Master Service Level Agreement

MASTER SERVICE LEVEL AGREEMENT (MSLA)

GF-OP-013 | Revision 002 (09-2026)

1.1  This Master Service Level Agreement (the “Agreement”) is entered into between GivingFridays Pte. Ltd., a company incorporated in Singapore (UEN 202126466G), with its registered address at 22 Sin Ming Lane, #06-76 Midview City, Singapore 573969 (“GivingFridays” or the “Company”), and the Recipient identified in the applicable Onboarding Agreement (“Recipient”).

1.2  For Malaysian operations, GivingFridays operates in conjunction with Giving Fridays MY Solutions, a business registered with Suruhanjaya Syarikat Malaysia under Registration No. 202503031391 (RA0121287-K), with its business address at 7-3-2 Presint Alami, Persiaran Akuatik Seksyen 13, 40100 Shah Alam, Selangor, Malaysia (“GF Malaysia”). GF Malaysia supports Malaysian operations and is the local business used for applicable Malaysian payment-gateway arrangements, including SenangPay. Unless expressly stated otherwise in the applicable Onboarding Agreement or payment-provider arrangement, GivingFridays Pte. Ltd. remains the owner and operator of the GivingFridays Platform and the contracting party for the Platform Services.

1.3  GivingFridays and the Recipient are each a “Party” and together the “Parties”.

Recitals

A. GivingFridays has developed and operates a technology platform that enables eligible donors to create and manage donations and donation schedules for participating Recipient Organisations.

B. The Recipient wishes to be listed and, subject to successful onboarding and applicable payment-provider requirements, enabled to receive donations through the Platform.

C. The Parties intend this Agreement, the Onboarding Agreement and the applicable Schedules to define their respective rights and responsibilities.

2. Definitions and Interpretation

2.1  “Applicable Law” means all laws, regulations, regulatory requirements, licences, permits, codes and binding directions applicable to a Party, the Services or the relevant activity in the applicable jurisdiction.

2.2  “Confidential Information” means non-public business, technical, financial, security, commercial, donor, recipient or other proprietary information disclosed by or on behalf of a Party, including information of third parties that the disclosing Party is required to protect.

2.3  “Donor” means an individual or other person who uses the Platform to make or schedule a donation to a Recipient.

2.4  “Onboarding Agreement” or “OA” means the document identifying the Recipient and recording Recipient-specific onboarding, commercial, operational and payment-provider information.

2.5  “Payment Gateway” means an independent third-party payment service provider used in connection with donation transactions, including any replacement or additional provider supported by the Platform from time to time.

2.6  “Platform” means the GivingFridays websites, applications, dashboards, donation-scheduling technology and related services operated or made available by GivingFridays.

2.7  “Personal Data” has the meaning given under applicable data protection law.

2.8  “Recipient Data” means information, content, logos, campaign material, records and Personal Data supplied by or on behalf of the Recipient or made available to the Recipient through the Platform.

2.9  “Services” means the services described in this Agreement, the OA and the applicable Schedules.

2.10  Headings are for convenience only. References to “including” are illustrative and do not limit the words preceding them. If there is an inconsistency, the order of precedence is: (a) a signed Recipient-specific amendment; (b) the OA; (c) this Agreement; (d) the applicable Schedules; (e) the GivingFridays Terms & Conditions; and (f) the GivingFridays Privacy Policy, unless expressly stated otherwise. Notwithstanding the foregoing, the GivingFridays Privacy Policy governs GivingFridays’ processing of Personal Data to the extent required by Applicable Law.

2.11  “GF Malaysia” means Giving Fridays MY Solutions as identified in Clause 1.2. References to GF Malaysia do not transfer ownership or operation of the GivingFridays Platform from GivingFridays Pte. Ltd. unless expressly stated otherwise.

3. Agreement Framework and Incorporated Policies

3.1  The Recipient’s use of the Platform is governed by this Agreement together with the OA, applicable Schedules, GivingFridays Terms & Conditions and GivingFridays Privacy Policy, each as applicable to the relevant service or activity.

