REGULATORY FRAMEWORK

Compliance

Unggul Axiom Group operates under rigorous regulatory oversight, maintaining institutional-grade compliance standards across all jurisdictions of operation.

1. Regulatory Oversight

Unggul Bronto Sdn. Bhd. (Registration No: 202301027920) operates as a Malaysian-registered investment holding company subject to the regulatory jurisdiction of the Companies Commission of Malaysia (SSM) and applicable provisions of the Companies Act 2016.

The Group's business activities encompass investment holding and strategic development within the halal economy, including halal food production, halal agri-tech, pharmaceuticals, logistics infrastructure, halal supply chain certification, smart agriculture systems, food security infrastructure, livestock integration, and agri-technology innovation. Additional activities include venture building, project development, and strategic partnerships.

Operations span multiple regulatory domains including agricultural production, food processing, pharmaceutical manufacturing, logistics infrastructure, and financial services. Each operational vertical maintains compliance with sector-specific regulatory requirements administered by relevant Malaysian authorities including the Ministry of Agriculture and Food Security, Department of Veterinary Services, Malaysian Quarantine and Inspection Services, National Pharmaceutical Regulatory Agency, and Securities Commission Malaysia where applicable.

As an infrastructure platform operating within the global halal economy, the Group adheres to international standards governing halal certification, food safety, supply chain integrity, and cross-border trade facilitation.

2. Corporate Governance Framework

2.1 Board Oversight

The Group maintains a structured board governance framework with clearly defined roles, responsibilities, and accountability mechanisms. Board composition reflects appropriate expertise across infrastructure development, agricultural operations, financial management, and regulatory compliance.

Board committees address specialized oversight functions including audit and risk management, investment evaluation, regulatory compliance, and strategic planning. Committee charters define scope, authority, and reporting obligations to ensure effective governance execution.

2.2 Management Structure

Executive management operates under delegated authority from the Board, with clear reporting lines and accountability frameworks. Management committees coordinate cross-functional operations, risk assessment, compliance monitoring, and strategic initiative execution.

2.3 Internal Controls

The Group implements comprehensive internal control systems addressing financial reporting accuracy, operational efficiency, asset protection, and regulatory compliance. Control frameworks undergo regular assessment and enhancement to address evolving risks and regulatory requirements.

3. Financial Compliance

3.1 Financial Reporting Standards

Financial statements are prepared in accordance with Malaysian Financial Reporting Standards (MFRS), which are substantially aligned with International Financial Reporting Standards (IFRS). The Group maintains rigorous accounting policies, internal controls, and disclosure practices to ensure financial reporting integrity.

Annual financial statements undergo independent audit by qualified external auditors registered with the Malaysian Institute of Accountants. Audit scope encompasses financial position, operational results, cash flows, and compliance with applicable accounting standards and regulatory requirements.

3.2 Tax Compliance

The Group maintains full compliance with Malaysian tax legislation including the Income Tax Act 1967, Goods and Services Tax Act 2014 (where applicable), and related tax regulations. Tax positions are supported by appropriate documentation, professional advice, and transparent disclosure to tax authorities.

Transfer pricing policies for inter-company transactions adhere to arm's length principles consistent with OECD guidelines and Malaysian transfer pricing regulations. Documentation standards meet statutory requirements for contemporaneous preparation and maintenance.

3.3 Anti-Money Laundering

The Group implements comprehensive anti-money laundering (AML) and counter-terrorism financing (CTF) controls consistent with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and related regulations.

AML/CTF framework encompasses customer due diligence, enhanced due diligence for high-risk counterparties, ongoing transaction monitoring, suspicious activity reporting, record retention, and employee training. Compliance procedures are regularly reviewed and updated to reflect regulatory developments and emerging risks.

4. Operational Compliance

4.1 Food Safety and Quality

Production facilities operate under stringent food safety management systems aligned with international standards including Hazard Analysis and Critical Control Points (HACCP), Good Manufacturing Practices (GMP), and ISO 22000 Food Safety Management.

Quality assurance protocols encompass raw material sourcing, production process controls, finished product testing, traceability systems, and continuous improvement mechanisms. Regular audits by internal quality teams and external certification bodies verify ongoing compliance and system effectiveness.

4.2 Environmental Compliance

Operations comply with the Environmental Quality Act 1974 and related environmental regulations governing air emissions, water discharge, waste management, and environmental impact assessment. Environmental management systems address pollution prevention, resource efficiency, and environmental performance monitoring.

The Group maintains necessary environmental permits and licenses, conducts regular environmental monitoring, and implements corrective actions to address any identified non-conformances. Environmental compliance reporting meets statutory requirements and stakeholder expectations.

4.3 Occupational Health and Safety

Workplace safety programs comply with the Occupational Safety and Health Act 1994 and industry-specific safety regulations. Safety management systems address hazard identification, risk assessment, control implementation, incident investigation, and continuous improvement.

Employee training, safety equipment provision, emergency preparedness, and regular safety audits ensure ongoing compliance and workplace safety performance. Safety metrics are monitored and reported to management and regulatory authorities as required.

