Westpac Banking Corporation MasterCard® SecureCode™ and Verified by Visa Terms and Conditions

Effective date 12 March 2014 1

Overview This Service is provided to you by Westpac without charge. By registering for this Service, through Westpac’s Added Online Security service, your identity as the rightful cardholder can be confirmed when shopping with participating online retailers in the same way you use your PIN or signature at a physical store to ‘authorise’ your transactions. Some participating online retailers may make it a condition that you are registered with this Service before they will accept your Card. Your Password, personal assurance message and other personal data for this Service are not visible to or shared with any participating online retailer. Use of the Service is subject to these Terms and Conditions (“Terms”). You agree to the Terms each time you use the Service. If you do not agree, you may not register for or use the Service. We may amend these Terms at any time. You can review the most current version of these Terms at any time at www.westpac.com.au/cardsecure. Please save or print a copy of these Terms for your records.

2

1. Definitions “Account holder” as provided in the Cardholder Conditions, is the person in whose name an account is conducted and who is responsible for all transactions on the account. “Card” means any authorised Card issued by us to access a nominated account and includes a Debit MasterCard, Business Debit MasterCard, a MasterCard Credit Card, a Visa Credit Card, or Commercial Cards. “Cardholder Conditions” means either the relevant Credit Card Conditions of Use, the Deposit Accounts for Personal and Self Managed Superannuation Fund Customers Terms and Conditions, the Westpac Debit MasterCard Terms and Conditions for Personal Customers, the Business Debit MasterCard Terms and Conditions, the Deposit Account for Business Customers Terms and Conditions, the BusinessChoice Cards Terms and Conditions, the Altitude Business Credit Cards Conditions of Use, the Corporate and Purchasing Cards Conditions of Use, the Employee Benefits Card Facility Terms and Conditions or the Virtual Purchasing Card Conditions Facility Terms and Conditions Card Conditions of Use. “MasterCard” means MasterCard International Incorporated or its affiliates. MasterCard is a registered trademark of MasterCard International Incorporated. “PAM” means personal assurance message. This is a short phrase or quote you establish when you register for the Service, which will appear during the transaction process so that you know you are shopping with a participating online retailer. “participating online retailer” means a merchant who has agreed to participate in the Service and is designated as a participating online MasterCard SecureCode and/or Verified by Visa retailer. “Password” means the password you establish when you register for the Service that you will use to authenticate your payment request or update your profile for this Service. “Registration Data” means the information you provide when registering for the Service, including information about you and your Card. “Security question and answer” means the security question and answer you select when you register for the Service that you will need to use in the event you wish to change your password. “Service” means Verified by Visa for Visa Cardholders and MasterCard SecureCode for MasterCard Cardholders. “Visa” means Visa Worldwide Pte Ltd or its affiliates. “we,” “us,” or “our” means Westpac Banking Corporation. “you,” “your,” or “yours” means the Cardholder using the Service.

2. Cardholder Conditions a. These Terms apply in addition to the Cardholder Conditions. If there is any inconsistency between these Terms and the Cardholder Conditions, these Terms apply to the extent of any inconsistency. b. The provisions of the Cardholder Conditions relating to security and unauthorised transactions apply in relation to the Service as if your Password were a “PIN” or “code” as defined in the Cardholder Conditions.

3

3. Description of Service a. The Service provides you with a way of increasing security in online transactions and other transactions for which the Service is used by reducing the likelihood of fraud for those transactions. The Service may also be used for record keeping and reporting purposes, as well as to help resolve any transaction disputes. b. Once you have registered for the Service and accepted these Terms, you may use the Service to make purchases online with participating online retailers unless your use of the Service is terminated in accordance with clause 7.

