The Bank has established a whistleblowing policy applicable to:

1.employees of the Bank

2.former employees of the Bank

3.prospective employees of the Bank who have engaged in the recruitment process or other pre-contractual negotiations

4.shareholders and members of the administrative, management or supervisory body of the Bank, including non-executive members, as well as volunteers and paid or unpaid interns

5.individuals working under the supervision and direction of contractors, subcontractors and suppliers of the Bank

6.third parties who have a connection with (1) – (5), who may be at risk of retaliation in a professional context, such as colleagues or relatives of (1) – (5)

Any individual of the categories above who becomes aware of any violations including the following matters or any attempt deliberately to conceal the following matters, may make a disclosure on a confidential basis via the communication channel without fear of reprisal or retaliation of any kind:

1.Breaches of legal and regulatory requirements by the Bank, including the committal of a criminal offence, a miscarriage of justice or a failure to comply with a legal obligation

2.Failure to adopt policies consistent with the Bank of China group policies

3.Fraud or deliberate error in the preparation, evaluation, review or audit of any financial statement of any office of the Bank

4.Fraud or deliberate error in the recording and maintaining of financial records of any office of the Bank

5.Deficiencies in or non-compliance with any Bank's internal accounting controls

6.Deviation from full and fair reporting of any Bank's financial condition

7.Misrepresentation or false statement to or by a member of General Management or Accountant regarding a matter contained in the financial records, financial reports or audit of the Bank

8.The health and safety of an individual being endangered or the environment being damaged.

Means to report

In-scope individuals with no access to the internal system are encouraged to use the dedicated mailbox established by the Bank to submitting reports: whistleblowing@bankofchina.com

The mailbox is managed by the Compliance function of the Bank – all information received in this mailbox will be treated with the utmost confidentiality and in compliance with the General Data Protection Regulation (“GDPR”).

In addition to the above, employees of the Bank could also refer to the internal “Compliance Disclosure Policy” for additional reporting channels.

Furthermore, in-scope individuals can choose to make external reports to the relevant authorities in Luxembourg. Specifically, the reporting details for the CSSF are outlined as follows:

Link: https://cssf.lu/en/Document/whistleblowing/

Email: whistleblowing@cssf.lu