a Card with contactless payment application PayPass calendar days after performing of a transaction abroad, for Maestro and Debit MasterCard, respectively depending on the type and place of the specific payWave for VISA Electron and by placing the Request transaction. It is also possible that debiting of the for issuance of a Digital card, the Account Holder and Account takes a longer period of time, depending on the the Authorized user confirm that they are familiar and moment of receipt of the request for payment from the agree with the type of payment and methods of ordering servicing bank of the payee. The transaction shall be and execution of transactions with this Card, they agree reflected to the Account with the value date on which that the Bank shall consider any contactless payment the payment was ordered by the Authorized user. ordered by this Card as permitted by the Authorized 6.10. Through Fibank ATMs bank-notes in user and shall execute it by debiting the Account of the Bulgarian leva (BGN) can be deposited (coins shall Account Holder with the ordered amount and not be accepted) up to the limits set under item transferring it to the account of the payee. 6.15. 6.3.4. To perform contactless transactions with 6.10.1. The sum (amount) of the deposit Digital Card, the Mobile Device needs to be connected to shall in short term after the operation affect the the Internet. In the absence of internet connection the available balances of the Account and shall be Bank shall allow the Authorized User to perform a limited number of payments with the Digital Card, after the accounted with value date – the date of the exhaustion of which payments can only be made after operation, as in case of deposit of foreign currency connecting the Mobile Device to the Internet. the Bank shall perform the exchange as described in item 6.13. 6.4. A person accepting card payments at a POS device through which such payments are made, may 6.11. Bank-notes separated during processing the refuse to accept the Card in the event of: deposit as non-genuine or counterfeited shall be 6.4.1. invalidity of the Card; retained by the bank for verification as the sum of the deposit shall be decreased by their value. If the 6.4.2. mismatch of the signature on the Card retained bank-notes prove to be valid after the with the signature on the document for the transaction, verification their value shall be credited to the or with the one on the identity document, or absence of Amount. signature on the Card (for plastic cards); 6.4.3. refusal on part of the Authorized user to 6.12. Damaged bank-notes shall not be accepted as present a document confirming his identity, or they shall be automatically returned back by the ATM attempted use of the Card by an unauthorized person; before the operation is over, respectively the deposit 6.4.4. impossibility to obtain confirmation for shall be decreased by their value. By entering PIN, the Authorized user confirms the final sum (amount) of the execution of the transaction; deposit, visualized on the screen of the ATM and the 6.4.5. suspicion of a counterfeit or forged Card. received by him/her returned bank-notes, in case there 6.5. The persons accepting card payments have the are any. right to request authorization of the transactions made 6.13. In case of performing operation in a currency with the Card, in the process of which available funds other than the currency of the Account, the Bank shall are blocked on the Account of the Account Holder. perform the exchange applying the exchange rate of 6.6. The card can be used for withdrawing cash in one Fibank as at the time of debiting/crediting the Account. of the following ways: – from authorized For transactions abroad, the amount shall be converted banks in the country or abroad for Cards marked with into a settlement amount in the respective currency, the commercial brands Maestro, VISA Electron, V PAY, according to the exchange rate of VISA or MasterCard, Debit MasterCard, VISA Business Debit or MasterCard depending on the type of Card, after which the Bank Business Debit (for the Digital card – only at payment shall convert the resulting amount into the currency of terminals allowing contactless transaction), or Cash Account, applying the exchange rate of Fibank as at the back – at commercial outlets in the country which time of debiting/crediting the Account. provide this service, following authorization at terminal

