PUBLIC OFFER

for the provision of payment services

This Public Offer (hereinafter referred to as the “Offer” and/or “Agreement”) constitutes an official public proposal by “OXUS PAY” Joint Stock Company, holding License No. 62 issued by the Central Bank of the Republic of Uzbekistan on December 28, 2024 (hereinafter referred to as “OXUS PAY” or the “Operator”), to enter into an agreement for the provision of payment services via the BARAKA service (hereinafter referred to as the “Service”).

The User’s utilization of the Service’s functionality by performing the first payment transaction or any other transaction provided for under this Offer constitutes full and unconditional acceptance of this Offer. From the moment such an action is performed, the Agreement is deemed concluded in electronic form and possesses the legal force of a written document.

In executing this Agreement, the Parties are guided by the effective legislation of the Republic of Uzbekistan.

1. TERMS AND DEFINITIONS USED IN THE OFFER

Identity Document (IDD) — a document proving the identity of an individual in accordance with the legislation of the Republic of Uzbekistan, or a document recognized as such for foreign citizens and stateless persons.

KYC Questionnaire — information and documents provided by the User for the purpose of identification, verification, risk assessment, and compliance with the requirements of the legislation of the Republic of Uzbekistan in the field of combating the laundering of proceeds from crime, financing of terrorism, and financing the proliferation of weapons of mass destruction.

Service — a software product and payment instrument named “BARAKA” or another software product and payment instrument of JSC “OXUS PAY” providing the User with the ability to make payments for services to Providers, perform funds transfers from one bank card to another, as well as execute other actions within the functionality of the Service.

Agreement/Contract — this Agreement, concluded through the acceptance of this Offer.

Client (User) — an individual who has joined this Offer. The terms “Client” and “User” are used interchangeably in this Offer.

Bank Card — a payment card (debit, credit, virtual) issued by an issuer that grants the cardholder the ability to perform payment transactions on a bank account online or via electronic terminals, as well as to receive cash or exchange currencies.

Beneficial Owner — an individual recognized as a beneficial owner in accordance with the legislation of the Republic of Uzbekistan in the field of combating the laundering of proceeds from crime, financing of terrorism, and financing the proliferation of weapons of mass destruction.

Transfer — a non-cash money transfer executed between bank accounts based on an order from the Service User.

Payment Transaction — a transaction for paying for the services of Providers, performed by the User through the Service, resulting in the debiting of funds from the User’s bank card. Payments are only possible to those Providers whose names are displayed in the corresponding menu of the Service.

Provider — a legal entity selling goods, works, or services to a subscriber/client/buyer on the basis of a relevant contract.

Identification — a set of measures aimed at establishing the identity of the User through the analysis and verification of the personal data provided by them, using software, technical, organizational, and legal mechanisms provided by the Service’s functionality and effective legislation of the Republic of Uzbekistan. Identification is carried out by entering personal data, uploading identity documents, and applying other authentication methods required to provide access to certain Services and perform relevant transactions.

Operator’s Tariffs — documents approved by the Operator that determine the financial and other conditions of service for Users. The Operator’s Tariffs are posted on the Operator’s Website and form an integral part of the Offer. The list of fees and commissions is set out in Annex No. 1 to this Offer.

SPC (State Personalization Center) — an authorized state organization maintaining centralized records of information on individuals of the Republic of Uzbekistan (surname, first name, patronymic, date of birth, PINFL, IDD details, permanent registration address). SPC data is used by the Operator and the issuing bank to issue (emiss) the card, personalize it, and organize its delivery.

Independent (Voluntary) Registration — registration of the User in the “Baraka” mobile application, carried out by the User on their own initiative, without the participation of an agent, based on an application (electronic request) generated by the User in the application. The details specified in such an application are verified against SPC data.

Registered Number — the mobile phone number specified by the User during registration and confirmed via SMS code, linked to the User’s account and used as a means of access to the Service and a means of confirming transactions.

Number Change — the replacement of the Registered Number with another mobile phone number, performed in the manner prescribed in Section 11 of this Offer.

2. PROCEDURE FOR ACCEPTANCE

2.1. Acceptance of this public Offer is defined as the User performing the first payment transaction or another transaction using the Service’s functionality, which becomes available after registration and (if necessary) passing identification. From the moment such a transaction is performed, the Agreement is considered concluded.

2.2. To gain access to the Service’s functionality, the User undergoes a registration procedure by specifying a mobile phone number and confirming it via an SMS code sent by JSC “OXUS PAY”. Passing registration and confirming the phone number are technical identification (authentication) procedures for the User and do not in themselves constitute acceptance of this Offer.