3.2  The Terms & Conditions and Privacy Policy published on givingfridays.com are incorporated by reference to the extent applicable. GivingFridays may update those policies from time to time in accordance with their terms and Applicable Law.

3.3  A change to a public policy will not, by itself, retrospectively alter a separately agreed Recipient-specific fee or other express commercial term in the OA unless the applicable document permits that change or the Parties agree otherwise.

4. Grant and Scope of Service

4.1  Subject to this Agreement, GivingFridays grants the Recipient a limited, non-exclusive, non-transferable and revocable right to access and use the Services for the Recipient’s authorised fundraising and donor-management activities.

4.2  GivingFridays provides technology for donation scheduling, donor connectivity, reporting and related functions. GivingFridays does not guarantee any minimum donation volume, fundraising result, donor participation, forecast outcome or financial return.

4.3  GivingFridays may enhance, modify, replace, suspend or discontinue features where reasonably required for security, legal or regulatory compliance, third-party dependencies, technical performance, product development or operational reasons. GivingFridays will use reasonable efforts to avoid materially impairing the fundamental purpose of paid Services during an active paid term.

4.4  Forecasts, projections, dashboards and analytics are informational tools based on available data and assumptions. Scheduled donations are not guaranteed donations, and GivingFridays does not warrant that any forecast or projection will be achieved.

5. Registration, Onboarding and Preliminary Listings

5.1  The Recipient shall provide complete, accurate and current information reasonably requested for registration, onboarding, configuration, compliance and Payment Gateway purposes and shall promptly notify GivingFridays of material changes.

5.2  The Recipient authorises GivingFridays, from the date of the Recipient’s registration, application or submission of onboarding information, to create, configure, test and, at GivingFridays’ discretion, publish a preliminary profile or listing using the Recipient’s name, logo, description, location, programmes, public contact information, website or social-media information and other organisation-level information supplied by or authorised on behalf of the Recipient.

5.3  The authorisation in Clause 5.2 may apply while verification, Payment Gateway onboarding, technical configuration, execution of the OA or this Agreement, or other onboarding requirements remain pending. Execution of this Agreement is not a prerequisite to a preliminary listing where the Recipient has previously provided registration or onboarding authorisation.

5.4  A preliminary listing does not constitute final approval, verification, activation or confirmation that donation processing is available. GivingFridays may modify, suspend or remove a preliminary listing at any time, including where onboarding is not completed or required information is not provided.

5.5  The Recipient warrants that it has all rights and authority necessary to provide its name, logo, content and other materials to GivingFridays and to authorise their use for listing, onboarding, platform operation, promotion and related purposes.

6. Payment Gateways and Non-Custodial Model

6.1  The Recipient acknowledges that GivingFridays operates as a technology platform and does not itself solicit, collect, receive, hold, manage or control donation funds on behalf of the Recipient. Donation transactions are processed by independent Payment Gateways and settled in accordance with the applicable Payment Gateway arrangements.

6.2  The Recipient shall complete and maintain all Payment Gateway registration, Know Your Customer, anti-money laundering, counter-terrorism financing, enhanced due diligence and other requirements imposed by the Payment Gateway or Applicable Law.

6.3  The Recipient must maintain an active and operational Payment Gateway account where required. GivingFridays is not responsible for delay, rejection, suspension, withholding, reversal, settlement failure or other action taken by a Payment Gateway, bank, card network or financial institution outside GivingFridays’ reasonable control.

6.4  Payment Gateway settlement records constitute the authoritative record of funds actually processed and settled. Platform calculations, dashboards or reports may differ because of processing order, taxes, gateway fees, currency conversion, rounding or third-party methodology. Reasonable rounding or reporting differences do not constitute a breach by GivingFridays.

6.5  GivingFridays may add, replace or discontinue supported Payment Gateways where reasonably necessary. The Recipient may be required to complete additional onboarding before using a new provider.

