You will only be able to access the Services via the mobile application and/or web application and/or other user interface (together, the "App") provided by the Partner or by DiPocket for usage by the Partner's Customers, provided however that, if the App is not available and/or you have a complaint about the Services, you have the right to contact DiPocket directly.

These terms and conditions ("General Terms and Conditions"), the Card Terms and Conditions – if they were attached to or distributed with the Card ("Card Terms and Conditions"), the Tariff Table ("Tariff Table") and the Limits Table ("Limits Table"), together referred to as the Agreement ("Agreement"), are applicable upon your acceptance of the Agreement. In case of any contradiction between the General Terms and Conditions and the Card Terms and Conditions, the Card Terms and Conditions shall prevail.

You may access a copy of the Agreement at any time by visiting https://www.paytrip.fr/cgv/ ("Website"). Upon your request, the Agreement shall be sent to you by e-mail free of charge.

By accepting this Agreement (which shall be done electronically following instructions provided in the App), you confirm that you had sufficient time to read and acquaint yourself with the Agreement, understood it, and agree to comply with the provisions set therein. In case you do not understand or do not agree to specific provisions of the Agreement, you shall not conclude the Agreement or shall express your question and/or disagreement in writing by sending us a notice to the e-mail address indicated below in this Agreement so that we can clarify and discuss particular provisions of the Agreement with respect to which you have expressed your questions and/or disagreement. For the avoidance of doubt, not all functionality described in the Agreement may be available for the Account. In case of doubt, you shall contact us prior to accepting the Agreement.

Upon your acceptance of the Agreement, DiPocket will review your application, the acceptance of which by DiPocket will be promptly notified to you via the App. Only after acceptance of your application by DiPocket, the Agreement will enter into force and you will be able to use the Services.

DiPocket is a Principal Member of Mastercard® Inc. and VISA® Inc.

The language of communication with reference to the Agreement and the Services is English or Lithuanian, the choice of which will be yours.

The Agreement is concluded with DiPocket UAB, it is governed by Lithuanian law. Any legal terms implied by law will also apply to the Agreement. Rights and duties related to the provision of Services that are not discussed under this Agreement shall be regulated by the Law on Payments of the Republic of Lithuania for DiPocket UAB's Users. Any dispute arising out of the Agreement between you and DiPocket (the "Parties"), which we are unable to resolve to the Parties' joint satisfaction through our complaint procedure, shall be settled by the Courts of the Republic of Lithuania.

Scope of DiPocket services

The scope of Services provided to you by DiPocket is limited to Card issuing and its role is ancillary to the provisions of services by the Partner, the usage of which is governed by separate terms and conditions which you must agree with. If you are reading this Agreement, this means that you have decided to use the services provided by the Partner.

Registering as a User

To register as a user ("User") and open the Account you must be aged at least 18 and be an EEA or UK citizen or resident.

You will be able to apply for the Services only through the Partner's App. With your consent, the Partner will transfer us the onboarding data it holds on you that is needed by us to assess your application in compliance with applicable regulations. This data includes the image of a suitable picture ID, your selfie, the IP address you were connected through upon capturing the above to open your account with the Partner, your mobile phone number and e-mail address, a declaration about your PEP status, and a declaration about purpose of usage of the Services. Once your application is approved by us, you will be able to access the Services solely through the App, where the Partner will also provide you user support.

By law, we must check your identity prior to registering you as a User and we do this based on the information you provide to us during the registration process.

If we are unable to confirm your identity and/or any relevant registration information based on the information provided, we are entitled to ask for any further evidence of your identity and to ask you to hold a short live phone interaction with our operators and/or carry out such further checks as we deem necessary to establish your identity. If we are unable to do this, we may refuse to serve you, and/or inform the appropriate authorities without your knowledge or consent. We will register you only if the results of the KYC process allow us to on-board you as a User.

As part of your eligibility to use the Services, you agree and confirm that you are an individual acting solely on your own behalf, in an individual capacity, and you are not acting in a business capacity or for any other commercial purpose. Furthermore, it is not permitted to use the Account:

• To organize and/or conduct sweepstakes, gambling, cryptocurrency purchases, sales or trading;
• For copyright infringement;
• For testing other financial services providers or to generate transactions for the purpose of benefitting from other financial service providers' loyalty offers;
• To discredit individuals or legal entities;
• In a way that can lead to complaints, disputes, refunds, and the emergence of other obligations to DiPocket, other users or third parties;
• To receive or send funds obtained by fraud or in violation of the law;
• To carry out any activity in violation of the law;
• To circumvent DiPocket's policies, including but not limited to attempts to create additional accounts to exceed usage limits or circumvent blocking by DiPocket of an existing Account.

If you give us false or inaccurate information and/or we identify fraud, we will record this with fraud prevention agencies, including but not limited to the Bank of Lithuania, the Financial Crime Investigation Unit of the Republic of Lithuania, and other competent institutions, including law enforcement as the case may be. Law enforcement agencies may access and use this information. We may also block or cancel the Card and terminate the Agreement.

Personal Data

We carefully safeguard the information we hold about you ("Personal Data"). DiPocket is the data controller of your Personal Data, provided to us. If you wish to contact us about the processing of your Personal Data, please contact our Data Protection Officer at DPO@dipocket.org.

What data do we collect?

