OUR SUPPLY As an international company, we are interacting with people, companies and organizations outside the Ti- pico Group in all business areas. Our supply chain is less affected by direct procurements such as raw ma- terials and goods for production but rather shaped by indirect spendings on services, supporting the day to day business such as marketing, gaming, IT and affiliation services. Nevertheless, safe collaborations with suppliers following the same high standards as Tipico are important in order to guarantee the efficient flow of the business. We therefore expect suppliers to acknowledge our Supplier Code of Conduct, which is based on the standards of the UN Global values and thereby promotes ethical, social, environmental and economic progress. THE SELECTION PROCESS Whether it’s customers, partners, franchise part- ners, or suppliers - we are implementing guidelines and checks to guarantee safe relationships. These do not only include customer identity verification processes, but also due diligence on the franchise partners and vendors. Even charitable organizati- ons are asked for transparent information to gua- rantee that trust is never misused. “Know your busi- ness partners” processes and procedures reduce the risk in facilitating business with inappropriate business partners, especially from an anti-money laundering perspective. By verifying our partners and understanding their business, we increase our ability to pinpoint any potential risks. As a first ap- proach to supplier verification, a risk assessment is completed. This includes specific parameters such as jurisdiction, type of service, number of emp- loyees or monetary value of contracts, to name a few. Based on the risk assessment results, specific due diligence checks are carried out. As a part of these checks, we screen individuals and organiza- tions through an established compliance checking engine such as World Check by Thomson Reuters, which makes it possible to immediately identify suspicious results and take relevant actions. En- hanced due diligence (EDD) is subsequently trigge- red in case any suspicious result is met during the checks, always in accordance and agreed with the Money Laundering Officer (MLRO). We further implemented a contract signing process policy to ensure a structured, efficient and trans- parent process for contract signing requests. The target is to ensure that through a structured work- flow, every contract, order, commercial and service acquired, which passes through these stages, is appropriately reviewed, documented and correctly allocated to the applicable business unit. The poli- cy therefore describes the main rules and measu- res to fulfil the requirements for a contract to be signed. This includes legal, tax, finance, AML, data protection and compliance checks or requests of additional information. As for areas dealing with personal information, we follow a strict procurement data retention policy targeting all Group employees that are collecting and processing personal data of affiliates, vendors and suppliers. 50