Anti-Money Laundering Policy
Maclear AG

Version effective as from 9th of January 2023

1. Introduction

Maclear AG is a company incorporated in Switzerland and affiliated with an SRO according to Swiss law.

Maclear is aware of its corporate duty to assist the fight against anti-money laundering and funding of terrorism. Maclear is besides aware that its services could be used for such purposes.

The lack of proper handling of this risk could result in the infringement of laws and regulations. Maclear is yet committed to comply with all relevant laws, regulations, best practices, and ethical standards applicable in Switzerland.

Considering the foregoing, this policy (the "Policy") details the procedures put in place by Maclear to identify any contractual relationship with an accrued risk and to take the necessary measures as a response to such risk.

This Policy must be read and understood by all employees of Maclear in order to follow Maclear’s practice regarding potential and confirmed instances of money laundering and funding of terrorism.

This Policy is aligned on the following laws and regulations:

• Federal Act on Combatting Money Laundering and Terrorist Financing (Anti-Money Laundering Act) (RS 955.0) (hereinafter referred to as the "AMLA" );

• Federal Ordinance on Combatting Money Laundering and Terrorist Financing (RS 955.01) (hereinafter referred to as the "AMLO);

• FINMA Anti-Money Laundering Ordinance (RS 955.033.0) (hereinafter "FINMA-AMLO")

• Swiss Criminal Code (RS 311.0) (hereinafter referred to as the "Criminal Code");

• Regulations of the SRO POLYREG according to Art. 25 AMLA (R-SRO);

• FINMA Circular 2016/7 "Video and online identification" (03.03.2016).

Maclear (the Company) is aware that amendments are carried out to laws and regulations on a regular basis. The content of the afore listed instruments is to be taken into consideration in its version as effective at the date of issuance of this Policy.

2. Definitions and abbreviations

3. Objective of the Policy

This Policy is meant to outline the procedures and guidelines to be followed and applied within the Company, by the Board of Directors, Employees, Third-Party Service Providers and/or Affiliates, with the purpose of mitigating the Company’s risk of legal liabilities relating to money laundering and financing of terrorism.

4. Scope of Services

The Services offered by the Company consist in the operation of a Platform where Users can act both as Borrowers or Investors, in order to respectively raise Investement for a Project or make a Contribution to a Project.

Borrowers submit detailed information about a Project for which they wish to raise Investement through the Platform, and specify the amount of such Investment which cannot exceed 1 million Swiss Francs without additional regulatory measures. Based thereon, the Company conducts a due diligence and risk assessment.

THE SERVICES DO NOT QUALIFY AS FINANCIAL SERVICES IN THE MEANING OF THE FEDERAL ACT ON FINANCIAL SERVICES (RS 950.01) AND THE FEDERAL ORDINANCE ON FINANCIAL SERVICES (RS 950.11), NOR DOES THE COMPANY QUALIFY AS A FINANCIAL INSTITUTION IN THE MEANING OF THE FEDERAL ACT ON FINANCIAL INSTITUTION (RS 954.01) AND THE FEDERAL ORDINANCE ON FINANCIAL INSTITUTIONS (RS 954.11).

In particular, the Services offered by the Company do not include financial advice, portoflio management or securities brokerage.

If the Project is approved by the Company, the description of the Project is added on the Platform to allow Investors to inform themselves and, should the Project catch their interest, commit to make a Contribution.

The Investement becomes effective and the Contributions are collected only should the total amount thereof be gathered based on Committments made by the end of the specified period.

Should such be the case, each Investor who made a Committment transfers the Contribution to the Company which shall collect all Contributions and transfer the Investement to the Borrower within 60 days. The transfer occurs pursuant to the terms of a loan agreement concluded between the Company and the Borrower, and assigned to the Investors for the portion equivalent to their Contribution prior to such transfer.

The Company similarly transfers any Repayments recieved from the Borrower to the Investor.

THE COMPANY WILL NOT BE RECEIVING ANY DEPOSITS WITHIN THE MEANING OF BANKING LAWS AS IT FALLS WITHIN THE SCOPE OF THE EXEMPTION PROVIDED AT ARTICLE 5 (3)(C) OF THE BANKING ORDINANCE (RS 952.02).

