GENERAL TERMS AND CONDITIONS FOR THE ISSUANCE AND USE OF INTERNATIONAL DEBIT CARDS

I. SCOPE 1.1. These General Terms and Conditions (hereunder referred to as the "General Terms and Conditions") shall regulate the relations between “BULGARIAN - AMERICAN CREDIT BANK" AD (hereunder referred to as the "Bank") and the Client (hereunder referred to as the "Client" or "Holder" and / or "Authorized User“) in relation to the issuance, use and servicing of international debit cards V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS, as well as display cards VPAY CODESURE and VISA BUSINESS CODESURE by BACB. 1.2. These General Terms and Conditions are intended to inform the Client and set out the procedure and conditions for the issuance, use and servicing of international debit cards V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS, as well as display cards VPAY CODESURE and VISA BUSINESS CODESURE by the Bank. 1.3. These General Terms and Conditions shall apply to the issuance, use and servicing of international debit cards V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS, VPAY CODESURE and VISA BUSINESS CODESURE as well as the General Terms of Business of the Bank, the General Terms and Conditions for the Rendering of Payment Services by the Bank, the General Terms and Conditions for the Use of Electronic (Remote) Channels for Payment Transactions, which shall form an integral part to these General Terms and Conditions, as well as the Rules of Visa/Master Card and the provisions of the effective Bulgarian legislation. 1.4. Prior to the issuance of international V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS, VPAY CODESURE and VISA BUSINESS CODESURE by the Bank, it shall provide to the Client these General Terms and Conditions, the General Terms of Business of the Bank, the General Terms and Conditions for the Rendering of Payment Services by the Bank, the General Terms and Conditions for Remote Banking, the Bank's Tariff and Interest Rate Bulletin. The Client shall accept the above listed General Terms and Conditions of the Bank and shall agree to them by virtue of signing of the Request - Agreement for the Issuance of a Debit Card. The above listed documents shall be provided by the Bank to the Client on a hard-copy in the bank premises, upon request by the Client, as well as on a long-term carrier in accordance with the meaning of art. 42 (1) and § 1 item 4 of the Payment Services and Payment Systems Act on the Bank's website (www.bacb.bg) in a way allowing storage and unchanged reproduction of the stored information. 1.5. For the issuance, use and servicing of international debit card V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS, VPAY CODESURE and VISA BUSINESS CODESURE by the Bank, the Client and the Bank shall sign a Request - Agreement for the Issuance of a Debit Card. These General Terms and Conditions, as well as the General Terms of Business of the Bank, the General Terms and Conditions for the Rendering of Payment Services by the Bank and the General Terms and Conditions for Electronic (Remote) Payment Transaction Channels shall form an integral part to the Request - Agreement for the Issuance of a Debit Card signed between the Bank and the Client. 1.6. The Bank shall retain the right to amend and supplement these General Terms and Conditions under the provisions of Section XVIII hereunder and in compliance with the Payment Services and Payment Systems Act/PSPSA/.