5 6.14. For each Card transaction, the Account Holder 8.2.1. The Bank may provide the Account shall pay a fee according to the Tariff, with which the Holder with information on amounts available or due on Bank shall officially debit his Account. the Account, for each payment operation or with other information by calling and/or sending SMS notification 6.15. The Authorized user may perform non-cash to the contact mobile phone specified by him, by e-mail, payments, cash withdrawals and cash deposits with the or in another appropriate manner, for which the Account Card up to the limits set by the Bank for one Holder gives his consent. The Bank shall not be transaction, for 24 hours, for seven consecutive days, responsible when conscientiously has been provided and for maximum number of transactions for the the information to the e-mail address/contact mobile respective period (withdrawal/payment/deposit limits), phone number specified by the Account as well as subject to the available balance on the Holder/Authorized user, if the same is wrong, Account and the amount of the authorized overdraft, if inaccessible or has not been maintained and the Bank any. has not been notified in written for this circumstance. 6.15.1. The Bank may unilaterally change the limits set for the Card under item 6.15., of which it shall 8.3. The Account statement shall be made available to immediately notify the Account Holder by announcing the Account Holder in electronic form – for Fibank them in its banking offices, or on its website at customers who are registered with the electronic www.fibank.bg, or in another appropriate manner. banking “My Fibank”, or on another durable medium, as agreed with the Bank. 6.16. The limits set for the Card under item 6.15. can be 8.3.1. The Account Holder shall be obliged to changed at the request of the Account Holder by store the documents received on his own durable selecting one of the levels of limits determined by the medium for a period sufficient for the purposes of the Bank. When changing the limits at the request of the information. Account Holder, the latter shall pay the Bank a fee according to the Tariff. 8.4. At the request of the Account Holder the Bank may 6.16.1. The normal time period within which the also issue other documents relating to transactions Bank shall execute the instructions of the Account performed on the Account, its balances or other Holder for changing of parameters of the Card is 5 information, including for past periods. working days. 8.4.1. For providing of information at the request of the Account Holder in a different regularity or 6.17. The Account Holder shall be obliged to maintain volume, the latter shall owe the Bank a fee determined at all times a minimum balance on the Account, to the in accordance with the manner of its provision. amount according to the Tariff. Card payments may only be made to the extent of available funds reduced 8.5. The Account Holder shall be obliged to notify the by the minimum required balance. Bank immediately if he does not receive the reporting information he is entitled to within the period of time

normally required for this, according to the chosen VІІ. FEES AND COMMISSIONS means of communication. 7.1. The Account Holder shall pay to the Bank the fees 8.6. The Account Holder shall be obliged to immediately and commissions due according to the Tariff in examine the contents of the received reporting connection with the Contract, respectively the Contract information and, upon detecting any discrepancies, to for additional card, and these General Terms and notify the Bank without delay, according to the terms Conditions. and conditions for submitting of objections stipulated in 7.2. By signing the Contract, the Account Holder gives the GTCPS. the Bank his explicit written consent to collect all 8.7. If the Bank does not receive a written objection amounts, which are due and unsettled within the within 45 days from the date of execution of a timeframe under the Contract and these General Terms debit/credit transaction, it shall be considered that the and Conditions, from the available balances on his Account Holder has received and approved the Account. reporting information and the payment services associated with it. Notification of the Bank following this VІІІ. REPORTING period shall be considered unreasonable delay on part of the Account Holder. 8.1. After expiration of the reporting period, the Bank shall provide the Account Holder with a Account statement in writing on a durable medium. The account ІХ. OVERDUE PAYMENTS statement contains information on transactions made 9.1. The Account Holder and the Authorized users with all cards issued to the Account, incl. with Digital desighated by him shall only be entitled to make Cards. payments with the Card, including the Digital card and 8.2. The Account statement shall be made available to the Microcard up to the available funds on the Account the Account Holder subject to fees according to the (the credit balance, respectively the authorized Tariff. When the Account Holder is a consumer, the overdraft if any), reduced by the minimum required Bank shall provide him, upon request, with a monthly balance. In case of exceeding the available funds on Account statement at the Bank offices, or electronically the Account, regardless of the reason for that, the if so agreed, free of charge. Account Holder shall be obliged to immediately repay 6 the amount by which the available funds have been 10.1.5. provide the Bank, upon its request, with exceeded, otherwise the Account Holder shall pay the any information and documentation required for the Bank penalty interest for unauthorized overdraft as per purposes of the banking supervision. the Tariff on the excess amount for each day of delay, from