Disaster Recovery Plan

Business continuity and system recovery protocols.

1. Policy Statement

My Investment Markets (the "Company") has developed a Disaster Recovery Plan (DRP) to ensure that in case of a disaster or significant business disruption, business operations can continue and Company data can be protected. The Company recognizes the importance of being able to recover and resume operations, including technology support, in the event of a crisis or disaster, in order to meet its obligations to stakeholders. This DRP has been reviewed and approved by the Company's Board of Directors.

The DRP of the Company is designed to achieve the following objectives:

•Minimize the amount of time the business operations are disrupted due to a catastrophic event.

•Ensure that critical data and systems are protected and can be recovered quickly.

•Prioritize the safety and security of employees and customers.

•Help the organization maintain compliance with relevant laws, regulations, and industry standards.

2. Our Goal in DRP

My Investment Markets has developed a Disaster Recovery Plan (DRP) with the primary goal of quickly resuming operations in the event of any significant disruptions while minimizing any interruptions to the business.

As part of the DRP framework, the Company will ensure that the following information is maintained and accessible to all relevant employees:

•A list of Board members and staff who should be contacted immediately in case of an emergency, along with their emergency contact details.

•Contact information for all critical business partners and liquidity providers of the Company.

3. Backup Option

In order to mitigate the potential risks of primary trading server failure or shutdown, My Investment Markets has established a contingency plan that involves the deployment of a backup trading server that can be activated swiftly to ensure business continuity.

•Mobile System — This system allows clients to contact the Company by phone to obtain information about their trading accounts' status and place trades.

•Terminal/trading platform System — This system enables the Company's staff to access each liquidity provider's trading platforms, allowing them to monitor trading exposure and execute trades with the provider.

4. Schedule Monitoring

To ensure the Disaster Recovery Plan (DRP) for an organization remains effective, it is important to continuously monitor and improve it. This involves regular testing, reviewing and updating, tracking and evaluating, involving stakeholders, ensuring compliance, assessing risks, and conducting regular audits.

The Company's monitoring process also ensures:

•Technological systems and equipment used in its operations are functioning correctly.

•The liquidity feed provided to its clients accurately reflects the aggregated liquidity pool available from its liquidity providers.

•The market exposure on the client side is in full agreement with the market exposure on the side of the liquidity providers.

5. Sign of Red-Flag: Server & Price Feed

A. Trading Server facing Problem: In case of server shutdown or malfunction during trading hours, the Company will notify the IT and operations departments. Client orders will be accepted only via the telephone line, and clients will be informed through email and/or an online platform notification.

B. Price feed Inconsistency: If the Back office identifies discrepancies or interruptions in the price feed from the liquidity providers, the Back office will promptly notify the IT department. Clients will be informed of any errors in the price feed through email and platform notifications.

6. Exposure, Integrity & Record Storage

C. Trading Exposure: If there are discrepancies in the trading exposure, the Back office will promptly investigate and verify the problem and take corrective action.

D. Integrity and Competence: Each department will carry out their tasks within their area of expertise and responsibility.

E. Record Storage: The trading platform securely stores trade records on its internal servers, which are continuously monitored and protected by the Company. Daily backups are conducted at the close of business and stored on a physically secure server located in Mauritius.

7. Disclosure to Client & Action Taken

The Company is obligated to inform customers about the potential risks associated with trading. When a disaster strikes, the disaster recovery plan team follows these key steps:

•Activation: Formally declare the start of the recovery process and assign responsibilities.

•Assessment: Assess the extent of damage, identify data loss, and determine RTO and RPO for each system.

•Prioritisation: Prioritize recovery efforts based on the criticality of systems and data.

•Implementation: Restore systems, data, and operations.

•Testing: Test systems and processes to ensure they are functioning properly.

•Documentation: Document the recovery process and identify areas for improvement.

Table of Contents

SECTIONS7