Third-Party Service Providers and Outsourcing Statement

Introduction

Rain MENA FZE (the "Company") is licensed by the Virtual Assets Regulatory Authority ("VARA") in the Emirate of Dubai, United Arab Emirates as a Virtual Asset Service Provider (“VASP”). In performing its Regulated Activities, the Company engages certain group entities and third-party service providers to support its operations.

This page sets out the Company’s current intragroup outsourcing arrangements and third-party service provider relationships, in the interest of transparency and in accordance with applicable regulatory requirements.

All third-party and outsourcing relationships are governed by written agreements that contain, where applicable, appropriate data privacy and protection clauses, confidentiality obligations, and service level commitments.

Section A: Intragroup Outsourcing Partners

The following Rain group entities provide outsourced functions to the Company pursuant to intragroup service level agreements:

• Rain Management WLL
• Rain Technology Services Limited
• Rain Trading Limited
• Rain Financial Saudi for Information Systems Technology

Section B: Third-Party Service Providers

The following external third-party service providers are engaged by the Company in connection with its operations:

• FalconX Limited - Liquidity Provider
• Checkout MENA FZ-LLC - Payment Service Provider
• Worldpay - Payment Service Provider
• Zand Bank PJSC - Banking Partner
• BitGo Custody MENA FZE - Digital Asset Custody
• Chainalysis Inc. - Virtual Asset Transaction Monitoring
• Uqudo Technology Limited - Identity Verification
• Grant Thornton Audit and Accounting Limited - External Auditor
• Refinitiv (World-Check) - Sanctions, Adverse Media, and PEP screening
• Relm Insurance MENA Ltd. - Insurance Services
• Forter Solutions UK Ltd - Card Fraud Prevention
• Notabene ID GmbH - Travel Rule Compliance

Data Protection

Where a third-party service provider or outsourcing partner has access to the personal data of the Company’s clients, the Company ensures that the relevant service agreement contains appropriate data privacy and protection obligations. These obligations require that any personal data shared is handled securely and used solely for the agreed business purposes.

For further information on how Rain collects, processes, and protects your personal data, please refer to the Company’s Privacy Policy.