Rules for the Provision of Payment Services

1.1. These Rules define the procedure and general terms of the provision of payment services by Platio Payment Technologies LLC (hereinafter, the Rules) and the terms of interaction between Platio Payment Technologies LLC (hereinafter, the Company) as a payment service provider and users of payment services (hereinafter, Users) as parties to payment legal relations receiving a payment service.

1.2. The purpose of these Rules is to inform Users:

• about the Company as a payment service provider;
• about the payment services provided by the Company;
• about the fees, tariffs and remuneration payable;
• about the means of communication and the provision of information;
• about the security of the provision of payment services;
• about the procedure for amending the payment agreement (contract) and terminating it;
• about the cases and procedure for challenging the provisions of the payment agreement (contract) and the actions (omissions) of the Company, and the methods of dispute resolution;
• about other information subject to disclosure by the Company in accordance with the legislation of the Republic of Belarus.

1.3. Detailed rules for the provision of payment services and the procedure for interaction with payment systems may be established in the payment agreement and other contracts concluded by the Company with Users and (or) participants of payment systems.

1.4. For the purposes of these Rules, terms and their definitions are used in the meanings established by the Law of the Republic of Belarus of 19.04.2022 No. 164-З “On Payment Systems and Payment Services” and other legislation of the Republic of Belarus, as well as the following terms and their definitions:

• 3-D Secure — a technology for authenticating the bank payment card holder when paying for goods (works, services) on the Internet;
• PCI DSS — the Payment Card Industry Data Security Standard;
• hardware and software system — a specialised set of hardware and software;
• authentication — the procedure for verifying the authentication data provided by the User;
• acquiring bank — a bank providing payment services for the acquiring of payment transactions using bank payment cards;
• issuing bank — a bank issuing bank payment cards;
• User — a bank payment card holder, a payer, a party to payment legal relations;
• Internet resource — a website or mobile device application owned by the Company containing information about the seller and goods (works, services) and enabling the selection, ordering and (or) purchase of goods (works, services);
• Internet acquiring — a payment service for accepting payments in favour of service providers using bank payment cards;
• transaction limit — the maximum and (or) minimum values for carrying out transactions;
• fraudulent transaction — a payment transaction carried out without the permission of the bank payment card holder;
• service provider — a legal entity, individual entrepreneur or self-employed person using the service;
• payment transaction — an action or a set of actions ensuring the making of a payment;
• payment system — the Mastercard, VISA, BELKART or MIR payment systems;
• payment agreement — an adhesion contract for the provision of payment services posted on the Company's website;
• Company's website — the official website of the Company on the global computer network Internet at: https://market.platio.by/;
• financial transaction — a transaction with funds, regardless of the form and method of its execution.

2.1. On the basis of the payment agreement and other contracts concluded by the Company with Users and (or) participants of payment systems, the Company provides services of acquiring of payment transactions, which include the acceptance and transfer for execution of payment instructions by means of payment instruments for the purpose of making payments in favour of their recipients without opening accounts for Users.

2.2. Payment services using the hardware and software system are provided by the Company in accordance with the requirements of the legislation of the Republic of Belarus in the scope, within the time limits and of the quality agreed with Users and (or) participants of payment systems.

2.3. The payment instruments and (or) means of payment used (accepted) are bank payment cards.

2.4. The Company informs Users in connection with the provision of payment services by posting the relevant information and details on the Company's website and (or) by sending notifications, notices and messages through the communication channels agreed in the payment agreement and other contracts.

2.5. The Company is entitled to unilaterally amend these Rules, notifying Users by posting the amended version on the Company's website immediately before the amendments take effect, as well as the payment agreement, unless otherwise provided by agreement of the parties.

2.6. The Company informs Users of amendments to the payment agreement by posting the new version on the Company's website no later than 30 calendar days before the date on which the amendments take effect.

2.7. If the User has not notified the Company of non-acceptance of the amendments within 5 business days before the date on which the amendments take effect, the User is deemed to have accepted the amendments.

2.8. If the User disagrees with the approved amendments or additions to the payment agreement, the User is entitled to terminate the payment agreement in the manner provided for by the agreement and legislation.

2.9. The User has the right to unilaterally withdraw from the payment agreement in the manner agreed therein.

2.10. The Company has the right to withdraw from the payment agreement by sending the User a notification in the manner provided for by the payment agreement and legislation.

2.11. If the User notifies the Company of non-acceptance of the amendments, the Company is entitled to withdraw from the payment agreement on the date on which the amendments take effect.