2.3. In case of disagreement with the terms of this public Offer, the User must immediately cease using the Service and refrain from performing any actions aimed at accepting this Offer.

2.4. By accepting the Offer, the User confirms their full and unconditional agreement with the terms of the Agreement, the Operator’s Tariffs, the Providers’ Tariffs, and the Banks’ Tariffs, and assumes the obligation to properly perform them.

2.5. Since the Offer is a public contract, the cost of services is set equally for all Users, except in cases provided for by the legislation of the Republic of Uzbekistan. Amendments and/or additions to the Agreement, including Annexes, the number and composition of Annexes, as well as the Operator’s Tariffs, may be initiated only by the Operator in accordance with Paragraph 1 of Article 382 of the Civil Code of the Republic of Uzbekistan.

2.6. The Operator has the right to introduce amendments and/or additions to the Offer, including the Annexes, and the Operator’s Tariffs, due to changes in effective legislation of the Republic of Uzbekistan and/or at the Operator’s discretion.

2.7. The Operator shall notify the User of any new (amended) version of the Offer, Annexes, and Operator’s Tariffs at least 10 calendar days prior to the effective date of the amendments, except for changes caused by amendments to the legislation of the Republic of Uzbekistan, the introduction of a new product, or a change in the name or registered/mailing address of the Operator. Notification may be sent via remote service, posted on the Operator’s website, or delivered by another method chosen by the Operator.

2.8. If the User has not submitted a written application to terminate the Agreement prior to the effective date of the changes, this signifies the Client’s unconditional consent to the introduced changes. The written form of the Agreement on amendments shall be deemed observed in accordance with Article 366 of the Civil Code of the Republic of Uzbekistan.

2.9. Additional confirmation of the User’s consent to the changes is demonstrated by executing transactions/submitting a request after the changes take effect.

2.10. Upon registration, as well as upon the first login to the Service following the approval of a new version of the Offer, the text of this Offer is displayed to the User along with a separate checkbox, which must be checked by the User manually. Checking this box means that the User has read, understands, and agrees that:

Cards (virtual and physical plastic) are issued and delivered based on SPC data;
User details are taken from the application (electronic request) generated by the User during independent (voluntary) registration in the “Baraka” mobile application and are verified against SPC data.

2.11. The fact of checking the box provided for in Paragraph 2.10 of this Offer is recorded by the Operator in an electronic log specifying the date, time, version (edition) of the Offer, Registered Number, PINFL, and device identifier of the User. This record is recognized by the Parties as proper and sufficient proof of the User’s acquaintance with the terms of this Offer and expression of consent. Access to the corresponding functionality of the Service is not granted without checking this box.

3. SUBJECT OF THE OFFER

3.1. The Operator provides the User with the ability to make payments and money transfers, and to view balance information of Cards linked to the Service online.

3.2. Using the Service, the User is provided with the ability to perform the following actions:

Pay for goods, works, and services of Providers online;
Manage bank cards, including adding and removing them;
Perform money transfers from one bank card to another online;
Open a virtual card registered in the payment systems of the Republic of Uzbekistan in the Baraka Citizen App (Superapp) mobile application for payment purposes;
Accept payments from Users for services related to the issuance (opening) of a physical plastic card through partner banks, as well as for services related to organizing the delivery of plastic cards via the courier service of the corresponding bank to the address specified by the User in the electronic application (Annex No. 2);

Use other features implemented within the functionality of the Service.

3.3. The Service may contain separate services provided on a paid basis. Activation of such services is performed by the User independently, subject to prior review of the relevant public offer containing a description of the service, its cost, and operating terms.

3.4. By accepting this Offer, the User grants consent to the Operator to process their personal data to the extent necessary for concluding and executing this Agreement, providing payment services, and fulfilling the requirements of the legislation of the Republic of Uzbekistan, including legislation on combating the laundering of proceeds from crime, financing of terrorism, and financing the proliferation of weapons of mass destruction.

Consent remains valid during the term of this Agreement and after its termination for the periods established by the legislation of the Republic of Uzbekistan for storing relevant documents and information. The User is entitled to revoke consent in cases and in accordance with the procedure provided for by the legislation of the Republic of Uzbekistan, unless otherwise preventing the Operator from fulfilling duties imposed on it by law.
The Operator is entitled to transfer personal data only to entities participating in the execution of this Agreement, including issuing banks, acquiring banks, payment systems, processing centers, identification service providers, courier services (when providing the corresponding service), as well as state authorities in cases provided for by the legislation of the Republic of Uzbekistan.
Cross-border transfer of personal data is allowed exclusively in cases and procedures provided for by the legislation of the Republic of Uzbekistan, and only to the extent necessary for executing this Agreement.

