Code of Conduct and Ethics

Regulations, Guidelines and Commitment

"Ethical Corporate Management Best Practice Principles" and "EthicalProcedures and Code of Conduct"
"Code of Ethical Conduct of Directors"
"E.Sun Employee Service Code of Conduct and Behavior Standards"
"E.SUN's Commitment to Anti-corruption, Anti-bribery, and Anti-competitive Behavior"
"the Treating Customers Fairly Policies and Strategies"
"the Regulations Governing the Concurrent Serving Management forResponsible Persons"
"Guidelines for the Accountability Directions for Senior Management Personnel"
"Whistleblower Case Handling Regulations"
"Integrity Risk Assessment Mechanism"

Applicability

E.SUN directors, senior management, managers, employees, nominees, and other entities with substantive control
Suppliers

Evaluation Mechanism and Relevant Practices

E.SUN establishes a risk assessment mechanism against unethical conduct. Regular assessments are conducted to effectively manage the distribution of the risks and control measures.
Effective management and implementation is achieved through self-assessment and self-evaluation for compliance. In addition, high-risk units are selected for the legal compliance test on important management issues with the aim of improving and adjusting the legal compliance mechanism.
The audit unit performs independent risk-oriented audits to ensure the uninterrupted operation of the organization as a whole. All units work together to manage and prevent unethical behavior.
E.SUN also links employee performance with remuneration and includes ethical management in the performance assessment and human resource policies with a clear and effective disciplinary system in place.
All E.SUN directors and executive managers have signed the statement of ethical corporate management; All E.SUN employees have signed the "E.SUN Employee Service Code of Conduct and Behavior Standards."
The Company will assess the legitimacy of counterparties and acquire a full understanding of their ethical management practices and compliance with the corporate social responsibility policy before starting a business with suppliers. Contracts always contain explicit provisions on ethical management and corporate social responsibility. Corruption and bribery are handled with zero tolerance. E.SUN promises that its business activities around the globe are free from any form of corruption and bribery.

422.4hours

Ethical management training sessions totaling hours

100%

participation of the entire Board of Directors in training on ethical management and handling of material internal information

100%

Participation of the entire E.SUN workforce in tests on regulations governing ethical management, stakeholders, and personal information protection

Ethical Violations

In 2024, E.SUN did not engage in any acts of corruption, bribery, conflicts of interest, money laundering, or insider trading, with a total of zero related legal lawsuits, penalties, or whistleblower cases; there were no cases of discrimination or harassment. E.SUN Securities, a subsidiary, faced one penalty from the Financial Supervisory Commission due to a violation of business regulations, which does not constitute a violation of integrity in operations.

Whistleblowing System

To establish a culture of integrity and transparency and promote sound operation, E.SUN has formulated the Procedure For Handling Whistleblowing Reports , which is applicable to its subsidiaries, foundations with direct or indirect cumulative donations exceeding 50%, and other organizations or legal entities with substantial control. The procedures clearly define the acceptance and investigation timeline, and establish dedicated handling units and independent investigation units. E.SUN also sets up whistleblowing hotlines, email inboxes, and mailing addresses on its official website and intranet for both internal and external personnel. The identity of whistleblowers is kept confidential, and adverse personnel measures against internal employee whistleblowers are strictly prohibited. Anonymous reporting is also allowed to actively prevent dishonest, fraudulent, and criminal activities.

In 2024, a total of 92 cases were accepted through both whistleblower and nonwhistleblower channels, with zero cases related to integrity violations; all cases turned out to be non-major violations of internal regulations, consumer disputes, or unrelated incidents to banking operations. Upon receipt of a whistleblower report, it is immediately handled by the Compliance Department and assigned by the General Manager to an appropriate investigation unit, ensuring the confidentiality of the whistleblower's identity. The investigation results are reported to the General Manager and communicated to the supervisor of the reported party. The relevant execution results are then reported to the Corporate Governance and Nomination Committee and the Board.

Case Numbers	2020	2021	2022	2023	2024
Total Cases Accepted	28	49	33	48	92
Cases Confirmed as Integrity Violations	1	4	0	0	0

Note: All cases in 2024 were closed within the year

Integrity Violation Events	2020	2021
Through whistleblowing channels	1	4
Through other channels (such as self-examination, audit, etc.)	5	0
Total Integrity Violation Cases	6	4

Note: Cases that are non-major violations of internal regulations, consumer disputes, or unrelated to banking operations are not included in the count of "integrity violation events."