Supplemental Provision – South Korea

Last Updated and Effective Date: August 2, 2025

This South Korea Supplemental Provision (the “Supplement”) supplements the Citi Authenticator Global Privacy Notice (the “Privacy Notice”) and applies solely to individuals who have rights under the PIPA (Personal Information Protection Acts) of South Korea. Nothing in this Notice limits or seeks to limit your rights under the PIPA (Personal Information Protection Acts) of South Korea. Where there is a conflict between the Supplement and the Privacy Notice, the terms of this Supplement will prevail to the extent of any inconsistency.

To exercise any of your data subject rights, or if you have any questions or would like to make a complaint, please write to:

Citi Entity	E-mail Address
Citibank Korea Inc.	DPO : jaehwy.kim@citi.com