6.6  For Malaysian SenangPay arrangements, GF Malaysia may be the local entity that contracts with, is onboarded by, or is reviewed by SenangPay. The Recipient acknowledges that SenangPay may conduct verification, due diligence, compliance reviews, audits or information requests concerning GF Malaysia in accordance with SenangPay requirements, applicable contractual arrangements and Applicable Law. Such rights belong to SenangPay or the relevant competent authority and do not create any audit or inspection right for the Recipient.

7. Recipient Regulatory and Fundraising Responsibilities

7.1  The Recipient is solely responsible for ensuring that its fundraising activities, campaigns, solicitation of donations, receipt and use of donated funds, representations to Donors and related activities comply with Applicable Law in each jurisdiction in which the Recipient operates or lawfully receives donations.

7.2  The Recipient shall obtain and maintain all licences, permits, approvals, registrations and regulatory authorisations required for its activities. GivingFridays does not represent that a Recipient’s use of the Platform, by itself, satisfies the Recipient’s legal or regulatory obligations.

7.3  The Recipient shall not use the Platform for fraudulent, deceptive, misleading, unlawful, unauthorised or sanctioned activity and shall ensure that campaign descriptions and statements to Donors are accurate and made in good faith.

7.4  GivingFridays may request reasonable evidence of the Recipient’s legal status, authority, licences, approvals or compliance. This right does not create a duty on GivingFridays to continuously monitor or verify the Recipient’s compliance.

7.5  Where GivingFridays reasonably suspects fraud, misrepresentation, unlawful fundraising, misuse of funds, sanctions exposure, material regulatory non-compliance or material risk to Donors, GivingFridays may suspend or restrict the Recipient or relevant functionality immediately while the matter is assessed.

7.6  Where a Recipient requests GivingFridays to create, activate or provide access to a Multibrand, sub-account, sub-recipient, campaign or other fundraising facility that represents, uses the identity of, or is intended to benefit another organisation, mosque, foundation, programme, branch or other entity (a “Sub-Recipient”), the Recipient represents and warrants that it has obtained all necessary authority from the Sub-Recipient to undertake the relevant fundraising activities and, where applicable, to use the Sub-Recipient’s name, logo, organisational information, campaign materials and other authorised content on the Platform.

7.7  Before activating or continuing any such facility, GivingFridays may require the Recipient to provide evidence reasonably satisfactory to GivingFridays that an appropriate written agreement, mandate, appointment, authorisation or other documented arrangement exists between the Recipient and the Sub-Recipient. GivingFridays may request additional information or clarification where reasonably necessary.

7.8  The Recipient is responsible for ensuring that the authority referred to in Clause 7.6 remains valid and effective for so long as the applicable Sub-Recipient or fundraising facility remains active on the Platform. The Recipient shall promptly notify GivingFridays if such authority expires, is terminated, withdrawn, suspended, disputed or otherwise ceases to be effective.

7.9  GivingFridays may refuse to activate, or may suspend, restrict or remove, any Multibrand, sub-account, Sub-Recipient or related fundraising functionality where satisfactory evidence of authority has not been provided, where the relevant authority is absent, expired, withdrawn, suspended, disputed or reasonably appears insufficient, or where GivingFridays reasonably considers continued operation to create legal, regulatory, donor, payment-provider, reputational or security risk.

7.10  Any review, receipt or acceptance by GivingFridays of an agreement, mandate, appointment, authorisation or other evidence relating to a Sub-Recipient does not constitute legal verification, approval or confirmation of the validity, enforceability, regulatory sufficiency or scope of that arrangement and does not relieve the Recipient of its responsibilities under this Agreement or Applicable Law.

7.11  Where the Recipient requests that personnel of a Sub-Recipient be granted access to the Platform or a dashboard, the Recipient represents and warrants that it is authorised to nominate those persons for such access and to permit them to access the information made available through their assigned account or permissions. The Recipient remains responsible for ensuring that such persons comply with applicable access restrictions, confidentiality requirements, data-protection obligations and Platform terms. Access granted to a Sub-Recipient does not make that Sub-Recipient a party to this Agreement unless GivingFridays expressly agrees otherwise in writing.

