Whistleblowing System

The whistle-blowing program of Cathay Financial Group is intended to promote the culture of integrity and transparency and to enhance the safety and soundness of the Group. If you discover any criminal conduct, fraud, or legal violations involving Cathay Group personnel and report such conduct to the Company, it is deemed that you have fully understood and consented to the content of Cathay FHC's Notice on the Collection, Processing, and Use of Personal Data (as detailed in the "Cathay Financial Holdings Whistleblower Form"). You may freely choose whether to provide personal data; however, if you refuse to do so, the Company may be unable to conduct necessary investigations or inform you of the handling results.

The Company has established Group-level reporting channels under the whistleblowing reporting, available to both internal and external whistleblowers. The subject of a whistleblowing report may be any personnel of Cathay Financial Group. Current whistleblowing channels include：

1. Reporting Letter
   Recipient: Compliance Division — Whistleblowing Cases
   Address: 16F, No. 296, Section 4, Ren'ai Road, Da’an District, Taipei City
   
2. Reporting Email
   Group reporting Email : group@cathayholdings.com.tw
3. Reporting Hotline
   Phone: +886-2-27005228
   Service Hours: Monday to Friday (excluding national holidays), 9:00 AM – 6:00 PM
   Language: Primarily Mandarin
   If the whistleblower submits a report via hotline, to clarify the content and avoid disputes, the Company may request the whistleblower to complete the Cathay Financial Holdings Whistleblower Form or provide necessary supplementary written information.

To facilitate case response and investigation, whistleblowers are requested to complete the Cathay Financial Holdings Whistleblower Form and provide the following information for verification. If the facts provided are sufficiently specific to allow verification, the Company may accept and file the case. The Company may reject cases involving false identities, matters not involving legal violations, or malicious, false, non-specific, defamatory, or threatening content.

1. Whistleblower’s real name and contact information.
2. Name, department, position, or other identifiable information of the accused.
3. Factual details of the alleged misconduct, including occurrence time and location, along with supporting evidence for investigation.

All documents related to whistleblowing cases must be handled with appropriate confidentiality measures. All involved personnel—including those assisting with the investigation from relevant departments—are required to strictly uphold confidentiality obligations.

All relevant materials and records of whistleblowing cases are retained for five years.

To promote sound corporate social responsibility and a culture of integrity, and to ensure all employees understand the whistleblowing program, available channels, procedures, and protection principles, the Company conducts annual whistleblowing program training and awareness campaigns.

If the investigation leads to the conclusion that an illegal or fraudulent act has been committed,, the Company shall take appropriate disciplinary actions in accordance with rules of the company on employees and related personnel who have committed the illegal or fraudulent act.