This policy has been prepared and updated in accordance with the provisions of the Personal Data Protection Law (PDPL) issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), and the relevant guidelines of the Saudi Central Bank (SAMA) concerning data protection and privacy.

This policy aims to help you understand the types of data we collect and process, the reasons for collecting it, the limits of data sharing, disclosure controls, how to update or delete your data, and your legal rights regarding it.

The terms “Platform”, “Edaat”, or “we” refer to the Edaat Platform, and “you” refers to any user or visitor of the platform or any of its services.

This policy applies to the Edaat Platform, all services provided through it, and any of our affiliated systems involved in delivering these services. It forms an integral part of the Terms and Conditions.

By using the Edaat Platform, you agree to the terms set forth in this policy and grant us permission to collect, use, and process your data as outlined below. We are committed to protecting your privacy and personal data and take this responsibility seriously.

Please read this policy carefully before using the platform. It includes the following sections:
1. Data We Collect About You
2. Cookies
3. How We Use Your Data
4. Data Protection
5. Data Sharing
6. Obligations of the Parties (Client, Biller)
7. Updates
8. Contact Us

Last Updated: 22/10/2025

---

1. Data We Collect About You

We may collect and process the following data as necessary to provide our services:
• Registration Data such as name, address, email, and mobile number.
• Information provided when reporting an issue or contacting technical support.
• Identity verification data, including a copy of your national ID or passport.
• Transaction-related data, such as payments, deposits, and activity logs.

You agree that we may store your data in either electronic or physical records as deemed appropriate for providing and maintaining the quality of our services, in full compliance with the PDPL.

2. Cookies

Cookies are small text files stored on your device when visiting the platform. They do not contain viruses or spyware and are used for the following purposes:
• To improve your experience and understand how you interact with the platform.
• To identify errors and improve content and services.
• To simplify access to your data during your use of the platform.

You may control cookie settings via your device or browser. Third-party cookies are subject to their respective privacy policies, and we do not control their use.

3. How We Use Your Data

We are committed to protecting your privacy and only use your personal data for the following purposes:
• Enabling access to our services and managing your account or profile.
• Verifying account information, activating email or mobile, and managing payments.
• Responding to inquiries, complaints, or feedback.
• Managing surveys or interactive activities on the platform.
• Providing requested information and services that may interest you.
• Enhancing internal services and improving user experience.
• Fulfilling legal and regulatory obligations and protecting against fraud or malicious activities.
• Enforcing our Terms and Conditions and communicating with you regarding service updates or changes.

4. Data Protection

We commit to retaining your personal and financial data only for the period required to complete the transactions conducted through the platform.

Your data will not be used for any unauthorized purpose unless required by law or with your prior consent.

Records containing your data or communications are kept under our control or that of our authorized agents, with reasonable measures taken to protect them based on their sensitivity.

We strictly comply with the PDPL issued by SDAIA and the Saudi Central Bank’s data protection guidelines.

We do not sell or trade your data with third parties.

You and the relevant authority will be promptly notified in case of:
• Unauthorized access or data breach
• Data loss or damage that could result in harm

5. Data Sharing

You authorize us to allow our employees to handle your personal data strictly within the scope of service delivery.

We may share your personal data with third parties only in the following cases:
• Compliance with legal obligations or enforcement of our Terms and Conditions.
• A court order or official directive.
• Protection of our rights, others' rights, or platform safety, including fraud prevention and credit risk mitigation.
• Trusted third-party service providers supporting the platform, subject to the same privacy standards.
• Regulatory or governmental authorities, upon official request.
• With your explicit and prior consent.

Data will not be transferred outside the Kingdom of Saudi Arabia unless in full compliance with PDPL and with approval from the relevant authority.

6. Obligations of the Parties (Client, Biller)

Both parties agree to maintain the confidentiality and privacy of their personal data. They acknowledge that any disclosure of personal data by one party to another is done at their own risk and without liability on the part of the platform.

Each party agrees to:
• Maintain the confidentiality and privacy of all personal data.
• Be responsible for any unauthorized use or disclosure.
• Avoid disclosing any system-related data to external parties without consent.
• Protect transaction data and use it only for authorized purposes.
• Refrain from collecting or attempting to collect data from other users without permission.

7. Updates

We reserve the right to update this Privacy Policy at any time. Any changes will be communicated through a policy update notice and reflected in the "Last Updated" date.

Your continued use of the platform after updates constitutes your express consent to the new terms.

If you do not agree with the changes, you must stop using the platform and contact us to delete your account and data — provided there are no outstanding financial obligations.

8. Contact Us

You may contact us at any time via the contact form available on the Edaat platform website.