CD Projekt — Audit Report / Information 2020

Apr 22, 2021

Independent Auditor's Report on Annual Consolidated Financial Statements

Grant Thornton Polska Sp. z o.o. sp. k. ul. Abpa Antoniego Baraniaka 88 E 61-131 Poznań

T +48 61 62 51 100 F +48 61 62 51 101 www.GrantThornton.pl

Polska

For the Shareholders of CD PROJEKT Spółka Akcyjna

Report on the Annual Consolidated Financial Statements

Opinion

We have audited the annual consolidated financial statements of the Group (the Group), in which the parent entity is CD PROJEKT Spółka Akcyjna. (the Parent) with its registered office in Warsaw, Jagiellońska 74 Street, which comprise the consolidated statement of financial position as of December 31, 2020, and the consolidated statement of profit or loss consolidated statement of comprehensive income, consolidated statement of changes in equity, consolidated statement of cash flows for the financial year then ended, and notes, comprising a summary of significant accounting policies and other explanatory notes.

In our opinion, the accompanying annual consolidated financial statements:

• give a true and fair view of the financial position of the Group as of December 31, 2020 and of its financial performance and of its cash flows for the financial year then ended in accordance with the International Accounting Standards, International Financial Reporting Standards and related interpretations published in the form of European Commission regulations and adopted accounting principles (policy),
• comply with the laws affecting the content and form of the annual consolidated financial statements and the provisions of the Parent's articles of association.

The audit opinion is consistent with the additional report to the Audit Committee submitted on the same day as this audit report.

Audit – Tax – Accounting – Advisory Member of Grant Thornton International Ltd

Grant Thornton Polska Spółka z ograniczoną odpowiedzialnością sp. k. Audit Firm No. 4055.

General partner: Grant Thornton Polska Sp. z o.o. General Partner's Management Board: Tomasz Wróblewski – President of the Board,

Poland. Tax identification number NIP: 782-25-45-999. REGON: 302021882. Bank account: 31 1090 1476 0000 0001 3554 7340. District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, KRS No. 0000407558.

Dariusz Bednarski – Vice-President of the Board, Jan Letkiewicz – Vice-President of the Board. Registered office address: ul. Abpa Antoniego Baraniaka 88 E, 61-131 Poznań,

Basis for Opinion

We conducted our audit in accordance with

• the Act of May 11, 2017 on statutory auditors, audit firms, and public supervision (uniform text: Journal of Laws of 2020, item 1415) (the Act on Statutory Auditors),
• International Standards on Auditing adopted as National Standards on Auditing (NSA) by the National Council of Statutory Auditors' resolution No. 3430/52a/2019 of March 21, 2019, as amended and
• Regulation (EU) No. 537/2014 of the European Parliament and of the Council of April,16 2014 on specific requirements regarding statutory audit of public-interest entities and repealing Commission Decision 2005/909/EC (OJ L 158, 27.5.2014, p. 77 and OJ L 170, 11.6.2014, p. 66) (the Regulation 537/2014).

Our responsibilities under those standards are further described in the Auditor's Responsibilities for the Audit of the Annual Consolidated Financial Statements section of our report.

We are independent of the entities comprising the Group in accordance with the International Ethics Standards Board for Accountants' International Code of Ethics for Professional Accountants (including International Independence Standards) (IESBA Code) adopted by the National Council of Statutory Auditors' resolution No. 3431/52a/2019 of March 25, 2019 together with the ethical requirements that are relevant to our audit of the financial statements in Poland. In particular, in conducting the audit the Key Audit Partner and the Audit Firm remained independent of the entities comprising the Group in accordance with the provisions of the Act on Statutory Auditors and the Regulation 537/2014. We have fulfilled our other ethical responsibilities in accordance with these requirements and the IESBA Code.

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion.

Key Audit Matters

Key audit matters are those matters that, in our professional judgment, were of most significance in the audit of the annual consolidated financial statements of the current period. They include the most significant assessed risks of material misstatement, including assessed risk of material misstatement due to fraud. These matters were addressed in the context of the audit of the annual consolidated financial statements as a whole, and in forming the auditor's opinion thereon. Below, we provided a summary of our response to those risks and where relevant, key observations arising with those risks. We do not provide a separate opinion on these matters.

The risk of improper recognition of revenues in the relevant reporting period	Auditor's response
Sales revenue recognition is based on granting a license for the distribution of games	As part of the audit, we documented our understanding of the revenue recognition process and identified key elements of internal control as part of this process.
Due to the valuable significance of this revenue item and the use of information from an external entity in the valuation process, this has been identified as one of the key risks of the audit.	The audit procedures carried out in this area included: • review of the accounting policy in the part concerning the recognition of revenues and related estimates and judgments,
Disclosures of sales revenues are presented in note 1 and provisions for returns in note 35 to the financial statements.	• detailed substantive tests, including analysis of transactions at the ends of reporting periods (including Cyberpunk 2077 premiere).
	• analytical procedures consist in particular in the analysis of sales and margins and their trends, broken down into months and years,
	• Analysis and substantive procedures on provisions for returns.