5. Obligation to maintain standards

The Company shall ensure that it abides, through its Employees and Third-Party Service Providers, to the following duties to avoid being involved in activities incriminated in the Criminal Code:

• the Company must at all times ensure that the source and origin of funds used by the Investor for a Contribution and by the Borrower for Repayments is clarified, in order to ensure that at it is not liable under Article 305bis of the Criminal Code

• the Company must at all times ensure that the identity of the Beneficial Owner in order to ensure that it is not liable under Article 305ter of the Criminal Code;

• the Company must ensure that by accepting Projects and transferring the Investment or Repayments, it does not participate in the structuring of an entity aimed at committing crimes, in order to ensure that it is not liable under Article 260ter of the Criminal Code;

• the Company must ensure that the Investment and the Repayments are not used for the commission of any crime of violence or public intimidation under Article 260quinques of the Criminal Code; and

• the Company must at all times ensure compliance with AMLA and any application ordinances.

6. Risks

To mitigate and eliminate the risks of being held criminally liable under the possible illicit activities referred to in Section 4, the Company shall use the following processes and scales to identify and evaluate the potential risks applicable to Business Relationships and Transactions (hereinafter "Risks").

High-Risk Business Relationship and/or High-Risk Transaction, the Company will be subject to the procedures outlined in the in Section 7.

6.1 Identification

The Company shall rely on the list of Risks contained in FINMA-AMLO to elaborate a list of Risks relevant to its Services, to be found in Appendix 1. The List shall be updated when deemed necessary by the Company.

6.2 Analysis

For each Risk, the Company shall assess the likelihood that such Risk may occur and the impact if it occurs.

The following system is used to determine the likelihood of a risk:

Risk	Likelihood
LOW	the risk is very unlikely to occur
MEDIUM	the risk has a small chance to occur
HIGH	the risk has reasonable chance to occur
CRITICAL	the risk has very high chance to occur

The impact of the risk identified by the Company shall be measured as follows:

Risk	Impact
LOW	negligible loss or damage
MEDIUM	limited loss or damage
HIGH	large loss or damage
CRITICAL	severe loss or damage

6.3 Assessment

The degree of Risk for a specific Business Relationship and/or Transaction shall be assessed according to their likelihood to occur and their impact if they do:

Impact or Likelihood	1	2	3	4
1	Low Risk	Low Risk	Moderate Risk	High Risk
2	Low Risk	Low Risk	Moderate Risk	High Risk
3	Moderate Risk	Moderate Risk	High Risk	Critical Risk
4	High Risk	High Risk	Critical Risk	Critical Risk

7. User profile

The Company shall not enter a Business Relationship or carry out any Transactions until it has established the User profile by identifying the nature and purpose of the Business Relationship, the User and the identity of the Beneficial Owner.

The Company shall obtain information from the User on a regular basis on the Business Relationship and scrutiny of Transactions undertaken throughout the course of that relationship to ensure that the Transactions being conducted are consistent with the Company’s knowledge of the User profile.

7.1 Purpose of the Business relationship

Throughout the course of the Business Relationship, the Company shall ascertain the nature and purpose of the Business Relationship. The Company shall draw and record its conclusions.

Generally, the contractual agreement binding the Company with the User is sufficient to understand the purposes of the Business Relationship.

7.2 Identification of the User

The Company implements several standards for the identification of its Users.

The Company shall in no event, and under no circumstances, accept on the Platform Users who want to remain anonymous or who provide details or information which are not real or factually correct.

The Company reserves the right to terminate any Business Relationship with immediate effect if subject to the conditions of Art. 32 para. 3 FINMA-AMLO and §29 R-SRO, it results from further investigation that any information furnished to the Company by the User is fictitious.

7.2.1 General standards

The Company implements the following technical measures for the identification of the User:

• IP geofencing: the Platform is only available from Switzerland and EU countries;

• VPN Protection: the Company created a black list containing VPN usually used to bypass an interdiction. The persons who are outside Switzerland and EU may therefore not use the VPN contained on the black list to access the Platform; and

• TOR blocking: the usage of the Platform via the TOR protocol is blocked.