II. DATA ON THE BANK. TERMS AND DEFINITIONS 2.1. BULGARIAN - AMERICAN CREDIT BANK AD has been entered in the Commercial Register kept at the Registry Agency under UIC 121246419, registered under case file No 12587/1996 as per the docket of Sofia City Court. Registered address and address of management: Sofia 1000, Metropolitan Municipality, Sredetz Region, No 2, Slavyanska street, customer service telephone: 00 359 2 9658377, e-mail: [email protected]. Website: www.bacb.bg. Competent supervisory authority: Bulgarian National Bank. 2.2. Under the meaning of these General Terms and Conditions and the Request - Agreement for the Issuance of a Debit Card, signed between the Client in his / her capacity as User of Payment Services ("Holder") and the Bank in agreement with the General Terms and Conditions (hereunder referred to as the "Request - Agreement" or the "Agreement"), as well as all requirements, attachments, declarations, confirmations and other written arrangements thereto, the terms set out below shall have the following meanings: а) “Card" shall be a payment instrument within the meaning of the Payment Services and Payment Systems Act (PSPSA) agreed between the Bank and the Holder, representing a debit bank payment card V PAY, MASTERCARD STANDARD, MASTERCARD GOLD or VISA BUSINESS, VPAY CODESURE and VISA BUSINESS CODESURE, issued by the Bank to the Authorized User, which shall be used on multiple occasions for identification of the Authorized User and for remote to the Holder's own cash (at current accounts) to execute payment and non-payment transactions in the country and abroad and / or up to the pre-agreed Overdraft on the Account of the Holder, at an amount and under the terms and conditions of the Agreement for the Extension of a Bank Loan - Overdraft on a current (card) account of individuals and in accordance with these General Terms and Conditions. The Bank shall issue bank payment cards by power of attorney in the following cases: upon filing with the Bank of a Request - Agreement by an individual duly authorized by the Holder, which individual shall be authorized by notarized power of attorney, whereby in this case the bank payment card shall be issued to the Holder or the authorized individual, depending on the provisions of the power of attorney. The right for an authorized individual to receive an issued payment card shall arise only in case of an explicit text stating the right to receive the payment card in the notarized power of attorney, issued in favour of the proxy. b) “Holder" shall be an individual or legal entity in whose name the current account is kept or a Customer in whose name is kept a bank account for basic operations within the meaning of Art. 73, PSPSA and to which debit card(s) shall be issued. The Holder and the Authorized User shall be identical when a main card is issued to the current account or the bank account for basic 1 operations of the Holder. When additional card(s) are also issued to the account of the Holder, all payables of the Holder, related to transactions ordered by the additional Authorized User, stated by the Holder in the Request - Agreement for the Issuance of the Card, shall be valid for and shall be at the expense of the Holder. c) "User" is a natural person – user of payment service, who under contracts for provision of payment services performs activity other than their commercial or professional activity. d) “The Authorized User" shall be an able individual of age, Bulgarian citizen or foreign individual. The Authorized User shall be: i) the Holder, when a main card has been issued to the account or ii) another individual (Authorized User of an Additional Card) set out in the Request - Agreement for the Issuance of a card by the Authorized User. e) “Authorized User of an Additional Card” shall be: i) an individual older than 18 years of age, Bulgarian citizen or foreign individual or ii) an individual 14 years of age, Bulgarian citizen or foreign individual, who shall be identified in the Request - Agreement for the Issuance of a Debit Card by the Holder, who is parent or guardian of the individual between 14 and 18 years of age. The Authorized User of an Additional Card in the Request - Agreement shall be referred to as the "Additional Card Holder". f) "Main Card" shall be the card issued to the Holder and Authorized User to the current account of the Holder or to the bank account for basic operations of the Holder and Authorized User who is a User. g) "Additional Card" shall be the card issued to an Authorized User of an Additional Card, to the current account of the Holder of the main card or to the bank account for basic operations of the Holder who is a User. The Authorized User of the Main Card and the Authorized User of the Additional Card shall use the balance available on the Account jointly. Upon request of the Authorized User of a Main Card the additional card may be issued also to a separate current account of the Holder of the Main Card. h) "Card Statement" shall be a document issued by the Bank to the Holder, which contains information regarding all payment transactions executed via the Account, including transactions with each of the Cards issued to the Account, as well as data as to the amounts, value dates, type and date of the transactions, the fees and interests charged in accordance with the Agreement, these General Terms and Conditions and the Tariff during one reporting period; i) "Account" or the "Account" shall be a current bank account kept with BACB in the following currencies: Bulgarian lev (BGN), or Euro (EUR), or US dollars (USD), as well as bank account for basic operations within the meaning of PSPSA and the BACB General Terms and Conditions for payment services provision kept in BGN, in name of the Holder, to which one or more Cards shall be issued, on which the transactions executed with the Card(s) shall be reported and the principal shall be repaid (only in case of pre-agreed Overdraft on the Holder's account), the interest and other fees due by the Holder. The balances available on the Account shall not be blocked only to be used with the card. The Holder may use the account to make payment and other transactions with or without using the Card in accordance with the Bank's General Terms and Conditions for the Rendering of Payment Services and the GTC for the Use of Electronic (Remote) Channels to Execute Payment Transactions. The relations between the parties in relation to the Account shall be settled by the General Terms and Conditions for the Rendering of Payment Services by the Bank. The Holder shall keep a minimum non-reducing balance on the Account as set out in the Bank's Tariff. The Bank shall issue a Card(s) to the Holder to already existing current account opened in the name of the Holder in the Bank, or shall open a new bank current Account, at the request of and instruction by the Holder, which shall be deemed given by virtue of the signing by the Holder of the Request - Agreement for the Issuance of a Debit Card. "Account" in the meaning of the preceding sentence shall also be a current account in the name of the Holder to which an Additional Card shall be issued at the request of the Authorized User of the Main Card. The Bank shall have the right to close the Account ex-officio, if the card has not been received by the Authorized User and no transactions have been executed on the account for a period of three months and no balances are available on the Account. j) "On-line Regime" (on-line) shall be a regime where each payment card transaction shall be approved immediately by the authorizing system of the card system operator servicing the Bank - Borika-Bankservice AD, to which the terminal device used to execute the payment transaction shall be connected via the telecommunication environment; k) "Off-line Regime" (off-line) shall be a regime where the payment card transaction shall be executed without requiring an approval in real time by the authorization system of the card system operator servicing the Bank - Borika-Bankservice AD, or an international authorization system; l) "Fees" shall be all amounts due in accordance with the Tariff, such as fees, commissions, charges, regardless of their type; m) "Tariff" and “Interest Rate Bulletin” - shall be the Fees and Commissions Tariff of the Bank and the Interest Rate Bulletin of the Bank approved by the Management Board of the Bank and effective as of the date of their application; n) "Terminal Device ATM ()" - "ATM" shall be a device for the withdrawal and / or depositing of cash, payment for services, execution of transfers between payment accounts, for information and other payment and non-payment transactions; о) "Terminal Device POS" (Point of Sale/Point of Service) - POS shall be a device by means of which payment for goods and services or receipt of cash shall be made, as well as other payment and non-payment transactions in accordance with the sign of the service, marked on the device, through the use of a payment card; p) “Password for payments on the Internet“ shall be a combination of random symbols, 8 to 10 symbols including obligatory 1 (one) letter in Latin and one special character in addition to figures. The special characters allowed include: (.), (,), (/), (#), (-), (‘), (!), ($), (*), (=), (@)/. The password, generated by BACB as Bank - issuer of the bank payment cards and provided to the Holder upon receipt of the bank card, serves for identification of the Authorized User and for confirmation of transactions with Internet traders, participating in the Verified by Visa and MasterCard SecureCode programmes. Password for payment on the Internet shall be provided to the Authorized User using one of the following channels: 1/ by SMS to mobile telephone number indicated by the Authorized User; 2/ as a hard copy in BACB office in a sealed envelope or 3/ by courier to the correspondence address set out by the Client in the Request - Agreement. The Bank shall not provide Password for Payments on the Internet for the VPAY CODESURE and VISA BUSINESS CODESURE in the manner described in the preceding sentence. Dynamic (one-time password) shall be used for the above. The one-time password shall be generated by pushing the respective functional key marked 2 with VbV on the back of the VPAY CODESURE and VISA BUSINESS CODESURE cards and by entering via the keyboard of the card the PIN used for cash withdrawals at terminal devices ATM or payment on real terminal device POS. The one-time password for payment on the Internet is then generated on the display of the card. The generation of a different one-time password for each transaction on the Internet shall ensure maximum security of the payment. q) Traders participating in the Verified by Visa and MasterCard SecureCode programmes shall be those traders offering goods and services on the Internet, marked as traders participating in the Verified by Visa and MasterCard SecureCode programmes and requiring the entering of a Password for payments on the Internet or PIN based on a one-time password, by bank payment cards, registered in the Verified by Visa and MasterCard SecureCode programmes.