Expenses for development works (ongoing and completed) Auditor's response

The company has significant expenditures for unfinished and completed development works.

Determining the scope of development expenditures to be capitalized in assets, determining the expected useful life of capitalized expenditures and their assessment in in the context of impairment involve making significant accounting judgments and estimates. Accordingly, we identified this as the key audit matter.

Disclosures of development works revenues are presented in note 11 to the financial statements.

As part of the audit, we documented our understanding of the process of allocating expenditures for development works, the moment of acceptance for use, and the depreciation methods and rates for completed development works.

The procedures carried out in this area also included:

• detailed substantive tests of the correctness of allocation of expenditures for development works
• verification of internal control and correct operation of the dedicated IT system operation

• assessment of indication of and impairment tests of finished development works and work in progress,

• assessment of the correctness of the adopted rates and methods of deprecation of CP 2077 development works

In connection with the complications related to the premiere of a new game, additional claims may arise against the company.

In the last quarter of 2020, the premiere of the game Cyberpunk 2077 took place. In addition to the recognition of revenues and costs as well as assets and liabilities related to the sale of the game in the financial statements, the Management Board of the Company also analysed claims against the Company related to the premiere of the game by its buyers and distributors, both those reported up to the date of the financial statements, as well as any possible future claims. The assessment of these claims and the inclusion of their results in the financial statements required the Management Board to make significant accounting judgments and estimates, therefore we identified this issue as the key audit matter.

Disclosures about these events are presented in notes 46 and 35 to the financial statements

Risk of claims Auditor's response

As part of our audit we documented our understanding of the current state. The procedures carried out in this area also included:.

• Interview with the Management Board about the potential legal consequences of the hacker attack,

• Interview with the Management Board about potential disputes in the United States of America,

• Analysis of correspondence with Competition and Consumer Protection Office,
• Analysis of letters from lawyers who provide legal services to the company,

• Assessment of the correctness and completeness of disclosures made in the financial statements and verification of the completeness of the provisions related to sale of the game.

Responsibilities of Management Board and Supervisory Board of the Parent for the Annual Consolidated Financial Statements

The Management Board of the Parent is responsible for the preparation of these annual consolidated financial statements that give a true and fair view of the financial position, financial performance and cash flows of the Group in accordance with the International Accounting Standards, International Financial Reporting Standards and related interpretations published in the form of European Commission regulations, adopted accounting

principles (policy), legal regulations, and the Parent's articles of association. The Management Board of the Parent is also responsible for such internal control as the Management Board determines is necessary to enable the preparation of annual consolidated financial statements that are free from material misstatements, whether due to fraud or error.

In preparing the annual consolidated financial statements, the Management Board of the Parent is responsible for assessing the Group's ability to continue as a going concern, disclosing, as applicable, matters related to going concern and using the going concern basis of accounting unless the Management Board of the Parent either intends to liquidate the Group or to cease the operations, or has no realistic alternative but to do so.

In accordance with the Accounting Act of September 29, 1994 (uniform text: Journal of Laws of 2021, item 217, as amended) (the Accounting Act), the Management Board and the Supervisory Board of the Parent are obliged to assure compliance of the annual consolidated financial statements with the requirements of the Accounting Act. The Supervisory Board of the Parent is responsible for overseeing the Group's financial reporting process.

Auditor's Responsibilities for the Audit of the Annual Consolidated Financial Statements

Our objectives are to obtain reasonable assurance about whether the annual consolidated financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor's report that includes our opinion. Reasonable assurance is a high level of assurance, but is not a guarantee that an audit conducted in accordance with NSAs will always detect a material misstatement when it exists. Misstatements can arise from fraud or error and are considered material if, individually or in the aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of these annual consolidated financial statements.

The scope of the audit does not include assurance on the future viability of the Group or on the efficiency or effectiveness with which the Management Board of the Parent has conducted or will conduct the affairs of the Group.

As part of an audit in accordance with NSAs, we exercise professional judgment and maintain professional skepticism throughout the audit. We also:

• Identify and assess the risks of material misstatement of the annual consolidated financial statements, whether due to fraud or error, design and perform audit procedures responsive to those risks, and obtain audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control.
• Obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Group's internal control.
• Evaluate the appropriateness of accounting policies used and the reasonableness of accounting estimates and related disclosures made by the Management Board of the Parent.
• Conclude on the appropriateness of the Management Board of the Parent's use of the going concern basis of accounting and based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the Group's ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor's report to the related disclosures in the annual consolidated financial statements or, if such disclosures are inadequate, to modify our opinion. Our conclusions are based on the audit evidence obtained up to the date of our auditor's report. However, future events or conditions may cause the Group to cease to continue as a going concern.

