<table cellspacing="0" style="width:1000px"><tbody><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>What is Letter to CEO (LTC)?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>LTC is a channel for all Bank Mandiri&rsquo;s employees and other stakeholders to report any indication or act of fraud that occurs in the work environment. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Why should I report fraud / indications of fraud?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>To build Bank Mandiri as a work environment that is honest, fair, and safe for work. By reporting unethical actions, you would help us in protecting the Bank, customers, employees, and other parties from possible losses. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>How do I report?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>LTC provides the following reporting tools :</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;SMS and WA: 0811-900-7777</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Letter: PO BOX 1007 JKS 12007</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Email: <a href="https://whistleblowing.tips/wbs/@lettertoceo">bmri-lettertoceo@rsm.id</a> </big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Website: <a href="https://whistleblowing.tips/wbs/@lettertoceo">https://whistleblowing.tips/wbs/@bmri-lettertoceo</a> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>What should</strong><strong> I report?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>You can report various types of fraud indications or acts, including corruption, fraud, theft, embezzlement, and forgery, as well as non-fraud acts that include violations of internal and external provisions and code of conduct that occurs within Bank Mandiri, and/or using Bank Mandiri&rsquo;s facilities, which conducted by and/or involved Bank Mandiri&rsquo;s employees. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>What should I inform</strong><strong> in the r</strong><strong>eport?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>To make the information submitted followed up properly, you can provide the following information: </big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Type of violation</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Identity of the reported parties (full name, position, work unit)</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Date, time, and location of the incident</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;How the act was done</big></p><p><big>&nbsp; &nbsp;&bull;&nbsp;&nbsp;Attach evidence, if any, including the amount of money or assets involved.</big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Will there be an investigation process after the report is made?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>The investigation process will be carried out depending on several things, such as completeness of the reported information, accuracy in submitting the report of indication or act of fraud, and Bank Mandiri&rsquo;s policies. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Will I be involved in the case after I make a report?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>After you submit report, you will no longer be involved in this case. However, if you have additional information or new evidence, you can add it to your previous report. You can make a &quot;follow-up call&quot; by providing the reference number that was given when you made the first report. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Will I get any rewards or appreciation every time I make a report?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>There are no rewards or appreciation that will be given when you submit the LTC report. However, this shows your great contribution to Bank Mandiri and encourages the implementation of Corporate Governance. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>How many times can I report through LTC?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>You may report through LTC whenever you sense any indication or fraud and non-fraud acts that needs to be reported. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>What type of violations that can be reported?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>You can report various violations committed by Bank Mandiri employees such as corruption, fraud, theft, embezzlement, counterfeiting and violations of external and internal provisions and code of conduct. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Who is eligible to report such violations?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>The person who is eligible to report violations can be internal or external parties of Bank Mandiri. </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>Is there a guarantee of for the whistleblower</strong><strong> confidentiality</strong><strong>?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>As an embodiment of Bank Mandiri&#39;s commitment to maintain the confidentiality of reported data from unauthorized parties, Bank Mandiri will guarantee the confidentiality of the whistleblower&#39;s identity and the contents of submitted report.</big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big><strong>Q:</strong></big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big><strong>May I conceal</strong><strong> my </strong><strong>personal identity in reporting such issue?</strong> </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt"><p><big>A:</big></p></td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt"><p><big>We encourage you to provide a personal identity that includes, among others, your name, address, telephone number and e-mail. However, we offer you the option to reveal your identity or remain anonymous. The identity submitted is intended solely for the purpose of completing the report (if needed). </big></p></td></tr><tr><td style="background-color:white; height:14.17pt; vertical-align:top; width:23pt">&nbsp;</td><td style="background-color:white; height:14.17pt; vertical-align:top; width:408pt">&nbsp;</td></tr></tbody></table>