The Company implements the following organizational measures:

• Requirement to specify an account for fiat assets registered in the User’s name;

• Refusal to accept any cash;

• Limitation of Investment Projects to one (1) million CHF;

• Limitation of total Contributions per Investor to 100’000 CHF.

7.2.2 Establishing the identity of the User

By verifying the identity of the Users in accordance with this Section, the Company will be fulfilling the regulatory obligations set out in AMLA, SRO-Regulations and FINMA-Circular 2016/7. The verification of the identity will ensure that no illicit funds are being laundered on behalf of Users and that the funds are not being used to support the funding of terrorism.

The identification of Investors may be delegated to a third party. In any case, the Company shall remain responsible for the fulfilment of the delegated tasks and shall take appropriate measures to ensure that the documents maintained in his files correspond to the original documents which have served to fulfil the due diligence (confirmation of the sender, encrypted transmission, etc.). A further delegation by the third party is excluded. The Company will always identify and verify the identity of the Borrower prior to accepting a Project. Should a Borrower place several Projects over time on the Platform, the Company shall proceed to the identification at the occasion of the first Project and require confirmation that all information obtained at this occasion remains valid at the occasion of the subsequent Projects, and if not, require an update thereof.

To be able to make Commitments, the Company will verify the identity of the Investor in accordance with the process defined in this Section.

In particular, the Company shall identify the Users and verify the User's identity using reliable documentation, either in the form of originals or authenticated copies. For this purpose the complex services provided by SumSub Verification Platform (www.sumsub.com) should be used, including all instruments and automated system processes to be involved for this purpose.

The information which shall be obtained by the Company from a User being a natural person is the following:

• surname;

• first name;

• date of birth;

• address; and

• nationality.

The User shall present an extract in original or a copy of:

• a valid unexpired passport;

• a valid unexpired national or other government-issued identity card;

• a valid unexpired residence card; or

• a valid unexpired driving license.

In case of doubt, the Company may request further evidence or attestations delivered by public authorities.

A User being a legal person shall present an extract in original or a copy of:

• an up-to-date extract of the commercial register issued by the registrar no longer than twelve (12) months ago; or

• a copy of their statutes or equivalent documents, should they not be subject to a requirement of registering by a commercial register.

Such User shall besides provide evidence regarding their representatives with power to bind the legal person. Such evidence can be provided by means of an extract of the commercial register mentioning such information, a power of attorney, excerpts of the minutes or similar documentation with a valid signature in the name of the User.

The Company shall repeat the process of identity verification if and when, in its sole discretion, it has doubts that the information provided by the User could be inaccurate or no longer up to date.

If identification is carried out by video or online, the requirements of FINMA Circular 2016/7 must be met. If this is done via a third party, the company must ensure that the third party handles this in such a way that the requirements of FINMA Circular 206/7 are complied with at all times and for each identification.

7.2.3 Identification of the Beneficial Owner

The Beneficial Owner shall be a natural person who holds at least 25% of the company’s share capital (directly or indirectly) and has to be identified in any case, with the proper due diligence required by the circumstances.

If deemed required, the Company may request from the User a written and signed declaration in which the User ascertains the identity of the Beneficial Owner.

The Company shall always request such declaration if:

• the User is not identical to the Beneficial Owner or if there is any doubt about the matter; or

• the customer is a domiciliary company or an operating legal entity, or

• the User is a collective investment scheme, and the number of investors is equal to or less than 20, the sponsor or promoter or the fund management company not being itself a financial intermediary.

The declaration provided by the User shall contain the following information concerning the Beneficial Owner, by means of an A Form (Appendix 2) or K Form (Appendix 3), as the case may be :

• surname;

• first name;

• date of birth;

• address; and

• nationality.

This information shall be corroborated by an extract in original or a copy of:

• a valid unexpired passport;

• a valid unexpired national or other government-issued identity card;

• a valid unexpired residence card; or

• a valid unexpired driving license.

