DingoBlu Financial, Inc. Privacy Policy

Last updated: September 28, 2026

DingoBlu Financial, Inc. (“DingoBlu” or “we” or “us” or “Company”) deposit accounts are issued by MVB Bank, Member FDIC. Below are Privacy Notices and Policies applicable to your DingoBlu account from DingoBlu Financial, Inc. and MVB Bank.

Gramm Leach Bliley Act (GLBA) Privacy Notice

Rev. August 2026

Last updated: September 28, 2026

DingoBlu Privacy Policy

This Privacy Policy (“Policy”) has been adopted by DingoBlu Financial, Inc., along with our affiliates, service providers, and other third parties acting on our behalf (“DingoBlu” or collectively “we” or “our” or “us”) to affirm our commitment to compliance with the applicable privacy provisions of the Gramm-Leach-Bliley Act (“GLBA”) as implemented by Regulation P (“Privacy Rule”), and other applicable privacy laws and regulations. It is the policy of DingoBlu to protect consumer and customer Personally Identifiable Information (“PII”), or any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Examples of PII could include, but are not limited to full name, social security number, passport number, bank account information, credit card number, or driver’s license number. PII is also known as Nonpublic Personal Information (“NPI”).

This Policy outlines regulatory requirements and provides guidelines on DingoBlu’s privacy practices, including how DingoBlu collects, uses, and discloses your information in any of your interactions with us (“Services”). What categories of PII we collect is described in the “PII Collection” section below. Our uses of your PII are described in the “How We Use Your PII” section below. To learn more about how long we retain your PII, please see the “Data Retention” section below. DingoBlu takes necessary steps to safeguard private information that has been provided by its consumers.

By using any of our Services, you consent to the privacy practices described in this Policy. We may update our Policy from time to time. If we make material changes to how we treat PII, we will post the new privacy policy on this page and revise the “Last Updated” date at the top of this Policy and notify you as required by applicable law. You are responsible for periodically visiting this Policy to check for any changes. Depending on your preferences and permissions, you may also receive notifications of changes to this Policy by email, device notifications, or an in-App alert the first time you use the App after we make the change. You are responsible for ensuring we have an up-to-date active and deliverable email address for you so that we may provide such updates to you. We reserve the right to apply the amended terms to the PII that we have already collected, subject to any legal limits.

To the extent any provision of this Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

PII Collection

We collect categories of PII from you through your use of the Services, which may include, but are not limited to, the following:

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
• Signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Biometric information.
• Geolocation data.
• Audio, electronic, visual, or similar information.
• Professional or employment-related information.
• Education information.
• Inferences drawn from any of the other PII identified in this Policy to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
• Sensitive personal information: social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation, citizenship or immigration status, the contents of mail, email, and text messages unless we are the intended recipient of the communication; genetic data; neural data; biometric information; or health information.
• Other PII as appropriate for the Services.

Information We Collect Directly from You.

DingoBlu collects, retains, and uses information for the purpose of providing financial solutions and administering our business relationships. We collect information from applications or other forms, which may include, but is not limited to, surveys and questionnaires. We may also collect information about transactions, information through cookies, and information we receive from your use of the Services.

Information We Collect from Others.

We may also collect information from other sources. These sources include, but are not limited to, the following:

• Banks and Financial Institutions: You may choose to link a bank account to add money to an account, receive a direct deposit, or other related Services. When you link a bank account, we receive financial information related to that account, including your account balance, and may also receive transaction history and information about the account owner. The amount of information we receive depends on your financial institution's own privacy policy. We use a third-party bank account verification provider, Plaid Inc. (“Plaid”), to connect your DingoBlu Account with your bank account(s). Plaid’s use of your PII is governed by Plaid’s Privacy Policy.
• Service Providers and Linked Account Data: We use third-party service providers to perform services for us, including to help us process and authorize your payments and to facilitate ownership of account transfers. By using our Services, you are authorizing us and our third-party service provider(s) to take actions on our behalf such as debiting your account using your selected payment method when you initiate such action.
• Credit Reporting Agencies: We use these services that may provide information related to your credit file, such as your credit score, credit inquiries, and payment history.
• Social Media: When you interact with our Services through social media networks, we may receive information about you that you permit the social media network to share. The data we receive is dependent upon your privacy settings within the social media network.
• Job Applicant-related Third Parties: We may receive PII from job applicant-related third parties, such as job application platforms, your current employer, references, background check providers, and recruiters.
• Publicly Available Sources: We may also collect PII from publicly available sources to, for example, contact you if we are otherwise unable to reach you, or, to send advertising or promotional materials or to personalize our Services.