7.12  The Recipient remains responsible for its relationship with each Sub-Recipient, including any allocation, accounting, onward transfer or distribution of funds and any dispute concerning beneficial entitlement to funds, except to the extent expressly undertaken by GivingFridays in writing. GivingFridays is not responsible for adjudicating disputes between a Recipient and a Sub-Recipient concerning fundraising authority, fund allocation, retention or distribution.

8. Donor Data, Privacy and Recipient Data Responsibilities

8.1  GivingFridays may make donor and donation information available to the Recipient in accordance with the GivingFridays Privacy Policy, Applicable Law and the functionality of the Platform.

8.2  Where Personal Data is exported, downloaded, transferred or otherwise made available to the Recipient and thereafter comes within the Recipient’s possession or control, the Recipient is responsible for its subsequent collection, use, disclosure, storage, protection, retention and other processing in accordance with Applicable Law and this Agreement.

8.3  The Recipient shall use donor Personal Data only for lawful purposes reasonably connected with the donor relationship, including donation administration, reconciliation, receipts, donor communications and donor relationship management, and shall not sell, rent or unlawfully disclose such Personal Data.

8.4  The Recipient shall implement reasonable administrative, organisational and technical safeguards appropriate to the nature of Personal Data within its possession or control and shall restrict access to authorised personnel with a legitimate need to know.

8.5  The Recipient shall notify GivingFridays without undue delay after becoming aware of a security incident or Personal Data breach involving information obtained through the Platform where the incident may materially affect GivingFridays, the Platform, Donors or other users, and shall provide reasonable information necessary for GivingFridays to assess its own legal or operational obligations.

8.6  GivingFridays is not responsible for independent processing, disclosure, loss or security incidents occurring within the Recipient’s systems, devices, accounts, personnel or infrastructure outside GivingFridays’ reasonable control, except to the extent responsibility cannot lawfully be excluded or limited. The Recipient is responsible for the acts and omissions of its authorised users and Sub-Recipient users in relation to Personal Data accessed through the Platform, to the extent permitted by Applicable Law.

8.7  For tax-deductible donations or similar programmes, the Recipient is responsible for determining what donor information it lawfully requires and for its subsequent use and protection. GivingFridays may provide fields or export functionality but does not determine the Recipient’s tax eligibility or legal obligations.

9. Security, Assurance and No General Audit Right

9.1  GivingFridays will use reasonable administrative, organisational and technical measures designed to protect the Platform and Personal Data within its possession or control. No internet, cloud, payment or electronic system can be guaranteed to be completely secure or uninterrupted.

9.2  Except where expressly agreed in writing by GivingFridays or required by Applicable Law or a competent regulatory, governmental, judicial or law-enforcement authority, the Recipient has no right to audit, inspect or access GivingFridays’ systems, source code, infrastructure, security configurations, credentials, vulnerability information, internal records, vendor arrangements or information relating to other users, Donors or recipients.

9.3  GivingFridays may, at its discretion and subject to confidentiality, security, legal and third-party restrictions, provide reasonable information concerning its privacy or security practices where GivingFridays considers such information appropriate for a legitimate compliance purpose.

9.4  Clauses 9.2 and 9.3 do not restrict audits, compliance reviews, due-diligence requests or information requests that GivingFridays or an applicable regional business has agreed to with a Payment Gateway, bank or financial institution, or that are required by Applicable Law or a competent authority. Any such review remains subject to its applicable contractual or legal scope and does not confer equivalent rights on a Recipient.

9.5  Nothing in this Agreement limits GivingFridays’ obligations under Applicable Law or its obligation to cooperate with a competent authority lawfully exercising its powers.

10. Recipient Accounts and Authorised Users

10.1  The Recipient is responsible for designating authorised users, maintaining appropriate access permissions and ensuring that credentials are not shared with unauthorised persons.

10.2  The Recipient is responsible for actions taken through its authorised accounts unless caused by GivingFridays’ breach of its own obligations. The Recipient shall promptly notify GivingFridays of suspected unauthorised access or compromise.