the date of its formation. ХІ. RESPONSIBILITIES 9.2. If the Account Holder/Authorized user fails to fulfill 11.1. The Bank shall not be responsible in any way for any of his obligations under the Contract, respectively the transactions under which the Authorized user has the Contract for additional card and these General made payments using the Card. Terms and Conditions within the prescribed period of time, the Bank shall have the right to immediately: 11.2. In case of breach of his obligations to the Bank in 9.2.1. collect officially, without court connection with the use of the Card, the Account Holder intervention, pursuant to the GTCPS, its due may not make objections based on his relations with receivables from all accounts, including deposit ones, third parties. kept in the name of the Account Holder and/or the 11.3. The Bank shall not be responsible in case of Authorized users with the Bank, for which by signing of unreasonable refusal of third parties to accept the Contract, respectively the Contract for additional payments with the Card, or if a payment with the Card card, the Account Holder, respectively the Authorized initiated by the Authorized user cannot be executed due users give their explicit consent; in the event that, by to technical, communication, or other reasons beyond virtue of this item, the Bank proceeds to collect its due the control of the Bank. amounts from bank accounts in the name of the Account Holder/Authorized users, which are in another 11.4. The use of a Card which has expired, is blocked currency, the exchange rate of the Bank for the or forged, is prohibited and may serve as grounds for respective currency for the day of performing the seeking of civil and/or criminal liability in the court order. transaction shall apply; 11.5. The Card may not be used for unlawful purposes, 9.2.2. block all Cards issued to the Account including for obtaining of goods or services prohibited (including the Digital card); Cards shall be unblocked at by the current Bulgarian legislation, respectively by the the request of the Account Holder following repayment legislation operating within the jurisdiction of the of all overdue obligations, and payment of a fee Authorized user. according to the Tariff. The Bank may officially unblock the Cards upon fulfillment of the above conditions; if the 11.6. The Account Holder shall be responsible for all Account Holder does not settle all his due obligations obligations formed in connection with the issuance and within the time limit given by the Bank, the Bank shall use of all Cards issued to his Account, and the have the right to deactivate the Cards issued to the Authorized user shall be responsible jointly with the Account and take immediate actions for compulsory Account Holder for all claims of the Bank, arising from collection of the amounts due, including by court order. payments with the additional Card issued to the Account.

Х. OBLIGATIONS OF THE ACCOUNT 11.7. The Bank shall not be responsible for HOLDER/AUTHORIZED USER unauthorized or incorrectly executed payment transactions, unless it has been notified in the manner 10.1. The Account Holder/Authorized user shall be and within the time limits provided in these General obliged to: Terms and Conditions. 10.1.1. keep the Card/the Mobile device (for 11.8. The Account Holder shall be responsible for all Digital card) with good care and only use it personally damages and bear all losses, regardless of their size, and in accordance with the conditions for its issuance relating to any unauthorized payment transactions, if and usage, observing the security measures and the they are caused by fraud and/or by failure on his part or provisions of these General Terms and Conditions and on part of the Authorized user to fulfill one or more of for the Digital card as well as the conditions provided their obligations related to the issuance and/or use of under the General Terms and Conditions for electronic the Card under these General Terms and Conditions banking “My Fibank”; and for the Digital card as well as the conditions 10.1.2. ensure sufficient funds for repayment of provided under the General Terms and Conditions for the obligations on the Account, including ones related to electronic banking “My Fibank” (including for keeping of the authorized overdraft, if any; the personalized security features), which the parties 10.1.3. immediately notify the Bank in writing shall accept as breach of their obligations under Art. 53 upon the occurrence of any changes in the data of LPSPS through gross negligence. contained in the Contract and the Contract for additional 11.9. Until receipt of the notification under item 12.1. the card; Account Holder, who is a consumer, shall bear limited 10.1.4. immediately notify the Bank upon the liability pursuant to GTCPS for any unauthorized occurrence of events that create objective impossibility payment transactions within the EEA, and after receipt or undermine in any way his ability to fulfill his of the notification and blocking of the Card, the Account obligations under the Contract, respectively the