Information Automatically Collected.

Some information is automatically collected. This includes, but may not be limited to, the following:

• Information about you and your computer or mobile device: This may include your hardware model, operating system info, unique device identifier, mobile network information, device performance information, and information about the device’s interaction with our Services. Note that the DingoBlu App may periodically recollect this information in order to stay up to date. You can review and change permissions for some information the DingoBlu App has access to in your device privacy settings.
• Transaction data: When you use our Services, including if you give us access to collect your financial data from your other accounts, for example payments into and out of such accounts including the date, time, amount, merchant or beneficiary details, or ATMs associated with the transaction.
• Usage data: This may include the electronic path you take to our Services, through our Services and when exiting our Services, as well as your activity information on our Services.
• Location information: We use your PII to protect against fraud. If you have location services in the DingoBlu App enabled, we may track your geolocation and your IP address. You can withdraw your consent at any time by disabling location permission for the DingoBlu App within your device settings. We may use third-party providers to help provide location-based services through mobile systems, and we may make PII available to such providers to enable them to provide their location-based services, provided that such third-party providers may use the PII only in accordance with this Policy.

How We Use Your Personal Information

DingoBlu collects, retains, and uses PII for the purpose of providing the Services, including, but not limited to, financial solutions and administering our business relationships.

DingoBlu uses PII in ways that align with the purposes for which it was originally requested and collected. For example, DingoBlu uses PII to process customer requests and transactions, provide additional information about products and Services, or to evaluate financial needs. DingoBlu collects and uses PII to administer our business and deliver quality Services. This may include advising consumers and customers about our products or Services. We may use PII to communicate with you about DingoBlu products, services, features, benefits, rewards, promotions, offers, and other information that may be of interest to you; personalize communications and experiences; understand engagement with our website, mobile application, and marketing communications; conduct analytics and segmentation; and improve our products, services, marketing programs, and overall client experience. Such uses are subject to applicable law, any required consent, and your communication and privacy preferences.

DingoBlu uses PII we collect in accordance with applicable law, such as to maintain and improve our Services; protect the security and integrity of our Services; investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use; and to otherwise fulfill our legal obligations. For example, we may use PII for: auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance; helping to ensure security and integrity to the extent your PII is reasonably necessary and proportionate for these purposes; debugging to identify and repair errors that impair existing intended functionality; short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of yourcurrent interaction with us, provided that your PII is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction with us; performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services; providing advertising and marketing services, except for cross-context behavioral advertising, to you provided that, for the purpose of advertising and marketing, a service provider or contractor shall not combine PII if you opt out that the service provider or contractor receives from, or on behalf of, the business with personal information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with consumers.

“Commercial purposes” means to advance a person’s commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction. For example, we may use PII to engage in auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance; helping to ensure security and integrity to the extent the use of your PII is reasonably necessary and proportionate for these purposes; debugging to identify and repair errors that impair existing intended functionality; short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with us, provided that your PII is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction with us; performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services; providing advertising and marketing services, except for cross-context behavioral advertising, to you provided that, for the purpose of advertising and marketing, a service provider or contractor shall not combine your PII if you opt-out with PII that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with you; undertaking internal research for technological development and demonstration; undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us; or to advance commercial or economic interests, such as by inducing you to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction.

We may also use PII with your consent or to further any of our other legitimate business purposes not otherwise prohibited under applicable law.

We may collect or use PII for the purpose of training large language models, but we do not sell PII for the purpose of training large language models.

We have not sold or shared for cross-context behavioral advertising any PII in the preceding 12 months. We have no actual knowledge of any sale or sharing of PII of anyone under 16 years of age.

We do not use PII for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals except where required to do so under applicable law.

How We Disclose Your Personal Information

We may disclose PII we collect about you to the extent we are required to do so by law,

such as in response to a subpoena, to prevent fraud, or to comply with a legally permitted inquiry by a government agency or federal regulator. We may also disclose PII we collect about you with any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding, or in preparation for any of these events and that person or entity may use your PII for their own purposes, to enforce our Policy, with any other person or entity where you consent to the disclosure, or for any other purpose disclosed by us when you provide the PII or for any other purpose we deem necessary, including to protect the health or safety of others.