DiPocket collects the following data:

User profile:

• Personal identification information (name, surname, address, e-mail address, telephone number, etc.);
• Additional data required by money laundering and terrorist financing prevention legislation (personal identification number and/or date of birth, citizenship, facial image, identity document data, copies of the documents provided, details of the device used, IP address, etc.);
• Location data, where you sign up to use the Services as well as your location when using the Services;
• Your communication with us (correspondence by e-mail, conversations by phone, etc.).

Payment services:

• Transaction data (transaction amount, date and time, merchant, acceptance details (e.g., confirmed by PIN);
• Card data (PAN, expiry date, etc.);
• Sender or beneficiary data (bank account number, IBAN, beneficiary or sender, etc.).

Account information and payment initiation services:

• Transaction data (transaction amount, date and time, bank account number, IBAN, beneficiary or sender, etc.);
• Select User account information for account information services (balance of funds, bank account number, etc.).

If you give us Personal Data about other people, including minors, which we use to provide the Services, then you confirm that (i) you have ensured that they agree to our holding and use of that Personal Data or that you are otherwise allowed to give us this information and consent on their behalf to our holding and use of it, and (ii) you have provided them with all the information regarding the processing of Personal Data as required under the applicable laws.

How do we collect your data?

You directly provide us with most of the Personal Data we collect. We collect such data and process it when:

• You provide us with your Personal Data during the registration process. Information you provide at registration is both a statutory requirement and necessary for us to enter into the Agreement. If you do not provide us with the necessary information and documents, we will not be able to perform the Services;
• You use our Services (e.g., information about payments you make or receive);
• You interact with us (customer service, or engage with us on any social media platform, etc.).

DiPocket may also receive your Personal Data indirectly from the following sources:

• From our business partners who perform User onboarding, including, where applicable, financial institutions or other obligated entities that we rely on for verifying user identity;
• When it is compliant with the applicable law, we may receive it from third parties such as credit reference agencies, official registers and databases or fraud prevention agencies;
• In order to carry out enhanced due diligence procedures we also collect publicly available information about you (including information on the internet, social media, etc.);
• In case of open banking, upon receiving your consent, we process Personal Data from accounts you hold with third party financial institutions.

How will we use your data?

We use the Personal Data to properly fulfill the Agreement:

• For contractual reasons, in order to provide you with the Services (e.g., to produce cards for use with the Account, to provide you with payment services and Account-related communications, etc.);
• For purposes where we have a legal obligation, including for tax and accounting, to perform "Know your client", to prevent and detect fraud, money laundering and other crime, to carry out regulatory checks, including PEP screening, sanctions screening, and adverse media monitoring;
• On the basis of your consent, where you agree in a clear and unambiguous way with processing of your Personal Data for marketing purposes or when processing special category personal data, etc.;
• On the basis of our legitimate interests, where the processing is necessary for the intended purpose and is balanced with your interests and fundamental rights;
• On the basis of substantial public interest to support you if you fall under the vulnerable User category;
• If you instruct us to process Personal Data in a particular way (e.g., open banking);
• E-mailing you with offers on other products and services where these are related to those you already use.

We will never pass Personal Data to a third party for them to market to you without your consent.

Profiling

Profiling carried out by DiPocket involves processing of Personal Data by automated means for the purposes of risk management and ongoing monitoring of transactions in order to prevent fraud, money laundering and terrorist financing. It is based on legal obligations applicable to DiPocket as financial institution.

Who we can share the Personal Data with

We will keep the Personal Data confidential but we may share it with other entities (who are also bound to keep it secure and confidential) if we have a duty to disclose it or if it is required for the provision of the Services.

In particular, if this is compliant with applicable laws, we may share the Personal Data with:

• Other DiPocket group companies and/or our distributors in order to provide you with the Services, to fulfil our obligations to identify you and prevent money laundering, terrorist financing and fraud;
• Our suppliers (including their sub-contractors) such as providers of data center, card processing, cards bureau and SMS messaging services, and other suppliers who provide IT and payment services;
• Other third parties who perform part of the Services or support your transactions, such as Visa, SWIFT, CENTROlink and our partner banks who provide payment execution;
• Other financial institutions when providing account information services or making outbound payments;
• Regulators and supervisory authorities in connection with their duties (such as crime prevention);
• Fraud prevention agencies. You can write to us at MLRO@dipocket.org for the details of the fraud prevention agencies with which we share the information;
• Anyone to whom we transfer or may transfer our rights and duties in the Agreement including any third party after a restructure, sale or acquisition of any DiPocket group company.

Transfer of Personal Data outside of the EEA and United Kingdom

We may process the Personal Data abroad, within or outside the European Economic Area and the United Kingdom, provided we comply with the applicable laws and regulations. Where we are sharing the Personal Data with organisations outside of the EEA and the United Kingdom, we will ensure they agree to apply equivalent levels of protection as we do. We use legal mechanisms, such as standard contractual clauses as indicated in General Data Protection Regulation (2016/679) art. 46. For any inquiries please contact us at DPO@dipocket.org.

Open-Banking

We will transfer Personal Data to any entity, who you authorise us to share information about your Account with, provided that they are listed as a suitably authorised entity at the time of your request. We will rely upon your instructions to the third party to access your account information from us, as evidence of your consent to share your Personal Data.

How do we store your data?