If doubts remain as to the identity of the Beneficial Owner after the declaration was collected and subject to the conditions of Art. 32 para. 3 FINMA-AMLO and §29 R-SRO, the Company shall refrain from entering into a Business Relationship with the User.

8. Additional verifications/Enhanced Due Dilligence

8.1 General rule

Should the Company identify a High-Risk Business Relationship and/or a High-Risk Transaction based on the criteria outlined in Appendix 1, it shall refuse the Project or immediately block the concerned Transaction and proceed to further verifications in accordance with this Section.

In particular, the Company may resort to the following instruments in case it identifies a High-Risk Business Relationship and/or a High-Risk Transaction:

• ask for a written or verbal declarations of the User and/or Beneficial Owner;

• ask that the User fill in a complementary questionnaire;

• make possible visits to the place of business of the User; or

• ask information from Third Parties who do not form part of the Business Relationship.

The Company may terminate the Business Relationship with immediate effect if:

• doubts about the information about the User and/or Beneficial Owner persist after performing special duties of due diligence; or

• there is a suspicion that false information was given intentionally to the Company

8.2 economic background

The Company may take steps to understand or identify:

• the source of the funds used in the Transaction;

• the reason and purpose why the User entered into a Transaction;

• the source of wealth of the User and/or Beneficial Owner;

• the Beneficial Owner of the User; and

• the financial situation of the User and/or Beneficial Owner.

if:

• the Business Relationship or the funds used in order for the Business Relationship to subsist are deemed to be unusual in the Company’s view;

• if the Company identifies the presence of factor of high risk based on the Risks outlined in Appendix 1.

• There is evidence of suspicious activity within the meaning of Section 7.3 the Policy; or

• the information supplied by the User is synonymous with warnings which are published by the SRO.

8.3 PEP

For the purposes of this Policy, PEPs shall be defined in the same manner as in AMLA:

• Foreign PEPs: individuals who are or have been entrusted with prominent public functions by a foreign country, such as heads of state or of government, senior politicians at national level, senior government, judicial, military or political party officials at national level, and senior executives of state-owned corporations of national significance;

• Domestic PEPs: individuals who are or have been entrusted with prominent public functions at national level in Switzerland in politics, government, the armed forces or the judiciary, or who are or have been senior executives of state-owned corporations of national significance. This domestic status as a PEP expires eighteen (18) months after the termination of the public function;

• PEP in international organisations: individuals who are or have been entrusted with a prominent function by an intergovernmental organisation or international sports federations, such as secretaries general, directors, deputy directors and members of the board or individuals who have been entrusted with equivalent functions; and

• any family member and close associate of the PEPs (hereinafter altogether referred to as “Related Individual(s)”

Should the User or Beneficial Owner be a Foreign PEP or Related Individual, the relevant Business Relationship shall be categorized as a High-Risk by the Company.

The Company shall categorize a Domestic PEP or a PEP in international organisations or a Related Individual thereto as a High-Risk Business Relationship depending on the nature of the requested Services and the amount of the Transaction according to Appendix 1.

Any Employee handling the on-boarding of a PEP shall obtain an approval from the senior management within the Company for the acceptance of said Business Relationship.

The high-risk status relating to a PEP shall cease to be applicable eighteen (18) months after the termination of the public function.

Ongoing AML Screening should include: PEPs checks, sanctions lists, watchlists and adverse media. Determination of a natural person's presence or non-presence on global sanctions lists, PEP lists, watchlists, blocklists, or adverse media (OFAC, UN, HMT, EU, DFTetc.).

Ongoing AML Screening is an automated process (provided by SumSub System www.sumsub.com ) and does not make any final decisions on whether to onboard/continue relationship with a given person (such decisions are made by the Company at its own discretion). The results of ongoing Checks are solely based on potential matches between the user’s personal data and the data contained in databases available to the SumSub System – the Verification Service Provider.

Ongoing AML monitoring towards all onboarded Clients (as Addition to AML Screening):

Once AML Screening is initiated and Ongoing AML is connected, the SumSub System daily re-checks an applicant against AML watchlists (sanctions, PEPs, adverse media, etc).

