Customer Consent & Data Sharing

This consent explains how Sinder Fintech Computer Systems & Communication Equipment Software Design L.L.C ("Sinder") and Ruya Community Islamic Bank LLC ("ruya"

Version 1.0.0 · Effective 2026-06-15

Last updated: 15 June 2026

This consent explains how Sinder Fintech Computer Systems & Communication Equipment Software Design L.L.C ("Sinder") and Ruya Community Islamic Bank LLC ("ruya") collect, process and share data for the Sinder Travel Card, associated account and Sinder App experience.

1. Consent

By applying for or using the Sinder Travel Card, associated account or Sinder App, you consent to the collection, processing and sharing of your personal data between Sinder and ruya for the purposes described in this document and in the Sinder Privacy Policy.

This may include:

• personal and contact data;
• UAE PASS, identity and KYC data;
• account and card data;
• transaction, balance and statement data;
• fraud, risk, AML/CFT, sanctions and compliance data;
• device, app, authentication and security data; and
• customer support, complaint and dispute data.

2. Why data is shared

Sinder and ruya may collect, process and share data for:

• onboarding and identity verification;
• account and Card issuance;
• app display of account, Card, balance and transaction information;
• customer support and technical assistance;
• servicing the Card and account relationship;
• transaction monitoring and authorisation support;
• fraud prevention, security and misuse detection;
• AML/CFT, sanctions and regulatory compliance;
• disputes, chargebacks, complaints and investigations;
• audits, recordkeeping and regulatory requests; and
• operation, maintenance and improvement of the Sinder App and product experience.

3. Ongoing sharing

You understand that ongoing data sharing may be needed for Sinder to provide app access to the ruya-issued account and Card. Without that sharing, Sinder may be unable to display account information, support Card controls, provide customer support or operate the Sinder App experience for the Card.

4. Withdrawal of consent

You may contact Sinder via privacy@sinder.ae or in-app support if you want to withdraw consent or make a privacy request.

Where the request relates to data controlled by ruya as issuer/account provider, Sinder may route or coordinate the request with ruya.

Withdrawal may prevent Sinder from providing app access to the ruya-issued account or Card, but it does not affect:

• processing already carried out before withdrawal;
• processing required by applicable law, regulatory requirements, card scheme rules, issuer requirements or compliance/risk controls; or
• processing needed for legal claims, complaints, disputes, audits, accounting, AML/CFT, fraud prevention or recordkeeping.

5. Protection of data

Sinder and ruya will apply appropriate technical and organisational safeguards for data they process, such as access controls, encryption where appropriate, retention controls and security monitoring.

Personal data may be transferred outside the UAE where needed for the purposes described above, subject to applicable legal requirements and appropriate safeguards.

6. More information

For more information about how Sinder handles personal data and how to exercise your privacy rights, see the Sinder Privacy Policy or contact privacy@sinder.ae.