Supplemental Personal Information Collection Statement (Applicable to Hong Kong Employees)

Last Updated and Effective Date: July 2, 2023

As an employee of Citi, you understand and consent to the following with respect to the Personal Information collected by Citi via the App:

1. The Personal Information collected by Citi from time to time via the App and its function will be used by Citi for one or more of the following purposes:

   1. to authenticate a user’s identity for security purposes,
   2. to maintain, and improve the App;
   3. to send you technical notices, updates, security alerts, and support and administrative messages (such as changes to our terms, conditions, and policies) and to respond to your comments, questions, and customer service requests;
   4. to monitor and analyze trends, usage, and activities in connection with the App;
   5. to develop new products and services and enhance current products and services; and
   6. to carry out any other purpose described to you at the time the information was collected.
   7. to carry out any other lawful purposes which are related to your employment with Citi; and
   8. any other lawful purposes which are related to any of the aforesaid purposes.

2. The provision of Personal Information via the App and its function is obligatory. Failure to provide such personal information may result in a discontinuation of your access to and use of the App and may necessitate the use an alternate method of authentication.

3. Your Personal Information may be disclosed to:

• Service providers who provide services to us and are required to keep Personal Information confidential;

• Any applicable regulatory body or judicial authority if reasonably necessary to comply with law, regulation, or compulsory process (e.g., to respond to a subpoena);

• Citigroup and its affiliated companies if we conclude your actions violate our user agreements or policies;

• Any applicable regulatory body, judicial authority or law enforcement authority to protect the rights, property or safety of Citigroup, your colleagues, or others; and

• Third parties in connection with a merger, sale of company assets, financing or acquisition of all or a portion of our business, provided that the receiving party agrees to protect the information in accordance with the commitments of this policy and applicable law.

4. Citi (by itself or through its affiliates) maintains computer systems in data centers and at other locations in the United States of America and in various countries throughout the world and that Citi may collect, store, process, disseminate or use your Personal Information in manner that causes it to be transferred or accessed from computer systems owned or operated by or on behalf of Citi throughout its global computer network.

5. You have a right to request access to and correction of your Personal Information in accordance with the Personal Data (Privacy) Ordinance, Cap.486 of the Laws of Hong Kong.

6. Enquiries concerning the Personal Information collected, including access and corrections, should be addressed to “Citi, Human Resources, In-Business Privacy Officer” at the address below:

Address	Citibank N.A., HK Branch c/o Citibank, 5 Changi Business Park Crescent, Singapore 486027
E-mail Address	katherine.rivera@citi.com