Common use of Your Liability for Unauthorized Transactions Clause in Contracts

Your Liability for Unauthorized Transactions. This section applies to unauthorized transactions involving Your username, password or security code and other unauthorized transactions. Notify Us AT ONCE if You believe that Your username, password or security code has been lost, stolen or has been learned by an unauthorized person. You acknowledge and agree that such notification must be initiated by calling (000) 000-0000 (Bask Bank Customer Support) followed by written confirmation. Furthermore, You acknowledge and agree that the written confirmation must be received by Us within ten (10) calendar days from the date of Your oral notification. If You assert that an unauthorized transfer may have occurred, or You believe Your username, password, or other security code has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effect. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately in the event that Your Mobile Device associated with the telephone number provided to Us to register for Mobile Banking Services is lost, stolen, changed or destroyed. You understand that with regard to SMS text messages, failure to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third party, or Your incurrence of SMS text messaging fees for SMS text messages You did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMS, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: (i) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL OR SMS TEXT MESSAGE FOR ANY PURPOSE. For any transactions processed through the VISA or MasterCard system, Your liability limits will differ from those set forth in this section. For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by law, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify Us within two (2) Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person, Your liability is up to $50 for an unauthorized Electronic Funds Transfer or series of related unauthorized Electronic Funds Transfers should someone use Your username, password or security code without Your permission. If You DO NOT notify Us within two (2) Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person of Your username, password or security code and We can prove that We could have stopped someone from using Your username, password or security code had You informed Us of the loss, theft or compromise thereof, Your liability could be as much as $500. Failure to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty (60) calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percent. We may extend the sixty (60) calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verification, We will extend the timeframe set forth herein to a timeframe deemed reasonable under such circumstances in accordance to Regulation E. In addition, unless prohibited by law, You agree to reimburse Us for any liability, loss, cost and expense We may incur in connection with Your Account except to the extent they are caused solely by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Services, or give the child Your username or password, You understand that You are responsible for all activity the child initiates from or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(s) or may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by law.

Your Liability for Unauthorized Transactions. This section applies to unauthorized transactions involving Your username, password or security code and other unauthorized transactions. Notify Us AT ONCE if You believe that Your username, password or security code has been lost, stolen or has been learned by an unauthorized person. You acknowledge and agree that such notification must be initiated by calling (000) 000-0000 (Bask Bank Customer Support) followed by written confirmation. Furthermore, You acknowledge and agree that the written confirmation must be received by Us within ten (10) 10 calendar days from the date of Your oral notification. If You assert that an unauthorized transfer may have occurred, or You believe Your username, password, password or other security code has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effect. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately in the event that Your Mobile Device associated with the telephone number provided to Us to register for Mobile Banking Services is lost, stolen, changed or destroyed. You understand that with regard to SMS text messages, failure to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third party, or Your incurrence of SMS text messaging fees for SMS text messages You did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMS, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: (i) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL EMAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL EMAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL EMAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL EMAIL OR SMS TEXT MESSAGE FOR ANY PURPOSE. For any transactions processed through the VISA or MasterCard system, Your liability limits will differ from those set forth in this section. For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by law, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify Us within two (2) Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person, Your liability is up to $50 for an unauthorized Electronic Funds Transfer or series of related unauthorized Electronic Funds Transfers should someone use Your username, password or security code without Your permission. If You DO NOT notify Us within two (2) 2 Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person of Your username, password or security code and We can prove that We could have stopped someone from using Your username, password or security code had You informed Us of the loss, theft or compromise thereof, Your liability could be as much as $500. Failure to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty (60) 60 calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percent. We may extend the sixty (60) 60 calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verification, We will extend the timeframe set forth herein to a timeframe deemed reasonable under such circumstances in accordance to Regulation E. In addition, unless prohibited by law, You agree to reimburse Us for any liability, loss, cost and expense We may incur in connection with Your Account except to the extent they are caused solely by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Services, or give the child Your username or password, You understand that You are responsible for all activity the child initiates from or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(s) or may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by law.