III. GENERAL PROVISIONS 3.1. The international debit cards MASTERCARD STANDARD, MASTERCARD GOLD AND VISA BUSINESS shall be intended for transactions in Bulgaria and abroad (in more than 210 countries) and the cards V PAY, VPAY CODESURE AND VISA BUSINESS CODESURE shall be intended for transactions in Bulgaria and Europe, as well as at all terminal devices (ATM and POS) throughout the world which have the technical functionality to serve cards with chips as per the VISA and MasterCard standards. The cards shall be used to execute transactions at terminal devices branded with the trademark of the respective card - V PAY, MASTERCARD and VISA, while the Bank shall be obliged to execute the following transactions at the order of the Authorized User: 3.1.1. payments for goods and services and withdrawal of cash via POS terminal; 3.1.2. payments for goods and services, as well as transfer between accounts via virtual terminal devices POS on the Internet and payments for goods and services on the Internet via the Internet payment systems; 3.1.3. withdrawal of cash at an ATM; 3.1.4. transfers between payment accounts and payments for services via ATMs in the country, in case of existence of technical possibility thereto secured by the respective card operators; 3.1.5. information and other payment and non-payment transactions; 3.1.6. permission for card payments VPAY CODESURE and VISA BUSINESS CODESURE at traders on the Internet that participate in the VbV programmes using a one-time dynamic password following entry of the Holder's own PIN code on the display of the card; 3.1.7. ensuring access (log on) to the electronic (remote) banking channels of BACB, namely the virtual bank BACB , through the generation of a dynamic password, following entry of the Holder's personal PIN code for the cards VPAY CODESURE and VISA BUSINESS CODESURE. 3.1.8. execution of the following transactions by means of generation of one-time dynamic password with cards VPAY CODESURE and VISA BUSINESS CODESURE: - Requests for opening / closing of current accounts; - Requests for opening / closing, transactions with deposits and savings accounts; - Requests related to debit cards (request for issuance, change of the parameters and limits, blocking, unblocking); - Instructions in narrative form to the Bank; - Bulgarian lev transfers (Bulgarian lev transfer, transfer to the budget, transfer to the budget - multi-line, direct debit request); - Foreign currency transfers; - Purchase - sale of foreign currency; - Utility payments, etc. 3.2. The transactions provided for in point 3.1.7 and 3.1.8 shall be executed in accordance with the General Terms and Conditions of BACB, which are available to the Client as printout at the counters in the Bank, as well as on a lasting carrier in the meaning of art. 42 (1) and §, item 4 of the PSPSA on the Bank's website (www.bacb.bg). 3.3. The Bank shall have the right to expand or limit the scope of the services that the Authorized User shall be allowed to use via the Card, to change the terms and conditions, including the fees, interests, and commissions, based on amendments in the effective legislation, market conditions, for security concerns or improvements in the respective service. The Bank shall notify the users as to the changes, new services and special rules and conditions for their use by publishing them on the Bank's website and the Bank shall not be held liable as to any damages sustained and benefits forfeited as a result of the limitation of the scope of the services. If as a result of a change in the conditions the fees, interests and commissions shall be higher, the Bank shall notify the Client under the provisions of the General Terms and Conditions for the Rendering of Payment Services by the Bank. 3.4. The Bank shall accept to execute payments to the Account at the terms and conditions of overdraft if explicitly agreed to between the parties in a separate Agreement.

IV. ISSUANCE OF MAIN AND ADDITIONAL CARD 4.1. (1) At the request of the Holder the Bank shall issue a Card to an existing or new Account of the Holder. The Bank and the Holder shall sign a Request - Agreement for Issuance of a Debit Card thereto in accordance with these General Terms and Conditions. (2) Regarding the conditions for keeping a bank account for basic operations and provision of services, in connection with the issuance of card of a User and provision of services, the General Terms and Conditions for the provision of payment services shall apply. 4.1.1.At the request of the Holder the Bank shall issue additional debit cards to the Account in the name of third individuals (Authorised Users of Additional Cards), set out by the Holder in the Request - Agreement for the Issuance of a Debit Card in

3 accordance with these General Terms and Conditions. The Authorized Users of the additional cards shall have the right to dispose with the balances available on the Account and / or up to the amount of the overdraft, if any overdraft has been agreed, within the transaction limits. The Holder shall give his / her explicit consent thereto. 4.1.2.The issuance and use of additional cards shall be completely the right and responsibility of the Holder of the Account. The Holder of the Account shall bear full liability as to all acts committed with the additional card. All transactions executed with the additional card and the fees charged on the, principal amounts (in case of extended overdraft) and interest shall be at the expense of the Holder of the Account. 4.1.3. At the request of a legal entity or sole trade, Holder of the Account and on the grounds of a Request - Agreement for the Issuance of a Debit Card, signed between the Bank and the Holder, the Bank shall issue to the Holder's current account business debit cards VISA Business or VISA BUSINESS CODESURE (business debit cards), hereunder referred to only by "Card" in the name of the Authorized User - individual (legal representative of the Holder or an individual) an individual set out by the Holder in the Request - Agreement - Bulgarian citizen or foreign individual. By virtue of using the cards the Authorized Users shall be able to dispose with the balances available on the Account and / or up to the amount of the overdraft, if any overdraft has been agreed, within the transaction limits. The Holder shall give his / her explicit consent thereto. 4.1.4.The Bank shall keep its right to refuse to issue a Card on the basis of a filled-in and signed Request - Agreement for the issuance of a debit card, without having to provide justification thereto. 4.2. Each card issued by the Bank shall be personal, shall be issued to an individual, Authorized User (upon the issuance of business debit cards the Authorized User shall be the legal representative of the legal entity, or the sole trader, of an individual specified by the Holder - Bulgarian citizen or foreign individual, as identified in the Request - Agreement). 4.3.Each Card shall be issued together with a unique personal identification number (PIN). The PIN shall be a type of personalised safety feature, representing a combination of at least four digits and serving for identification of the Authorized User upon execution of payment and non-payment transactions in accordance with these General Terms and Conditions. 4.4. The Bank shall guarantee the secrecy until the card and the PIN shall be submitted by the Bank to the Authorized User. 4.5. The Bank shall submit the Card and the PIN thereto personally to the Authorized User and / or the Authorized User of an Additional Card within 10 working days. 4.5.1. The Card shall be submitted to the Authorized User and / or the Authorized User of an Additional Card in one of the following ways: (i) by courier to an address stated by the Authorized User in the Request - Agreement for the Issuance of a Card or (ii) in an office of the Bank indicated in the Request - Agreement for the Issuance of a Card in advance; 4.5.2. The PIN code shall be submitted to the Authorized User and / or the Authorized User of Additional Card in one of the following ways: (i) in a sealed envelope, via courier, to an address specified by the Authorized User in the Request - Agreement for the Issuance of a Card (for security reasons the PIN code shall be sent in a package separately from the Card); (ii) in a sealed envelope in an office of the Bank, set out in the Request - Agreement for the Issuance of a Card in advance; or (iii) via SMS message to the telephone of the Authorized User and / or the Authorized User of an Additional Card set out in the Request - Agreement for the Issuance of a Card. 4.5.3. The Bank may submit the Card and the PIN code of the Authorized User in a way other than the one described above, if it shall meet the security requirements of the international organizations VISA and MasterCard. 4.5.4. The Card shall not be active at the time of the receipt of the Card and the PIN by the Authorized User. To activate the Card the Authorized User shall call the telephone numbers indicated by the Bank - +359 2 8705149 or +359 2 9702600 – available on a 24-hour basis and following identification of the Authorized User and check of the data declared by the Authorized User: name, personal identification number, mother's maiden name (key word) and other data included in the Request - Agreement, the card shall be activated. The Bank recommends to the Authorized User the Main or the Additional Card to change the PIN code at a terminal device ATM immediately after receipt and activation of the card by the Authorized User. The PIN code may be changed at any time by the Authorized User and replaced by a new PIN only known to him / her, at an ATM (of the Bank or of another bank), installed on the territory of the country. 4.6. If the Authorized User shall forget his / her PIN code, the Bank shall issue a new card with a new PIN code at his / her request. The new Card and the new PIN code shall be submitted to the Authorized User within 10 working day in compliance with the procedure set out in items 4.4 and 4.5 of these General Terms and Conditions. For the issuance of the new Card with a new PIN code the Holder shall pay to the Bank a fee in accordance with the Tariff. 4.7. The Authorized User shall be obliged to sign on the signature strip on the back of the Card using a ballpoint pen, upon receipt of the Card (not relevant and not valid for VPAY cards). 4.8. The Card shall be property of the Bank and upon expiry of the term of its validity or upon termination of the Agreement the Authorized User shall be obliged to return it to the Bank. 4.9. The name of the Authorized User as per identity document (and the name of the legal entity, or sole trader for business debit cards) in Latin letters, the number of the Card and the date when the validity term of the card shall expire, shall be written on the face of the card. In case of change in the name the Holder / Authorized User shall be obliged to file a request for the re-issuance of the card and shall pay the respective fee in accordance with the Tariff. 4.10.The Authorized User shall be obliged to protect the Card against folding, breaking, de-magnetisation and other mechanical damage.