3.5. The amounts of fees and commissions are determined by Annex No. 1 (“List of Fees and Commissions of the Operator”) to this Offer, the current version of which is posted on the official website of the Operator and in the Service interface.
3.6. When executing payments and transfers, the Operator provides purely technical and informational interaction between the User, the bank card issuer, and Providers. Full responsibility for debiting, crediting, and conducting relevant financial transactions rests with the issuing bank of the User’s card or the acquirer.
3.7. The User is notified that the Operator bears no obligation to cancel erroneously made payments conducted through the Service after the moment funds are debited, unless otherwise expressly provided by effective legislation. Responsibility in this case lies with the bank that issued the User’s Card, in accordance with the terms and procedure established in the respective offer/contract of said bank.
3.8. Issuance (emission) and delivery of the card are carried out based on SPC data and the User’s application data, whereby:

3.8.1. Surname, first name, patronymic, date of birth, PINFL, IDD details, and other identification information printed on the card and used during personalization are formed based on SPC data;

3.8.2. Information specified by the User during independent (voluntary) registration in the “Baraka” mobile application is used to the extent specified in the User’s application and is subject to verification against SPC data. In case of discrepancies, SPC data takes priority;

3.8.3. The delivery address of the physical plastic card is specified independently by the User in the electronic request (Annex No. 2) and does not alter SPC records;

3.8.4. The User is responsible for the accuracy and relevance of the SPC information concerning them. In case of outdated or inaccurate information, the User must independently contact the authorized state body to update it. The Operator and the issuing bank bear no liability for refusal to issue, delay in issuance, or impossibility of delivering the card caused by outdated, incomplete, or inaccurate SPC information, as well as data provided by the User in the application.

4. SPECIFIC FEATURES OF PROVIDING PAID SERVICES WITHIN THE SERVICE

4.1. When providing the User with the ability to execute Payments for Provider Services that entail a fee, such fee is withheld in excess of the amount payable under the respective Payment in favor of the Provider, in the amounts and manner specified in the relevant Service Interface in accordance with Annex No. 1 to this Offer.

4.1.1. Confirmation of the relevant transaction by the User means agreement with the terms of providing the specific paid service and the amount of the corresponding fee. Repeated acceptance of this Offer is not required, as the Agreement is already deemed concluded under Paragraph 2.1 of this Offer.

4.1.2. If the funds on the User’s card are insufficient to execute the Payment including the fee, such Payment shall not be carried out.

4.1.3. In cases where the Provider provides for the possibility of returning a Payment for its Services due to improper quality or other reasons defined by the Provider, the amount debited as a fee pursuant to Paragraph

4.1 of this Offer is non-refundable.

4.2. When providing the User with Operator Services that entail a fee, such fee is collected from the User by debiting funds from the Card linked by the User in favor of the Operator in the amounts defined in the relevant Service Interface in accordance with Annex No. 1 to this Offer.

4.2.1. Confirmation of payment by the User for Operator services or any other action in the Service functionality confirming activation of paid services constitutes full and unconditional acceptance of the terms of this Offer within the meaning of Article 370 of the Civil Code of the Republic of Uzbekistan.

4.2.2. If funds on the User’s bank card are insufficient to pay for Operator services, the deduction may be made from any available Card of the User added to the Service Interface within the required amount.

4.2.3. In case of insufficient funds to make a debit in accordance with Paragraph 4.2 of this Offer, the provision of the corresponding Operator service to the User shall be terminated.

5. RIGHTS AND OBLIGATIONS OF THE PARTIES

5.1. THE OPERATOR HAS THE RIGHT:

5.1.1. Unilaterally introduce amendments and/or additions to this Offer by approving and posting a new edition on the official website of the Operator. Such changes take effect in the manner and within the timeframes provided for in Section 2 and Section 10 of this Offer, including no earlier than 10 (ten) calendar days from the moment of notifying Users, unless another procedure or period is explicitly provided for by the legislation of the Republic of Uzbekistan or this Offer. Notification of Users is carried out through the methods specified in Paragraph 2.7 of this Offer.