DiPocket has established technological, physical, administrative and procedural safeguards in line with the industry accepted standards to protect and ensure the confidentiality, integrity or accessibility of the Personal Data processed, to prevent the unauthorized use of or unauthorized access to the Personal Data, and to prevent a Personal Data breach (security incident). All our staff receives data protection training and are instructed to strictly follow our data protection policies.

DiPocket securely stores your data in data centers located exclusively in European Union and United Kingdom.

The period for which we are required to retain your information depends on the entity with which you have entered into a contract:

• DiPocket Limited (United Kingdom): will retain your Personal Data for a period not exceeding six years following the termination of our business relationship;
• DiPocket UAB (Republic of Lithuania): will retain your Personal Data for a period not exceeding ten years following the termination of our business relationship.

We may keep your Personal Data for longer because of a potential or ongoing court claim or another legal reason. Once the relevant time period has expired and the Personal Data is no longer required, we will delete your Personal Data.

What are your data protection rights?

Every User is entitled to the following:

• The right to access – You have the right to request us for copies of your Personal Data. Contact: DPO@dipocket.org.
• The right to rectification – You have the right to request us to correct any information you believe is inaccurate or to complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your Personal Data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
• The right to object to processing – You have the right to object to DiPocket's processing of your Personal Data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the Personal Data to another organization, or directly to you, under certain conditions.

Where you have given us your explicit consent for the processing of Personal Data, you also have the right to withdraw this consent at any time by contacting us at DPO@dipocket.org.

If you make a request, we have one month to respond to you.

You also have a right to lodge a complaint with your national Data Protection Authority:

• In the United Kingdom: ICO
• In the EU: see the EDPB list

Requirement to update your Personal Data

You must notify us immediately of any and all data and circumstances that have changed with regard to the data set out in the Agreement, or the documents submitted to us (e.g., changes in personal or contact details, residency or tax residency, loss or theft or other reason for change of an identity document) as well as of any and all circumstances that may affect the fulfilment of your obligations towards us. We may request documentary evidence of the changes, which you must provide.

Notices and exchange of information

We may provide you with all information electronically via the App, e-mail or mobile phone, unless otherwise established in the applicable laws. We are entitled to use third party services for processing or delivering electronic notices and information to you.

Unless otherwise stipulated by the applicable laws, any notice given by DiPocket must be considered to have been received if sent by e-mail or via the App or other electronic means of communication available for the Services, on the day of technical dispatch.

Unique User Identifier

Your Unique User Identifier is your mobile number. It is important you keep it updated with us at all times as we may use it to verify it is you when you make a transaction or access your Personal Data.

Privacy policies of other websites

When we include links to other websites, please bear in mind they will have their own privacy and cookies policies that will govern the use of any information you submit. We recommend you read their policies before accessing these sites.

Payment Services

The Services may include some or all the below payment services:

• Issuing of payment cards;
• Card payments, including card purchases, cash withdrawals at ATMs, card to card transfers;
• In-bound and out-bound bank transfers;
• Transfers between Users;
• Payment initiation services;
• Account information services.

The User shall be free to decide which of the available Services to use (all or only part of them). Terms and conditions for the provision of payment initiation and account information services will be made available to you before each transaction. Account information and payment initiation services will be provided to you only under your explicit consent.

Transferring money to the Account

If you register as a User, subject to eligibility for the Card type you hold we offer several options to top-up the Account and Card, which may include transfers from your accounts held with the Partner, transfers from cards issued to you by other banks, bank transfers in selected currencies and transfers from other Users. We will also offer you payment initiation services as an option to initiate bank transfers for top-up purposes. For details of available sources please consult the applicable Limits Table available in the App.

In all cases funds will be credited to the Account in the amount equal to the amount transferred/deposited, net of applicable fees as specified in the Fees Table available in the App.

Before crediting funds to the Account, if we suspect fraudulent activity, we may ask you to provide evidence of the reason for the payment. Should you be unable or unwilling to provide satisfactory answers, we reserve the right to return the funds to the sender.

We endeavour to load the Account as soon as we are aware that money has been transferred to it. We will credit transfers from your accounts held with the Partner, from another card and from other Users instantaneously, and incoming bank transfers as required by the relevant Payment Scheme, and in any case as soon as we can and not later than on end of the day we receive it on your behalf, if it is a business day, or in the morning of the next day if we receive the money during a business day, i.e., Monday, Tuesday, Wednesday, Thursday and Friday (the "Business Day").

International Bank Account Number ("IBAN")

To receive bank transfers, if this functionality is available to you within our systems, you will be assigned one or more (depending on the currencies you use) IBANs or other unique account numbers, which you will need to provide for an interbank payment order to be properly initiated, executed and credited to the Account with us.

Payments from other Users

Depending on the type of Account you are using, you may be able to receive payments from other Users. These payments will be credited immediately unless the Partner has additional requirements.

If a payment sent to your IBAN is in a currency other than that of (one of) your Account(s), it will be automatically returned to the sender, subject to the functionality available with our partner bank for that currency.

If money is credited to you by mistake

Sometimes a payment may be recalled by the bank that made it (for example, because it was fraudulent), and sometimes a payment goes into the Account by mistake. This happens rarely, but please tell us straight away if money appears unexpectedly on the Account.

To make things right, we can take the payment back out of the Account – even if we have allowed you to make a payment or to take cash out against it.