Your Liability for Unauthorized Transactions. This section applies to unauthorized transactions involving Your username, password or security code and other unauthorized transactions. Notify Us AT ONCE if ONCEif You believe that Your usernameYourusername, password or security code has been lost, stolen or has been learned by an unauthorized anunauthorized person. You acknowledge and agree that such notification must be initiated by calling (000) 000-0000 (Bask Bank Customer Support) followed .Youacknowledgeandagreethatsuchnotificationmustbeinitiatedbycalling833.260.4320(Bask BankCustomerSupport)followed by written confirmation. Furthermore, You acknowledge and agree that the written confirmation must be received by Us within ten (10) 10 calendar days from the date of Your oral notification. If You assert that an unauthorized transfer may have occurred, or You believe Your username, password, password or other security code has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effect. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately in the event that Your Mobile Device associated with the telephone number provided to Us to register for Mobile Banking Services is lost, stolen, changed or destroyed. You understand that with regard to SMS text messages, failure to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third party, or Your incurrence of SMS text messaging fees for SMS text messages You did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMS, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: (i) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL EMAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL EMAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL EMAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL EMAIL OR SMS TEXT MESSAGE FOR ANY PURPOSE. For any transactions processed through the VISA or MasterCard system, Your liability limits will differ from those set forth in this section. For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by law, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify Us within two (2) Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person, Your liability is up to $50 for an unauthorized Electronic Funds Transfer or series of related unauthorized Electronic Funds Transfers should someone use Your usernameshouldsomeoneuse Yourusername, password or security code without securitycodewithout Your permission. If You DO NOT notify Us within two (2) 2 Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person of Your username, password or security code and We can prove that We could have stopped someone from using Your username, password or security code had You informed Us of the loss, theft or compromise thereof, Your liability could be as much as $500. Failure to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty (60) 60 calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percent. We may extend the sixty (60) 60 calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verificationUponverification, We will extend the timeframe set forth setforth herein to a timeframe deemed reasonable under such circumstances undersuchcircumstances in accordance to Regulation E. In addition, unless prohibited by law, You agree to reimburse Us for any liability, loss, cost and expense We may incur in connection with Your Account except to the extent they are caused solely by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Services, or give the child Your username or password, You understand that You are responsible for all activity the child initiates from or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(s) or may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by law.

Your Liability for Unauthorized Transactions. This section applies (Applicable Only to Consumer Accounts) – You will be liable for unauthorized transactions involving Your usernameusing the Services to the extent allowed by applicable federal and state law, password this Agreement, and any other agreement applicable to the specific bank product or security code and other service affected by the unauthorized transactions. Notify Us Tell us AT ONCE if You you believe that Your username, password or security code has been lost, stolen or has been learned by an unauthorized person. You acknowledge and agree that such notification must be initiated by calling (000) 000-0000 (Bask Bank Customer Support) followed by written confirmation. Furthermore, You acknowledge and agree that the written confirmation must be received by Us within ten (10) calendar days from the date of Your oral notification. If You assert that an unauthorized transfer may have occurred, or You believe Your any username, password, or other security access code or authentication feature you use for the Services has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effectbeen lost or stolen or used without your permission. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately in Telephoning is the event that Your Mobile Device associated with the telephone number provided to Us to register for Mobile Banking Services is lost, stolen, changed or destroyedbest way of minimizing your possible losses. You understand should also tell us AT ONCE if your statement shows electronic transfers that with regard to SMS text messages, failure to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third party, or Your incurrence of SMS text messaging fees for SMS text messages You you did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMS, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: (i) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL OR SMS TEXT MESSAGE FOR ANY PURPOSEmake. For any transactions processed through consumer accounts: You could lose all the VISA or MasterCard system, Your liability limits will differ from those set forth money in this sectionyour Account (plus your maximum amounts under an overdraft line of credit and overdraft payment service). For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by lawHowever, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify Us you tell us within two (2) Business Days 2 business days after You you learn of the lossloss or theft of your username, theft password, or compromise thereof by an unauthorized person, Your liability is up to other access code or authentication feature you can lose no more than $50 for an unauthorized Electronic Funds Transfer if someone uses your Card, PIN, or series of related unauthorized Electronic Funds Transfers should someone use Your username, password or security code Passcode without Your your permission. If You DO you do NOT notify Us tell us within two (2) Business Days 2 business days after You you learn of the loss, loss or theft or compromise thereof by an unauthorized person of Your your username, password password, or security other access code or authentication feature and We we can prove that We we could have stopped someone from using Your your username, password password, or security other access code or authentication feature without your permission if you had You informed Us of the losstold us, theft or compromise thereof, Your liability you could be lose as much as $500. Failure Transfers shown on a statement that you do not believe you made are treated as “errors” that are subject to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty (60the error resolution process described in Section IV(4) calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percentabove. We are not required to investigate the alleged error or to refund any erroneous electronic transfers to your account if you do not tell us about the error within 60 days after we sent you the statement on which the transfer was first itemized. If a good reason (such as a long trip or a hospital stay) kept you from telling us, we may extend the sixty (60) calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verification, We will extend the timeframe set forth herein time for notice to a timeframe deemed reasonable under such circumstances in accordance to Regulation E. In additionperiod. For business accounts: Your liability for an unauthorized transfer will be governed by the account agreement, unless prohibited by lawcash management terms and conditions, You agree to reimburse Us for any liability, loss, cost and expense We may incur in connection with Your Account except or other contract provisions that apply to the extent they are caused solely particular account or bank product or service affected by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Services, or give the child Your username or password, You understand that You are responsible for all activity the child initiates from or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(s) or may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by lawunauthorized transfer.