5.1.2. Transfer rights and obligations under this Agreement to third parties for the purpose of its execution without additional approval from the User, provided that such transfer does not worsen the User’s position and does not violate the legislation of the Republic of Uzbekistan on personal data.

5.1.3. Provide paid and free services to the User, information about which is posted on the Service and on the official website of the Operator.

5.1.4. Restrict or temporarily block User access to the Service on technical or legal grounds (including court orders, requests from law enforcement agencies), or if there are suspicions that the User has violated the terms of the Agreement, until such circumstances are resolved.

5.1.5. Collect, process, and store statistical information about the use of the Service, as well as conduct surveys and other activities aimed at improving service quality and user experience.

5.1.6. In case of violation by the User of the terms of the Agreement or legal regulations of the Republic of Uzbekistan (including AML/CFT/CPF regulations), or if there are signs of fraud, temporarily restrict the User’s access to the Service or unilaterally terminate the Agreement, notifying the User via available contacts or other methods provided by law.

5.1.7. Unilaterally and temporarily block the use of the Service until circumstances are clarified, or terminate the Agreement at any time in case of suspecting fraudulent operations by the User, as well as in other cases provided for by the legislation of the Republic of Uzbekistan.

5.1.8. Conduct marketing promotions and loyalty programs, send offers to the User to participate in them, and use promotional and information materials, including targeted notifications, subject to User consent.

5.1.9. Inform the User upon detecting signs of fraud related to their account or transactions.

5.1.10. Request information and documents required to identify the User, the User’s Representative, or the Beneficial Owner, including those clarifying the grounds and goals of transactions entered into by the User, and in case of providing knowingly false documents or failing to provide requested documents, refuse to enter into the Agreement, conduct Transactions, or provide other services in cases provided for by Effective Legislation.

5.1.11. Upon expiration of the IDD validity period, independently on behalf of the User, obtain and update personal data from official sources or request documents and details to update information on the User, User’s Representative, or Beneficial Owners, as well as when doubts arise regarding the accuracy and precision of previously received information.

5.1.12. Debit amounts due to the Operator, as well as any amounts payable to the Operator (commissions, erroneously credited funds, etc.), without direct acceptance (direct debit) from the User’s bank cards.

5.1.13. Unilaterally refuse to execute the Client’s order in case an error made by the User and/or a third party is detected in payment details, or if the User fails to comply with formatting requirements for settlement documents established by regulatory acts of the Central Bank of the Republic of Uzbekistan.

5.1.14. Unilaterally refuse to conclude the Agreement based on legal requirements if there are suspicions that the Agreement’s purpose is to perform operations for money laundering, terrorism financing, or proliferation financing.

5.1.15. Unilaterally refuse (fully or partially) to conclude an Agreement with a foreign citizen if foreign legislation requires financial institutions to enter into a special agreement to monitor accounts opened by tax residents of that state in Uzbekistan, or if the User refuses to provide documents confirming or denying foreign citizenship/tax duties.

5.1.16. Unilaterally terminate this Agreement in accordance with Effective Legislation in the following cases:

Non-compliance of the transaction with information provided to the Operator or stated in the User’s KYC questionnaire;

If the operations performed by the User fall under economic sanctions.

5.1.17. Unilaterally block access to specific Transactions in the mobile application that require User Identification on the day following the expiration of the IDD, if the User fails to provide a new IDD or if the Operator cannot update/receive data from official sources.

5.1.18. Unilaterally, for the purpose of mitigating the risk of suspicious and/or doubtful Transactions via the mobile application:

5.1.19. Refuse to conclude or unilaterally terminate (fully or in part) the Agreement with a foreign individual if they refuse to supply data confirming or disproving foreign citizenship and tax obligations.

5.1.20. Set transaction limits; if the User’s order exceeds the limit, transactions will be processed according to established operation limits.

5.1.21. Refuse a Number Change, suspend its execution, or require additional identification as outlined in Section 11 of this Offer, and apply temporary restrictions on debit operations under Paragraph 11.7.

5.2. THE USER HAS THE RIGHT TO:

5.2.1. Use all features of the Service within the framework of the Agreement and the legislation of the Republic of Uzbekistan.

5.2.2. Receive information about tariffs, services, and operating terms of the Service prior to accepting the Offer or activating paid services.

5.2.3. Contact the Operator for advisory and technical support through the Call Center and other communication channels.

5.2.4. Revoke consent to the processing of personal data in accordance with the procedure established by the legislation of the Republic of Uzbekistan.

