PRIVACY POLICY

1. Who We Are. AKC Capital Private Limited ("we", "us", "the Company") is an AMFI-Registered Mutual
Fund Distributor (ARN-215115) with its registered office at Unit P-1, Earth Wilasa Grand Villaments,
11th KM, Kanakapura Road, JP Nagar 9th Phase, Bengaluru, Karnataka – 560062. For the purposes of
the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Company is a Data Fiduciary in respect
of the personal data of investors and website visitors that it collects and processes.

2. Personal Data We Collect. We collect personal data that you provide to us for availing our
distribution services, including your name, address, date of birth, contact details, Permanent Account
Number, bank account details, Know Your Customer records, FATCA and CRS self-certification,
nomination details, risk profiling responses, transaction instructions and holdings information. When you
use our website, we may also receive technical information such as your device and browser details.

3. Purpose of Processing. Your personal data is processed only for identified purposes, namely
completion of KYC and anti-money-laundering checks, execution and servicing of your investment
transactions, risk profiling and suitability assessment, sending you account statements, portfolio reviews
and regulatory disclosures, responding to your queries and complaints, and meeting our legal and
regulatory obligations towards SEBI, AMFI, Asset Management Companies, Registrar and Transfer
Agents and other authorities.

4. Notice and Consent. We collect personal data only after giving you notice of the purpose and
obtaining your consent at the point of collection. Where processing is required to comply with a law or a
regulatory direction, such processing is undertaken as permitted under the DPDPA. You may withdraw
your consent at any time by writing to us; upon withdrawal we will stop the related processing, subject
to record-keeping obligations under applicable law.

5. Sharing of Personal Data. We share your personal data only with parties involved in executing and
servicing your investments, namely Asset Management Companies, Registrar and Transfer Agents,
KYC Registration Agencies, the Central KYC Registry, stock exchange platforms used for order routing,
and regulatory or law-enforcement authorities where required by law. We obtain your prior written
consent for such sharing at onboarding. We do not sell your personal data to any person.

6. Data Security. Your data is stored with restricted, password-protected access limited to authorised
personnel. Our employees sign confidentiality undertakings, and access to systems and records is
reviewed regularly. Records are backed up securely, and reasonable security safeguards are
maintained to prevent personal data breach.

7. Data Retention. We retain KYC and transaction records for the periods prescribed under the
Prevention of Money Laundering Act, 2002 and SEBI and AMFI requirements, and other records for as
long as necessary for the purposes stated in this Policy. When retention is no longer required, personal
data is erased or anonymised.

8. Your Rights. Under the DPDPA you have the right to access a summary of the personal data we
process about you, the right to correction and completion of inaccurate data, the right to erasure where
retention is no longer required by law, the right to grievance redressal, and the right to nominate a
person to exercise your rights in the event of death or incapacity.

9. How to Exercise Your Rights. You may exercise any of these rights by writing to us at
adietyakchopra@akccapital.com or calling +91 99005 33097. We respond to data requests within a
reasonable time and in accordance with the timelines prescribed under the DPDPA and rules made
thereunder.

10. Grievances Relating to Personal Data. Any grievance relating to the processing of your personal
data may be addressed to our Grievance Redressal Officer at the contact details above. If you are not

satisfied with our response, you may approach the Data Protection Board of India in the manner
prescribed under the DPDPA.

11. Children's Data. Our services are intended for persons competent to contract. Where an
investment is made for a minor, we process the minor's data only with the verifiable consent of the
parent or lawful guardian, and only for the purpose of the investment.

12. Changes to This Policy. We may revise this Privacy Policy to reflect changes in law or our
practices. The version published on this website is the version in force.