10.3  GivingFridays may suspend credentials or access where reasonably necessary to protect security, comply with law, investigate suspected misuse or prevent harm.

11. Fees, Charges and Taxes

11.1  Fees, setup charges, subscriptions or other commercial terms applicable to the Recipient will be stated in the OA, an applicable Schedule, order, proposal or other written commercial document accepted by the Recipient.

11.2  Payment Gateways and other third parties may charge their own processing, settlement, currency conversion, tax or other fees. Unless expressly agreed otherwise, such third-party charges are governed by the relevant provider’s terms and are not controlled by GivingFridays.

11.3  GivingFridays may introduce or revise fees for future periods, additional services or optional features by giving reasonable notice or as otherwise provided in the applicable commercial terms. A material change to a committed paid term will not apply retrospectively unless required by law or agreed by the Recipient.

11.4  Each Party is responsible for taxes, duties, levies and governmental charges imposed on that Party by Applicable Law. The Recipient remains responsible for the tax treatment of donations, receipts and any tax-deduction programme it offers.

12. Intellectual Property, Recipient Content and Branding

12.1  GivingFridays and its licensors retain all rights, title and interest in the Platform, software, designs, documentation, trademarks, know-how and other intellectual property owned or developed by or for GivingFridays.

12.2  Except as expressly permitted, the Recipient shall not copy, modify, frame, scrape, rent, lease, sell, distribute, reverse engineer, decompile, derive source code from, circumvent security of, or create derivative works from the Platform.

12.3  The Recipient retains ownership of Recipient content. The Recipient grants GivingFridays a worldwide, non-exclusive, royalty-free licence during the relationship and thereafter for so long as reasonably necessary for archival, legal, regulatory, reconciliation, record-keeping or orderly termination purposes, to host, reproduce, display, format and use Recipient content as reasonably necessary to provide, promote and administer the Services and Recipient listings and to fulfil those purposes.

12.4  The Recipient authorises GivingFridays to use its name, logo, campaign materials, QR codes and Platform links for Platform listings, donor-facing pages, onboarding, cross-marketing and reasonable promotional activities connected with the Services. GivingFridays will not acquire ownership of the Recipient’s trademarks by reason of such use.

13. Confidentiality

13.1  Each Party shall protect the other Party’s Confidential Information using at least reasonable care and shall use it only for purposes connected with this Agreement, the Services, legal compliance or protection of its rights.

13.2  A Party may disclose Confidential Information to its employees, officers, contractors, professional advisers, service providers and affiliates who have a legitimate need to know and are subject to appropriate confidentiality obligations.

13.3  Confidentiality obligations do not apply to information that is lawfully public through no breach, was lawfully known without restriction before disclosure, is lawfully received from a third party without confidentiality restriction, or is independently developed without use of the other Party’s Confidential Information.

13.4  A Party may disclose Confidential Information where required or permitted by law, court order or a competent authority. Where lawful and reasonably practicable, the disclosing Party may notify the other Party before disclosure, but no notice is required where prohibited, impracticable or inconsistent with an investigation or legal obligation.

14. Third-Party Services and Dependencies

14.1  The Platform may depend on Payment Gateways, cloud infrastructure, authentication providers, communications providers, internet services and other independent third parties. GivingFridays does not control those providers and is not responsible for their acts, omissions, outages, policies or service changes except to the extent responsibility cannot lawfully be excluded or limited.

14.2  GivingFridays may replace or change third-party providers where reasonably necessary. The Recipient shall reasonably cooperate with migration or re-onboarding requirements necessary to continue affected Services.

15. Suspension, Term and Termination

15.1  This Agreement continues until terminated in accordance with this Section or the applicable OA.

15.2  Either Party may terminate this Agreement for convenience by giving one month’s written notice unless a different committed term or notice period is stated in the OA.

15.3  Either Party may terminate for a material breach that is capable of remedy and remains unremedied thirty days after written notice. A Party may terminate immediately for an irremediable material breach, fraud, unlawful activity, insolvency or cessation of business, subject to Applicable Law.

