Investor Agreement

This Investor Agreement (the “Agreement”) is made between:

1. Kedah Islamic Asset Management Berhad (“KIAM”), a company incorporated in and existing under the laws of Malaysia, with its registered address at 178, Lebuhraya Sultanah Bahiyah, 05350 Alor Setar, Kedah Darul Aman, Malaysia, and its business address at the same location;

2. You (“Investor”), whether individual or corporate, who wishes to invest via the KIAM platform under the domain kiam.com.my.

Overview

This Agreement is a binding contract between KIAM and you. It sets out your rights and obligations as an Investor, and is to be read together with KIAM’s Terms and Conditions, Privacy Policy, Risk Disclosure, and any related documents. This Agreement becomes effective when you check a box confirming you have read and agree to it.

Definitions and Interpretation

Definitions

Unless context requires otherwise, in this Agreement:

• Campaign means a funding project by an Issuer hosted on the KIAM Platform.

• Campaign Materials means all information regarding the Campaign and Issuer (ownership, financials, business plan, etc.).

• Campaign Period means the timeframe during which a Campaign is open to Investors.

• Investor means you, as a person or entity investing via KIAM.

• Issuer means a person or entity seeking funding via the KIAM Platform.

• P2P Platform means kiam.com.my, including its secure areas and any associated technology.

• Retail Investor means any Investor who is not an Angel or Sophisticated Investor.

• Angel Investor means an accredited investor as per relevant Malaysian regulation.

• Sophisticated Investor means an investor falling within categories of specialized investment under Malaysian law.

Amendments

KIAM may amend or revise this Agreement from time to time. KIAM will notify you by email of changes and upload the new version to kiam.com.my. Continued use after notice constitutes acceptance.

Purpose of This Agreement

This Agreement helps satisfy regulatory and legal obligations on peer-to-peer investment platforms, and guides processes relating to investments made via kiam.com.my.

Services

KIAM offers a P2P investment platform where Issuers can raise funds. The terms under which KIAM operates are set out in its Terms and Conditions, Privacy Policy, Risk Disclosure, and other related documents available on kiam.com.my.

Investor Application & Registration

To become an Investor, you must register on kiam.com.my, provide required personal or corporate information, complete KYC (Know Your Customer) documentation, and await approval. You must maintain the confidentiality of your account credentials.

Investor Eligibility

Investors must:

• Be at least 18 years old (for individuals).

• Disclose whether they qualify as Retail, Angel, or Sophisticated Investors.

• Acknowledge acceptance of the Risk Disclosure, Terms & Conditions, and Privacy Policy.

Foreign Investors using the platform from outside Malaysia must ensure compliance with all relevant laws in their jurisdiction.

Investor Responsibilities

You should obtain independent legal, tax, and financial advice before investing. You must promptly update KIAM of any change to your personal or corporate information (e.g., address, email). KIAM is not liable for losses arising from your investment decision, except as required by law.

Termination of Access

KIAM reserves the right to refuse or terminate your Investor access at any time, without explanation, especially if:

• Your identity cannot be verified,

• You fail to comply with legal or regulatory requirements, or

• You are under 18 years of age.

If terminated, KIAM will refund your remaining available balance.

Launching a Campaign

KIAM conducts due diligence on Issuers before listing Campaigns. KIAM does not guarantee success or accuracy of Issuer information; all materials are produced by Issuers themselves. KIAM disclaims liability for inaccuracies, except as required by law.

Investment Process

When investing in a Campaign, you submit an investment amount subject to any limits (e.g., for Retail Investors). Upon confirmation, KIAM executes relevant contracts and notifies you. If Campaign changes materially, you may opt to withdraw and receive a refund.

Refund Process & Policy

Investors may withdraw in the case of material adverse changes or unsuccessful Campaigns. KIAM will refund amounts to your bank account or to your KIAM account balance. No reimbursement of fees, except in cases of technical error, unless KIAM elects otherwise.

Payment to Investors

When returns are due, the Issuer transfers funds to KIAM’s trust account. KIAM will notify you and transfer funds to your bank account or KIAM account balance as per your preference.

Transactions & Records

All transactions are recorded, updated, and traceable. KIAM communicates with trustees or relevant parties to reconcile accounts.

Indemnity

You agree to indemnify KIAM, its officers and employees against any claim, loss, expense, liability or cost arising out of your breach of this Agreement, including legal fees.