4. Authentication a. During registration for the Service, you will be asked to select a: (i) PAM; (ii) Password; and (iii) Security question and answer. b. When engaging in an online transaction or other transaction for which the Service is used: (i) your PAM will be displayed so that you know you are shopping with a participating online retailer; and (ii) you will be asked for your Password before a merchant accepts your Card for the transaction. c. If you are unable to provide your Password, or if the authentication through the Service otherwise fails, the merchant may not accept your Card for that transaction. d. The Service may be used to prove your identity. e. For security purposes, in the event that the allowable number of attempts to authenticate your identity have been exceeded, your Card and any other Cards linked to your account will be temporarily locked, preventing use of the Service. f. The Account holder responsible for operating this account must contact Westpac to unlock all Cards linked to the account. Once the Account holder has re-enabled the account, each of you should go to www.westpac.com.au/cardsecure to re-register if you would like to continue using the Service.

5. Your registration obligations a. When you register for the Service, we will collect and retain your Registration Data. b. You must provide true, accurate, current and complete Registration Data. If you provide any Registration Data that is untrue, inaccurate, not current or incomplete, or if we have reasonable grounds to suspect that your Registration Data is untrue, inaccurate, not current or incomplete, we have the right to suspend, terminate, or refuse your current or future use of the Service.

4

6. Privacy Statement Personal information We collect personal information from you to process your application, provide you with your product or service, and manage your product or service. We may also use your information to comply with legislative or regulatory requirements in any jurisdiction, prevent fraud, crime or other activity that may cause harm in relation to our products or services and help us run our business. We may also use your information to tell you about products or services we think may interest you. If you do not provide all the information we request, we may need to reject your application or we may no longer be able to provide a product or service to you. We may disclose your personal information to other members of the Westpac Group, anyone we engage to do something on our behalf, rewards program administrators and other organisations that assist us with our business. We may disclose your personal information to an entity which is located outside Australia. Details of the countries where the overseas recipients are likely to be located are in our privacy policy. As a provider of financial services, we have obligations to disclose some personal information to government agencies and regulators in Australia, and in some cases offshore. We are not able to ensure that foreign government agencies or regulators will comply with Australian privacy laws, although they may have their own privacy laws. By using our products or services, you consent to these disclosures. We are required or authorised to collect personal information from you by certain laws. Details of these laws are in our privacy policy. Our privacy policy is available at westpac.com.au or by calling 132 032. It covers: • how you can access the personal information we hold about you and ask for it to be corrected; • how you may complain about a breach of the Australian Privacy Principles or a registered privacy code and how we will deal with your complaint; • how we collect, hold, use and disclose your personal information in more detail. We will update our privacy policy from time to time. Direct marketing We will use your personal information to contact you or send you information about other products and services offered by the Westpac Group or its preferred suppliers. Please call us on 132 032 or visit any of our branches if you do not wish to receive marketing communications from us. Other acknowledgments and consents • We may confirm the details of the information provided in this application which includes contacting your employer to confirm salary, address or other personal details. • Where you have provided information about another individual, you must make them aware of that fact and the contents of the Privacy Statement. • This application form is not an offer or acceptance of credit. Definitions “We”, “our”, “us” means Westpac Banking Corporation ABN 33 007 457 141. “Westpac Group” means Westpac Banking Corporation and its related bodies corporate. 5

7. Termination a. Where it is reasonably necessary to do so, we may temporarily or permanently terminate the Service or deactivate your Password and registration. Any records of purchases you made using the Service prior to deactivation will remain valid. b. If you want to terminate your use of the Service you must contact us on 1300 651 089 (available 24 hours a day, 7 days a week).

8. Dealing with merchants a. We do not endorse or recommend any participating online retailer. b. Participating online retailers may impose restrictions on the use of your Card to make an online purchase. c. Please discuss any dispute you have in relation to a purchase you make using the Service with the participating online retailer from whom you make the purchase.

6

This page has been left blank intentionally.

7

8 © 2014 Westpac Banking Corporation ABN 33 007 457 141 AFSL and Australian credit licence 233714

WPBW1019 (03/14) 374856