5.3. THE OPERATOR UNDERTAKES TO:

5.3.1. Properly fulfill the conditions of this Agreement.

5.3.2. Ensure the operational availability of the Service, except during periods of maintenance and technical work, of which the User shall be notified in advance if feasible.

5.3.3. Ensure the confidentiality of the User’s personal data and banking secrecy in accordance with the legislation of the Republic of Uzbekistan.

5.3.4. Provide information support through the Call Center and other communication channels during working hours.

5.3.5. Publish push notifications regarding significant events, including details about new Providers and changes to service conditions.

5.3.6. Take measures to reduce operational risks and ensure the safety of provided payment services, including multi-factor authentication and secure communication channels to combat fraud.

5.4. THE USER UNDERTAKES TO:

5.4.1. Use the Service exclusively for personal purposes and not use it for business activity unless otherwise provided by the Operator or law.

5.4.2. Maintain the confidentiality of the login, password, and other data used to access the account, and retain control over the phone number linked to the account.

5.4.3. Bear liability for the disclosure of confidential information and losses caused to the Operator and/or third parties due to the User’s fault.

5.4.4. Monitor push notifications, information in the Service, and on the Operator’s official website, executing contained instructions in a timely manner.

5.4.5. Refrain from transferring personal data and account credentials to third parties.

5.4.6. Immediately notify the Operator of any suspicion of unauthorized access, illegal account use, or loss of control over the phone number linked to the account.

5.4.7. Refrain from performing illegal financial transactions through the Service, including money laundering, terrorism financing, and other unlawful acts.

5.4.8. Upon detecting vulnerabilities, errors, crashes, or software bugs in the Service, immediately notify the Operator via any available channel and refrain from exploiting, distributing, or abusing such vulnerabilities for illicit gain or to cause harm to the Operator, other Users, or third parties.

5.4.9. Carefully read all messages, notices, SMS, and PUSH notifications sent by the Operator.

5.4.10. Exercise heightened caution and attention when confirming payment operations after receiving security alerts from the Operator.

5.4.11. Promptly, but no later than 1 (one) day, notify the Operator of the loss of the device used to access the Service, or if control over it was gained by third parties.

5.4.12. Notify the Operator within 1 (one) day from discovering any transaction executed without their consent.

5.4.13. Provide updated contact details and notify the Operator of any changes within 3 (three) days.

5.4.14. Upon the Operator’s request, provide information confirming whether a specific transaction was conducted independently or by a third party with their permission, as well as report fraud instances.

5.4.15. Regularly visit the relevant sections of the Operator’s Website (personally or through authorized representatives) to stay informed about amendments/additions to the Agreement or Tariffs. Late review of changes shall not serve as a basis for non-application by the Operator.

5.4.16. Initiate a Number Change pursuant to Section 11 immediately, but no later than 3 (three) calendar days after losing control of the Registered Number (including termination of mobile operator contract, loss, or SIM replacement). Do not use a phone number belonging to a third party as a Registered Number.

5.2. THE USER HAS THE RIGHT:

5.2.1. To utilize all functions of the Service within the framework of the terms of the Agreement and the legislation of the Republic of Uzbekistan.

5.2.2. To receive information regarding tariffs, services, and terms of use of the Service prior to the acceptance of the Offer or prior to the activation of paid services.

5.2.3. To contact the Operator for consulting and technical support through the Call Center and other communication channels.

5.2.4. To withdraw their consent for the processing of personal data in the manner established by the legislation of the Republic of Uzbekistan.

5.3. THE OPERATOR UNDERTAKES:

5.3.1. To duly perform the terms and conditions of this Agreement.

5.3.2. To ensure the operability of the Service, except during periods of preventive maintenance and technical work, of which the User shall be notified in advance, if such possibility exists.

5.3.3. To ensure the confidentiality of the User’s personal data and banking secrets in accordance with the legislation of the Republic of Uzbekistan.

5.3.4. To provide information support through the Call Center and other communication channels during business hours.

5.3.5. To publish push notifications regarding significant events, including information about new Suppliers and changes to the terms of service.

5.3.6. To take measures to reduce operational risks and ensure the security of the provided payment services, including the use of multi-factor authentication and secure communication channels for the purpose of combating fraud.

5.4. THE USER UNDERTAKES:

5.4.1. To use the Service exclusively for personal purposes and not to apply it for entrepreneurial activities, unless otherwise provided by the Operator or by legislation.

5.4.2. To ensure the confidentiality of the login, password, and other data used to access the account, as well as to maintain control over the phone number linked to the account.