2.12. When providing payment services using the hardware and software system, the Company undertakes to:

• provide payment services to Users in accordance with the legislation of the Republic of Belarus;
• ensure that payment instructions are accompanied by the information provided for by AML/CFT legislation;
• refuse to transfer payment instructions for execution where mandatory details are missing;
• ensure the protection of information whose dissemination is restricted by legislation;
• store information on accepted payments for the periods established by legislation and contracts;
• ensure equal and open access of Users to the payment services provided;
• provide Users with information in accordance with legislation;
• ensure the possibility of refunding funds in the cases and in the manner established by legislation;
• organise an internal control system and a payment risk management system;
• ensure the level of security of payment services;
• use information protection tools when authenticating the User;
• disclose information on its activities to the extent and in the manner established by legislation;
• provide the User and other payment service providers with information on payment transactions in the cases, in the manner and within the time limits established by legislation.

2.13. In accordance with the requirements of AML/CFT legislation, AML/CFT measures in the course of payment transactions are taken by the acquiring bank, the issuing bank and other persons carrying out financial transactions in accordance with the legislation of the Republic of Belarus.

2.14. The means of communication in the course of performance of the payment agreement are determined in the payment agreement.

2.15. The User is entitled to obtain information on the terms of the payment agreement by reviewing it on the Company's website: https://market.platio.by/.

2.16. The provisions of the payment agreement and the actions (omissions) of the Company are challenged in court in accordance with the legislation of the Republic of Belarus.

3.1. Payment initiation includes the processing, in electronic form, of a payment initiated by the User and the transfer to the acquiring bank, by means of the hardware and software system, of the information required to make the payment.

3.2. When providing payment initiation services, the Company undertakes to ensure that the hardware and software system complies with the requirements of the contracts concluded with acquiring banks.

3.3. The rules and procedure for payment initiation, including the procedure for authenticating Users, are determined by the Company on the basis of the contracts concluded with acquiring banks and the rules of the relevant payment systems.

3.4. The Company is not entitled to:

• store information whose dissemination and (or) provision is restricted by legislation, except in cases expressly provided for by legislation and contracts;
• use any data for purposes other than the provision of the payment initiation service;
• request from the User data that are not necessary for the provision of the payment initiation service;
• change the payment amount, the payment recipient or other details of the payment transaction.

3.5. For the provision of the payment initiation service, the following must be filled in:

• bank payment card number;
• bank payment card expiry date;
• CVV/CVC code;
• first and last name of the bank payment card holder;
• email address to which the card receipt is sent.

4.1. The payment services of acquiring of payment transactions provided by the Company include the transfer of funds by non-cash means for the purpose of making payments in favour of their recipients without opening accounts for Users.

4.2. For the purpose of fulfilling its payment obligations in respect of accepted payments, the Company uses a special account opened with a bank of the Republic of Belarus.

The Company is entitled to provide Users with the information required to make payments and to accept such payments through the payment website of the acquiring bank, as well as to implement the payment acceptance function through the use of technical and technological solutions on its website https://market.platio.by/.

5.1. The model of interaction between the Company and acquiring banks in the provision of payment services provides that processing is carried out by the processing centres of the acquiring bank, while the Company performs payment initiation and provides payment information services.

5.2. AML/CFT measures are taken by acquiring banks, issuing banks and other persons carrying out financial transactions in accordance with the legislation of the Republic of Belarus.

6.1. Payment information services include the provision of the information required to make a payment using a bank payment card, and the collection, processing, storage and provision of information on payments and payment transactions.

6.2. As part of the provision of information services, the Company provides reporting and (or) stores information on payments.

6.3. The Company has the right to access only the information the list of which is established by legislation and contracts with acquiring banks.

6.4. The Company is obliged to:

• comply with the requirements for the reliable and secure provision of payment information services;
• provide reporting and store information in accordance with legislation;
• ensure the authentication of Users;
• ensure that the hardware and software system complies with the requirements of the contracts concluded with acquiring banks.

7.1. The Company ensures the continuous operation and restoration of operability of the hardware and software system in the provision of payment services.

7.2. Payment services are provided around the clock, 24/7.

7.3. An Internet resource is connected to the hardware and software system on the basis of the payment agreement and (or) other contracts concluded with the service provider.

7.4. The Company supports the current version of the 3D-Secure technology.

7.5. The bank payment card holder is authenticated using the 3D-Secure technology.

7.6. The User's consent to a payment transaction is deemed obtained from the moment the mandatory details are entered and the “Pay” button is pressed.