Your Liability for Unauthorized Transactions. This section applies A transaction is unauthorized if it is not initiated by you, you did not give permission to unauthorized transactions involving Your usernamemake the transaction, password or security code and other unauthorized transactionsyou do not benefit from the transaction in any way. Notify Us AT ONCE if You believe that Your usernameIn all cases, password or security code has been lost, stolen or has been learned by our liability for an unauthorized persontransaction is limited to reimbursing you for the face amount of the unauthorized transaction and any corresponding fees, except as otherwise required by applicable law. You acknowledge and agree that such notification must be initiated by calling (000) 000-0000 (Bask Bank Customer Support) followed by written confirmation. Furthermore, You acknowledge and agree that the written confirmation must be received by Us within ten (10) calendar days from the date of Your oral notification. If You assert that an unauthorized transfer may have occurred, or You believe Your username, password, or other security code has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effect. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately suspend or cancel your Card or corresponding Transaction Account in the event that of excessive reports of Card loss or theft. If you become aware of, or your Transaction Account statement shows transactions you did not make, notify us at once utilizing the procedures documented in Section 16 (Your Mobile Device associated with Right to Dispute Errors) and you will not be liable for unauthorized uses for loss theft or unauthorized use of your Card, subject to the telephone number provided to Us to register for Mobile Banking Services is lost, stolen, changed or destroyedfollowing conditions. You understand that will not be held responsible for unauthorized transactions if: (1) You have used reasonable care in protecting your card from loss or theft; (2) You agree to cooperate completely with regard us and Servicer in attempts to SMS text messagesrecover funds from unauthorized users and to assist in their prosecution; and (3) You promptly reported loss or theft to your financial institution. However, failure we are unable to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by reimburse an unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if transaction if: (1) You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third party, or Your incurrence of SMS text messaging fees for SMS text messages You did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMS, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: notify us within sixty (i60) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL OR SMS TEXT MESSAGE FOR ANY PURPOSE. For any transactions processed through the VISA or MasterCard system, Your liability limits will differ from those set forth in this section. For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by law, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify Us within two (2) Business Days days after You learn you become aware of the losstransaction or after the statement was made available to you, theft or compromise thereof by an unauthorized person, Your liability is up to $50 for an unauthorized Electronic Funds Transfer or series of related unauthorized Electronic Funds Transfers should someone use Your username, password or security code without Your permission. If You DO NOT notify Us within two you may not get back any value you lost after the sixty (260) Business Days after You learn of the loss, theft or compromise thereof by an unauthorized person of Your username, password or security code and We days if we can prove that We we could have stopped someone from using Your usernametaking the value if you had notified us in time; (2) You share your Card(s) or PIN with another person, password use of your Transaction Account by that person as it may be considered as authorized; or security code had (3) You informed Us authorize another person to use your Card or Access Code(s), you agree that you will be liable for all transactions arising from use of the loss, theft Card or compromise thereof, Your liability could be Access Code(s) by such person except as much as $500. Failure to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty (60) calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percent. We may extend the sixty (60) calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verification, We will extend the timeframe set forth herein in this Agreement. Zero Liability does not apply to Mastercard payment cards that are used for commercial purposes. Pending the legitimacy of an unauthorized transaction claim, replacement funds may be provided on a timeframe deemed reasonable under such circumstances in accordance to Regulation E. In additionprovisional basis and may be withheld, unless prohibited by lawdelayed, You agree to reimburse Us for any liability, loss, cost and expense We may incur in connection with Your Account except to the extent they are caused solely by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Serviceslimited, or give the child Your username rescinded by your issuer based on gross negligence or passwordfraud, You understand that You are responsible for all activity the child initiates from a delay in reporting unauthorized use, an investigation and verification of a claim, and account standing and history. The Bank may deactivate or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(sreissue Card(s) or Access Code(s)to prevent future losses, but only after you have provided such proof and security or indemnification as the Bank may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by lawrequire.

