Environmental, Social, and Governance Policy

PataPass Africa Limited is committed to delivering digital ticketing and event commerce services responsibly. We aim to reduce environmental impacts, respect human rights, protect customers and workers, and conduct business with integrity. This policy sets the expectations that will guide our decisions, relationships and service delivery upon adoption.

Our priorities reflect the activities we undertake and influence: online ticket sales, digital authentication, customer communications, payment integrations, access verification and event support. Digital services have environmental and social impacts of their own, including energy use, electronic waste, accessibility barriers and risks to personal information. We will assess and manage these impacts alongside the benefits of reduced physical ticket production and distribution.

This policy applies to PataPass Africa Limited across all locations in which it operates and to its directors, employees, temporary workers and contractors. It covers the goods and services we procure and supply, including software, hosting, payment services, devices, ticket distribution, customer support and contracted event operations.

Suppliers and subcontractors are expected to meet relevant requirements through procurement, onboarding and contractual arrangements. For event organisers, venues and other partners outside our direct control, we will agree responsibilities and use our commercial influence to encourage responsible practices. This policy does not automatically bind our parent company or other group entities.

It applies to any CAF Pamoja AFCON 2027 services awarded to PataPass, within the scope of our contracted responsibilities. It does not imply that an award has been made.

We will make digital tickets and electronic communications the default. Where printing is necessary for accessibility, continuity or operational reasons, we will minimise volumes and favour responsibly sourced materials. We will avoid transferring environmental costs to customers through unnecessary printing requirements.

We will record the proportion of digital and printed tickets where we control issuance. Claims about paper savings or avoided emissions must identify the baseline, method and limitations; digital ticketing alone will not be presented as evidence of carbon neutrality.

We will promote efficient use of office equipment, devices and digital infrastructure. Technology procurement and service reviews will consider energy efficiency, useful equipment life and credible information about hosting providers' environmental performance, alongside security, reliability and cost.

During the first year following adoption, we will establish a proportionate baseline for available electricity, business travel and relevant supplier data. Where information is unavailable, we will disclose the gap. Any subsequent emissions inventory will state its reporting boundary, calculation approach and data limitations before reduction targets are announced.

We will prioritise maintenance, repair, reuse and responsible disposal of equipment. Electronic waste will be transferred to appropriately authorised handlers where required, with records retained. Devices containing customer or business information must be securely erased or destroyed before disposal or transfer.

For event support materials within our control, we will favour reusable equipment and minimise unnecessary packaging and single-use items. We will work with venue and event partners on practical waste arrangements relevant to our contracted activities.

We will use remote collaboration where effective, consolidate necessary journeys and consider lower-impact travel options that meet operational needs. Event planning will assess the environmental implications of staffing, equipment movement and temporary installations under our control.

We will comply with applicable environmental requirements in each operating jurisdiction, maintain relevant records and act promptly on incidents. Where a supplier or partner controls the affected activity, we will raise the issue, agree corrective action and escalate unresolved material concerns.

We prohibit forced labour, human trafficking, child labour, harassment and discrimination in our operations and supply relationships. We require lawful wages and working hours, fair recruitment, safe work and respect for freedom of association and collective bargaining. Workers must not be charged recruitment fees or have identity documents retained to restrict their freedom.

Employment and advancement decisions will be based on relevant skills and fair criteria. We will promote equal opportunity, reasonable accommodation and respectful treatment regardless of personal characteristics protected by applicable law. Personnel must be able to raise concerns without retaliation.

We will assess risks associated with our workplaces, temporary deployments, electrical equipment, travel and public-facing work. Employees and contractors will receive relevant safety instruction, escalation contacts and equipment appropriate to their tasks. Personnel must report hazards and may withdraw from an immediate serious danger and notify their supervisor without retaliation.

For each event assignment, we will agree with the organiser and venue who is responsible for crowd safety, emergency response, gate operations and accessibility. Our access verification and virtual queueing services will support orderly admission, but do not replace the venue's physical crowd management arrangements. We will plan for outages, failed scans and assisted entry within our remit.

We will identify barriers to purchasing and using tickets, including disability, connectivity, device access and payment constraints. We will test priority customer journeys, provide clear instructions and maintain assisted support appropriate to each event. Improvements will be informed by customer feedback and practical accessibility reviews.

Prices, mandatory charges, ticket conditions and applicable cancellation, transfer, resale and refund terms must be clear before purchase. We will communicate material changes promptly, handle complaints fairly and use proportionate measures against bots, duplicate tickets and fraud. Controls must allow legitimate customers to seek assistance when access is incorrectly blocked.