DingoBlu uses third-party service providers to assist with providing quality products and Services to our customers. We may disclose PII we collect with third parties to facilitate the offering, administration, collection, and delivery of products and Services under controlled circumstances designed to protect the privacy of our customers. Our service providers may include third-party marketing, analytics, advertising, or tracking platforms. We require third parties to comply with applicable laws and regulations as well as our requirements regarding security and confidentiality of such information.

We may disclose PII with our affiliates, subsidiaries, or entities that share a common ownership in DingoBlu, partners, other DingoBlu App customers designated by you for the purposes of customer referrals or managing shared pockets, and to third-party service providers for purposes such as risk detection and prevention, customer service, email delivery and other similar services.

We do not use or disclose Sensitive PII for purposes other than those permitted under applicable law.

Other than as required or permitted by law, we will not disclose personal information about you to unaffiliated third parties for their own marketing purposes, unless you provide consent or otherwise authorize us to do so.

We may also disclose anonymized or de-identified aggregate information (this means information that is no longer personal information because it is no longer attributable to a specific individual) with third parties to help deliver products, services, and content that are tailored to the users of the DingoBlu App and for other purposes. We publicly commit to maintain and use the information in deidentified form and not to attempt to reidentify the information.

We may also disclose PII about an individual to certain other third parties or publicly with their consent or direction.

Referral partners. Some customers are introduced to DingoBlu by an independent referral partner. If you were, we may share limited information with that partner, such as your account status and the account activity needed to administer our agreement with them. Wherever we can, we share this information in de-identified or aggregated form, and it never includes your account or card numbers or your login credentials. Referral partners may not use your information for their own marketing. We never share your mobile phone number, text-messaging opt-in or text-messaging consent with any referral partner. You can ask us to stop this sharing at any time by contacting support@dingoblu.com or 1-866-593-4646.

Text Messaging (SMS) Program

If you give us your mobile phone number and agree to receive text messages from DingoBlu, we use your number and your consent only to run the DingoBlu text messaging (SMS) program described in our SMS Messaging Terms at https://www.dingoblu.com/sms-terms. The program sends the verification and login codes you request and, if you opt in, account, security and fraud alerts. Message frequency varies. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We share mobile information with subcontractors that support our services, such as our text message delivery and customer service providers, only as needed to provide the SMS program. All other categories of sharing described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, including referral partners.

We do not send marketing or promotional text messages under this program. We will only send marketing text messages if you give separate, express written consent, and that consent is never a condition of opening an account or buying any product or service.

You can opt out at any time by replying STOP to any DingoBlu text message or by turning off text alerts in the DingoBlu app under Settings > Notifications. For help, reply HELP or contact support@dingoblu.com or 1-866-593-4646.

This section controls over anything else in this Privacy Policy with respect to mobile phone numbers and text messaging opt-in data and consent.

Third-Party Online Advertising, Cookies, & Other Tracking Technologies

• Advertising - We participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your browsing history. We permit third party online advertising networks, social media companies and other third-party services, to collect information about your use of our online Services over time so that they may play or display ads on our Services, on other websites or services you may use, and on other devices you may use. Typically, though not always, the information used for interest-based advertising is collected through tracking technologies, such as cookies, web beacons, embedded scripts, location-identifying technologies, and similar technology, which recognize the device you are using and collect information, including clickstream information, browser type, time and date you visited the DingoBlu App, AdID, precise geolocation and other information. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help identify you across devices. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. We may also use services provided by third parties (such as social media platforms) to serve targeted ads to you and others on such platforms. We may do this by providing a hashed version of your email address or other information to the platform provider.
• Social Media Widgets and Advertising - DingoBlu may use social media platforms like Instagram, Facebook, Twitter, and LinkedIn. We may display targeted advertising to you through these social media platforms. These companies have interest-based advertising programs that allow us to direct advertisements while those users are on the social media platform. We may share a unique identifier, such as a user ID or hashed email address, with these platform providers or they may collect information from our website visitors through a first-party pixel. These activities are governed by the privacy policies of those social media companies that provide them.
• Third Party Partners - We may use third-party analytics on our Services. For example, we use Google Analytics to better understand how you interact with our Services. The information we obtain through our Services may be disclosed to or collected directly by these third parties. To learn more, see Google Analytics.
• Cookies - We and our third-party partners may also use cookies and tracking technologies for advertising purposes. DingoBlu uses various technologies to collect information, and this may include sending cookies to your computer or mobile device. “Cookies” are small text files that are stored on your device or hardware by a website. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies (https://www.allaboutcookies.org/).