4

4.11.For the purpose of ensuring maximum security of card payments on the Internet BACB provides to the Authorized Users automatic registration for the service - „Password for payments on the Internet“(3D Secure for MasterCard cards and Verified by VISA (VbV) for VISA cards). The password for payments on the Internet shall be provided to the Card Holders together with the PIN code for payments and cash withdrawals, or via SMS message, or the Password for payments on the Internet shall be printed also in the envelope with the printed PIN code. In the process of card payments on the Internet the Authorized User shall enter the "Password for payments on the Internet" provided to him / her by the bank in addition to the data for the card, thus eliminating the right of abuse on the Internet. The provisions of this article shall apply to VPAY CodeSure and VISA Business CodeSure. 4.12. For card payments on the Internet with VPAY CODESURE and VISA BUSINESS CODESURE, BACB shall give the Authorized User the opportunity for generation of a one-time dynamic password for identification upon each payment. The generation of a dynamic password shall be done via the of the respective function using the keyboard on the back of the VPAY CODESURE and VISA BUSINESS CODESURE cards and following entry of the Holder's personal PIN code.

V. TERMS OF USE 5.1. The Card may only be used by the Authorized User personally. The Card may not be lent, transferred or provided to third individuals in any other way. The number of the Card, embossed on its face, should not be provided to third individuals. 5.2. By virtue of use of the Card by the Authorized User at terminal device (АTM and POS) by means of placement into / sliding through / touching on the device, and in the cases when the terminal device shall require so, with the entering of the PIN code and / or the one-time dynamic password, and / or by laying a signature on the transaction document, as well as through the submission of an identity document, upon request by a trader upon the use of the card at POS at a trader (the transaction with VPAY cards always based on CHIP and PIN), the Authorized User shall identify himself / herself and shall verify the authenticity of the respective transaction, shall give his / her consent and shall order the Bank to execute the transaction, which shall be unconditionally binding on the Holder with respect to the consequences, whereby the bank shall not be held liable as to any damage or forfeited benefit as a result of the execution of any such transaction. 5.3. The Authorized User shall be obliged to take all reasonable actions to protect the personalised security features of the Card by: 5.3.1.storing the Card responsibly with the due care of a good owner, by taking all measures required to prevent damage, destruction, loss, forgery, theft, misappropriation by another individual, or use of the Card in any other illegal way, other than the terms and conditions related to the card's issuance; 5.3.2. keeping his / her PIN and Password for payments on the Internet secret and taking all measures necessary to prevent third persons from finding it/them out. The Authorized User shall be obliged not to store his / her PIN code in a way allowing other individuals to get to know it, including by not writing it down on the Card or on any other item that the Authorized User shall carry together with the Card. The PIN chosen by the Authorized User should not contain an easily identifiable combination (such as telephone number, date of birth, car registration plates, etc.). The Authorized User shall be obliged to use his / her PIN code / Password for payments on the Internet only after he / she makes sure that the PIN code cannot be seen from any third person in order to prevent any potentially malicious actions / fraud by third persons.

VI. PAYMENTS AND CASH WITHDRAWALS 6.1. The Card shall give the right to the Authorized User to make dematerialised payments for goods and services in the country and abroad on-line or off-line at traders, via terminal devices, branded with the trademark of the respective card - MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS. The VPAY, VPAY CODESURE and VISA BUSINESS CODE SURE debit card shall entitle its user to make transactions in the country and in Europe, whereby the transactions with the card shall always be authorized by the issuer and shall operate in an on-line regime. 6.2. In case of use of the Card for payment for goods and services at terminal devices, before confirming the transaction, the Authorized User shall be obliged to make sure that the amount due for payment is correct, then to enter his / her PIN code, when such shall be required and / or to sign the document for the transaction executed (receipt, voucher, other document), which shall be presented by the individual accepting the order for the payment. The signature on the document for the transaction executed should be the same as the signature laid on the back of the Card. By virtue of the use of the Card at the terminal device, by virtue of the entering of the PIN code of the Card, respectively, by virtue of the signing of the document for the transaction executed the Authorized User shall verify the payment amount and shall order the Bank to debit this amount on the Card and to transfer it to the account of the recipient of the payment. The individual receiving the order for payment shall have the right to request the Authorized User to verify his / her identity by means of providing an identity document. 6.3. In case of payment for goods or services ordered over the telephone, fax, internet, etc. the Authorized User shall execute the transaction in an ordinary way by stating / entering his / her name, the Card number and its term of validity, including CVC2 / CVV2 - the last three digits of the code, usually written on the paper strip on the bank of the Card in Italics, as well as other information in accordance with the rules for card transaction, when required. By virtue of entering the data required the Authorized User shall identify himself / herself, shall confirm the payment amount and shall order the Bank to debit his / her Account with such amount and transfer it to the account of the recipient of the payment. In the process of card payment on the Internet at websites marked as secure (in accordance with the standards of VISA and MasterCard - 3D Secure for MasterCard and VbV for VISA cards) the Authorized Holder shall enter the card data and the Password for payments on the Internet provided to him / her by the Bank, for the purpose of making secure payments on the Internet and elimination of the risk of abuse in this kind of payments.

