1

Article I Definition of Cooling Off Period

Not stated

There is 1 additional point, which is in point 13.

13. Cooling Off Period is a waiting period parameterized that a Customer must go through before being able to log in and perform transactions on the M2U ID App after activating the Secure2u passcode. The Cooling Off Period only applies to Customers who meet the Bank’s criteria, namely Customers who:
    
    1. Change their mobile device (whether or not they have previously logged into the M2U ID App), or
    2. Have a Maybank Savings Account opened through a Maybank Branch Office, but have never registered for the M2U ID Web/App.

2

Article III Terms of Use of M2U ID Web/M2U ID App part 1

1. Customers must have a smartphone/smart phone with software/software version at least 11 for iOS users and 6 for Android users to be able to operate M2U ID App.
2. Customers are required to register themselves as M2U ID Web/M2U ID App users to create credentials (User ID and Password). The credentials used on M2U ID Web are the same as the credentials used on M2U ID App.
3. To perform transactions through M2U ID Web, customers are required to download M2U ID App and activate Secure2U passcode. This is because Secure2U passcode input for transaction authentication through M2U ID Web is done through the M2U ID App.
4. Customers can only use one device and one phone number with active Secure2u to access M2U ID App.
5. When Customer logs in for the first time (first time login) on M2U ID Web/M2U ID App, Customer is required to enter User ID and Password and activate Secure2u (if logging in via M2U ID App).
6. For new device that has not activated Secure2u, customer will be asked to (a) create a Secure2U passcode, (b) enter the SMS OTP sent to the registered phone number, and (c) enter the OTP sent to the registered email address.
7. If there is a change in phone number and/or e-mail for Customer who (i) has not registered for M2U ID App or (ii) has not activated Secure2U or (iiI) has replaced the Device, then the Customer is obliged to update the phone number and /or the Customer's e-mail address that has been registered in the Bank system at the nearest Bank branch.
8. Customers are required to replace device to be able to access M2U ID App if the device used by the customer to access M2U ID App has previously been replaced or accessed by an irresponsible party who has the potential to carry out transactions that violate applicable legal provisions.
9. For each transaction or other features that require authorization via M2U ID Web/M2U ID App, the customer will be asked to enter the Secure2u Passcode. Specifically, Secure2U Passcode used in M2U ID Web has an expiration period based on Bank's internal policy. If the Secure2U Passcode has expired, customer can request to resend the Secure2U passcode via M2U ID Web. The expiration period will be displayed by the Bank after the customer confirms the transaction on M2U ID Web.
10. Secure2u Passcode created by the Customer will be valid and can be used in every Customer transaction or other features that require authorization.
11. To find out or ensure that the Bank has carried out every order/instruction from the Customer, Bank will display a confirmation screen on M2U ID Web/M2U ID App which contains (a) a statement that the transaction has been successfully carried out and (b) reference number information which is proof of transaction via M2U ID Web/M2U ID App.
12. SMS OTP sent to the Customer's phone can be received by the Customer in condition that the Customer's phone inbox is not full and/or there is no interference with the Cellular Operator's system network.
13. Proof of M2U ID Web/M2U ID App transaction carried out by the Customer is a record of mutation in the Customer's Maybank savings and/or Customer's Maybank checking account in the Bank. The Bank will send proof of transactions made on M2U ID Web/M2U ID App to the registered email in the Bank's system. If the Customer wishes to update their email data, they can update it through the M2U ID App or visit the nearest Bank branch.
14. The Bank will provide proof of ownership of products or services requested via M2U ID Web/M2U ID App using communication media according to Bank’s policies.
15. The Bank is not responsible for any losses suffered by the Customer related to:
    1. Any loss or damage directly, indirectly or otherwise due to or related to the use of M2U ID Web/M2U ID App;
    2. All forms of use of SMS OTP, User ID and Password, Secure2u Passcode, including but not limited to theft/duplication/loss/falsification of the Customer's telephone number and/or SIM card connected to M2U ID Web/M2U ID App as well as the consequences of using M2U ID Web/M2U ID App due to the Customer's negligence.

There are 2 additional points, which are in point ii and point x.