Your Liability for Unauthorized Transactions. This section applies Using the Card, PIN, or Card Account Number: You agree to unauthorized transactions involving Your username, password or security code and other unauthorized transactions. Notify notify Us AT ONCE IMMEDIATELY if You you believe that Your username, password your Card or security code PIN has been lost, stolen stolen, compromised, or has been learned by an unauthorized personsubject to Unauthorized Use. Telephoning is the best way of keeping your possible losses down. You acknowledge and could lose all the money in your Deposit Accounts (plus any funds in an overdraft line of credit or sweep account). You agree that such notification must be initiated to take any reasonable actions We may request to prevent unauthorized Card use. You should provide this notice by calling (or writing us at: 0-000) -000-0000 (Bask Bank OR BBVA USA, Attention Customer Support) followed by written confirmationService, P.O. Box 10566, Birmingham, Alabama 35296. Furthermore, You acknowledge Telephoning is the best way to keep your possible losses down. For Unauthorized ATM and agree that the written confirmation must be received by Us within ten (10) calendar days from the date of Your oral notification. PIN Transactions: If You assert that an unauthorized transfer may have occurred, or You you believe Your username, password, or other security code your Card has become known to an unauthorized person, We may require You to sign a sworn statement/affidavit to that effect. If You have selected optional Mobile Banking Services, You understand that You are solely responsible for notifying Us immediately in the event that Your Mobile Device associated with the telephone number provided to Us to register for Mobile Banking Services is been lost, stolen, changed or destroyed. You understand that with regard to SMS text messages, failure to promptly notify Us may result in Your failure to receive important SMS text messages and/or the interception of such SMS text messages by unauthorized third parties. You may also incur SMS text messaging fees for such SMS text messages even if You do not receive them. You understand that We are not responsible for any costs, expenses, liabilities or damages that You incur as a result of Your failure to receive an SMS text message, the interception of any SMS text message by an unauthorized or other third partycompromised, or Your incurrence of SMS text messaging fees for SMS text messages You did not receive. YOU UNDERSTAND AND ACKNOWLEDGE THAT IN ADDITION TO ANY DISCLAIMERS OR LIMITATIONS OF LIABILITY AS OTHERWISE STATED IN THESE TERMSsubject to Unauthorized Use, IN OTHER AGREEMENTS BETWEEN THE PARTIES, OR PROVIDED BY LAW, WE SHALL NOT BE LIABLE FOR LOSSES OR DAMAGES ARISING FROM: (i) NON-DELIVERY, DELAYED DELIVERY OR WRONG DELIVERY OF ANY E-MAIL COMMUNICATION THAT YOU WOULD NORMALLY ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR OF ANY SMS TEXT MESSAGE NORMALLY SENT DIRECTLY TO YOUR MOBILE DEVICE; (ii) INACCURATE CONTENT IN ANY E-MAIL COMMUNICATION THAT YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR IN ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; (iii) ANY ACTIONS RESULTING FROM THE INTENTIONAL OR UNINTENTIONAL DISCLOSURE BY YOU TO ANY UNAUTHORIZED PERSON OF THE CONTENTS OF ANY E-MAIL COMMUNICATION YOU ACCESS VIA THE WEB BROWSER ON YOUR MOBILE DEVICE OR ANY SMS TEXT MESSAGE SENT DIRECTLY TO YOUR MOBILE DEVICE; OR YOUR USE OR RELIANCE ON THE CONTENTS OF ANY SUCH E-MAIL OR SMS TEXT MESSAGE FOR ANY PURPOSE. For any transactions processed through the VISA or MasterCard system, Your liability limits will differ from those set forth in this section. For certain transactions processed through the Visa or MasterCard system, You may have no liability if You report the unauthorized transactions to Us, in accordance with each network’s respective “zero liability” policies for unauthorized transactions. We may, however, impose greater liability, up to the extent allowed by law, if We reasonably determine that You were either grossly negligent (e.g., delay for an unreasonable time in reporting unauthorized transactions) or fraudulent in handling Your Services transactions processed through the VISA or MasterCard system. The risk to You in failing to notify Us is the potential loss of all funds in Your Account. If You notify and you tell Us within two (2) Business Days business days after You learn learning of the loss, theft, or possible Unauthorized Use, you can lose no more than $50 if someone used your Card and PIN without your permission. For these transactions, if you DO NOT tell Us within two (2) business days after learning of the loss, theft or compromise thereof by an unauthorized personUnauthorized Use, Your liability is up to and We can prove We could have stopped someone from using your Card if you had told Us in time, you could lose as much as $50 for an unauthorized Electronic Funds Transfer or series of related unauthorized Electronic Funds Transfers should someone use Your username, password or