Lidio Payment Services Inc. (“Lidio”) has developed this policy to support the secure reporting of unethical, illegal, or suspicious situations identified within or outside the company, aiming to maintain high business ethics standards, ensure sustainable digital security, and fully comply with legal regulations.

The purpose of this policy is to ensure that reports made by employees, suppliers, business partners, and other stakeholders are evaluated objectively, promptly, fairly, and in accordance with confidentiality principles.

This policy covers:

• Lidio employees,
• Members of the Board of Directors,
• Suppliers, business partners, and subcontractors,
• Third-party service providers,
• All stakeholders engaged in business relations with Lidio.

Individuals within the scope of this policy may report any misconduct, corruption, ethics violations, conflicts of interest, bribery, information security breaches, confidentiality breaches, or any illegal activities.

Reports of ethical violations and misconduct can be submitted through the following channels, based on confidentiality and security principles:

• Email: [email protected]
• Web Form: The “Ethics and Reporting Line” page on the company website

All channels are accessible 24/7, and reports are evaluated solely by the authorized Internal Control Unit.

To ensure that reports are evaluated more effectively, please provide as much of the following information as possible:

• Details of when, where, by whom and how the incident occurred,
• Any evidence related to the violation (emails, documents, witnesses, etc.),
• Opinions regarding the likelihood of recurrence or associated risks,
• Identities of the relevant individual(s), if known, should be included in the report.

Reports can also be submitted anonymously. However, providing your name and contact information helps ensure a faster and more accurate evaluation process

• All reports are protected within the framework of the privacy principle.
• The identity of the reporting individuals will not be shared with third parties without their express consent.
• Reporters are guaranteed not to be negatively impacted in any way regarding their employment contracts, promotions, salaries, or similar matters.
• Personal data is processed and stored in accordance with the provisions of the KVKK and relevant legislation.

1. Submission: When a report is received through the relevant channels, it is recorded by the Internal Control Unit.
2. Preliminary Review: The scope, validity, and priority of the report are evaluated.
3. Investigation: If necessary, evidence is collected, relevant individuals are consulted, and internal review processes are initiated.
4. Conclusion: Actions to be taken based on the investigation (corrective measures, disciplinary actions, legal notifications, etc.) are determined.
5. Feedback: When possible, the reporter is provided with feedback on the process.
6. Reporting: Results are shared with the Board of Directors or relevant authorities when necessary.