1. Customers must have a smartphone/smart phone with software/software version at least 11 for iOS users and 6 for Android users to be able to operate M2U ID App.
2. The Customer is required to have a mobile phone number registered with a cellular operator based in Indonesia.
3. Customers are required to register themselves as M2U ID Web/M2U ID App users to create credentials (User ID and Password). The credentials used on M2U ID Web are the same as the credentials used on M2U ID App.
4. To perform transactions through M2U ID Web, customers are required to download M2U ID App and activate Secure2U passcode. This is because Secure2U passcode input for transaction authentication through M2U ID Web is done through the M2U ID App.
5. Customers can only use one device and one phone number with active Secure2u to access M2U ID App.
6. When Customer logs in for the first time (first time login) on M2U ID Web/M2U ID App, Customer is required to enter User ID and Password and activate Secure2u (if logging in via M2U ID App).
7. For new device that has not activated Secure2u, customer will be asked to (a) create a Secure2U passcode, (b) enter the SMS OTP sent to the registered phone number, and (c) enter the OTP sent to the registered email address.
8. If there is a change in phone number and/or e-mail for Customer who (i) has not registered for M2U ID App or (ii) has not activated Secure2U or (iiI) has replaced the Device, then the Customer is obliged to update the phone number and /or the Customer's e-mail address that has been registered in the Bank system at the nearest Bank branch.
9. Customers are required to replace device to be able to access M2U ID App if the device used by the customer has previously been replaced or accessed by an irresponsible party who has the potential to carry out transactions that violate applicable legal provisions.
10. The Customer will be subject to a Cooling Off Period if they meet certain criteria set by the Bank as explained in the Definition. During the Cooling Off Period, the Customer will not be able to conduct transactions through the M2U ID App. If the Customer is subject to the Cooling Off Period without having changed their device, they may contact the Maybank Customer Care or visit the nearest Bank branch.
11. For each transaction or other features that require authorization via M2U ID Web/M2U ID App, the customer will be asked to enter the Secure2u Passcode. Specifically, Secure2U Passcode used in M2U ID Web has an expiration period based on Bank's internal policy. If the Secure2U Passcode has expired, customer can request to resend the Secure2U passcode via M2U ID Web. The expiration period will be displayed by the Bank after the customer confirms the transaction on M2U ID Web.
12. Secure2u Passcode created by the Customer will be valid and can be used in every Customer transaction or other features that require authorization.
13. To find out or ensure that the Bank has carried out every order/instruction from the Customer, Bank will display a confirmation screen on M2U ID Web/M2U ID App which contains (a) a statement that the transaction has been successfully carried out and (b) reference number information which is proof of transaction via M2U ID Web/M2U ID App.
14. SMS OTP sent to the Customer's phone can be received by the Customer in condition that the Customer's phone inbox is not full and/or there is no interference with the Cellular Operator's system network.
15. Proof of M2U ID Web/M2U ID App transaction carried out by the Customer is a record of mutation in the Customer's Maybank savings and/or Customer's Maybank checking account in the Bank. The Bank will send proof of transactions made on M2U ID Web/M2U ID App to the registered email in the Bank's system. If the Customer wishes to update their email data, they can update it through the M2U ID App or visit the nearest Bank branch.
16. The Bank will provide proof of ownership of products or services requested via M2U ID Web/M2U ID App using communication media according to Bank’s policies.
17. Customer is responsible for any losses suffered by the Customer related to:
    1. Any loss or damage directly, indirectly or otherwise due to or related to the use of M2U ID Web/M2U ID App;
    2. All forms of use of SMS OTP, User ID and Password, Secure2u Passcode, including but not limited to theft/duplication/loss/falsification of the Customer's telephone number and/or SIM card connected to M2U ID Web/M2U ID App as well as the consequences of using M2U ID Web/M2U ID App due to the Customer's negligence.

3

Article IV Personal Data Protection

1. All data, information and/or documents provided by the Customer to the Bank for the purpose of using the M2U ID Web/M2U ID App service (“Purpose”) are true, accurate and up-to-date according to the original (if provided in the form of a copies). If there is any change to the data and/or documents, the Customer is required to notify the Bank of such changes in writing and/or verbally, along with supporting data/documents. If the data/information and/or documents provided by the Customer are incorrect, the Bank will not be responsible for any consequences arising from the provision of such data/information and/or documents.

1. All data, information and/or documents provided by the Customer to the Bank for the purpose of using the M2U ID Web/M2U ID App service (“Purpose”) are true, accurate and up-to-date according to the original (if provided in the form of a copies). If there is any change to the data and/or documents, the Customer is required to notify the Bank of such changes in writing and/or verbally, along with supporting data/documents. If the data/information and/or documents provided by the Customer are incorrect, the Customer will be responsible for any consequences arising from the provision of such data/information and/or documents.