Holder shall not bear any pecuniary damages, unless Contract for additional card, and these General Terms the Authorized user has acted fraudulently. and Conditions; 7 11.10. The Bank shall not be liable for any damages if it not been terminated preliminary on the grounds has received an incorrect notification under item 12.1. mentioned below or in case of loss or change of the by a person who, on the basis of unambiguous Mobile device with another one. circumstances, was authorized to make it, and the 13.2. The Contract for card in plastic and/or the contract Bank, acting in good faith, has taken the necessary for Digital card may be terminated at any time in of its measures to protect the Account Holder and has operation: blocked the Card. 13.2.1. unilaterally by the Account Holder – by 11.11. The Bank shall not be liable for transactions a 30 (thirty) day written notice placed at Bank` refused for reasons beyond its control. premises, provided that the Account Holder has repaid in full the debit balance on the Account and has fulfilled ХІІ. DESTRUCTION, LOSS, THEFT, IRREGULAR all his obligations to the Bank; USE, OR RETENTION OF THE CARD 13.2.2. unilaterally by the Bank – by a 60 (sixty) day written notice to the Account Holder. 12.1. The Account Holder/Authorized user shall be obliged to immediately notify after learning the 13.3. The Bank shall be entitled to unilaterally terminate Bank on one of the following duty phones: the Contract for card in plastic and/or the contract for +359 2 81 71 143; +359 2 81 71 144; 0800 Digital card without notice to the Account Holder in case 12 012, or of failure of the Account Holder, respectively the +359 888 68 10 10 – 24 hours a day Authorized user, to fulfill any of the obligations and/or in the events of: responsibilities undertaken by the relevant Contract, the Contract for additional card, these General Terms and 12.1.1. destruction, damage, retention, loss, Conditions, or the GTCPS. theft or depriving in any other way of the Card/the Mobile device (for Digital card), tampering or other 13.4. With the termination of the Contract, regardless of unauthorized use of it, as well as suspicion that a the reason for that, the Contracts for additional cards, third party has learned, or might learn the PIN or the concluded between the Bank, the Account Holder and other personalized security features of the Card/the each of the Authorized users shall also be automatically Mobile device; terminated. 12.1.2. performing of a transaction with the 13.5. The relations between the parties regarding the Card which has not been authorized by the closing of the Account shall be governed by the Authorized user. GTCPS. 12.1.3. when the information for the 13.6. In all cases of termination of the Contract: payment operation has been provided in electronic 13.6.1. The Bank shall be entitled to block all way (SMS, email etc.) it is considered that the Cards issued to the Account on the day of receipt, Authorized user has learned about the respectively of sending of the notice of termination/non- unauthorized or inaccurately executed operation renewal of the Contract, and to deactivate them upon after receiving of the electronic message. expiry of the term of the notice; 12.2. After receiving the notification under item 12.1., 13.6.2. The Account Holder shall be obliged to the Bank shall take all necessary measures to stop the ensure the return by the Authorized users of all Cards use of the Card, even if the Authorized user has acted issued to the Account (for plastic cards); deliberately or through gross negligence, by blocking 13.6.3. The Account Holder shall be obliged to the Card for performing of transactions within the fully repay the debit balance on the Account and to timeframe necessary for processing the notification, but settle all other obligations to the Bank, including all fees not later than 2 hours from its receipt, unless for and amounts due associated with the use of the Cards objective reasons a longer period is required. and the servicing of the Account, prior to the expiry of 12.3. In case of retention of the Card by an ATM (for the notice for termination of the Contract; plastic cards) due to technical malfunction of the ATM 13.6.4. All outstanding obligations, including or mechanical damage of the Card, the Account transactions performed with the Card/s prior to the date Holder/Authorized user shall be obliged to notify the of termination of the Contract, but received after that Bank, which shall provide return of the Card if it is date, shall be due from the Account Holder until their retained by an ATM of the Bank, or issue a new card if final repayment as the Account Holder shall remain it is retained by an ATM of another bank. liable for them to the Bank, including after termination of the Contract, regardless of the grounds for such 12.4. In case of renewal of the Card due to loss, theft, termination, and the Bank shall have right of collection damage or any other reason, the Account Holder shall pursuant to item 9.2.1. of these General Terms and pay the Bank a fee according to the Tariff. Conditions.