9. Outsourcing due-diligence

Should the Company wish to outsource tasks carried out under this Policy to a Third-Party Service Provider, it shall send a written request to the SRO and obtain its prior approval.

The approved Third-Party Service Provider shall not be allowed to further delegate the tasks assigned by the Company.

The approved Third-Party Service Provider shall adhere to this Policy and any other relevant internal regulation of the Company.

The Company shall remain responsible for the fulfilment of the delegated tasks.

10. Monitoring

The Company shall monitor the Business Relationships and Transactions. Therefore, throughout the Business Relationship, the Company shall request, acquire, and record information from the User to update the information needed for the purpose of performing such on-going monitoring.

Monitoring shall be performed by Employees who are specifically trained and employed to carry out such monitoring.

With regards to High-Risk Business Relationship and/or High-Risk Transaction, a review of the Business Relationship with the User shall be carried out by the Company at least every month.

The Business Relationship who falls under the definition of a PEP shall be reviewed immediately after the notice is received from the SumSub System, which daily re-checks all onboarded Customers (Investors and Borrowers) against AML watchlists (sanctions, PEPs, adverse media, etc).

11. Reporting

11.1 Duty to report

The Company shall immediately file a report with the Reporting Office

1. if (a) it has sufficient knowledge or several indications in the course of a Business Relationship, or (b) it terminated negotiations aimed at establishing a Business Relationship because of such knowledge or reasonable suspicion that a Project, a Contribution, an Investment or any Repayments are related to any of the illicit activities outlined in Section 4 of this Policy.

2. If it is evident that a User, a Beneficial Owner, or an authorized signature of such corresponds, or can reasonably be suspected to correspond, to any warnings which are issued by FINMA, the Swiss Federal Gambling Board or the SRO.

11.2 Right to report

The Company may file a report with the Reporting Office should it identify elements allowing suspicions that a Project, a Contribution, an Investment, or any Repayments are related to any of the illicit activities outlined in Section 4 of this Policy.

11.3 Professional secrecy

Lawyers, notaries, patent counsellors and auditors involved with the Company and bound by professional secrecy under provisions of the Swiss Code of Obligations are not bound by the duty to report to the extent disclosure of information at the occasion of such report would be punishable pursuant to Article 321 of the Criminal Code, unless another provision of federal or cantonal legislation establishes a right or duty to report.

Such it notably the case should they identify elements allowing suspicions that a Project, a Contribution, an Investment, or any Repayments are related to any of the illicit activities outlined in Section 4 of this Policy.

11.4 Procedure

The instructions regarding the format of the report are available at the following URL: www.fedpol.admin.ch/fedpol/en/home/kriminalitaet/geldwaescherei/meldung.html.

The Company shall, at its sole discretion, elect to leave the Employee who identified the activity which is subject to the report as anonymous.

Any report filed shall without delay be notified to the Board of Directors and the SRO, along with the subsequent notifications to and from the Reporting Office. The Contact Person shall be identified in the report to facilitate communications with the SRO.

The Company shall in no circumstance inform the User or any third parties that it intends to or has filed a report.

This prohibition does not apply to protecting the Company’s interests in the context of a civil action or criminal or administrative proceedings.

11.5 Freezing of assets and prohibition of information

The Company shall freeze any Contribution, Investment or Repayment as soon as the Reporting Office sends a confirmation that a report regarding such has been forwarded to the Prosecuting Authority.

Should the Company be unable to itself proceed with such freezing, the Company may notify the financial intermediary able to do and being itself subject to AMLA.

Such freezing shall last until the Company receives a ruling from the Prosecuting Authority but at most for five (5) working days as from the day on which the Reporting Office confirmed having forwarded the report.