Should you initiate any card scheme mechanism to recover money used to fund the Account with cards issued to you by other banks, we reserve the right to investigate the matter and, where appropriate, challenge any recovery attempt.

Execution of payments

We will only execute payment instructions if we think they are correct, complete and originated by you:

• Correct: unless an instruction is obviously wrong, in particular when we cannot validate the IBAN, we will assume you've given us the right information;
• Complete: we will not attempt to process incomplete instructions;
• Come from you: we will think an instruction has been initiated by you if it was made via the App or any other available channel using the applicable authentication method.

We will follow your instructions to make a payment from the Account whenever we can under the applicable laws, provided:

• Your instructions are correct, complete and originated by you;
• You have the money in the Account to cover the payment at the moment of initiating the payment;
• The payment is above the minimum and below the maximum amount, as specified in the Limits Table.

Fulfilment of these three conditions constitutes a complete instruction (the "Instruction").

Failure to fulfil any of the conditions in full in respect of a payment transaction will result in the Instruction being deemed incomplete and we will not be required to comply with it.

If you do not have enough money to cover the payment, we won't be able to carry out the Instruction (unless the payment is one we've guaranteed to make). If you have enough money to cover the payment but not the applicable payment fee, we may – at our sole discretion – carry out the Instruction.

Execution of bank transfers

For payments through the interbank payments systems, we will forward your Instruction to the relevant Payment Scheme or partner bank immediately or as soon as possible depending on the cut-off times of the Payment Scheme or partner bank, provided however that we may briefly hold execution of high value payments or for compliance and fraud management purposes.

Whether we execute directly through a Payment Scheme or via a partner bank, if a payment is intended to be instant we and our partner bank will adhere to the applicable Payment Scheme execution rules. In other cases, when we use a partner bank and the payment is not intended to be instant, we will initiate it not later than 16:00 (EET) if the Instruction is received by 12:00 (EET), or 11:30 (EET) of the next Business Day if the Instruction is received after 12:00 (EET) or during a weekend or a bank holiday in the country of the relevant partner bank.

If currency conversion is involved, we always seek the fastest execution terms but, depending on the currency, this may be as long as 2 Business Days, and additional time may be needed to transfer funds to and from our FX provider.

Once an Instruction is received, it can no longer be cancelled by you.

If you have provided us with a complete Instruction, but have mistakenly made a payment to the wrong recipient, subject to applicable laws it remains a matter between you and the recipient. We will however support you in the attempt to recover the funds if you request us to do so.

You are responsible if you mistakenly instruct us to make the same payment more than once.

Currency conversion

You may convert currencies when transferring funds between your accounts, or when transferring funds to other Users or via Account to account or Account to wallet transfers. For the avoidance of doubt, the currency conversion services provided are not intended nor shall be used for currency trading.

Prior to confirming a transaction entailing currency conversion, you will be shown the applicable currency conversion rate – please review it carefully before confirming. Standard markup on interbank rate applies to exchanges between the below currencies: EUR, GBP, USD, AED, AUD, CAD, CHF, CZK, DKK, HKD, HUF, ILS, JPY, KWD, NOK, NZD, PLN, SEK, SGD, THB. When other currencies are involved, the spread may be higher, due to lower liquidity.

On weekends, and outside core trading hours, the standard markup is increased due to lack of liquidity. Additionally, the currency conversion service may be suspended altogether in case significant external events are reasonably expected to materially affect currency rates when the markets re-open.

Using the Card

The Card is a Visa Debit card. It is valid until its expiry date, which is visible on the front of the Card – or on the Card image accessible online for virtual cards and wearables.

To activate plastic cards please follow the instructions provided with the Card. Also, you must:

• Not allow anyone else to use the Card;
• Not reveal your PIN or the Code;
• Not maintain a written record of your PIN, unless you do this in a way that would make it impossible for anyone else to recognize it;
• Only release the Card, card number, PIN or the Code to make (or try to make) a transaction with a merchant or ATM displaying the VISA® Acceptance Mark.

You can use the Card at all locations that display the Visa Acceptance Mark: for purchases in physical stores – including contactless, and at automated teller machines ("ATM") for cash withdrawals as well as for online purchases. You can also enrol it in Apple Pay and Google Pay. It allows you to receive cash-back when making purchases in physical stores and is Visa Direct enabled, however it cannot be used for other cash transactions such as withdrawing cash from a bank and purchasing traveller's cheques or foreign exchange from a bureau de change. Limits and fees apply.

The Card is automatically registered for Visa Identity Check, to enhance security. When using the Card for online purchases, you may be required to authenticate yourself using the App's biometric features or entering on the merchant site a code (the "Code") that will be sent to your mobile phone number.

In so far as this is not a result of our negligence, we will not be responsible nor liable for a retailer's failure to or delay in accepting the Card nor for an ATM failing to issue cash.

All transactions require authorisation. Authorisation is also your Instruction for us to carry out a transaction. We will not normally authorise a transaction if the balance on the Card is insufficient to cover the transaction and any related transaction fee. If, for any reason whatsoever, you are able to make a transaction when there are insufficient funds on the Card (the "Shortfall"), we will seek reimbursement of the Shortfall from you immediately. You may ask us to provide you with information about transactions for up to 5 years from the date of the transaction.