We will collect personal information only for defined, legitimate purposes, limit access and retention, and apply appropriate technical and organisational safeguards. Suppliers handling data must have suitable contractual and security arrangements. Privacy information must explain relevant processing and how people can exercise applicable rights.

Security and privacy incidents will be escalated promptly, investigated and addressed, with notifications made where required. Identity verification must be necessary and proportionate; this policy does not authorise access to government databases or the collection of additional identity data.

The Board or authorised governing body will approve this policy, oversee material ESG risks and review progress at least annually. Executive management is accountable for implementation, resources and corrective action until a senior ESG lead is formally designated. Appointment of that lead is planned within three months of adoption.

The ESG lead will coordinate risk reviews, maintain objectives and evidence, organise training, oversee grievance tracking and supplier monitoring, and report to executive management quarterly. Operational managers remain responsible for applying the policy within their functions. The designation will record the individual's name, senior management grade, authority and reporting line.

We prohibit bribery, corruption, facilitation payments and fraudulent conduct. Personnel must disclose conflicts of interest, avoid improper gifts or inducements, keep accurate records and protect confidential information. Procurement and commercial decisions must be transparent, appropriately authorised and supported by records.

Public statements, tender responses and marketing claims must accurately distinguish implemented practices, planned improvements and verified results. We will not claim certification, independent assurance or quantified achievements without supporting evidence.

Our ethical sourcing requirements cover human rights, labour conditions, health and safety, environmental management, business integrity and data protection. Animal welfare requirements will be considered where relevant to a purchase. Suppliers must communicate applicable requirements to subcontractors supporting PataPass services.

We will maintain a register of direct suppliers and assess their risks according to service criticality, workforce exposure, location, environmental impact and access to personal information. Reviews may include declarations, relevant documentation, discussions and follow-up checks proportionate to the risk.

Visibility is strongest for direct suppliers at Tier 1. Tier 2 visibility depends on disclosed subcontractors and underlying providers; visibility at Tier 3 and beyond is limited. We will request further information for higher-risk relationships and record gaps rather than imply complete traceability.

Supplier performance reviews will assess relevant policy requirements and concerns raised by workers, customers or partners. Where a breach is identified, we will agree corrective actions, responsible persons and deadlines, and verify progress. Serious or unresolved breaches may lead to suspension or termination, considering potential harm to affected people and continuity obligations.

Current operational reviews will be developed into documented monitoring arrangements. Formal internal management system audits and possible independent assessments are planned; this policy does not represent an existing certified management system.

Employees, supplier workers, contractors, customers and affected community members may raise ESG concerns through PataPass's published company contact channels or directly with management. Reports may be made by the affected person or a representative, without charge. Anonymous concerns will be considered where sufficient information is available.

Before public release, PataPass will publish a monitored grievance contact alongside this policy and explain how to escalate a concern involving the usual recipient. Such concerns will go to an uninvolved senior manager or the governing body. Assistance will be available for people who face language, disability or digital access barriers.

We will restrict disclosure to those who need the information to assess or resolve a concern, subject to lawful requirements. We prohibit retaliation against anyone raising a concern in good faith or assisting an investigation. Our process does not restrict access to courts, regulators, trade unions or other independent mechanisms.

We will aim to acknowledge complaints within five working days and provide a substantive response or progress update within twenty working days. Immediate safety, safeguarding or security threats will be escalated without delay. Complex cases will receive an explanation and a revised update date; these service targets do not promise resolution within twenty days.

An impartial reviewer will record the issue, assess evidence and consult affected people where appropriate. Where PataPass caused or contributed to harm, we will provide or cooperate in appropriate remedy. This may include correction of a service, repayment where due, restoration of access, an apology or measures to prevent recurrence. Where harm is linked through a supplier, we will use our influence to seek remedy and monitor follow-through.

Complainants may request review by an uninvolved senior manager or the governing body. Outcomes will be communicated where contact is possible and privacy permits. We will retain a secure grievance register and use anonymised trends to improve practices.

We will build on staff briefings and operational guidance by documenting ESG induction and annual refresher training. Content will cover resource use, fair treatment, accessibility, safe event work, ethical procurement, privacy, anti-bribery and grievance handling, tailored to the role. Attendance and completion will be recorded.

This policy will be made publicly accessible following adoption and communicated to employees, clients, suppliers and delivery partners. Relevant obligations will be included in project planning, supplier onboarding and contractual requirements.

Formal external sustainability reporting is planned. Our first public progress update will be issued within twelve months of adoption and annually thereafter, covering performance, missed targets, corrective actions and data limitations. Commercially sensitive and personal information will be protected. PataPass does not currently hold ISO 14001, ISO 45001 or ISO 20121 certification; certification may be considered as its framework develops.