ХІІІ. TERM OF THE CONTRACT AND TERMINATION ХІV. VALIDITY OF THE CARD 13.1. The Contract for card in plastic is concluded for an 14.1. The validity term of each of the Cards in plastic indefinite period and for the Digital card and additional issued to the Account is embossed on the Card, Microcard – for its validity term unless the contract has 8 respectively on the Microcard’s holder and shall expire office of the Bank, and after payment of a fee according at the end of the indicated month/year. to the Tariff. 14.1.1. Upon expiry of the validity term of the 15.4. The Bank shall officially deactivate the Cards Card in plastic, which is not issued as Microcard the issued to the Account upon termination of the Contract, Bank shall officially issue a new Card. Not earlier than the Contract for additional card, and if a Card was 10 (ten) days before the expiry of the validity of the blocked under item 15.1.4. – after the Bank has Card, the Authorized user can receive his new card at received a written notice from the successors, the Bank. If the Account Holder does not wish a new respectively from the appointed guardians or trustees. card to be issued, he should notify the Bank in writing The Bank may also deactivate an issued Card in other not later than 30 (thirty) days before the date of expiry cases, expressly stipulated by law or by these General of validity of the Card. The Bank reserves its right not to Terms and Conditions. The Bank shall not be liable for renew any of the cards issued to the Account, without damages caused as a result of deactivation of the Card giving motives for that. pursuant to these General Terms and Conditions. 14.2. Upon expiration of the validity term of the Digital Card and the additional Microcard, the Account Holder XVІ. ACCESS TO INFORMATION should apply for issuance of a new card. 16.1. By signing the Contract, respectively the Contract for additional card, the Account Holder and the ХV. BLOCKING AND DEACTIVATION OF THE CARD Authorized user authorize the Bank, in accordance with the Personal Data Protection Act (PDPA), to receive on 15.1. The Bank shall be entitled to block the Card under their behalf information from the National Insurance the following conditions: Institute or from any other personal data administrator 15.1.1. upon request of the Account within the meaning of PDPA, on the personal data Holder/Authorized user. The Account Holder shall have declared by the Account Holder, respectively the the right to block the Card without the consent of the Authorized user, before the Bank at the time of, or in Authorized user; connection with the conclusion of a contract with the 15.1.2. in case a distraint is imposed on the Bank, until the complete fulfillment of their obligations Account Holder’s Account, following the order provided under the Contract, respectively the Contract for by law; additional card, and these General Terms and Conditions. 15.1.3. for objective reasons, related to: a) security of the Card; 16.2. The Account Holder and the Authorized user give their explicit and irrevocable consent and grant the b) suspected unauthorized use of the Card; Bank the right to communicate to the payment, card, c) fraudulent use of the Card; mobile, system, and other data operators and 15.1.4. in case of death or judicial disability of processing data in the country and abroad, information the Account Holder or the Authorized user – from the on the balances, transactions, and other details relating day on which the Bank has become aware of such to the status of the card Account, including data on the circumstance; in the event of death, the successors available amount and the limits on the Account. shall be obliged to return the Card in plastic to the Bank 16.3. By signing the Contract, respectively the Contract to be destroyed; for additional card, the Account Holder and the 15.1.5. automatically – in case of entering an Authorized user give their consent to the Bank, in incorrect PIN more than three consecutive times; accordance with the Personal Data Protection Act 15.1.6. in case of significantly increased risk (PDPA), to processes the personal data provided by that the Account Holder may not be able to fulfill his them for the purposes of banking supervision. The obligations under the Contract, the Contract for Account Holder and the Authorized user give their providing of a bank credit - overdraft on a current (card) consent to be included in award programs and lotteries account to individuals, and/or admitted exceeding organized by the Bank, as well as their consent that the (unauthorized overdraft); Bank provides personal data individualizing the 15.1.7. in the cases expressly provided by law Authorized user, which is required for his participation in or by these General Terms and Conditions. the said award programs and lotteries related to the use of the Card. The Account Holder and the Authorized 15.2. The Bank shall notify the Account Holder of the user shall have the right to waive participation by blocking of the Card in the cases under item 15.1.3. and explicit written notice to the Bank. of the reasons for that, prior to the blocking if possible, or at the latest immediately thereafter, unless giving such information is not allowed for security reasons or ХVII. ADDITIONAL PROVISIONS for compliance with regulatory requirements. 