A Card transaction will be regarded as authorised by you when you authorise the transaction by following the instructions provided by the merchant, retailer or ATM, which may include:

• Entering your PIN or providing the Code;
• Providing the Card details and/or any other details as requested;
• Waving or swiping the Card over a card reader for the purpose of making a payment.

For a contactless transaction (using a plastic Card or an Apple Pay/Google Pay enabled device):

• Below the limit applicable in the country where you are using the Card ("Contactless Limit"), a transaction is deemed authorized upon transmission of the details of the Card by placing the Card in the proximity of the device that allows for reading the data saved in the Card contactless module;
• In excess of the Contactless Limit, the transaction is deemed authorized by entry of the PIN number on the acceptance terminal. Please note that in certain countries contactless transactions with PIN are not available.

When we suspect there may be an attempt to use the Card fraudulently, we may ask you to confirm a transaction prior to or after authorising it.

In so far as this is not a result of our negligence, we are not obligated to authorise a transaction where a system problem occurs or events outside our reasonable control arise. We shall not be liable to you when a transaction is not authorised in these circumstances and/or if we cancel or suspend use of the Card.

We will block or restrict the Card or PIN on justified grounds relating to:

• The security of the Card, card number or PIN (e.g., when the wrong PIN is entered several times in a row);
• The suspected unauthorised or fraudulent use of the Card or PIN;
• AML transaction monitoring;
• Situations where it is not possible for the supplier to obtain online authorisation;
• Purchases at service stations when the merchant verifies your PIN without providing the final amount.

Authorisation for a transaction may not be withdrawn or revoked by you.

You may demand from us the return of the amount of an authorized transaction initiated by or via the recipient, if the amount of the transaction was not determined precisely when it was being authorized and the amount is higher than what you could expect. You may request such refund within 8 weeks from the date of the transaction.

Using the Card in foreign currencies

If you make a payment with the Card in a currency different from the currency of the Card, the purchase amounts will be converted to the main Card currency by Visa on the date they process the transaction (rates used by Visa can be found on Visa Exchange Rate Calculator), and we may apply a fee as shown in the Tariff Table.

Card terminals may offer you the option of seeing the payment amount in the currency of the Card. The exchange rate used for this will generally be provided by the operator of the terminal or ATM. Please check the exchange rate before authorizing the transaction.

Restrictions on the functionality of the Account

You may only use the Account to make purchases of goods and services, and to receive and send funds in accordance with applicable legislation and this Agreement.

If we have reasonable cause to believe that you have violated the requirements of this Agreement or applicable legislation, we may take measures to protect ourselves, our customers and Users or third parties. In this case, we may:

• Restrict, suspend or close access to the Account or to any of the Services;
• Notify Users who have mutual settlements with you, their bank, their issuer or law enforcement authorities;
• Require you to update any incorrect or incomplete information that you have provided;
• Cancel the Services (in which case we will give you notice in accordance with these terms).

Keeping the Card and Account safe

You must keep safe at all time the Card details – including PAN, expiry date, CVV, PIN, and any passwords and devices you use to access security details of the Card and/or Account by any method (together the "Personalised Security Features"). This also includes any Card details on retailer's websites and any fingerprints or other biometric identification methods stored in your device.

We will never contact you to request any of your Personalised Security Features and we will not ask anyone else to do so on our behalf. If you receive such a request, it is likely to be fraudulent and you must not supply any of your Personalised Security Features in any circumstances.

You are responsible for the quality, safety, legality or any other aspect of any goods or services that you buy with the Card. Unless otherwise stipulated in applicable laws, any disputes about purchases or payments made with the Card must be settled with the goods or service provider concerned.

Balance and statements

To view the available balance and transaction history please visit the App. By accepting the General Terms and Conditions you specifically agree not to receive paper statements.

Upon your request we will provide additional statements and/or transaction records, on paper or otherwise. You may ask us to provide you with information about transactions for up to 5 years from the date of the transaction, even after termination of the Agreement, and we will provide it to you free of charge in electronic form.

We will also provide you an annual statement of Fees paid to us, as well as a statement of fees incurred year to date upon closing the Account.

Fees

You must pay all relevant fees for the Services. The applicable fees are established in the Tariff Table which is available in the App.

Fees and other amounts payable by you will be debited to the Account, unless otherwise specified in the Tariff Table.

If there are no funds on the Account or if the funds are insufficient to cover the fees, other claims and the debts arising from the Agreement, we are entitled to suspend provision of the Services to you until such fees and indebtedness are covered. Notwithstanding the above, we will only charge applicable monthly fees until there is a positive balance on the Account. Uncollected fees remain due and may be debited once a positive balance is restored.

We shall notify you of changes of the fees in the Tariff Table with 60 days' prior notice, following the procedure as provided in section "Changes to the Agreement" below.

Taxes

We may recover from you taxes imposed upon us by any competent Authority in relation to the provision of the Services to you – in particular taxes on payment transactions and/or account balances, if and when applicable.

Redemption of funds

Upon receipt of funds to the Account, we shall issue electronic money at nominal value.

As a User, you may ask us to transfer back the Funds at any time during the validity term of this Agreement and up to 6 years after closing the Account. Based on your request, we will transfer the Funds to any bank account in your name held with a credit institution licensed in the EEA. We will transfer the Funds on the next Business Day from receipt of your request, provided there are no pending transactions requiring further assessment.

