Marketing Information Consent Notice

Effective date: August 13, 2026

Personal information controller: Crosshub Co., Ltd.

Service: Travel Pass

At the user's option, Crosshub Co., Ltd. (the "Company") may use personal information for marketing purposes and send commercial information to provide Travel Pass users with information about events, promotions, discounts and coupons, new services, and other benefits.

Use of personal information for marketing purposes and receipt of commercial information are optional. Refusing or later withdrawing consent does not affect use of the basic Travel Pass service.

This page explains the use of personal information for marketing purposes and receipt of commercial information in Travel Pass.

This webpage does not itself obtain consent to marketing or receipt of commercial information.

Where actual consent is required, the Company separately provides the relevant information and obtains consent at the user's option during use of the service, such as in the Travel Pass app.

1. Use of Personal Information for Marketing Purposes

If the user gives separate consent, the Company may use personal information for the following purposes.

Purpose of Use

• Notices of Travel Pass events and promotions
• Notices of discounts, coupons, and other benefits
• Notices of new services and features
• Promotion of Travel Pass products or services
• Notices of partner services and partner promotions
• Notices of service benefits offered to users
• Other marketing and advertising information relating to Travel Pass

Personal Information Used

To the extent necessary to provide marketing and advertising, the Company may use the following personal information.

• Email address
• Internal service member identifier
• Push token
• Language settings
• The minimum member information already lawfully processed by the Company that is necessary to provide marketing, such as the user's name

The Company generally does not use personal information unnecessary for marketing purposes.

In particular, the following information is not used for ordinary marketing or advertising purposes.

• Passport number
• Alien registration number
• Domestic residence-report number
• Original passport or identity-document image
• Facial image or video
• Biometric information such as facial-feature information
• Original eKYC information
• Full card number
• CVC/CVV
• Detailed merchant transaction history for card use

If the Company introduces personalized marketing using card-use history, location information, or other usage behavior in the future, it will separately review the lawful basis for that processing and carry out any additional notice and consent procedures required under applicable laws.

Retention and Use Period

Personal information used for marketing purposes is used until the earliest of the following.

• The user withdraws consent to use personal information for marketing purposes
• The user withdraws from membership
• The need to use the personal information for marketing purposes ends

Where a separate retention obligation applies under applicable laws, the Company may retain the information to the extent and for the period prescribed by those laws.

2. Receipt of Commercial Information

If the user has given prior explicit consent, the Company may send commercial information for profit-making purposes using electronic transmission media.

Commercial information may include the following.

• Discounts and promotions
• Events
• Coupons and usage benefits
• New products and services
• New features
• Travel Pass promotions
• Partner services and partner promotions
• Other commercial information concerning Travel Pass products or services

Users may freely choose whether to receive commercial information.

3. Methods of Sending Commercial Information

The primary methods through which Travel Pass sends commercial information are as follows.

Email

The Company may send commercial information, such as events, discounts, coupons, new services, and promotions, by email to users who have consented to receive commercial information by email.

App Push

The Company may send commercial information, such as events, discounts, coupons, new services, and promotions, by push notification to users who have consented to receive commercial information by app push.

Consent to receive commercial information by email and app push may be managed separately. Refusing commercial information through one method does not affect the consent status for another method.

If the Company adds SMS, MMS, or another method of sending commercial information in the future, it will apply the necessary consent and notice procedures before actual transmission.

4. How Actual Consent Is Obtained

Where necessary to provide marketing and commercial information, the Company provides an option in the Travel Pass app or another service interface for users to select the following items individually.

• Use of personal information for marketing and advertising
• Receipt of commercial information by email
• Receipt of commercial information by app push

Even if an all-consent function is provided, the Company enables users to review and select each consent item individually.

Each consent is optional, and refusing consent does not affect use of the basic Travel Pass service.

5. Distinguishing Commercial Information from Essential Service Information

The Company separately handles commercial information and notices necessary to provide Travel Pass services.

The following information may be sent to the extent necessary to provide the service and protect the user's rights and property regardless of marketing consent status.

• Account registration and account-related notices
• Email verification
• Sign-in and security notices
• Password change and account-protection notices
• Notices relating to identity verification and eKYC processing
• Notices relating to card application, issuance, collection, and registration
• Notices relating to card loss, suspension, and reactivation
• Results of top-ups, payments, cancellations, and refunds
• Notices relating to transaction errors or unusual transactions
• Service outage and maintenance notices
• Notices of material changes to the Terms of Use or Privacy Policy
• Matters that must be notified to users under applicable laws
• Other information necessary to enter into or perform the service agreement and protect users

However, even where a service-notice format is used, relevant standards for commercial information apply if it includes commercial content, such as encouraging use of a product or service or participation in an event or promotion.

6. Commercial Information at Night

If the Company intends to send commercial information using electronic transmission media other than email between 9:00 p.m. and 8:00 a.m. the following day, it obtains any separate prior consent required under applicable laws.