11.6 Termination of the Business Relationship

The Company may terminate, if the Board of Directors deems appropriate, the Business Relationship when after sending the report based on Section 9.1 of this Policy,

1. the Reporting Office does not send a reply to the Company within twenty (20) days;

2. the Reporting Office informs the Company that it will not be taking action on the report filed;

3. there was no notification from the Prosecuting Authority within five (5) Working Days;

4. it does not receive a response within five (5) Working Days;

The Company may terminate, if the Board of Directors deems appropriate, the Business Relationship when after sending the report based on Section 9.2 of this Policy, the Reporting Office informs the Company that it will not be taking action on the report filed;

The Company must terminate the Business Relationship in the following instances, subject to the conditions of Art. 32 para. 3 FINMA-AMLO and §29 R-SRO:

• it still has doubts regarding the information provided by the User, even after carrying out repetition of the verification of the identity of the User or the establishment of the identity of the Beneficial Owner;

• the User does not cooperate to carry out the verification of the identity or to help with the confirmation of the identity of the Beneficial Owner.

If the Company holds any Contributions or Repayments belonging to the User and which have not yet been transferred, these Contributions or Repayments can be withdrawn only in a form that allows the cantonal prosecution authorities to follow the paper trail.

In no event can the Company terminate the Business Relationship for as long as a freezing pursuant to Section 9.5 lasts.

12. Duty to keep records

The Company shall deploy its best efforts to keep a complete and accurate records related to the Users, Beneficial Owners, Projects, Contributions, and Investments (hereinafter referred to as the "Documentation"). The Documentation shall enable reconstruction of each individual Transaction.

To this end, the Company shall prepare any documents and receipts in such manner as to create an audit compliance trail and maintain it in line with the relevant laws and regulations applicable to the situation.

The Documentation shall include at least the following:

1. a register of all Users,

   • including copies of the information/documents referred to in Section 6 and Section 7;

   • therein, High-Risk Relationships or PEPs shall be labelled as such.

2. any files related to accounts, business correspondence and the actual reports on the analyses undertaken by the Company in relation to Projects and the Transactions which occurred throughout the Business Relationship.

Other elements may be deemed relevant to be included.

The Company shall store the Documentation for a minimum period of ten (10) years, at a physical location and/or servers located in Switzerland. The Company is responsible for such storage and ensures by all appropriate means that the risk of Documentation being lost or corrupted is minimized.

Upon request, the Documentation shall be made readily available for presentation to a Prosecuting Authority or SRO within a reasonable time.

13. Organisational measures

The Company has an AML department within the Company (hereinafter referred to as the "AML Department").

Members of the AML Department are the Contact Person and the person in charge of training, and any other person qualified in respect to AML matters as deemed appropriate by the Company.

The AML Department is in charge of the following tasks:

1. issuing internal directives;

2. articulating training programs for its Employees.

The above list is not exhaustive.

The Board of Directors shall consult the AML Department regarding matters which fall under the AML Department’s competence, pursuant to this Policy or ancillary internal regulations set by the Company.

14. Training

Employees shall be provided with appropriate training as provided by the Company and/or the SRO. Such training shall expound the legal provisions, the indications, the regulation of the SRO as well as the internal measures taken by the Company to prevent money-laundering and financing of terrorism.

Any in-house trainings organized by the Company shall be approved by the SRO and shall mostly cover the content of this Policy.

New Employees shall be provided with this Policy and, within an appropriate period but no longer than six (6) months after having joined the Company, they shall complete an initial training as provided by the SRO, and, if applicable, as completed by an in-house initial training.

The Employee in charge of supervision of the training and the Contact Person shall attend the annual recurrent training provided by the SRO and ensure the content of the latter is communicated within the Company and reflected in in-house trainings.

15. Inspection

Ordinary inspection

At any time, the Company’s activity may be inspected by an independent inspection agency appointed by the SRO to carry out the periodic ordinary inspection of its members. Such agency acts on behalf of the SRO, but on account of the Company. Such inspection shall occur in average once every twelve months, unless deferral is granted, with regards to compliance with the legal provisions, the regulation of the SRO and of the Company itself, especially the due diligence reporting obligations contained therein.

Extraordinary inspection

Should there be grounds for suspicion of an irregularity or violation, or should such be identified, the Company’s activity may be inspected by the SRO directly or by an independent investigator acting on its behalf.