5

For card payments on the Internet with VPAY CODESURE and VISA BUSINESS CODESURE, the Bank shall provide to the Authorized User a possibility for generation of a one-time dynamic password for identification upon each payment. The generation of the one-time dynamic password for payments on the Internet shall be done via the selection of the respective function using the keyboard on the back of the VPAY CODESURE and VISA BUSINESS CODESURE cards and following entering of his / her personal PIN code. 6.4. An individual accepting card payments at POS device (Trader), through which payment is made, may refuse the use of the Card, provided: 6.4.1. the Card shall be invalid; 6.4.2. there shall be discrepancy between the signature laid on the Card and the signature laid on the transaction document or the identity document, or if there shall be no signature on the Card (not applicable for VPAY cards); 6.4.3. refusal by a card holder who states he / she is the Authorized User to provide a document confirming his / her identity, or when the Trader shall find that the Card is being used by an unauthorized person; 6.4.4. impossibility to obtain confirmation regarding the execution of the transaction; 6.4.5. doubt as to untrue or forged Card. 6.5.The individuals accepting card payments shall have the right to require authorization for the payments with the Card, whereby funds from the current available balance on the Account of the Holder shall be blocked. 6.6. The Card may be used for cash withdrawal in one of the following ways: a) at an ATM (АТМ terminal); b) at POS terminal () from the banks in the country and abroad authorized thereto, branded with the trademarks - MASTERCARD and VISA (VPAY cards for Europe); or c) cash back at the commercial outlets in the country rendering this service, following authorization of terminal devices on the territory of the country branded with the trademarks MASTERCARD and VISA. 6.7.For each cash withdrawal at an ATM in the country the Authorized User may order issuance of receipt by activating the respective service. 6.8. The Bank shall execute the transactions ordered with the Card by debiting the Account of the Holder with the payment amounts in the order of submission to the Bank. 6.9. The usual term over which the Bank shall debit the amount to the Account shall be up to 3 working days after the execution of a transaction in the country and up to 10 calendar days after the execution of the transaction abroad, depending on the type and place of the specific transaction. It shall be possible for the Account to be debited over a different, longer term, depending on the timing of the submission of the payment request by the bank servicing the recipient of the payment. The transaction shall be recorded on the Account with a value date the date on which payment shall be ordered by the Authorized User. 6.10.In case of payments in currency other than the currency of the Account the Bank shall perform FX exchange by applying the exchange rate quoted by BACB at the time of debiting / recording the amount on the Account. In case of transactions abroad the amount shall be translated into the settlement amount in the currency and at the exchange rate of VISA or MasterCard, respectively, depending on the type of the Card, and thereafter the Bank shall convert the amount calculated in this way into the currency of the Account, by applying the exchange rate quoted by BACB at the time the transaction shall be accounted for / recorded on the Account. 6.11.For each Card transaction other than payment for goods and services at a trader the Holder shall pay a fee in accordance with the Tariff, which the Bank shall charge on the Holder's account ex-officio. 6.12. The Authorized User may make dematerialized payments and may withdraw cash using the Card up to the amount of the transaction limits set by the Bank: per one payment transaction over 24 hours, in seven consecutive days and for maximum number of transactions over the respective period (transaction limits for withdrawals / payments), as well as depending on the balances available on the account and the overdraft allowed, if any. 6.12.1. The Bank may change unilaterally the limits set with respect to the Card under point 6.12., for which the Bank shall notify the Holder forthwith by announcements in its bank premises or on the Bank's website at www.bacb.bg, or in another appropriate way. 6.13.The limits under item 6.12 set for the Card may be changed at the request of the Holder and after approval by the Bank. In case of change in the limits at the request of the Holder, the latter shall pay to the Bank a fee in accordance with the Bank's Tariff. 6.13.1. The normal term over which the Bank shall execute the Holder's instructions as to a change in the Card's parameters is within 5 working days.

VII. FEES AND COMMISSIONS 7.1. The Holder shall be obliged to pay the Bank the fees and commissions due in relation to the Agreement and these General Terms and Conditions in accordance with the Tariff. 7.2. By virtue of signing the Agreement the Holder shall give his / her explicit written consent that the Bank shall collect all amounts due and outstanding after the due date in accordance with the Agreement and these General Terms and Conditions from any balances available on the Account.

VIII. INFORMATION AND REPORTING 8.1. The Bank shall make available to the Holder in writing on a lasting carrier Current Account Statement for the period expired. The Bank shall make available to the Holder monthly Account statement for a prior period, in one of the following ways: 8.1.1. At the counters in the Bank; 6

8.1.2. By mail to the correspondence address set out by the Holder; 8.1.3. By e-mail to the e-mail address set out by the Holder; 8.1.4. Via the electronic (remote) channels of the Bank for execution of payment transactions; 8.2. The Bank may provide to the Holder information regarding amounts available on and due from the Account and other information by means of telephone call and / or SMS message to the contact mobile telephone number provided, to an e-mail address or in another appropriate manner, to which the Holder shall give his / her consent. 8.3. At the request of the Holder, the Bank may issue other documents regarding the transactions executed via the Account, the balances available or other information, including for past periods and against payment as set out in the Bank's Tariff. 8.4. The Holder shall be obliged to notify the Bank immediately if the he / she shall not receive information in statement format, which should have been received in the period of time, which is usually required thereto, in accordance with the chosen communication channel. 8.5. The Holder shall be obliged to get acquainted with the content of the statement received immediately and shall notify the Bank in case of finding of any discrepancy, without delay, following the procedure and under the terms and conditions for the filing of objections in accordance with the General Terms and Conditions for the Rendering of Payment Services of the Bank. 8.6.If the Bank has not received written objection within 45 days as of the date of execution of the transaction (debiting / recording), it shall be deemed that the Holder has received and approved the statement and the payment services related thereto. Any notification to the Bank after this deadline shall be deemed unjustified. 8.7. For better awareness of the Authorized User, as well as to reduce the risk of unauthorized transactions / fraud BACB shall give the right to choose the option and take advantage of the service offered by the Bank - SMS message notification upon each transaction, which the Holder shall give his / her explicit consent to in the Request - Agreement for the Issuance of a Debit Card. The Holder shall pay the respective fee set out in the Bank's Tariff thereto.

IX. ARREARS IN CASE OF EXCEEDING THE BALANCE ON THE ACCOUNT 9.1. The Holder and Authorized User, as well as the Authorized Users of additional cards, shall have the right to make payments with the Card up to the amount of the balances available on the Account (the available balance, the extended overdraft, respectively, if any). In case of excess over the balance available on the account, due to off-line transaction or for another reason, the Bank shall open ex-officio a loan account to the Holder, which shall be treated as unauthorized overdraft used and on which interest rate shall be charged for the respective currency in accordance with the Tariff and the Interest Rate Bulletin. The Holder should repay the amount in excess of the balance on the account immediately. 9.2. If the Holder - user shall not perform any of his / her obligations under the Request - Agreement for the Issuance of a Debit Card under these General Terms and Conditions within the deadlines set thereto, the Bank shall have the right forthwith: 9.2.1.to collect ex-officio, without involvement of the court, under the provisions of the General Terms and Conditions for the Rendering of Payment Services by the Bank, any amounts due from all accounts, including of the Holder. By virtue of the signing of the Request - Agreement the Holder shall give his / her explicit consent thereto in the meaning of art. 21 of BNB Regulation No 3 dated 16 July 2009. If the Bank shall proceed to collection of the amounts due under the provisions of this article from bank accounts of the Holder / Authorized User in a different currency, the Bank's exchange rate for the respective currency on the transaction day shall apply; 9.2.2. to block all Cards issued to the account; the Cards shall be unblocked following repayment of the overdue payables and payment of a fee in accordance with the Tariff. The Bank shall have the right to unblock the Card ex-officio upon compliance with the above conditions, if the Holder shall repay all of his / her due payables within the deadline set by the Bank, 9.2.3. The Bank shall have the right to deactivate the Cards issued to the Account and to proceed to steps for immediate enforced collection of any amounts due, including through the court.