Anti-Money Laundering & Compliance

You warrant you are not engaged in unlawful activity. You agree to comply with all applicable anti-money laundering and financial regulations.

Governing Law

This Agreement is governed by Malaysian law. You submit to the exclusive jurisdiction of courts in Malaysia.

Complaints

If you have complaints, you may contact KIAM via email at ask@kiam.com.my or via postal address at the KL office. You may also refer complaints to Malaysian regulatory bodies.

Privacy Policy

Kedah Islamic Asset Management Berhad (KIAM, “we”, “us”, “our”) operates the platform at kiam.com.my (the “Site”) and related services (collectively, “Services”). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal data, and your rights in relation to that data.

Contact

If you have questions or concerns about this Privacy Policy or your personal data, contact us at ask@kiam.com.my.

Amendments

We may amend, revise, or update this Privacy Policy from time to time without prior notice. The latest version will be published on the Site. Your continued use after changes indicates acceptance of the updated policy.

Information We Collect

We collect various information when you use our Site or Services, including but not limited to:

• Personal identifiers: name, date of birth, identity number, passport, etc.

• Contact data: address, phone number, email address.

• Financial & employment data: employment status, income, financial statements.

• Corporate data: business name, registration number, shareholders, directors.

• Verification documents: identity proofs, address proofs, financial documents.

• Usage data: logs, cookies, IP address, device identifiers, browsing behavior.

Cookies & Tracking

We may use cookies and similar technologies (e.g. web beacons, pixel tags) to collect standard internet log data and visitor behavior. You can disable cookies in your browser settings, but some features of the Site may not work properly without them.

Use of Your Information

We use your personal data for the following purposes:

• Provide, maintain, and operate our Services.

• Verify your identity and prevent fraud, money laundering, or other illicit activity.

• Conduct credit or background checks and risk assessment.

• Communicate updates, notices, promotions, and service changes.

• Personalize your experience and improve our Services.

• Conduct market research and analytics.

• Fulfill legal and regulatory obligations.

Updating & Correcting Your Information

You have the right to request access to, correction of, or deletion of your personal data. If information is inaccurate or incomplete, you may submit a request in writing. We may require verification documents to confirm changes. We reserve the right to decline fraudulent or malicious requests.

Disclosure of Information

We do not sell or trade your personal data. However, we may disclose your information in the following circumstances:

• To comply with legal obligations, regulatory investigations, or court orders.

• To enforce our terms, recover rights, or protect safety, rights, or property of KIAM or others.

• To service providers, auditors, agents, trustees, payment processors, or partners who assist us, subject to confidentiality commitments.

• In the event of a merger, acquisition, reorganization, or sale of assets (with prior notice and confidentiality safeguards).

Third-Party Links

The Site may contain links to third-party websites. This Privacy Policy does not cover those sites. We are not responsible for their privacy practices. Please review their privacy notices separately.

Security

We implement technical, administrative, and organizational measures designed to secure your data from unauthorized access, disclosure, alteration, or destruction. Although we strive to protect your data, no method is completely secure.

Data Retention

We retain personal data as long as necessary to fulfill the purposes described above, or as required by law. When no longer needed, we delete or anonymize data in a secure manner.

Legal Basis & Consent

To the extent required under applicable law, processing of your personal data is based on:

• Your consent, where applicable;

• Performance of a contract or provision of Services;

• Compliance with legal obligations;

• Legitimate interests, where not overridden by your rights or interests.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data;

• Correct or update your data;

• Delete your data (subject to legal retention requirements);

• Object to or restrict processing;

• Withdraw consent (if processing is consent-based);

• Request data portability, where applicable.

Children & Minors

We do not knowingly collect personal data from individuals under 18 years old. If you become aware that such data has been provided to us, contact us to request deletion.

Cross-Border Transfers

We may transfer your personal data to jurisdictions outside Malaysia for processing or storage. In such cases, we ensure adequate data protection measures or legal safeguards (e.g. contracts, standard clauses) are in place.

Retention and Disposal

We retain personal data only for as long as necessary for the purposes listed, or as required by law. Afterward, we securely destroy or anonymize the data.

Changes to This Privacy Policy

We reserve the right to change this Privacy Policy from time to time. Changes take effect when posted. Continued use after changes indicates acceptance.