security code without Your permission500. If You DO NOT you are a California resident, you will not be liable for the $500 amount described in the prior sentence; however, if you fail to report an Unauthorized Use that appears on a periodic statement within 60 days of our transmittal or making available your periodic statement to you, then you may be liable for the amount of each unauthorized transfer that occurs after the close of the 60 days and before you provide notice to Us, unless the delay in notifying Us was due to extenuating circumstances beyond your reasonable control. For Unauthorized Visa Transactions: If the unauthorized Transaction was a Visa transaction, We agree to extend the benefits provided by the Visa Zero Liability program in effect at the time of the Unauthorized Use, as long as you notify Us within a reasonable period of time after the loss or theft of your Card or any Unauthorized Use of it. We will determine, in Our sole discretion, the reasonableness of any particular period of time based on the circumstances. If your own fraudulent action or gross negligence contributes to the Unauthorized Use of your Card for a Visa transaction, then your liability for that use will be determined as provided above in the “For Unauthorized ATM and PIN Transactions” section. Gross negligence includes but is not limited to your failure to fulfill your obligations under this Agreement, such as your obligations to review your statements and to report any lost, stolen, or compromised Card or Unauthorized Use. Notwithstanding the above two sections, if your periodic statement shows transfers that you did not make and you DO NOT tell Us within sixty (260) Business Days days after You learn of the lossstatement was mailed or made available to you, theft or compromise thereof by an unauthorized person of Your username, password or security code and you may not get back any money you lost after the sixty (60) day period if We can prove that We could have stopped someone from using Your username, password your Card or security code PIN if you had You informed told Us of the loss, theft or compromise thereof, Your liability could be as much as $500in time. Failure to notify Us of any unauthorized Electronic Funds Transfer should someone use Your username, password or security code within sixty If an extenuating circumstance (60) calendar days of when the first periodic statement which reflected such unauthorized activity was mailed or otherwise made available to You could result in additional losses by You of 100 percent. We may extend the sixty (60) calendar day timeframe when certain events prevent You from notifying Us promptly, such as extended travel or hospital stay. Upon verification, We will extend the timeframe set forth herein to a timeframe deemed reasonable under such circumstances in accordance to Regulation E. In addition, unless prohibited by law, You agree to reimburse hospitalization) prevents you from promptly notifying Us for any liability, of suspected loss, cost and expense We theft or Unauthorized Use of your Card, the time periods specified in this paragraph may incur in connection with Your Account except to the extent they are caused solely by Our intentional misconduct. Children Using the Services The safety and privacy protection of children is very important to Us. Children should always ask their parent or guardian for permission before sending personal information to anyone online. You understand that be extended for a child under the age of 13, only the child’s parent or legal guardian has authority to access the Services, even if the account has been established on behalf of that child. If You permit a child under the age of 13 to use the Services, or give the child Your username or password, You understand that You are responsible for all activity the child initiates from or to any of Your accounts, even if he or she exceeds Your authorization. You understand that You can contact Us at the information listed in the “Our Customer Support Information” section of these Terms with any questions or concerns. Our Use of Third-party Service Providers Our ability to provide certain Services and Mobile Banking Services depends on our ability to provide access to third-party networks. You authorize Us to utilize third- party service providers selected by Us to provide Services to You on Our behalf. For details regarding Our safeguarding of Your personal information, please refer to the Online Privacy Policy. In the event that We determine, in Our sole discretion, that We are unable to provide third-party network access, We may discontinue the related Service(s) or may provide the Service(s) through alternate third-party networks. You understand that We shall have no liability for the unavailability of access during any transition reasonable period, and shall give You written notice of any Service involving transfers to or from Your deposit account(s) being discontinued at least twenty- one(21) days in advance of such termination, unless such prior notice is otherwise excused by law.