5.4.3. To bear responsibility for the disclosure of confidential information and for any losses caused to the Operator

5.4.4. To monitor push notifications, information within the Service, and on the Operator’s official website, and to timely execute the instructions contained therein.

5.4.5. Not to disclose personal data or account access credentials to third parties.

5.4.6. To immediately notify the Operator of any suspicion of unauthorized access or illegal use of the account, as well as the loss of control over the phone number linked to the account.

5.4.7. Not to perform illegal financial transactions through the Service, including money laundering of criminal proceeds, financing of terrorism, or other unlawful acts.

5.4.8. In the event the User identifies vulnerabilities, errors, malfunctions, or other technical deficiencies in the operation of the Service (including software bugs), the User undertakes to immediately notify the Operator by any available means and to refrain from using, distributing, or otherwise abusing such vulnerabilities, errors, or malfunctions, including for the purpose of obtaining unlawful benefits or causing harm to the Operator, other Users, or third parties.

5.4.9. To carefully study all messages, notifications, SMS, and PUSH messages sent by the Operator (the User is informed by the Operator upon the discovery of signs of fraud).

5.4.10. To exercise increased caution and attentiveness when confirming any payment transactions after receiving such messages from the Operator.

5.4.11. To immediately, but no later than 1 (one) day, notify the Operator of the loss of the device used to access the Service, or of the establishment of control over it by third parties.

5.4.12. To notify the Operator within 1 (one) day from the moment of discovering the fact of a transaction performed without their consent.

5.4.13. To provide up-to-date contact details and notify the Operator of any changes thereto within 3 (three) days.

5.4.14. Upon the Operator’s request, to provide information as to whether a specific transaction was performed by them independently or by a third party on their instructions or with their voluntary consent, as well as to provide information regarding cases of fraud.

5.4.15. To regularly visit the relevant sections of the Operator’s Website, either independently or through authorized representatives, by any available means, for the purpose of timely obtaining information regarding amendments and/or supplements introduced to the Agreement and/or the Operator Tariffs. The User’s failure to familiarize themselves in a timely manner with the amendments and/or supplements introduced to the Agreement, the Operator Tariffs, and/or other documents shall not constitute grounds for their non-application by the Operator.

6. RULES FOR ENSURING THE CONFIDENTIALITY OF PERSONAL DATA

6.1. During registration and subsequent payment transactions via the Service, the Operator processes the User’s personal data. Such data may include, but is not limited to: banking details, surname, name, patronymic, passport details (or ID card info), mobile phone number, email address, device details, geolocation info, and other data necessary to render services and comply with legal requirements.

6.2. Personal data is provided by the User by entering information into relevant forms or transferred automatically during Service use with User consent.

6.3. The Operator does not transfer User personal data to third parties, except as provided by this Agreement, the Operator’s Personal Data Protection and Processing Policy, statutory requirements of Uzbekistan (including legal requests of state authorities), or with User consent.

6.4. The Parties undertake to implement necessary organizational and technical measures to protect User information, including personal data, against unauthorized or accidental access, destruction, modification, blocking, copying, distribution, or other unlawful acts.

6.5. The collection, systematization, accumulation, and storage of personal data of citizens of the Republic of Uzbekistan are carried out in personal data databases located on technical equipment within the territory of Uzbekistan. Cross-border transfer of certain personal data is permitted only in cases provided for by law and this Agreement, subject to compliance with data protection laws.

6.6. By accepting this Offer and checking the box under Paragraph 2.10, the User authorizes the Operator to receive, verify, and update their personal data from SPC systems and other official sources to the extent necessary for identification, card issuance, personalization, delivery, and legal compliance. Processing of such information is conducted in accordance with this Section and the Operator’s Privacy Policy.

7. LIABILITY OF THE PARTIES

7.1. The Parties bear liability for non-performance or improper performance of the Agreement in accordance with the legislation of the Republic of Uzbekistan.

7.2. The User is responsible for the accuracy of data specified during payments or transfers. If incorrect information is entered, the Operator is not liable for losses, and debited funds are non-refundable, except as provided by payment system rules or agreement with the recipient.

7.3. The User is responsible for maintaining the confidentiality of personal data and card details when using unsecure devices or connections.

7.4. The Operator is not liable for violations resulting from the User’s non-compliance with Agreement conditions or security guidelines.

7.5. The Operator is not liable for losses caused by the User’s failure to timely review changes to the Offer or Tariffs.

7.6. The Operator is not liable for losses related to the quality, content, or rendering of services by Providers, as the Operator acts solely as an intermediary in processing payments.