On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please refer to this section for guidance on how to modify your web browser’s settings. Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of our websites and you may not be able to benefit from the full functionality of our websites.

Advertising networks may use cookies to collect PII. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org and follow the opt-out instructions there.

If you access the Services on your mobile device, you may not be able to control tracking technologies through the settings.

• Email Pixels - We use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.
• Analytics - We may also use analytics tools such as Google Analytics to collect information regarding visitor behavior and visitor demographics on our Site and develop website content. This data is not tied to any Personal Information. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and Processing of data generated by your use of the Site by going to http://tools.google.com/dlpage/gaoptout.
• Online Tracking and “Do Not Track” Signals - We and our third party service providers, including Facebook, may use cookies, pixels, or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site and use that information to send targeted advertisements. Our Site currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Policy whether or not a DNT signal is received.

Our Services recognize and respond to the Global Privacy Control ("GPC") signal or other opt-out preference signals as a valid opt-out request for the sharing of your PII for targeted advertising where required by applicable law. If you choose to use the GPC signal, please note that you will need to turn it on for each supported browser or browser extension you use. For more information and to download a browser or extension supporting GPC, visit https://globalprivacycontrol.org/orgs.

Security

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

Your Privacy Choices

Below are some ways to manage your information with DingoBlu.

Updating your Information - Once you have registered for an Account, you may be able to update or correct your profile information details and preferences by accessing your account settings through the DingoBlu App, or by contacting us at support@dingoblu.com or write to us at: DingoBlu, DingoBlu Financial, Inc PO BOX 480220, Charlotte, NC 28269

See below to learn more about your “State Privacy Rights”.

Data Retention

We may retain the information you submit for a variety of purposes, including legal compliance, backups and archiving, prevention of fraud and abuse, and analytics. Upon deactivation, you will no longer receive emails from DingoBlu and links to third-party financial accounts and services will automatically terminate. If you have a money transfer transaction pending at the time you deactivate your account, your link to this service from DingoBlu will terminate but your pending transfer will continue to completion, and your bank account will remain open.

We will not retain PII collected for longer than is reasonably necessary for the disclosed purpose for such collection, subject to various criteria used to determine that retention period, such as the business relationship between you and us as well as any legal obligations to retain such information.

Children’s Privacy

The Services are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose PII from children under 13.

Linking to Other Websites

We may provide links to other websites. If you are notified that you are leaving our Services, we are not responsible for the privacy or security of the websites you visit. This includes the accuracy, completeness, reliability, or suitability of the information on these third-party websites. We encourage you to read the privacy policies of these third-party websites to learn how they collect, use, disclose, and secure your information.

Applicable State Laws

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data.

Your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your PII and to access such PII and the categories of PII we are processing or have processed;
• The right to obtain a copy of your PII that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
• The right to obtain a list of specific third parties to which we have disclosed PII.
• The right to delete PII that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate PII that we maintain about you, subject to certain exceptions;
• The right to opt-out of the selling or sharing (for cross-contextual behavior advertising) of PII to third parties.
• The right, if applicable, to opt out of the processing of your PII for purposes of (1) targeted advertising; (2) the “sale” of your PII (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If your PII is profiled in furtherance of decisions that produce legal or similarly significant effects concerning you, you have the right to question the result of the profiling, to be informed of the reason that the profiling resulted in the decision, and, if feasible, to be informed of what actions you might have taken to secure a different decision (and the actions that you might take to secure a different decision in the future). If applicable, you also have the right to review the PII used in the profiling and, if the decision is determined to have been based upon inaccurate PII, the right to have the data corrected and the profiling decision reevaluated based upon the corrected data;
• If we are required by applicable law to obtain your consent to process sensitive PII, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

To exercise any privacy rights you may have under state law, including how to appeal a prior decision of ours regarding a privacy request, contact us at: by email to support@dingoblu.com or by calling 1-866-593-4646. A parent, guardian, or other authorized agent may make a request on your behalf. We will not discriminate or retaliate against you for exercising any of your privacy rights.

For purposes of this section the term “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer/resident or household. Personal information does not include information that has been de-identified or that does not fall within the above definition of personal information.

Accessibility

We are committed to ensuring this Policy is accessible to individuals with disabilities. If you wish to access this Policy in an alternative format, please contact us as described below.

Contact Information

For questions, concerns, comments, or complaints about this privacy policy and/or our privacy practices or to obtain a copy of this Privacy Policy in alternative format, contact us at support@dingoblu.com