Terms & Conditions

Kedah Islamic Asset Management Berhad (KIAM)

These Terms & Conditions set out the general terms governing your use of the website and services under the domain kiam.com.my (“Website”). By accessing or using the Website or any service provided herein, you accept and agree to be bound by these Terms & Conditions. If you disagree, do not use the Website.

Amendments

We may amend, revise or modify these Terms & Conditions from time to time without notice or explanation. The revised version is published on the Website. Your continued use constitutes acceptance of the updated version.

Information Accuracy

While we take reasonable care to ensure reliability and accuracy of content, KIAM, its affiliates, directors, employees and partners do not guarantee completeness or correctness, and disclaim liability for losses from reliance on the content. We reserve the right to suspend or terminate your account if the information you provided is or becomes untrue, inaccurate, incomplete, or outdated.

Account & Security

Use of the Website requires registration. You must provide valid credentials and maintain confidentiality of your password. You may be asked to verify your email. You are responsible for all activities under your account. Notify KIAM immediately if unauthorized use occurs or is suspected. KIAM may take action it deems appropriate against misuse or suspicious activity.

Eligibility Criteria for Investors

To be an Investor, you must:

• Be at least 18 years of age;

• Possess a valid identification document;

• If Malaysian, maintain a legal address in Malaysia;

• Have a valid contact number;

• Hold a bank account;

• Be a legal business entity, if acting in that capacity;

• Complete all declarations and provide documents as requested.

Eligibility Criteria for Issuers

Eligible corporate entities (e.g. sole proprietorship, partnership, private limited company) may apply as Issuers. Prohibited entities include highly complex financial structures, companies without concrete business plans, or those proposing to use funds to provide loans or make equity investments. Issuers must meet criteria such as minimum operating history, revenue, or positive cash flow. They must not concurrently host the same Campaign on another P2P platform. KIAM may define additional criteria in accordance with applicable regulation.

Third-Party Links

The Website may contain links to third-party sites. KIAM is not responsible for their content or practices. Review their own terms and privacy policies.

Intellectual Property

All content on the Website (policies, disclosures, agreements, materials) is protected by copyright and trademark. You may not reproduce, modify, distribute, or upload such content without KIAM’s prior consent. Consent may be revoked at any time.

Restricted Conduct

You agree not to use the Website to:

• Violate these Terms, policies, or other agreements;

• Engage in fraudulent, unlawful, or criminal conduct;

• Upload content that is obscene, defamatory, discriminatory, threatening, abusive, hateful, or malicious;

• Violate applicable laws or regulation;

• Impersonate another person or organization;

• Infringe intellectual property or privacy rights;

• Distribute private personal data of third parties;

• Prevent others from using or accessing the Website.

KIAM may suspend or terminate your account if you breach this clause.

Fees & Charges

KIAM may charge fees to Investors and Issuers. Example types include:

• Platform management fees (e.g., percentage of returns);

• Withdrawal processing fees (bank charges);

• Issuer processing, hosting, or maintenance fees;

• Service or performance fees based on risk grading;

• Stamp duty, taxes, and additional banking fees.

Fees may be deducted from disbursements or accounts. KIAM reserves right to change fee schedules with notice.

Indemnity

You agree to indemnify and hold KIAM, its officers, employees, and partners harmless from claims, damages, liabilities, costs and expenses arising from your use of the Website, breach of these Terms, or violation of law.

Confidentiality

As a member, you gain access to internal systems, policies, agreements, and information intended for member use. You shall keep such materials confidential, not share or use them except in connection with your legitimate activities on the Platform.

Conflict of Interest

KIAM and its directors, shareholders, and officers shall not invest in or provide funding to Issuers on the Platform or participate as investors in campaigns launched via the Website.

Termination

A member may terminate membership by written notice. KIAM may terminate membership at any time, with immediate effect, by notice. Termination does not affect accrued rights or fees.

Acknowledgement

You acknowledge that use of the Website is at your own risk. The Website does not constitute financial, investment, or legal advice. You are responsible for due diligence. All transactions occur directly between you and Issuers. KIAM is the platform facilitator only.

Governing Law & Jurisdiction

These Terms & Conditions are governed by Malaysian law. You agree to submit to the exclusive jurisdiction of Malaysian courts.

Complaints

Members may submit complaints by contacting KIAM (e.g., via email or postal address). Alternatively, complaints may be escalated to the Securities Commission Malaysia or relevant regulatory bodies.