7.7. If an erroneous payment or transfer occurs due to the Operator’s fault, the Operator must transfer the funds to the recipient no later than the next business day. Otherwise, the User may demand a refund and penalty interest of 0.1% per day of delay, capped at 10%.

8. TERM AND TERMINATION OF THE OFFER

8.1. The Agreement is deemed concluded from the moment the User performs the actions specified in Paragraph 2.1 of this Offer and remains in effect indefinitely until terminated.

8.2. The User may terminate the Agreement at their own initiative by deleting their account in the Service.

8.3. The Operator has the right to unilaterally terminate the Agreement out of court, in whole or in part, in cases and in accordance with the procedure provided for by this Offer and the legislation of the Republic of Uzbekistan.

9. DISPUTE RESOLUTION PROCEDURE

9.1. This Agreement is governed by the legislation of the Republic of Uzbekistan.

9.2. All disputes and disagreements arising between the Parties under or in connection with this Offer shall be settled through negotiations with mandatory compliance with the pre-trial (claim) procedure. The deadline for considering a claim is 10 (ten) calendar days from the date of its receipt.

9.3. If a dispute cannot be resolved through negotiations within the specified period, all disagreements shall be submitted to court in accordance with the legislation of the Republic of Uzbekistan at the location of the Operator.

10. MISCELLANEOUS PROVISIONS

10.1. For matters not regulated by this Agreement, the Parties shall apply the norms of effective legislation of the Republic of Uzbekistan.

10.2. The procedure for amending this Offer is governed by Paragraphs 2.7–2.8. Amendments to Operator Tariffs are made according to the procedure defined in this section.

11. PROCEDURE FOR CHANGING THE REGISTERED MOBILE PHONE NUMBER

11.1. The Registered Number serves as the User’s means of access to the Service and authorization of transactions. The User’s account is tied to their PINFL. Changing the number does not alter the PINFL, terminate the active card, modify card details, or affect the payment of social benefits.

11.2. A Number Change is allowed exclusively for the same individual. Transferring an account to another person, including via Number Change, is prohibited.

11.3. The new mobile phone number must simultaneously meet the following requirements:

Be assigned by a mobile operator of the Republic of Uzbekistan;
Not be linked to another active account in the Service;
If technically feasible, be registered to the same subscriber (by the User’s PINFL).

11.4. A Number Change is performed in one of the following ways:

11.4.1. Independently in the “Baraka” mobile app — if the User has access to the Registered Number. The operation is confirmed via SMS code (OTP) sent to the Registered Number, an SMS code sent to the new number, and passing biometric identification (facial recognition);

11.4.2. If the User lacks access to the Registered Number (loss/replacement of SIM, contract termination) — by visiting a partner bank branch with an IDD and undergoing biometric verification.

11.5. The Operator or partner bank notifies the User of the Number Change via SMS and/or Push notification sent to the former Registered Number (if technical capabilities exist) and the new number, as well as the User’s email address (if available).

11.6. From the moment the Number Change is executed, the former Registered Number loses access to the account, all active sessions terminate, and previously trusted devices require re-confirmation.

11.7. To prevent fraud (including unauthorized SIM swaps), the Operator may restrict outgoing debit operations (P2P transfers, Provider payments, card delivery address edits) for 24 hours following a Number Change. This restriction does not apply to incoming transfers, balance checks, or transaction history.

11.8. A Number Change is permitted no more than 1 (one) time within 30 calendar days. The Operator may set additional yearly limits by publishing notice in the Service.

11.9. The Operator may refuse or suspend a Number Change if identification fails, data discrepancies arise, or fraud is suspected.

11.10. The cost of the Number Change service is determined in Annex No. 1.

11.11. Until the Number Change is completed, the risk of consequences from operations performed using the former number rests with the User, unless reported under Paragraphs 5.4.6 and 5.4.11.