15.4  GivingFridays may immediately suspend or restrict access where reasonably necessary because of suspected fraud, security risk, Payment Gateway suspension, regulatory concern, unlawful activity, material breach, non-payment, risk to Donors or risk to the Platform. GivingFridays will use reasonable efforts to restore access when the relevant issue is satisfactorily resolved.

15.5  GivingFridays may terminate the affected Services or this Agreement on written notice where a required Payment Gateway permanently rejects, terminates or ceases to support the Recipient and no reasonably practicable alternative supported by GivingFridays is available.

15.6  On termination, the Recipient shall cease use of the Services. GivingFridays may disable Recipient pages, campaigns and future donation scheduling and may cancel or deactivate schedules where technically or legally necessary. GivingFridays does not guarantee transfer of donation schedules to another platform.

15.7  GivingFridays may retain or delete information following termination in accordance with its Privacy Policy, Applicable Law, legitimate legal or business requirements and applicable retention obligations. Any statement requiring automatic deletion within a fixed period applies only where expressly agreed in writing.

15.8  Termination does not affect accrued rights, payment obligations or provisions intended by their nature to survive, including confidentiality, intellectual property, data responsibilities, indemnities, liability limitations, dispute resolution and governing law.

16. Representations and Warranties

16.1  Each Party represents that it has authority to enter into this Agreement and perform its obligations.

16.2  GivingFridays will perform the Services using commercially reasonable efforts. Except as expressly stated in this Agreement or required by law, the Services are provided on an “as available” and “as is” basis and GivingFridays disclaims implied warranties to the maximum extent permitted by law.

16.3  The Recipient represents and warrants that information and content supplied by it are materially accurate, lawful and not misleading; that it has the rights necessary to provide such information and content; and that its use of the Services will comply with Applicable Law and this Agreement.

17. Indemnities

17.1  The Recipient shall indemnify and hold harmless GivingFridays, its officers, directors, employees and agents from third-party claims, regulatory actions, penalties, losses, damages, costs and reasonable legal fees arising from or relating to: (a) the Recipient’s unlawful or unauthorised fundraising; (b) misuse or misapplication of donated funds; (c) inaccurate, misleading or infringing Recipient content; (d) the Recipient’s breach of Applicable Law; (e) the Recipient’s independent processing or security of Personal Data within its possession or control; (f) the Recipient’s fraud, wilful misconduct or gross negligence; (g) the Recipient’s material breach of this Agreement; or (h) the Recipient’s relationship with a Sub-Recipient, including lack of authority, use of the Sub-Recipient’s identity or materials, access granted to Sub-Recipient personnel, allocation or distribution of funds, or disputes between the Recipient and a Sub-Recipient.

17.2  GivingFridays shall notify the Recipient reasonably promptly of an indemnified third-party claim and provide reasonable cooperation at the Recipient’s cost. GivingFridays may participate with its own counsel where its interests reasonably require separate representation. The Recipient shall not settle a claim in a manner that admits liability by, imposes obligations on, or materially prejudices GivingFridays without GivingFridays’ prior written consent.

17.3  Nothing in this Section requires either Party to indemnify the other to the extent a claim was caused by the indemnified Party’s own fraud, wilful misconduct or gross negligence.

18. Limitation of Liability

18.1  To the maximum extent permitted by law, GivingFridays shall not be liable for indirect, incidental, special, punitive or consequential loss, or for loss of profits, revenue, anticipated donations, goodwill, opportunity, data or business interruption, whether arising in contract, tort, negligence or otherwise, even if advised of the possibility of such loss.

18.2  GivingFridays is not liable for loss arising from Donor input or selection errors, Recipient instructions or information, Payment Gateway or third-party actions, banking or network failures, unlawful Recipient activity, Recipient systems or security incidents, or circumstances outside GivingFridays’ reasonable control, except to the extent liability cannot lawfully be excluded.

18.3  Subject to Clause 18.4, GivingFridays’ aggregate liability arising out of or relating to this Agreement in any twelve-month period shall not exceed the total fees actually paid by the Recipient directly to GivingFridays under the applicable Services during the twelve months immediately preceding the event giving rise to the claim.

