Padaeng Industry : Privacy Notice on Personal Data Protection for the 2024 Annual General Meeting of Shareholders

Enclosure 9

Privacy Notice on Personal Data Protection

for the 2024 Annual General Meeting of Shareholders The objectives of collecting personal data

For the benefit of the 2024 Annual General Meeting of Shareholders, it is necessary to collect the personal data of the (1) Shareholders and/or Related Persons of Shareholdersand (2) Proxy(collectively, ("Data Subject"), with the following objectives:

1. The Company will collect personal data of Shareholders and/or Related Persons of Shareholdersfor the below benefits:

(1) To verify that, whether shareholder is entitled to attend the meeting. In this regard, the name of shareholder shall appear on March 14, 2024 which is the Record Date for determining the shareholders entitled to attend the 2024 Annual General Meeting of Shareholders.

(2) To verify that, whether an appointment of any person as shareholder's Proxy to attend the meeting has actually been executed by shareholder, and whether an appointment of Proxy has been executed correctly and completely as required by relevant laws.

(3) To contact with shareholders and/or related persons of shareholders about meeting attendance. This includes but is not limited to the delivery of invitation letter for the meeting, delivery of Web Link for meeting, and notification of other important information.

(4) For any other benefits that the Company is required to perform correctly and completely by relevant laws and regulations.

2. The Company will collect personal data of Proxyfor the below benefits:

(1) To contact with the Proxy about meeting attendance. This includes but is not limited to the delivery of Web Link for meeting and notification of other important information.

(2) For any other benefits that the Company is required to perform correctly and completely by relevant laws and regulations.

The collected personal data and duration of collection

The Company will collect personal data of the Data Subject as specified in "Proxy Form A., Form B. and Form C.", and "Form for Notification of Intention to Attend the 2024 Annual General Meeting of Shareholders via Electronic Devices", including the personal data that the Thailand Securities Depository Co., Ltd. (TSD) or the Data Subject has prepared and disclosed to the Company, through channels other than those personal data disclosed in the above documents. The personal data will be collected at all times as necessary for the objectives described above, and as required by relevant laws and regulations. In this regard, the Company is possible to be required to partially disclose the collected personal data to relevant persons as necessary for the benefit of carrying out various actions in order to achieve the objectives described above, or as required by relevant laws and regulations, or for the accomplishment of the 2024 Annual General Meeting of Shareholders.

1/2

Enclosure 9.

Please be informed that the Company does not intend to collect the personal data which are specified in Section 2 6 of the Personal Data Protection Act, B.E. 2 0 1 9 ( Sensitive Data, such as race, ethnicity, political opinion, cult, religious or philosophical beliefs, sexual behavior, etc., which are the personal data that require explicit consent from the Data Subject before being collected). Therefore, the Data Subject is requested to conceal the said personal data appearing in various documents before submitting them to the Company. In case that those data have not been concealed by the Data Subject, it will be concealed by the Company, and it will not be considered as the collection of personal data which are specified in Section 2 6 of the Personal Data Protection Act, B.E. 2 0 1 9 by the Company in any way.

Right of the Data Subject

The Data Subject possess the rights in their personal data which are consented and submitted to the Company as stipulated in the Personal Data Protection Act, B.E. 2019 and the Personal Data Protection Policy of the Company (please additionally study the Personal Data Protection Policy at the Company's website at https://www.boundandbeyond.co.th/th/investor-relations/corporate-governance) , including but not limited to the consent, withdrawal of consent, request of access to or correction of their personal data, request of deletion, destruction or suspension of usage of their personal data. However, in case that there are any other necessities under the relevant laws and regulations which causes the Company to be unable to or not be still unable to proceed with any actions that are requested by the Data Subject, the Company will notify the Data Subject about such necessities.

Please be further informed that, the Company is possible to collect personal data of other persons, which is necessary for the 2024 Annual General Meeting of Shareholders. In this case, the Company will inform those persons about the objectives of collecting personal data, collected personal data and duration of collection, and right of the Data Subject in the same practice as the Company has informed the shareholders and/or related persons of shareholders, and the Proxy.

2/2