For the first 12 months after closing the Account, there is no cost to you for transferring the Funds back to you if your bank account is in the Account currency and is held in the country where such currency is legal tender, within the SEPA region. After 12 months from closing the Account, or in case an international bank transfer is required, fees may apply, as indicated in the Tariff Table.

Chargeback

This procedure sets out how DiPocket handles chargebacks, in accordance with relevant laws, including the Law on Payments of the Republic of Lithuania, the Payment Services Regulations 2017 of the United Kingdom, and applicable card scheme rules – Mastercard and/or Visa. It applies to all transactions processed through DiPocket.

Grounds for a chargeback (Chargeback Reason Codes)

Fraudulent, and Unauthorized or Improperly Authorized transactions:

Fraudulent transactions are payments made without your knowledge or permission, using stolen or fake payment details, like your Card info or account login. This includes scams like identity theft or phishing.

Unauthorized or Improperly Authorized transactions are payments made by someone else without your involvement or permission but, unlike fraud, they aren't the result of stolen or fake payment details. Please note:

• Chargebacks/refunds for unauthorized transactions may be suspended if fraud is suspected, and reversed if fraud or gross negligence is later established;
• If DiPocket refunds you for a valid unauthorized transaction, it may try to recover the money from the Merchant;
• If you get a refund or chargeback twice, you must tell DiPocket right away and return the extra amount. DiPocket can take the duplicated sum from your account, even if it pushes your balance below zero.

If you suffer loss because of fraudulent, or unauthorized or improperly authorized card transaction occurring as a result of the use of a lost or stolen Card, or where you have failed to keep safe the Personalised Security Features, the most you will have to pay is EUR 50, for each instance of loss, theft or misappropriation.

Where you have either deliberately or with gross negligence failed to keep your Personalised Security Features safe, or failed to tell us as soon as possible that you have lost the Card, the above limitation of liability to EUR 50 will not apply to any loss incurred prior to notifying us of the issue.

If we can show that you have acted fraudulently, you may not benefit from any of the liability limitations set out above.

Transactions disputed by the Cardholder (Cardholder Dispute chargebacks):

A Cardholder Dispute chargeback may be submitted when, after contacting the Merchant, you reach out to DiPocket claiming that:

• The Goods or services you received were either not as described or defective;
• The Goods or services you ordered were not provided;
• Counterfeit goods alleged to be authentic were purchased; etc.

In the EU, Cardholder Dispute chargebacks are not governed by EU law and are regulated solely by card scheme rules.

Overview of Procedural steps for processing a Cardholder Dispute chargeback

1. Initial Contact with the Merchant

Before requesting a chargeback, you must first try to resolve the issue directly with the Merchant: request a refund/replacement, provide evidence, and give the Merchant a reasonable amount of time to respond (typically 5–15 calendar days).

2. Contacting DiPocket

If the issue remains unresolved, you may reach out to DiPocket using the communication channels listed in the Complaints Policy. Please provide: a detailed description, evidence of communication with the Merchant, and any relevant receipts, invoices, tracking numbers, or screenshots.

Notable timeframes: Most chargeback requests must be submitted within 120 calendar days from either the transaction date or the expected product delivery date.

3. Chargeback investigation

DiPocket will assess whether your case qualifies for a chargeback and meets the requirements of the applicable chargeback rules. DiPocket retains the right to request additional information from you. If the evidence is incomplete, or if the claim appears to be speculative, abusive, or unfounded, DiPocket may lawfully decline to initiate the chargeback.

4. Submission of Chargeback by the Issuer

If your claim is found valid, DiPocket will submit the chargeback through the applicable card scheme system with all supporting documentation.

5. Merchant Response

The Merchant's Acquirer is notified and may accept the chargeback and refund the transaction, or submit a rebuttal with evidence. DiPocket will review the rebuttal and decide whether to accept it and reverse the chargeback, or pursue further legal action.

Important notices related to Chargebacks

Please be aware that the procedures described above cover the majority of cases. However, additional rules and requirements pursuant to the applicable card scheme rules may also apply.

As a licensed participant in the payment services market, we are obligated to uphold the integrity of the payment system. Any attempt to abuse or exploit the system, including fraudulent chargeback claims, will be met with decisive action.

If something goes wrong

If the Card is used without your permission, or is lost, stolen or if you think the Account may have been misused, we may ask you to write us within seven days to confirm the loss, theft or possible misuse. We may disclose to law enforcement agencies any information which we reasonably believe may be relevant.

If you believe you have been tricked into transferring money to the account of someone you don't know (the "Authorised Push Payment scams"), you can contact us and we will investigate for you and try to recover the money.

You have 13 months to notify us of an unauthorised, non-executed or incorrectly executed transaction. Provided you notify us within this timeframe, we will promptly, as appropriate, refund the amount of the transaction to the Account. In case of errors or disputes about transactions, contact us via https://www.paytrip.fr/contact/ or call us on +33 2 38 69 70 00.

Our liability towards you

Within the limits permitted under the applicable laws, and subject to the limitations defined in this Agreement, we are liable for due performance of our obligations set out in this Agreement.

You cannot claim a loss or damage from us if:

• You are claiming for loss of business, loss of goodwill, loss of opportunity or loss of profit;
• You have acted fraudulently or with gross negligence;
• You are in breach of the Agreement, or provided us with any incorrect information if there is a clear causal link with the damage;
• Our failure was due to abnormal and unforeseeable circumstances outside our control;
• You are claiming for consequential loss which is not reasonably foreseeable.