7.7. Finality of a payment occurs at the moment the acquiring bank receives information on the successful execution of the payment instruction.

7.8. Irrevocability of a payment occurs at the moment the User is authenticated.

7.9. The maximum period for carrying out a payment transaction is determined by the rules of the payment systems, the acquiring bank and contracts.

7.10. The procedure for refunding funds is determined by legislation, the rules of the payment systems and the contracts concluded with service providers and acquiring banks.

7.11. The fact that a payment transaction has been carried out is confirmed by a card receipt generated in electronic form.

7.12. The bank payment card holder has the right to demand that a payment transaction be recognised as unauthorised in the cases provided for by legislation.

7.13. In order to ensure the continuity and reliability of the provision of payment services, the Company is entitled to apply measures of fraud monitoring, limitation of transactions, control of the compliance of Internet resources with the requirements of the acquiring bank, and other measures provided for by legislation and the rules of the payment systems.

7.14. Refund terms:

• a refund before the provision of the service has begun is made by contacting the Website Administration at the email address indicated on the Company's website;
• the request is considered within 5 business days;
• the refund is made to the card from which the payment was made;
• the time of receipt of the funds depends on the bank and the payment system.

7.15. The payment service provider is obliged to ensure the possibility of refunding funds to the payer in the cases established by the legislation of the Republic of Belarus.

8.1. When setting tariffs, the Company observes the principles of:

• charging remuneration only once for the same payment transaction;
• economic justification of each tariff;
• refunding to the User the full amount paid for the goods in the cases provided for by the contract.

8.2. Tariffs are payable for payment services actually provided.

8.3. Information on tariffs is set out in the payment agreement and (or) other contracts.

8.4. The parties are entitled to agree on a different tariff in a supplementary agreement.

8.5. The Company does not set currency exchange rates.

9.1. The Company applies a set of legal, organisational and technical measures aimed at ensuring the confidentiality, integrity, availability and safety of information.

9.2. The primary security objectives are:

• ensuring business continuity;
• ensuring the security of payment transactions;
• preventing threats to the Company's activities;
• protecting personal data;
• complying with the requirements of legislation and the PCI DSS standards.

9.3. The objects of information security are information assets, the realisation of threats against which may cause damage to the Company, its clients and Users.

9.4. The following may be used to ensure information security:

• monitoring of information security events;
• prevention of information leaks;
• intrusion detection and prevention;
• protection against malicious code;
• vulnerability scanning of the infrastructure;
• centralised access management;
• video surveillance and other software and hardware protection tools.

9.5. All internal documents of the Company in the field of information security are drawn up on the basis of the requirements of the legislation of the Republic of Belarus and the PCI DSS standard.

9.6. Information security is verified and assessed through internal and external audits, scans and inspections.

9.7. The User is obliged to observe measures to protect their payment instruments and authentication data.

9.8. The User is obliged to immediately report instances of unauthorised, incorrectly initiated or carried out payment transactions.

10.1. To perform settlement operations in respect of accepted payments, the Company engages a settlement centre.

10.2. To hold and record funds in respect of accepted payments, the Company uses a special account.

10.3. Funds held in the special account have a designated purpose and are not included in the Company's property.

10.4. The settlement centre is obliged to ensure settlement operations within the time limits established by legislation.

10.5. The Company transfers funds to recipients within the time limits established by the payment agreement and the legislation of the Republic of Belarus.

11.1. Non-performance or improper performance by the parties of their obligations under these Rules entails liability in accordance with these Rules, the contracts concluded and the legislation of the Republic of Belarus.

11.2. Losses incurred by the Company or Service Providers as a result of non-performance or improper performance of the terms of these Rules are subject to compensation by the party at fault.

11.3. The parties bear financial liability for the actions of their employees related to violation of the terms of these Rules.

11.4. The Company is not liable for late transfer of funds caused by the failure of the User or Service Provider to provide, or the late provision of, current details and other essential data.

Name

Platio Payment Technologies Limited Liability Company

Country of registration

Republic of Belarus

Reg. No.

193968526

Registration date

18.02.2026

UNP

193968526

Address

Minsk, Timiryazeva St. 121/3, room 21

Settlement account

BY36 POIS 3011 0184 0990 0193 3001

Bank

Paritetbank OJSC

BIC

POISBY2X

Website

https://market.platio.by/

Number in the register of payment service providers and the types of payment services they provide

112.193968526.0-0-3-4-0-0-0-0-9