18.4  Nothing in this Agreement excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud or fraudulent misrepresentation. Any other non-excludable liability is limited only to the maximum extent permitted by law.

19. Force Majeure

19.1  Neither Party is liable for failure or delay caused by events beyond its reasonable control, including natural disasters, epidemic or pandemic, war, terrorism, civil unrest, government action, labour disruption, internet or telecommunications failure, utility failure, cyberattack not caused by that Party’s failure to take reasonable precautions, or material failure of a Payment Gateway or critical third-party infrastructure.

19.2  The affected Party shall use reasonable efforts to mitigate the impact and resume performance. Force majeure does not excuse payment obligations already accrued.

20. Legal and Regulatory Cooperation

20.1  Each Party shall comply with lawful requests, orders and obligations imposed on it by competent courts, regulators, governmental authorities and law-enforcement agencies.

20.2  GivingFridays may preserve, use or disclose records where reasonably necessary to comply with Applicable Law, investigate fraud or security incidents, enforce agreements, protect the Platform or users, or establish, exercise or defend legal claims.

20.3  Nothing in this Agreement requires GivingFridays to provide a Recipient with information, records or access merely because the Recipient requests them, except where GivingFridays has expressly agreed to do so or Applicable Law requires it.

21. Dispute Resolution and Governing Law

21.1  The Parties shall first attempt in good faith to resolve a dispute through direct negotiation. Either Party may propose mediation, but mediation is not a condition precedent to urgent injunctive or protective relief.

21.2  This Agreement is governed by the laws of Singapore, without regard to conflict-of-law principles.

21.3  Subject to Clause 21.1, the courts of Singapore have exclusive jurisdiction over disputes arising out of or relating to this Agreement, except that GivingFridays may seek urgent or protective relief in any competent jurisdiction where reasonably necessary to protect its intellectual property, Confidential Information, systems or legal rights.

21.4  To the maximum extent permitted by Applicable Law, claims shall be brought in the individual capacity of the relevant Party and not as a class, collective or representative proceeding.

22. General

22.1  Neither Party may assign this Agreement without the other Party’s prior written consent, except that GivingFridays may assign or transfer this Agreement to an affiliate or in connection with a merger, financing, restructuring, reorganisation, sale of shares, business or assets, or similar corporate transaction, on written notice where reasonably practicable.

22.2  The Parties are independent contractors. Nothing creates a partnership, joint venture, agency, fiduciary relationship or employment relationship between them, and neither Party may bind the other except as expressly authorised.

22.3  If any provision is held invalid or unenforceable, it will be limited or severed to the minimum extent necessary and the remaining provisions remain effective.

22.4  A failure or delay to exercise a right is not a waiver. A waiver is effective only if made in writing by the Party granting it.

22.5  Notices under this Agreement may be delivered by email to the contact details recorded in the OA or by another method expressly agreed by the Parties. A Party shall keep its notice details current.

22.6  This Agreement, the OA, incorporated policies, applicable Schedules and any signed amendments constitute the entire agreement between the Parties concerning the Services and supersede prior discussions or representations on the same subject, except in cases of fraud.

22.7  Electronic signatures, electronic acceptance and counterparts may be used to execute or evidence acceptance of this Agreement to the extent permitted by Applicable Law.

SCHEDULE 1

SETUP AND ONBOARDING

S1.1  GivingFridays will create or configure a Recipient account and relevant Platform access after receiving information reasonably required for onboarding.

S1.2  Payment Gateway verification, KYC, AML/CFT, enhanced due diligence and approval are performed or determined by the applicable Payment Gateway or other responsible provider. GivingFridays does not guarantee approval.

S1.3  A setup or onboarding fee may apply where stated in the OA or applicable commercial proposal.

S1.4  GivingFridays may configure and test the Recipient profile and preliminary listing before final activation in accordance with Clause 5.