X. OBLIGATIONS OF THE HOLDER / AUTHORIZED USER

10.1. The Holder / Authorized User shall be obliged: 10.1.1.to keep the Card with due care and to use it only personally in accordance with the term and conditions which the Card has been issued to be used under, in compliance with the security measures and the provisions of these General Terms and Conditions; 10.1.2. to make available funds on the Account for repayment of the liabilities, including the overdraft extended, if any, as well as to keep the minimum non-reducing balance, set out in the Bank's Tariff; 10.1.3.to notify the Bank forthwith in writing in case of any change occurring in the data, contained in the Request - Agreement for the Issuance of a Debit Card under the General Terms and Conditions. Otherwise all notices, communications, etc. sent by the Bank to an address / e-mail, or mailing address / or mobile telephone number / via SMS/ shall be deemed duly served upon their sending; 10.1.4.to notify the Bank forthwith upon occurrence of events that shall render objectively impossible or shall cast doubt in any way as to the Holder's ability to perform his / her obligations under the Request - Agreement for the Issuance of a Debit Card under these General Terms and Conditions; 10.1.5. to present any information and documentation required for the purpose of bank control, upon request by the Bank.

7

XI. LIABILITY 11.1.The Bank shall not be held liable in any way as to the transactions on which the Authorized User shall make payments using the Card. 11.2. In case of non-performance of his / her liabilities to the Bank in relation to the use of the Card the Holder / Authorized User may not file objections based on his / her relations with third parties. 11.3. The Bank shall not be held liable in case of unjustified refusal by third parties to accept payments with the Card or if payment with the Card initiated by the Authorized User may not be made due to technical, communication or other reasons beyond the control of the Bank. 11.4.Use of a Card with expired validity term subject to return to the Bank, of a blocked or forged Card shall be forbidden and may serve as grounds for civil and / or criminal liability via the court. 11.5. The Card may not be used for purposes that are in contradiction with the law, including acquisition goods or services forbidden by the effective Bulgarian legislation, respectively the legislation effective in the jurisdiction of the Authorized User. 11.6.The Holder shall be liable as to all liabilities incurred in relation to the issuance and use of all Cards issued to him / her linked to the Account. 11.7. The Bank shall not be held liable as to unauthorized or inaccurately executed payment transactions, if not notified according to the procedure and within the deadlines set out in these General Terms and Conditions. 11.8.The Holder shall be liable for all damages and shall sustain fully any loss, despite the amount, related to all unauthorized payment transactions, if caused through fraud and / or due to non-performance by the Holder or the Authorized User of the Additional Card for one or more of their obligations related to the issuance and / or use of the Card in accordance with these General Terms and Conditions (including, with respect of storage of the personalised security features), which the parties shall accept as non-performance of their obligations under art. 53 of the PSPSA due to gross negligence. 11.9. Until receipt of the notice under point 12.1 below the Holder shall bear liability in accordance with the law and the General Terms and Conditions for the Rendering of Payment Services for unauthorized transactions executed in the EEA, and following receipt of the notice and blocking of the Card the Holder shall not suffer any property damage, unless the Authorized User acted fraudulently. 11.10.The Bank shall not be held liable as to damages if it has received untrue notice under point 12.1 from a person, who based on undoubted circumstances, has been authorized to do so and the Bank has undertaken the steps required to protect the Holder in good faith and has blocked the Card. 11.11.The Bank shall not be held liable for transactions rejected due to reasons beyond the Bank's control.

ХII. DESTRUCTION, LOSS, THEFT, USE IN ANY ILLEGAL MANNER OR RETENTION OF THE CARD 12.1. The Holder / Authorized User and the Authorized User of an Additional Card shall be obliged to notify the Bank at one of the following on-duty telephone numbers of Borika - Bankservice AD: +359 2 8705149 or +359 2 9702600 – 24-hour duty basis in case of: 12.1.1.destruction, damage, retention, loss, theft, another way in which the card has been taken away, forgery or use in any other illegal way of the Card, as well as in case of doubt that a third person has become aware of or could have become aware of the PIN code; 12.1.2.execution of a transaction with the Card not allowed by the Authorized User. 12.2.Following receipt of the notice under point 12.1. the Bank shall take all measures required to prevent the use of the Card, even if the Authorized User has acted intentionally or in case of gross negligence, by blocking the Card for transactions within the time required to process the notice, but not later than 2 hours as of the notice, unless a longer period of time shall be needed for objective reasons. 12.3.In case of retention of the Card at an ATM machine due to technical breakdown of the ATM or mechanic damage on the Card the Holder / Authorized User shall be obliged to notify the Bank, which shall issue a new Card following receipt of request for the re-issuance of the Card. 12.4. In case of renewal of the Card due to loss, theft, damage or any other reason the Holder shall pay to the Bank a fee in accordance with the Tariff.

XIII. TERM OF THE AGREEMENT AND TERMINATION 13.1. The Agreement shall be signed for an indefinite term. 13.2. The Agreement may be terminated at any time during the period of its validity: 13.2.1. unilaterally by the Holder with 30 (thirty) day written notice to the Bank, provided the Holder has repaid fully all of his / her liabilities to the Bank on the Account and has fulfilled all of his / her obligations to the Bank; 8

13.2.2. unilaterally by the Bank with 2-month written notice to the Holder, who shall be user, i.e. individual, and when the Holder shall be legal entity or sole trader (i.e. shall not be user) - with 30 (thirty) day written notice; 13.2.3. by mutual agreement between the Parties. 13.3. The Bank shall have the right to terminate the Agreement unilaterally, without notice to the Holder, in case of non- performance of an obligation and / or liability by the Holder / Authorized User, respectively Authorized User of an Additional Card, undertaken under the Agreement in accordance with these General Terms and Conditions. 13.4. By virtue of termination of the Agreement, regardless of the grounds thereto, all cards to the current account, including additional cards, shall be deactivated. 13.5. The relations between the parties upon the closing of the Account shall be settled by the General Terms and Conditions for the Rendering of Payment Services.