Cooperation

The Company shall assist with any inspection and provide with all necessary accesses and Documentation.

This policy was approved by the management on 9th of January 2023 and will be reviewed annually thereafter.

Aleksandr Nikitin

Member of the Board

Maclear AG

Appendix 1

Risks

1.1 The Company shall immediately and in any case classify a Business Relationship as “High Risks” if:

1. The User or Beneficial Owner is a Foreign PEP or Related individual, as define in Section 8.3 of this Policy;

2. The User or Beneficial Owner is a Domestic PEP, PEP in international organisation or Related individual, as defined in Section 8.3 of this Policy and at least one risk criterion is added according to the following points or Appendix 1bis.

3. The User and/or Beneficial Owner is/are resident in a country considered as "high risk" or non-cooperative by the FATF and for which the FATF calls for increased due diligence, as disclosed by a FATF publication as updated on a regular basis.

4. When the volume of Transactions appears to be unusual or inconsistent with the User’s profile there is an explicit refusal to provide any documentation which is requested by the Company or some of the information provided by the User happen to be wrong or misleading.

1.2 The Company also applies the following factors to indicate whether the Business Relationship with the User can be categorized as High-Risk:

• domicile, nationality or address of the User or the Beneficial Owner;

• nature and location of the business activities of the User or the Beneficial Owner;

• the origin or target country of frequent payments;

• any other criteria requested/recommended by SRO, FATF or the Company’s bank(s)’ policies.

Risk countries relevant for a. and c. above are:

• country considered as “high risk” or non-cooperative by the FATF and for which the FATF calls for increased due diligence, as disclosed by FATF publications updated on a regular basis (www.fatf-gafi.org);

• countries ranked 5.00 or above on the Basel Governance AML-Index list (https://index.baselgovernance.org/ranking).

Risk business activities for b. above are:

• Arms / armaments trade

• Jewellery trade

• Casino and lottery business

• Erotic trade

• Trade in rough gemstones and diamonds

• International trade in exotic animals

• All business activities with high cash transactions

2.1 With regards to the Transactions which occur between the User and the Company, in any case the Transaction is a High-Risk Transaction if:

• coming from or directed to a country considered as “high risk” or non-cooperative by the FATF and for which the FATF calls for increased due diligence, as disclosed by FATF publications updated on a regular basis.

2.2 The Company also applies the following factors to indicate whether a Transaction can be categorized as High-Risk:

• the amount of the assets or the volume of the Transactions appears unusual, considering the User’s profile or the circumstances of the User;

• in the specific Business Relationship or in similar Business Relationships, considerable deviations are noted from customary Transaction nature, volumes and frequencies;

• the User uses the Services in a way to perform Linked Transaction in a row during a short period of time for an which exceeds a sum of 100’000 Swiss francs;

• any other criteria requested/recommended by SRO, FATF or the Company’s bank(s)’ policies;

• the manner in which the Transactions are indicated are for an illegal purpose;

• from an economic point of view, the Transactions feature quantities which are excessive or not discernible; or

• the amount of funds within the Transaction do not seem reasonable to the Company when the User profile is examined.

Appendix 1bis

Additional Criteria

Additional criteria for increased risk qualification of Domestic PEPs, PEPs in international organisation or Related individual:

• domicile or address of the customer, the controlling person, or the beneficial owner of assets, especially residence in a country considered as “high risk” or non-cooperative by the FATF, as well as the citizenship of the customer or the beneficial owner of assets;

• the nature and the location of the business activities of the customer or the beneficial owner of assets, especially in cases of business activities in a country considered as “high risk” or non-cooperative by the FATF;

• lack of personal contact with the customer and/ or beneficial owner;

• nature of the requested services or products;

• amount of the assets deposited;

• amount of the asset flows;

• country of origin or destination of frequent payments, especially payments from or to a country considered as “high risk” or non-cooperative by the FATF;

• complexity of structures, particularly through the use of several domiciliary companies or a domiciliary company with fiduciary shareholders in a non- transparent jurisdiction, without apparent reason, or for the purpose of short- term asset placement;

• frequent transactions with higher risk.