Personal Data Processing Policy

1. Data Controller

SAYS (hereinafter — the "Organiser"), a legal entity registered in the Republic of Uzbekistan, Tashkent, acts as the data controller. Contact address: info@forum.uz.

2. Data We Collect

When registering for the Tashkent Fintech International Forum, we collect the following personal data:

• Full name
• Email address
• Phone number
• Organisation name and job title
• Participant category (professional, student, press, etc.)

3. Purposes of Processing

Personal data is processed for the following purposes:

• Registration and identification of forum participants
• Sending notifications, confirmations and informational materials about the forum
• Security screening in accordance with applicable legislation
• Processing payments for forum participation
• Generating participant badges and accreditation documents

4. Legal Basis

Processing is based on the consent of the data subject, given when completing the registration form. Consent may be withdrawn at any time by sending a request to info@forum.uz.

5. Data Retention

Personal data is retained for 3 (three) years from the end of the forum, after which it is deleted or anonymised unless otherwise required by the laws of the Republic of Uzbekistan.

6. Disclosure to Third Parties

The Organiser does not transfer personal data to third parties without the data subject's consent, except:

• Payment providers — solely for the purpose of processing transactions
• Government authorities — where required by law

7. Your Rights

You have the right to:

• Obtain information about the personal data being processed
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw your consent to processing

To exercise these rights, please send a written request to info@forum.uz.

8. Effective Date

This Policy takes effect on 1 January 2026 and remains in force until replaced or revoked by the Organiser.