PRIVACY POLICY

Revised August 2025

FACTS

What does vast bank, n.a. do with your personal information?

WHY?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.

WHAT?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

Social Security number and income
Account balances and transaction history
Credit history and employment information

When you are no longer our customer, we continue to share your information as described in this notice.

HOW?

All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Vast Bank, N.A. chooses to share; and whether you can limit this sharing.

REASONS WE CAN SHARE YOUR PERSONAL INFORMATION

DOES VAST BANK, N.A. SHARE?

CAN YOU LIMIT THIS SHARING?

For our everyday business purposes-

such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

Yes

For our marketing purposes-

to offer our products and services to you

Yes

For joint marketing with other financial companies

We don't share

For our affiliates' everyday business purposes

information about your transactions and experiences

We don't share

For our affiliates' everyday business purposes

information about your creditworthiness

We don't share

For nonaffiliates to market to you

We don't share

QUESTIONS?

Call toll free (844) 824-5399 or go to vast.bank

WHAT WE DO

How does Vast Bank, N.A. protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Vast Bank, N.A. collect my personal information?

We collect your personal information, for example, when you

Open an account or deposit money
Apply for a loan or give us your income information
Give us r contact information

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can't I limit all sharing?

Federal law gives you the right to limit only

sharing for affiliates' everyday business purposes - information about your creditworthiness
affiliates from using your information to market to you
sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing. [See below for more on your rights under state law.]

DEFINITIONS

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies.

Vast Bank, N.A. has no affiliates.

Non-affiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.

Vast Bank, N.A. does not share with nonaffiliates so they can market to you.

Joint marketing

A formal agreement between non-affiliated financial companies that together market financial products or services to you.

Vast Bank, N.A. doesn't jointly market.

Other Important Information

Special Notice For Nevada Residents

We are providing you this notice pursuant to Nevada law. You may be placed on our internal Do Not Call List by contacting us at 844-825-5399, or go to www.vast.bank. Nevada requires that we provide contact information for the state's Bureau of Consumer Protection to all consumers that do business with us. The contact information for the Bureau of Consumer Protection, of the Office of the Nevada Attorney General is provided below:

Address: 555 East Washington Street, Suite 3900, Las Vegas, Nevada 89101 Phone: (702) 486-3132

Email: BCPINFO@ag.state.nv

Website: https://ag.nv .gov/About/Consumer_Protection/Bureau_of_Consumer_Protection/

Special Notice For Vermont Residents

Under Vermont law, we will not share information we collect about Vermont residents with companies outside of Vast Bank, N.A., unless the law allows. For example, we may share information with your consent, to service your accounts. We will not share information about your creditworthiness or information about our transactions or experiences with you within Vast Bank, N.A.

Special Notice For California Residents

Under California law, we will not share information we collect about you with companies outside of Vast Bank, N.A., unless the law allows. For example, we may share information with your consent, to service your accounts, or provide rewards or benefits you are entitled to. We will limit sharing to the extent required by California law. Please review our California Consumer Privacy Notice with our disclosures.

Special Notice For State Residents

VAST BANK N.A. is chartered, licensed, or registered under the laws of the State of Oklahoma and is subject to regulatory oversight by the Office of Comptroller of the Currency (OCC). Any consumer wishing to file a complaint against VAST BANK N.A. should contact Office of Comptroller of the Currency (OCC) through one of the following means: In person, by U.S. Mail: 400 7th St. SW, RM 3W-408 Washington, DC 20219, Telephone (202) 649-6800, or Email: privacyprogramoffice@occ.treas.gov.

Vast.

Questions? Call toll-free 844-825-5399

DISCLOSURES Revised August 2025

PRIVACY POLICY

What does vast bank, n.a. do with your personal information?

Vast.

RESOURCES