5. Data Protection and Privacy

The Group maintains comprehensive data protection compliance aligned with the Personal Data Protection Act 2010 (PDPA) and international data protection standards. Data protection framework encompasses lawful processing principles, consent management, data subject rights, security safeguards, and breach notification procedures.

A designated Data Protection Officer oversees compliance implementation, conducts privacy impact assessments, manages data subject requests, and coordinates with regulatory authorities. Regular audits and employee training ensure ongoing compliance and privacy awareness throughout the organization.

Cross-border data transfers comply with applicable legal requirements including adequacy assessments, standard contractual clauses, or other approved transfer mechanisms. Third-party processors are subject to contractual data protection obligations and regular compliance verification.

6. Trade and Export Compliance

International trade operations comply with Malaysian customs regulations, export control laws, and destination country import requirements. Trade compliance framework addresses product classification, valuation, origin determination, licensing requirements, and documentation standards.

The Group maintains awareness of international sanctions regimes and export control restrictions, implementing screening procedures to prevent prohibited transactions. Trade compliance personnel receive regular training on regulatory developments and compliance obligations.

Halal certification for export products meets requirements of destination country halal authorities, ensuring market access and regulatory acceptance. Certification documentation, traceability records, and quality attestations support smooth customs clearance and regulatory compliance.

7. Ethics and Conduct Standards

7.1 Code of Conduct

The Group maintains a comprehensive Code of Business Conduct and Ethics applicable to all directors, officers, employees, and representatives. The Code addresses conflicts of interest, confidentiality obligations, fair dealing, protection of company assets, compliance with laws, and reporting of violations.

All personnel receive Code training upon joining and periodic refresher training thereafter. Acknowledgment of Code obligations is documented and maintained. Violations are subject to disciplinary action up to and including termination of employment or engagement.

7.2 Anti-Corruption

The Group maintains zero tolerance for bribery and corruption in all forms. Anti-corruption policies comply with the Malaysian Anti-Corruption Commission Act 2009 and international anti-corruption standards including the UK Bribery Act and US Foreign Corrupt Practices Act where applicable.

Anti-corruption framework encompasses prohibition of improper payments, gifts and hospitality policies, third-party due diligence, and reporting mechanisms. Regular risk assessments identify corruption risks and inform control enhancements.

7.3 Whistleblower Protection

The Group maintains confidential reporting channels for employees and stakeholders to report suspected violations of law, regulation, or company policy. Whistleblower protection policies prohibit retaliation against individuals making good faith reports.

Reports are investigated promptly and thoroughly by appropriate personnel. Investigation findings inform corrective actions, disciplinary measures, and compliance program enhancements. Reporting and investigation records are maintained in accordance with legal requirements.

8. Risk Management

The Group implements enterprise risk management (ERM) framework addressing strategic, operational, financial, and compliance risks. Risk management processes encompass risk identification, assessment, mitigation, monitoring, and reporting.

Risk appetite and tolerance levels are established by the Board and inform strategic decision-making and operational planning. Risk registers document identified risks, control measures, residual risk levels, and action plans for risk mitigation.

Regular risk assessments evaluate emerging risks including regulatory changes, market developments, operational disruptions, and cybersecurity threats. Risk management reporting provides Board and management visibility into risk exposure and mitigation effectiveness.

9. Third-Party Management

Third-party relationships are subject to due diligence, contractual controls, and ongoing monitoring to ensure compliance with Group standards and regulatory requirements. Due diligence scope addresses financial stability, operational capability, regulatory compliance, and reputational considerations.

Contracts with suppliers, service providers, and business partners include appropriate compliance obligations, audit rights, and termination provisions. High-risk third parties undergo enhanced due diligence and more frequent monitoring.

Third-party performance and compliance are monitored through regular reviews, audits, and performance metrics. Non-compliance issues trigger corrective action requirements and, if unresolved, relationship termination.

10. Compliance Monitoring and Reporting

Compliance function maintains ongoing monitoring of regulatory developments, conducts compliance assessments, and coordinates regulatory reporting obligations. Compliance monitoring activities include transaction reviews, policy compliance testing, and regulatory change impact analysis.

Compliance reporting provides Board and management visibility into compliance status, identified issues, remediation progress, and emerging regulatory risks. Regulatory filings and notifications are submitted accurately and timely in accordance with applicable requirements.

Internal audit function provides independent assurance regarding compliance program effectiveness, internal control adequacy, and risk management processes. Audit findings inform compliance program enhancements and management action plans.

11. Continuous Improvement

The Group is committed to continuous enhancement of compliance programs, internal controls, and risk management processes. Improvement initiatives are informed by regulatory developments, industry best practices, internal assessments, and stakeholder feedback.

Compliance training programs ensure personnel understand their obligations and can identify and escalate compliance concerns. Training content is tailored to role-specific risks and updated to reflect regulatory changes and lessons learned from compliance events.

Compliance culture is reinforced through tone from the top, accountability mechanisms, recognition of compliance excellence, and transparent communication regarding compliance expectations and performance.

12. Contact Information

For compliance-related inquiries, regulatory matters, or to report compliance concerns:

Compliance Department

Unggul Bronto Sdn. Bhd.

Registration No: 202301027920 (1521843-P)

Kuala Lumpur, Malaysia

Email: compliance@unggulaxiom.com