13.6. In all cases of termination of the Agreement: 13.6.1. The Bank shall have the right to block all Cards issued to the Account on the date of receipt, respectively sending of the notice for the termination / non-extension of the Agreement and to deactivate them prior to the expiry of the notice term. 13.6.2. The Holder shall be obliged to ensure return to the Bank by the Authorized Users of all cards issued to the Account; 13.6.3. The Holder shall be obliged to repay fully all amounts due to the Bank on the Account and to perform all other obligations to the Bank, including all fees due and amounts related to the use of the Cards and the servicing of the Account, prior to the expiry of the termination notice term. 13.6.4. All liabilities outstanding, including such received after the date of termination of the Agreement, payment transactions made with the Card(s) before that date shall be required by the Holder until their final repayment and the Holder shall remain liable to the Bank even after termination of the Agreement, regardless of the grounds for the termination, whereupon the Bank shall have the right to collection under the procedure set out in point 9.2.1. of these General Terms and Conditions.

XIV. VALIDITY OF THE CARD 14.1. The term of validity of any of the Cards issued to the account -V PAY, MASTERCARD STANDARD, MASTERCARD GOLD and VISA BUSINESS shall be 5 (five) years as of their issuance, the term of validity of any of the display cards issued to the Account -VPAY CODESURE and VISA BUSINESS CODESURE shall be 3 (three) years of their issuance. The term of validity shall be written on the Card and shall expire at the end of the month / year indicated. 14.1.1. A new Card shall be issued by the Bank ex-officio upon expiry of the term of validity of the Card. The Authorized User may receive the new Card at an address for receipt of the card or in any of the ways described in point 4.5 above not earlier than 20 (twenty) days prior to the expiry of the validity of the Card. If the Holder does not wish for a new Card to be issued, the Holder shall notify the Bank thereto in writing not later than 40 (forty) days before expiry of the term of validity of the Card. The Holder / Authorized User shall be obliged to update the address for receipt of the card as desired by him / her within the same deadline. The Bank shall keep its right not to renew any of the Cards issued to the Account without providing the reasoning thereto.

XV.BLOCKING, DEACTIVATION OF THE CARD 15.1. The Bank shall have the right to block the Card under the following conditions: 15.1.1.at the request of the Holder / Authorized User and at the request of the Authorized User of an additional card only with respect to the additional card issued in his / her name. The Holder and the Authorized User shall have the right to block or deactivate a card without the consent of the Authorized User of Additional Card. The Additional Card shall be automatically deactivated upon termination of the Agreement with the Holder / the Authorized User. 15.1.2.upon distraint imposed on the Holder's Account in accordance with the procedure provided for by law; 15.1.3.due to objective reasons related to: а) the security of the Card; b) doubt as to unauthorized use of the Card; c) use of the Card for fraud; 15.1.4.upon death or placement of the Holder and the Authorized Use or the Authorized User of an Additional Card under judicial disability - as of the day when the Bank has become aware of that circumstance. In case of death the heirs shall be obliged to present to the Bank death act, certificate of heirs, and other documents required by the law, and they shall also be obliged to return to the Bank the Card, which shall be destroyed; 15.1.5.automatically in case of entering an incorrect PIN code three consecutive times; 15.1.6.upon an increased risk that the Holder shall be unable to perform his / her obligations under the Agreement, the Agreement for the extension of bank loan - overdraft on current (card) account and / or in case of allowed excess (unauthorized overdraft); 15.1.7. in the cases explicitly set out in law or in these General Terms and Conditions. 15.2. The Bank shall inform the Holder as to the blocking of the Card in the cases under point 15.1.3. and as to the reasons thereto before the blocking, if possible, or immediately thereafter at the latest, unless provision of such information shall not be allowed for security reasons or in compliance with the regulatory requirements. 15.3. A Card blocked in the situations under point 15.1.2, point 15.1.3., point 15.1.6 and point 15.1.7. shall be unblocked ex- officio by the Bank after the grounds for it shall be removed, and in all other cases a Card shall be unblocked at the explicit written 9 request of the Holder filed with the Bank's office, or via the electronic / remote channels of the Bank and after the payment of a fee in accordance with the Tariff. 15.4. The Bank shall deactivate ex-officio the Cards issued to the Account upon termination of the Request - Agreement for the Issuance of a Debit Card, and in case of a Card blocked under the provisions of point 15.1.4 - after the Bank has accepted the written notice by the heirs, the appointed custodians, respectively. The Bank may deactivate the Card issued in other cases as well, as explicitly set out by law and in these General Terms and Conditions. The Bank shall not be held liable as to damages caused as a result of the deactivation of the Card in accordance with these General Terms and Conditions.

XVI. PERSONAL DATA 16. In addition to the provisions of the General Terms of Business of BACB referring to the provision of personal data of the Holder and the Authorized User to the Bank, their collection, processing, storage by the Bank and their provision to third parties, the Holder and the Authorized User shall give their explicit and unconditional consent that: 16.1. The Bank shall receive on their behalf information regarding the personal data declared by the Holder and the Authorized User before the Bank in relation to the signing of the Agreement, from the National Social Security Institute, the Civil Registration and Administrative Services Office, as well as any other personal data administrator in accordance with the PDPA, 16.2. The Bank shall provide to the national card operator Borika - Bankservice AD, as well as the payment servicing mobile, system and other operators and data processing operators in the country and abroad information about the assets, transactions and other data as to the position of the card account, including data as to the funds and limits set for the Account; 16.3. The Bank shall process the personal data provided by them for the needs of bank control and bank supervision. 16.4. The Bank shall include them in the prize and lottery games organised by the Bank, whereby for this purpose the Bank shall use information identifying the Holder and the Authorized User, required for his / her participation in the prize and lottery games indicated in relation to the use of the Card. The Holder and the Authorized User shall have the right to refuse participation by means of explicit written request to the Bank.

XVII. OTHER PROVISIONS 17.1. The Holder's liabilities on the Account shall be established on the grounds of entries in the Bank's accounting ledgers. Entries of all transactions made with the Card shall represent accounting documents within the meaning of the Accountancy Act and shall be deemed correct until proven otherwise. 17.2. The archives of the transactions ordered for execution and the other information maintained by the Bank shall be deemed final evidence as to their content, as well as the time of their submission or execution. 17.3. The Holder / Authorized User shall agree that in relation to the use of the payment services offered by the Bank he / she may be photographed for security reasons with technical devices, and the telephone conversations may be recorded by the Bank and in case of a the Bank shall have the right to use the recordings as evidence. 17.4. The Bank shall have the right at its own discretion to assign its receivables from the Holder to a third party. In such case the Holder shall have the right to place before the third party all objections the Holder has had against the Bank. 17.5. The Holder shall give his / her consent and shall authorise the Bank to provide to the new creditor upon assignment of the receivable any information related to the Agreement, including information representing bank secret or personal data. 17.6. If the Bank's receivables under the Agreement shall be assigned to a new creditor the Holder shall give his / her irrevocable and unconditional consent that the Bank may collect on behalf of the new creditor all amounts due under the Agreement - principal, interest, penalty interest, commissions, fees and charges under the provisions for ex-officio collection by the Bank.

