CURO Group Holdings Credit Presentation Deck

Public Company Discipline ܡܕ c 111 Q PUBLIC COMPANY TRANSPARENCY Publicly available SEC filings and disclosures EXTERNAL AUDIT External financial statement and SOX audit performed by Deloitte INTERNAL AUDIT Robust eight-member internal audit team ■ ▪ Performs risk-based financial, operational, compliance, technology audits in accordance with IIA (Institute of Internal Auditors) standards INTERNAL CONTROLS SOX framework and controls in place since 2018, tested annually FRAUD DETECTION AND CYBERSECURITY ▪ Industry leading proprietary fraud detection framework ■ CCURO · COMPLIANCE AND RISK Experienced robust compliance team; CCO reports to the board ■ Quarterly presentations to board, annual external penetration testing, social engineering tests and external PCI reviews Enterprise Risk Framework implemented 2020 utilizing COSO ERM Framework Enterprise risk committee reports to the board's Risk and Compliance Committee, which is chaired by independent board member 8

View entire presentation