The Company does not send nighttime commercial information, including app push notifications, during that period to users who have not provided separate consent to receive nighttime commercial information.

Email is excluded from the separate-prior-consent requirement for nighttime commercial information under applicable laws, but the Company reasonably manages the time commercial emails are sent to avoid unnecessary inconvenience to users.

7. Marking Commercial Information

When sending commercial information, the Company marks it in the manner prescribed by applicable laws so users can easily identify it as commercial information.

Where required by applicable laws, commercial information includes the following.

• An indication that the information is commercial information
• Name of the sender
• Contact information of the sender
• Method for opting out or withdrawing consent to receive the information

The Company provides a method for users to easily opt out or withdraw consent to receive commercial information.

The Company does not use methods that avoid or obstruct opt-out or withdrawal of consent.

8. Withdrawal of Consent and Opting Out of Commercial Information

Users may withdraw consent to use personal information for marketing purposes or opt out of receiving commercial information at any time.

The Company plans to provide the following methods.

Travel Pass App

`Settings → Notification and Marketing Settings`

The menu will enable users to change the following items individually.

• Use of personal information for marketing purposes
• Receipt of commercial information by email
• Receipt of commercial information by app push

Email

Users may opt out of commercial emails through the opt-out or unsubscribe function included in a commercial email.

App Push

Users may restrict push notifications through Travel Pass marketing settings or notification settings in the device operating system.

Customer Support

• Telephone: +82-2-780-9930
• Email: contact@travelpass.cards

When a user opts out of commercial information or withdraws consent to receive it, the Company stops sending that commercial information in accordance with applicable laws.

9. Results of Processing Consent, Opt-Out, and Withdrawal

If a user indicates consent to receive commercial information, an opt-out, or withdrawal of consent, the Company will notify the user of the processing result within 14 days from the date the user indicated that intention.

The processing result includes the following matters in accordance with applicable laws.

• Name of Crosshub Co., Ltd., the sender
• The user's consent, opt-out, or withdrawal of consent
• Date the user indicated that intention
• Processing result

10. Periodic Confirmation of Consent Status

For users who have given prior consent to receive commercial information, the Company confirms whether the user continues to consent every two years from the date consent was obtained.

During periodic confirmation, the Company provides the user with the following information.

• Name of Crosshub Co., Ltd.
• The fact that the user consented to receive commercial information
• Date the user consented to receive commercial information
• Method to maintain or withdraw consent

11. Advertising Relating to Partners

If the Company directly sends promotional information about a partner's product or service in the name of Travel Pass or Crosshub Co., Ltd., it may do so within the scope of the user's consent to receive marketing and commercial information.

However, if the Company provides the user's personal information to a partner so that the partner can directly send advertising or marketing information to the user, this Marketing and Commercial Information Consent alone does not authorize provision of personal information to the partner.

Where such third-party provision is necessary, the Company reviews the lawful basis recognized by applicable laws and, if separate consent is required, provides the following information and obtains consent before the personal information is actually provided.

• Recipient of personal information
• Purpose of provision
• Personal information provided
• Retention and use period
• Matters concerning refusal of consent

12. Right to Refuse Consent

Users have the right not to consent to use of personal information for marketing purposes and receipt of commercial information.

Refusing consent or later withdrawing consent does not affect use of the following basic Travel Pass services.

• Account registration and sign-in
• Identity verification and eKYC
• Card registration and management
• Top-ups
• Balance and transaction-history enquiries
• Payment-related services
• Cancellations and refunds
• Other basic Travel Pass services

However, the user may not receive marketing information, such as events, discounts, coupons, and promotions.

13. Protection of Personal Information Relating to Marketing and Commercial Information

When processing personal information for marketing and advertising, the Company uses it only to the minimum extent necessary for that purpose.

The Company does not arbitrarily use personal information for a new marketing purpose to which the user has not consented.

If the Company intends to provide personalized marketing using the user's transaction history, location information, card-use information, or online behavioral information in the future, it will review the lawful basis for the processing and separately carry out any notice or consent procedure required under applicable laws.

Details concerning personal information processing are available in the Travel Pass Privacy Policy.

14. Relationship Between This Webpage and Actual Consent

This page discloses and explains the use of personal information for marketing purposes and receipt of commercial information in Travel Pass.

Viewing this webpage alone is not treated as consent to use personal information for marketing purposes or to receive commercial information.

Where actual consent to use personal information for marketing purposes or to receive commercial information is required, the Company separately provides the relevant information in the Travel Pass app or another service interface and gives users a method to clearly choose whether to consent.

15. Enquiries

Personal information controller: Crosshub Co., Ltd.

Chief Privacy Officer: Jaeseol Kim, Representative Director

Travel Pass Customer Support: +82-2-780-9930

Email: contact@travelpass.cards

Marketing and Commercial Information Consent Notice Change History

Marketing and Commercial Information Consent Notice version: v1.0