Confidentiality Policy

Effective Date: January 2026

Gaambit Global Audit & Advisory Services LLC (“Gaambit”, “we”, “our”, “us”) is committed to maintaining the confidentiality and security of all client information entrusted to us in the course of providing audit, tax, advisory, technology, and consulting services.

1. Scope of Confidential Information

Confidential information includes, but is not limited to:

• Financial records and accounting data
• Tax information and compliance documentation
• Business strategies and operational data
• Technology systems and architecture details
• Proprietary processes and intellectual property
• Personal data of employees or stakeholders
• Any information designated as confidential by the client

2. Duty of Confidentiality

All employees, partners, consultants, and service providers of Gaambit are bound by strict confidentiality obligations.

Confidential information is used solely for the purpose of delivering agreed services and is not disclosed to unauthorized parties.

3. Data Protection Measures

We implement appropriate safeguards including:

• Role-based access controls
• Secure systems and encryption
• Cybersecurity protections
• Monitoring and audit procedures

These measures align with our governance, cybersecurity, and risk management practices.

4. Third-Party Access

Where third-party service providers or partners are involved in service delivery, access to confidential information is limited and governed by contractual confidentiality obligations.

5. Legal & Regulatory Disclosure

Confidential information may be disclosed only if required by applicable laws, regulations, or lawful authority in the United Arab Emirates.

6. Retention and Disposal

Confidential information is retained only for as long as necessary to fulfill contractual, legal, or regulatory requirements and is securely disposed of thereafter.

7. Breach Management

In the event of any suspected or actual confidentiality breach, Gaambit will take appropriate corrective actions and, where required, notify affected parties in accordance with applicable laws.

8. Contact Information