12. REQUISITES (LEGAL DETAILS)

“Oxus Pay” JSC

TIN: 311682396

Address: 1 Yangi Zamon 3rd street, Mirobod district, Tashkent city, 100105, Republic of Uzbekistan

OKED (Activity code): 62010

Appendix No. 1

to the Public Offer of JSC “OXUS PAY” for the provision of payment services

List of commissions and remuneration of the Operator

No.	Service Name	Fee / Commission
1.	Registration in the application	0 UZS
2.	Issuance of a virtual card	0 UZS
3.	Primary physical card issuance	0 or 40,000 UZS (depending on User category)
4.	Secondary physical card issuance (in case of loss or damage)	40,000 UZS
5.	Payment in favor of Service Providers, including: — Mobile operators & Internet service providers — Digital & Cable TV — Utilities (electricity, gas, water, heating, waste disposal) — State services & payments (taxes, fines, duties, customs, registry office, notary) — Loan, credit & pawnshop repayments — Educational services (universities, schools, courses) — Medical services — Insurance — Transportation & parking — Kindergartens — Travel agencies — Installment repayments — Banking services — Other Provider services available in the Service	0% to 4% of the payment amount
6.	Card-to-Card Transfers (P2P): — Baraka → Baraka — Baraka → Uzcard / Humo — Uzcard / Humo → Baraka / Uzcard / Humo	0%0.7% 0.9%
7.	Top-up of electronic wallets	2% to 3% of the payment amount
8.	International services	0% to 10% of the payment amount
9.	Loan / microloan repayments	0% to 3.0% of the payment amount
10.	Monitoring of VISA Baraka cards (per month)	0 UZS
11.	Payment via unified QR code	0 UZS
12.	Payment for voluntary insurance via EPOS	1%
13.	Change of User’s mobile phone number (Registered Number)	0 UZS

ANNEX NO. 2

Form of User’s Electronic Request for Physical Plastic Card Issuance and Delivery

ELECTRONIC REQUEST

By filling out and submitting this electronic request via the information system (mobile application, website, or other electronic service) of JSC “OXUS PAY”, I hereby request the issuance of a physical plastic card in my name at JSC “_________” and the organization of its delivery to the address specified by me.

1. User Information

Full Name: _______________________

Date of Birth: ____________________

PINFL: ____________________________

Identity Document Series & Number: _______________________

Mobile Phone Number: ____________________

Email Address (if available): ____________________

2. Card Delivery Address

Region/Province: __________________

District (City): ____________________

Settlement/City: ___________________

Street: ____________________________

Building: ______ Apartment: ______

Additional Info for Courier: ______________________________

3. User Confirmation

By submitting this electronic request, I confirm that I:

Request JSC “_______ Bank” to issue (emiss) a physical plastic card in my name;

Authorize JSC “OXUS PAY” to organize the acceptance of payments related to issuing the card and organizing its delivery to the specified address;

Confirm the accuracy of provided details and take responsibility for their completeness;

Have read and agree to the terms of service, effective tariffs of JSC “______ Bank” and JSC “OXUS PAY”, and the Public Offer of JSC “OXUS PAY”;

Understand and agree that cards are issued and delivered based on State Personalization Center (SPC) data, and SPC data takes priority in case of discrepancies;

Confirm that the details specified herein were taken from the application generated during my voluntary registration in the “Baraka” app, and I accept liability for their accuracy;

Understand that if SPC data is outdated, I must independently contact the state body to update it, and neither JSC “OXUS PAY” nor the bank bears liability for delivery delays or issuance refusal caused by inaccurate SPC data;

Provide unconditional consent to debiting funds;

Confirm that prior to submitting this request, JSC “OXUS PAY” clearly informed me in writing that to ensure bank card security, it is strictly forbidden to share card expiry dates, CVV/CVC codes, PIN codes, OTP SMS codes, Push confirmation codes, passwords, logins, or other authentication credentials with third parties. I understand that sharing such information may lead to unauthorized fund debits and adverse consequences, liability for which is determined by law and this Offer.

By submitting this electronic request, I express my full, unconditional, and irrevocable consent (acceptance) for JSC “OXUS PAY” to debit funds from my selected payment instrument (bank card, e-wallet, etc.) in the amount necessary to execute this order, including:

JSC “OXUS PAY” commission for processing payment services;

JSC “_____ Bank” fees for card issuance;

Delivery service costs to the address specified in this request;

Other fees under active tariffs of JSC “______ Bank” and/or JSC “OXUS PAY”, provided they were disclosed prior to confirmation.

I confirm that the total amount to be debited is displayed prior to request confirmation, and my confirmation serves as sufficient authorization to debit funds without requiring additional consent.

4. Electronic Confirmation

By clicking “Confirm”, “Pay”, “Order Card”, or similar buttons in the system of JSC “OXUS PAY”, and confirming via SMS code, OTP, or Push notification, the User:

Signs this electronic request with a simple electronic signature;
Confirms agreement with all terms of this request;
Confirms agreement to card issuance, delivery organization, and fund debiting in accordance with this request and the Public Offer.