17.1. The amount of the obligations of the Account 15.3. A card blocked in the cases under items 15.1.2., Holder on the Account shall be established on the basis 15.1.3., or .15.1.6. shall be unblocked officially by the of the entries in the accounting books of the Bank. The Bank after elimination of the grounds for the blocking, records of all transactions made with the Card are and in all other cases it shall be unblocked upon explicit accounting documents under the Accountancy Act and written request of the Account Holder, deposited at an shall be considered true until proven otherwise. 9 17.2. The records of the orders for execution of take effect, by a written notice in accordance with transactions and of the other information, supported by Section ХІII of these General Terms and Conditions, the Bank, shall be considered as definitive proof of their and after repaying in full his obligations to the Bank. If contents, as well as of the time of their submission or the Account Holder does not terminate the Contract by execution. the date of entry of the changes into force, it shall be considered that he has accepted them and is bound by 17.3. The Account Holder/the Authorized user agree, in them. connection with the use of the payment services offered by the Bank and for security reasons, to be 18.3. Changes in the interest rates and exchange rates photographed by technical means, and the telephone resulting from changes in the reference exchange rates conversations to be recorded by the Bank, as in case of and interest rates applicable for their determination a , the Bank shall have right to use such shall apply immediately and without prior notice to the recordings as means of evidence. user. The Bank shall make such changes available to the user by announcing the applicable interest rates 17.4. The Bank shall have the right, at its own and exchange rates and the corresponding reference discretion, to assign its claims from the Account Holder levels used as basis for calculating thereof on paper to a third party. In this case the Account Holder shall be medium in its banking offices, or on its website, or on entitled to address to this third party all the objections another durable medium, unless the parties to the which he has had against the Bank. Contract have agreed on another term or manner in 17.5. The Account Holder gives his consent to the Bank which such information has to be made available. and authorizes it upon transferring of the claims to 18.4. Changes in the General terms and conditions provide the new creditor with any information relating to relating to extending the scope of the services, as well the Contract, including personal data or information as to the changes in charges and/or conditions of the constituting a bank secrecy. provided payment services, when they are more 17.6. In case the claims of the Bank under the Contract favorable to the users, shall apply immediately and are transferred to a new creditor, the Account Holder without prior notice. gives his unconditional and irrevocable consent that the 18.5. The terms and procedure for amending and Bank collects on behalf of the new creditor all amounts supplementing the Tariff and the Appendices thereto due under the Contract – principal, interest, penalties, shall be governed by the GTCPS. commissions, fees and expenses, according to the order for official collections of the Bank. ХІХ. CORRESPONDENCE ХVIII. CHANGES TO THE GENERAL TERMS AND CONDITIONS 19.1. The correspondence between the parties shall be conducted in writing, to the addresses of the Bank, the 18.1. The Bank shall have the right at any time to Account Holder and the Authorized user referred to in unilaterally change these General Terms and the Contract, respectively the Contract for additional Conditions, of which it shall notify the users of payment card. All notifications between the parties may be made services in writing, at least 3 (three) days prior to the in writing to these addresses, by fax and/or by e-mail, entry into force of the respective change, by unless another manner of notification is expressly announcement in its banking offices, sending of an provided for in these General Terms and Conditions or electronic message, by phone, via email, at the in the specific contracts. correspondence address or in another appropriate way determined by the Bank, including by notification or on 19.2. In case of change of his permanent residence its website at www.fibank.bg, or with the Account address, e-mail and/or other data specified in the statement, or via another durable medium at the Bank’s Contract, respectively the Contract for additional card, discretion. the Account Holder, respectively the Authorized user 18.1.1. When the User is a consumer, the shall be obliged to notify the Bank within 7 days after notification shall take place at least 2 (two) months prior the occurrence of this circumstance. Failing that, all to the entry into force of the respective change. notices, invitations and messages sent by the Bank to the last address and/or e-mail specified by the Account 18.1.2. The Bank shall provide the General Terms Holder/Authorized user shall be deemed served. with the upcoming changes to any user who may receive them, upon request, in paper form at an office of the Bank, as 19.3. In the event of legal proceedings in a dispute well as electronically, in accessible and convenient for storage arising in connection with the conclusion, performance, form, by publishing them on its website at www.fibank.bg interpretation or termination of the Contract, within the period prescribed under item 18.1, respectively two respectively the Contract for additional card or these months in advance for clients who are consumers. General Terms and Conditions, the addresses of the parties indicated in the contracts shall be considered 18.2. Should the Account Holder disagree with the addresses for service within the meaning of Code of changes, he shall have the right to immediately Civil Procedure for servicing of summons and court terminate the Contract (without owing any penalties or messages, unless one of the parties expressly notifies compensation in connection with the termination due to the other of a change of its address. The Bank shall not amendments in these General Terms and Conditions) be liable to the Account Holder for damages caused in prior to the date on which the changes are proposed to 10 case of failure to notify or untimely receipt of the payments at POS and/or provided by the Bank), as well notification. as various prizes and discounts. 