None of these exceptions will apply if we acted fraudulently, with gross negligence, or if the law does not allow us to exclude or limit liability.

Changes to the Agreement

Provided we give you 60 days' notice, we can change any part of the Agreement, only to the extent necessary, if at least one of the below material circumstances occurs:

• A change of requirements to the creation of reserves or the enactment of allowances not provided for in the legislation at the date of conclusion of the Agreement;
• Fees or taxes or other costs are imposed, that were not provided for at the date of conclusion;
• A change in the legal provisions governing the financial sector or a change of recommendations on good practices by supervising institutions;
• The introduction of new services or removal or change of features of the existing Services.

If you are not happy with the change, you can either:

• Take the steps set out below to end the Agreement with immediate effect and without any charges, or
• Let us know that you are not happy with the change and would like to end the Agreement without any charges, so that the Agreement will cease on the day before the date on which the changes take effect.

If you do not end the Agreement by taking the steps above, you will be deemed to have accepted the changes after the end of the 60 days' notice.

DiPocket may assign its rights or obligations under this Agreement to an associated company at any time, provided we give you not less than one month's notice. If you object to the assignment, you can cancel the Card and end the Agreement without any charges. You may not assign your rights or obligations under this Agreement.

Cancelling the Services

The Agreement expires on the Card expiry date unless, prior to expiry, we issue a replacement Card in accordance with our Card reissue policy.

Whilst a Card remains unexpired, the Agreement will be of indefinite duration and will continue unless terminated at any time by you, or by us for a reason and in accordance with the processes set out below.

After termination of the Agreement, access to the Account may be limited and the remaining funds will only be available for redemption.

Our Services are ancillary to the Partner's services and termination of the relationship with the Partner by a User will automatically terminate the relationship with DiPocket for the Services.

When you can cancel the Services

If you wish to, you can cancel the Services at any time.

In addition, as a consumer, you have a period of 14 days from the date you have concluded the Agreement to tell us that you would like to withdraw from it, without giving any reason, and without incurring any charges or fees other than for the Services commenced upon your request or Services already provided. If you withdraw from the Agreement, the Agreement is considered not concluded, and the Funds will be returned to you within 10 days from such withdrawal.

There is no cost to you for cancelling the Services nor for redeeming the Funds in the Account currency. Funds redemption is regulated by the section "Redemption of funds" above.

When we can cancel the Services

We may end the Agreement immediately (and cancel the Card) if we have reasonable grounds for thinking that you have done any of the following:

• Put us in a position where we might break a law, regulation, or other duty that applies to us;
• Refused to cooperate with DiPocket's legitimate requests;
• Have given us any false information or attempted to mislead us;
• Committed (or attempted) fraud against us or someone else;
• Used (or allowed someone else to use) the Card or Account illegally or for criminal activity;
• Engaged in systematic negligent behavior;
• Inappropriately let someone else use the Card or Account.

We can also end the Agreement immediately if we reasonably believe that maintaining the Services might expose us to action from any government, regulator or law enforcement agency, or if we find out that you are no longer eligible.

We can terminate the Agreement by sending you 60 days' advance notice if:

• There are no transactions on the Account for a continuous period of 12 months;
• We discontinue the Services.

In case you hold Funds with us at the time of termination, we will seek to return the Funds to an account indicated by you. Should we be unable to return the Funds, we will continue to safeguard the Funds within the legally prescribed timeframe.

Complaints Policy - EEA Users

If you are unhappy in any way with the Card or the Services, or if you experience any problem, please contact us:

In the complaint, you will need to specify:

• Date of submission of the complaint;
• Your name and surname;
• Your contact details (phone number, address, e-mail address associated with the Account);
• Circumstances of the issue in detail;
• When the problem arose (no later than within 3 months of learning about the problem);
• What your preferred outcome would be;
• Available documents related to the complaint.

We strive to acknowledge all complaints received within 24 hours of receipt. We will send our final response within 15 business days. In exceptional cases, we may extend the deadline to 35 business days.

Should you not be satisfied with the final response of DiPocket, you can refer the complaint to the Bank of Lithuania (BoL) for out of court settlement within 1 year. More information: Complaints against a financial service provider | Bank of Lithuania.

Complaints Policy - UK Users

If you are unhappy in any way with the Card or the Services, or if you experience any problem, please contact us:

In the complaint, you will need to specify:

• Date of submission of the complaint;
• Your name and surname;
• Your contact details;
• Circumstances of the issue in detail;
• When the problem arose;
• What your preferred outcome would be;
• Available documents related to the complaint.

We will send our final response within 8 weeks of receiving your complaint.

You may also access the following link for dispute resolution: https://ec.europa.eu/consumers/odr.

DiPocket is a Principal Member of VISA® Inc.

These terms and conditions (the "Card Terms and Conditions") apply to any holder of a Card. The Card Terms and Conditions are supplemented by the General Terms and Conditions (the "General Terms and Conditions"), together referred to as the "Agreement". By using your Card you are demonstrating your acceptance of the Agreement.

You may access a copy of the General Terms and Conditions and Card Terms and Conditions at any time by visiting dipocket.org (the "Website").

