GHL System Berhad Annual Report 2022

GHL SYSTEMS BERHAD 199401007361 (293040-D) ANNUAL REPORT 2022 ,&: 4645"*/"#*-*5: %*4$-0463&4 We have categorised all material sustainability matters under the four sustainability pillars, and have mapped each to the relevant stakeholder groups adopted SDGs as well as the management approach. 6/ 4%(T .BUFSJBM 4VTUBJOBCJMJUZ .BUUFST ,FZ 4UBLFIPMEFS (SPVQT ,FZ )JHIMJHIUT BOE .BOBHFNFOU "QQSPBDI $PSQPSBUF #VTJOFTT BOE *OUFHSJUZ $VTUPNFS %BUB 1SJWBDZ t $VTUPNFST 1. Periodic review of Privacy Statement with Board oversight and is publicly available to stakeholders. $ZCFS 4FDVSJUZ t 3FHVMBUPST Government 1. Compliance with the Payment Card Industry Security Standards Council (“PCISSC”). 2. Dedicated IT professionals with robust company policies/procedures. 3. Established a comprehensive playbook to identify and handle suspected cyber security threats. "OUJ .POFZ -BVOEFSJOH 1PMJDZ t 3FHVMBUPST Government t 4IBSFIPMEFST Investors 1. Reviewed and updated the Anti-Money Laundering, Anti- Terrorism Financing and Proceeds of Unlawful Activities Policy in 2022. 2. Periodic review of Policy with audits conducted, which did not identify any risk areas or non-compliance. 3. Comprehensive employee training on customer due diligence and detection of suspicious transactions. "OUJ #SJCFSZ BOE $PSSVQUJPO 1PMJDZ t 3FHVMBUPST Government t &NQMPZFFT 1. Review and updated Anti-Bribery and Corruption (“ABC”) Policy in 2022 to ensure alignment with Malaysian Anti-Corruption Commission (“MACC”). 2. Annual training on ABC Policy, with additional MACC training for GHL Malaysia employees. 3. Group-wide on-boarding assessment, with zero operational areas identified as high risk and zero incidents of corruption recorded. 8IJTUMFCMPXJOH 1PMJDZ t &NQMPZFFT 1. Review and updated the Whistleblowing Policy in 2022, with translations available in the respective language of GHL’s respective country of operations. 2. Received 5 reports through the whistleblowing channel in FY2022, which we have since investigated and action has been taken accordingly. $VTUPNFS %VF %JMJHFODF t $VTUPNFST 1. Established a Know-Your-Customer customer due diligence (“CDD”) procedure for customer identification and background check. 2. Conducted a review of the CDD process which uncovered a potential risk area that was amended promptly. SUSTAINABILITY STATEMENT CONT’D

RkJQdWJsaXNoZXIy NDgzMzc=