21.1.1. A condition for accumulation and use of the points (awards/discounts) is that the Authorized user XХ. OBJECTIONS. APPLICABLE LAW AND makes payments at POS terminals marked with the DISPUTE RESOLUTION sign of the Program: 20.1. The Account Holder/Authorized user shall have 21.1.2. The points under the YES program shall the right to submit written objections concerning the use accumulate in the name of the Account Holder, of the Card and the payment transactions performed regardless whether he/she or another Authorized User with it. The submitted objections shall be considered have made payments with the card (primary or additional) within a 7-day period from the date of their receipt by at payment terminals marked with the sign of the the Bank, subject to the terms and procedures of program. Section XVII of the GTCPS. 21.2. The Bank shall make the information on the 20.2. The objections of the Account Holder/Authorized conditions of the Program, including participating user for payments made on the territory of the country merchants, campaigns, procedure for use of the points, shall be considered under the terms provided by the awards, etc., available to the Authorized users on the current Bulgarian legislation. website of the Program at http://yes.fibank.bg after proper registration for its use. 20.3. The objections of the Account Holder/Authorized user for payments made abroad (), shall 21.3. The Bank reserves its right to change the also be considered under the terms established by the conditions of the Program, as well as to offer the respective card organization – MasterCard International Authorized users other award and bonus programs or VISA Europe. related to the issuance/use of the Card, informing them appropriately as to the terms and conditions for 20.4. In cases of disputed payment, the Bank shall be participation. obliged to take all steps to protect the interests of the Account Holder/Authorized user. ХХІІ. DECLARATIONS 20.5. If it is established that the objections of the Account Holder/Authorized user are justified, the Bank 22.1. By signing of the Contract, respectively the shall refund the disputed amount to the Account. In Contract for additional card, the Account case of an unjustified or unfounded disputing of a Holder/Authorized user declares that: transaction with the Card, the Account Holder shall pay 22.1.1. the documents and information provided to the Bank a fee according to the Tariff. by him in relation to the conclusion of the 20.6. In case the Account Holder/Authorized user Contract/Contract for additional card are valid, accurate disagrees with the outcome of the procedure for and comprehensive; disputing a transaction, he shall be entitled to refer the 22.1.2. he undertakes not to use the Card in dispute to the Conciliation Commission on Payment violation of the currency regime of the Republic of Disputes to the Commission for Consumer Protection, Bulgaria; or to the competent Bulgarian court. 22.1.3. gives his consent to the Bank to provide 20.7. For any unsettled issues in the Contract, data on the balances, transactions, and other details respectively the Contract for additional card and the related to the status of his Account to the respective these General Terms and Conditions, the current operator in the country and/or abroad, including data on normative acts of the effective Bulgarian legislation the available amount and the limits on the Account; shall apply, and where applicable – the existing rules of 22.1.4. he agrees to be responsible for all the international card organizations MasterCard and obligations arising from the use of all Cards issued to VISA and/or the acts of the European Union. his Account. 20.8. Any disputes arising between the parties in relation to the implementation or the interpretation of ХХІІІ. FINAL PROVISIONS the Contract respectively the Contract for additional 23.1. An integral part of these General Terms and card and the these General Terms and Conditions, shall Conditions shall be the General Terms and Conditions be resolved by mutual consent of the parties, and in for opening and keeping of bank accounts and case such cannot be reached, either party may refer the providing of payment services, the Tariff of fees and dispute for resolution by the competent Bulgarian court. commissions of Fibank, and the appendices thereto.

23.2. These General Terms and Conditions are

prepared on the basis of Art. 298 of the Commerce Act, ХХІ. YES” – THE LOYALTY PROGRAM OF FIBANK adopted by the Managing Board of First Investment Bank AD, and amended and supplemented by a 21.1. The Bank provides the Authorized users of Cards decision in force as of 08.06.2018. with activated loyalty application with the opportunity to take advantage of the loyalty program "YES" of Fibank

(the Program), by using points (accumulated by card

11