• Evaluate the overall presentation, structure and content of the annual consolidated financial statements, including the disclosures, and whether the annual consolidated financial statements represent the underlying transactions and events in a manner that achieves fair presentation.
• Obtain sufficient appropriate audit evidence regarding the financial information of the entities or business activities within the Group to express an opinion on the annual consolidated financial statements. We are responsible for the direction, supervision and performance of the group audit. We remain solely responsible for our audit opinion.

We communicate with the Supervisory Board of the Parent regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant deficiencies in internal control that we identify during our audit.

We also provide the Supervisory Board of the Parent with a statement that we have complied with relevant ethical requirements regarding independence, and to communicate with them all relationships and other matters that may reasonably be thought to bear on our independence, and where applicable, related safeguards.

From matters communicated with the Supervisory Board of the Parent, we determine those matters that were of most significance in the audit of the consolidated financial statements of the current period and are therefore the key audit matters. We describe these matters in our auditor's report unless law or regulation precludes public disclosure about the matter or when, in extremely rare circumstances, we determine that the matter should not be communicated in our report because the adverse consequences of doing so would reasonably be expected to outweigh the public interest benefits of such communication.

Other Information including the Report on the Group's operations

The other information comprises the Report on the Group's operations for the financial year ended December 31, 2020, the Corporate Governance Statement which is a separate part of the Report on the Group's operations and the Annual Report for the year ended December 31, 2020 (but does not include the consolidated financial statements and our auditor's report thereon).

Responsibilities of the Management Board and the Supervisory Board of the Parent

The Management Board of the Parent is responsible for the preparation of the other information in accordance with the Accounting Act and other legal regulations. The Management Board and the Supervisory Board of the Parent are obliged to assure compliance of the Report on the Group's operations with the requirements of the Accounting Act.

Responsibilities of the Auditor

Our opinion on the annual consolidated financial statements does not cover the other information and we do not express any form of assurance conclusion thereon that results from NSAs. In connection with our audit of the annual consolidated financial statements, our responsibility is to read the other information and, in doing so, consider whether it is materially inconsistent with the annual consolidated financial statements or our knowledge obtained in the audit, or otherwise appears to be materially misstated. If, based on the work we have performed, we conclude that there is a material misstatement of the other information, we are required to report that fact. Additionally, according to the Act on Statutory Auditors, our responsibility is to express an opinion on whether the Report on the Group's operations has been prepared in accordance with legal regulations and whether information included therein is consistent with the accompanying annual consolidated financial statements. Moreover, we are obliged to and to express an opinion on whether the Parent included the required information in the Corporate Governance Statement. We obtained the Report on the Group's operations and Corporate Governance Statement prior to the date of this auditor's report, while the remaining parts of the Annual Report will be delivered later. If we conclude that there is a material misstatement in the Annual Report, we are required to communicate the matter to the Supervisory Board of the Parent.

Opinion on the Report on the Group's operations

In our opinion, the Report on the Group's operations has been prepared in accordance with the applicable legal regulations, i.e. Article 55 clause 2a of the Accounting Act and Paragraph 71 of the Regulation of the Minister of Finance of March 29, 2018 on current and periodic information disclosed by issuers of securities and the conditions for recognition as equivalent of the information required by law of a non-member state (Journal of Laws of 2018, item 757) (the Regulation on current and periodic information), and information included therein is consistent with the accompanying annual consolidated financial statements. Moreover, taking into account our knowledge of the Group and its environment obtained during the audit of the annual consolidated financial statements, we state that we have not identified any material misstatements in the Report on the Group's operations.

Opinion on the Corporate Governance Statement

In our opinion, the Corporate Governance Statement includes the information required by Paragraph 70 clause 6 point 5 of the Regulation on current and periodic information. The information specified in Paragraph 70 clause 6 point 5 letters c-f, h and i of the Regulation on current and periodic information included in the Corporate Governance Statement complies with applicable regulations and is consistent with the information included in the annual consolidated financial statements.

Report on Other Legal and Regulatory Requirements

Statement on non-audit services

To the best of our knowledge and belief we confirm that we have not provided non-audit services prohibited in accordance with the provisions of Article 136 of the Act on Statutory Auditors and Article 5 clause 1 of the Regulation 537/2014.

Appointment of the Audit Firm

We were appointed to audit the annual consolidated financial statements of the Group for the years 2020 and 2021 by the Parent's Supervisory Board's resolution of May 14, 2020. We have been auditors of the Group since the financial year ended Decmerb 31, 2018, i.e. for 3 consecutive financial years. We were appointed for two-year periods: 2018 and 2019 ; 2020 and 2021 .

Jan Letkiewicz

Statutory Auditor No. 9530 Key Audit Partner performing the audit on behalf of Grant Thornton Polska Spółka z ograniczoną odpowiedzialnością sp. k., Poznań, ul. Abpa Antoniego Baraniaka 88 E, Audit Firm No. 4055

Poznań, April 22, 2021.

THIS IS TRANSLATION ONLY. The Polish language version of the report is the only valid and legally binding version. This translation into English is provided to facilitate understanding of the report.