SCHEDULE 2

CORE PLATFORM SERVICES

S2.1  Subject to the Recipient’s package and permissions, core services may include transaction notifications, dashboard access, donation-purpose settings, transaction summaries, data export, monthly or yearly trend views, forecasting and projections.

S2.2  Dashboard information reflects Platform records available to GivingFridays and is provided for operational planning. Payment Gateway settlement records remain authoritative for actual funds processed and settled.

S2.3  Where enabled, the Platform may support collection or export of donor information required by the Recipient for lawful receipt, reconciliation or tax-deduction purposes. The Recipient remains responsible for determining and complying with its legal requirements.

S2.4  GivingFridays may introduce, retire or modify individual dashboard features in accordance with Clause 4.3.

SCHEDULE 3

CAMPAIGNS

S3.1  The number of campaigns included without additional charge, if any, will be determined by the Recipient’s package or applicable commercial terms.

S3.2  Additional campaigns or campaign services may incur fees communicated through the OA, proposal, website or other applicable commercial terms.

S3.3  Campaign reporting may include donation activity, donor interactions, summaries and export functionality, subject to the Recipient’s package and access permissions.

S3.4  The Recipient is responsible for the accuracy, legality and regulatory compliance of campaign content and for the lawful use of campaign proceeds.

SCHEDULE 4

WHITE-LABEL SERVICE (OPTIONAL)

S4.1  Where purchased or approved, GivingFridays may provide a white-label or Recipient-branded implementation on a domain, subdomain or page designated or approved by the Recipient.

S4.2  The scope, branding, technical requirements, fees and implementation responsibilities will be stated in the OA, proposal or other applicable commercial document.

S4.3  The Recipient shall provide timely access to branding assets, domain configuration or other information reasonably required for implementation and warrants that it has rights to all materials supplied.

SCHEDULE 5

MARKETING AND PROMOTIONAL SERVICES (OPTIONAL)

S5.1  Where separately agreed, GivingFridays may provide campaign design, promotional support, social-media assistance, audience analytics or related marketing services.

S5.2  GivingFridays does not guarantee reach, engagement, donor conversion, fundraising results or any particular marketing outcome.

S5.3  Any paid advertising budget, third-party media cost or additional service fee will be separately agreed or charged in accordance with the applicable proposal.

SCHEDULE 6

FUNDRAISING EVENTS (OPTIONAL)

S6.1  Where supported and separately agreed, GivingFridays may provide Platform functionality or support for event-based fundraising, registration, ticketing, donation scheduling or promotion.

S6.2  The Recipient remains responsible for event permits, venue obligations, participant safety, ticketing or tax requirements, fundraising licences and other legal or operational obligations applicable to the event.

S6.3  Specific event functionality, fees and third-party dependencies will be stated in the applicable proposal or commercial terms.

SCHEDULE 7

MALAYSIA REGIONAL OPERATIONS

S7.1  GF Malaysia is Giving Fridays MY Solutions, Registration No. 202503031391 (RA0121287-K), a business registered with Suruhanjaya Syarikat Malaysia. Its business address for this Agreement is 7-3-2 Presint Alami, Persiaran Akuatik Seksyen 13, 40100 Shah Alam, Selangor, Malaysia.

S7.2  GF Malaysia supports local Malaysian operations and applicable local Payment Gateway arrangements, including SenangPay. SenangPay may deal directly with GF Malaysia for onboarding, verification, due diligence, compliance, audit and related payment-provider requirements.

S7.3  Unless the applicable OA or payment-provider arrangement expressly states otherwise, GF Malaysia does not replace GivingFridays Pte. Ltd. as owner or operator of the GivingFridays Platform.

S7.4  A Malaysian Recipient remains responsible for its own licences, fundraising permissions, tax obligations, data-protection obligations, bank details and Payment Gateway requirements under Malaysian law and the applicable OA.

Document Control

DC.1  Document: GF-OP-013 Master Service Level Agreement (MSLA).

DC.2  Revision: 002.

DC.3  Revision Date: September 2026.

DC.4  Document Owner: GivingFridays Pte. Ltd.

DC.5  Supersedes: GF-OP-013 MSLA (03-2026).