XVIII.AMENDMENTS IN THE GENERAL TERMS AND CONDITIONS 18.1. The Bank shall have the right to change unilaterally these General Terms and Conditions at any time. The Bank shall notify the users of payment services at least 3 (three) days prior to the entering into force of the respective amendment, in writing, by means of announcement in its bank offices or on its website at www.bacb.bg or in an account statement, or by means of another durable medium, at the Bank’s discretion. 18.1.1. When the Holder is a user, i.e. natural person, the notice shall be made at least 2 (two) months prior to entering into force of the respective amendment. 18.2. In the event that the Holder disagrees with the amendments, he / she shall have the right to terminate the Agreement forthwith prior to the date on which the amendments are proposed to enter into force, by virtue of written notice as provided for in Section XIII of these General Terms and Conditions, following full repayment of his / her liabilities to the Bank. If the Holder does not terminate the Agreement by the date the amendments enter into force, it shall be deemed that the Holder has agreed to these amendments and they shall be binding to him / her. 18.3. The changes in the interest rates and foreign exchange rates resulting from changes in the reference exchange rates and interest rates applied in their fixing shall become applicable immediately and without prior notice to the user. The Bank shall make the amendments available to the user by announcing the applicable interest rates and foreign exchange rates in its bank premises and on its website, or on another durable medium, unless the parties under the Agreement have negotiated a different deadline or mode in which such information shall be made available. 18.4. The amendments in the General Terms and Conditions related to expansion of the scope of the services, as well as the fees and / or the terms of the payment services rendered, when more favourable to the users, shall be applied immediately and without prior notice. 18.5. The conditions and procedure for amendment and supplement of the Tariff and the appendices thereto shall be settled in the General Terms and Conditions for Payment Services Provision.

10

XIX. CORRESPONDENCE ADDRESS 19.1. The correspondence between the parties shall be in writing, to the addresses of the Bank, the Holder and the Authorized User and the Authorized User of an Additional Card, as set out in the Request - Agreement for Issuance of a Debit Card. All notice s exchanged between the parties may be in writing to the addresses set out, by fax and / or by e-mail or through the electronic (remote) channels of the Bank. 19.2. In case of change in the address of permanent residence, e-mail, mobile telephone number and / or other data stated in the Request - Agreement for the Issuance of a Card, the Holder, the Authorized User respectively, shall be obliged to notify the Bank within 7 days as of occurrence of this circumstance. Otherwise all notices, invitations and communications sent by the Bank to the most recent address and / or e-mail or mobile telephone number specified by the Holder / Authorized User shall be deemed served. 19.3. If court proceedings shall be filed with respect of a dispute arising in relation to the signing, performance, interpretation or termination of the Agreement under these General Terms and Conditions, the addresses of the parties set out in the Agreements shall be deemed the addresses in the meaning of the Civil Procedure Code for the purposes of the court for serving summons and notices by the court, unless the respective party shall explicitly notify the other party as to a change in the first party's address. The Bank shall not be held liable by the Holder for any damages caused in case of non-notification or untimely receipt of a notice.

XX. OBJECTIONS. APPLICABLE LAW AND DISPUTE RESOLUTION 20.1. (1) The Holder / Authorized User shall have the right to file written objections in relation to the use of the Card and the execution of payment transactions therewith. The objections shall be submitted and reviewed by the Bank within 14 days as of the date of receipt of such objections by the Bank in accordance with PSPSA under the procedure provided for in the Policy for Handling Complaints by BACB Customers, available on the website of the Bank (www.bacb.bg). (2) If the Bank does not rule on the objection, as well as if no agreement is reached between the Bank and the Customer or when the Bank's decision does not satisfy the customer, the dispute shall be referred to the Conciliation Committee for Payment Disputes, established at the Commission for Consumer Protection with address: Sofia, postal code 1000, 4А, Slaveykov Sq., floor 3, phone: + 359 2 933 05 77; fax: + 359 2 988 42 18; e-mail: [email protected]; website: www.kzp.bg and http://abanksb.bg/pkps or to the competent Bulgarian court. 20.2. The objections of the Holder / Authorized User regarding payments made on the territory of the country shall be reviewed following the procedure provided for in the effective Bulgarian legislation. 20.3. The objections of the Holder / Authorized User for payments made abroad () shall be reviewed also in accordance with the procedure set out by the respective card organisation - MasterCard International or VISA Europe. 20.4. In the cases of objected payment the Bank shall be obliged to undertake all steps in protection of the interests of the Holder / Authorized User. 20.5. Should it be established that the objections of the Holder / Authorized User are justified, the Bank shall proceed in accordance with the effective applicable legislation. In case of unjustified or ungrounded dispute of a Card transaction the Holder shall pay to the Bank a fee in accordance with the Tariff. 20.6. If the Holder / Authorized user shall disagree with the outcome of the dispute procedure for the transaction, he / she shall have the right to refer the dispute to the Conciliation Committee for Payment Disputes at the Commission for Consumer Protection or before the competent Bulgarian court. 20.7. The relevant regulatory acts in the effective Bulgarian legislation, and where applicable - the effective rules of the international card organisations MasterCard and VISA and / or the instruments of the European Union, shall apply to all matters not settled in the Agreement under these General Terms and Conditions. 20.8. All disputes between the parties in relation to the performance or interpretation of these General Terms and Conditions shall be resolved amicably by mutual agreement between the parties, and if no such agreement shall be reached, either party may refer the dispute for resolution by the competent Bulgarian court.

ХХI. REPRESENTATIONS 22.1. By virtue of signing the Agreement in accordance with the General Terms and Conditions, the Holder shall declare that: 22.1.1.the information and documents provided by the Holder are true and comprehensive; 22.1.2.he / she and the Authorized Users of additional cards shall be obliged not to use the Card in violation of the currency regime of the Republic of Bulgaria; 22.1.3.he / she gives his / her consent that the Bank shall provide data as to the balances, transactions and other data regarding the position on his / her Account to the respective mobile operator in the country and / or abroad, including data on the amount of coverage and limits on the Account; 22.1.4. he/she agrees to be held liable for all payables resulting from the use of all cards issued to his / her Account;

ХХII. FINAL PROVISIONS 79. These General Terms and Conditions have been approved by the Management Board of BACB AD by virtue of Resolution entered into force on 30.08.2012, amended and supplemented by Resolutions of the Management Board dated 15.11.2012, 28.03.2013, 13.12.2013, 04.03.2014, 22.05.2014., 01.06.2014, 27.11.2014 and 15.09.2016 and shall enter into force as of 19.09.2016.

11