The Agreement is concluded with DiPocket UAB, it is governed by Lithuanian law. Any legal terms implied by law will also apply to the Agreement.

Using the Card

The Card is a Visa debit card:

• To activate it, you must follow the instructions provided with the Card; the Card will be valid until expiry date shown on the front of the Card, after which you shall not try to use it;
• You can use it at all locations that display the Visa Acceptance Mark: for purchases in physical stores – including contactless, and at ATMs for cash withdrawals as well as for online purchases. It cannot be used for other cash transactions such as withdrawing cash from a bank and purchasing traveller's cheques or foreign exchange. Limits and fees apply;
• You can enrol it in Apple Pay and Google Pay;
• You will only be able to use it if your card account is sufficiently funded at the time you attempt to make a transaction;
• If you make a payment in a foreign currency, the purchase amounts will be converted to the main Card currency by Visa on the date they process the transaction (rates: Visa Exchange Rate Calculator), and we may apply a fee as shown in the Tariff Table.

You can redeem any unspent Funds left on your Card at any time when your Card is valid and up to 6 years after it expires by asking us to transfer the unspent Funds to a Card currency bank account in your name held with a credit institution licensed in the EEA (free of charge within 12 months from card expiry).

For details regarding the chargeback handling procedure, please refer to the 'Chargeback' section of the General Terms and Conditions.

Your Card is not transferable and you agree not to permit any other person to use your Card.

Safeguarding the security of your Card

Upon receiving the Card, you must:

• Not allow anyone else to use your Card;
• Not reveal your PIN or the Code;
• Not maintain a written record of your PIN, unless you do this in a way that would make it impossible for anyone else to recognise it;
• Only release the Card, card number, PIN or the Code to make (or try to make) a transaction with a merchant or ATM displaying the VISA® Acceptance Mark.

If you find the Card after you have reported it lost, stolen or misused, you must destroy it and inform us as soon as you can.

Within the limits permitted under applicable laws and subject to the limitations defined in this Agreement, we are liable for due performance of our obligations set out in this Agreement.

Complaints Policy

You may access a copy of the Complaints Policy at any time by visiting the Complaints Policy section of the General Terms and Conditions above.

Tariff Table (EUR)

Limits Table (EUR)

Daily, monthly and annual limits are applied to a given Card in a 24 hours period or over the prior 30 or 365 days and are subject to availability of funds on the Card. We may amend these limits at any time and with immediate effect, at our sole discretion and/or may apply lower limits to individual customers based on risk considerations and/or to comply with applicable laws and regulations.

	Transaction	Daily	Monthly
Purchases	500 €	1 500 €	5 000 €
ATM cash withdrawals	300 €	750 €	3 000 €
Top-up – bank transfer	10 000 €	12 000 €	20 000 €
Top-up – 3rd party card	1 000 €	1 000 €	5 000 €

Managing your Card

Depending on your Card type, the App may offer you additional functionality, which will be clearly displayed on the available menu once you have entered your Card details or have logged into the App. You may also access a copy of the General Terms and Conditions and Card Terms and Conditions there.

PayTrip Administrative Fees

The PayTrip administrative fees set out below are due whenever the corresponding situation arises.

Inactivity fee

In the event of a complete absence of transactions for a continuous period of three (3) months, PayTrip may charge an administrative inactivity fee of €2.50 per month, for as long as the inactivity persists.

Card replacement

Replacement of a physical card following loss, theft or expiry may incur an administrative fee of €5.00. Shipping costs, if any, are charged separately. Replacement of a virtual card is free of charge.

Account closure

Closing the Account at the Customer's request may incur an administrative fee of €15.00.

Funds redemption

Any request for the redemption of funds held in the Account may incur an administrative fee of €15.00.

Administrative and regulatory requests

Processing a request issued by a public or judicial authority may incur an administrative fee of €50.00.

Where an Account is blocked for regulatory non-compliance, an annual administrative management fee of €200.00 may be applied for as long as the situation persists.

Processing fund return or dispute requests may incur an administrative fee of €30.00.

Investigations and compliance

Where investigations or monitoring measures are required under anti-money laundering, anti-fraud or compliance obligations, PayTrip may charge a monthly administrative fee of €30.00, for as long as such measures are needed.

Administrative documents

Any request for the issuance of a specific administrative document may incur an administrative fee of €5.00.

Seizures and enforcement measures

In the event of a third-party administrative seizure, an administrative fee of 10% of the amount owed may be applied, up to a maximum of €100.00.

In the event of a garnishment order, an administrative fee of €100.00 may be applied.

Fee collection method

PayTrip administrative fees are debited from the available Account balance where possible. Where the balance is insufficient, PayTrip reserves the right to temporarily restrict access to certain features until the situation is regularised.

Operational Limits

Use of PayTrip Services is subject to operational caps and limits which may vary depending on the Customer's verification level, Account usage, and security and compliance requirements.

The limits effectively applicable are communicated to the Customer via the PayTrip platform, in particular through their personal space.

PayTrip Applicable Rates and Fees

General provisions

The rates applicable to PayTrip Services are detailed below. All rates are expressed in euros and inclusive of all applicable taxes.

PayTrip reserves the right to amend its rates at any time. Any rate change will be notified to the Customer with a minimum notice period of 2 months before it comes into effect. In the absence of objection by the Customer before the effective date of the new rates, they will be deemed accepted.

Fee schedule