PKO Bank Polski S.A.

Audit Report / Information • Mar 7, 2024

TRANSLATORS’ EXPLANATORY NOTE The English content of this report is a free translation of the registered auditor’s report of the below- mentioned Polish Company. In Poland statutory accounts as well as the auditor’s report should be prepared and presented in Polish and in accordance with Polish legislation and the accounting principles and practices generally adopted in Poland. The accompanying translation has not been reclassified or adjusted in any way to conform to the accounting principles generally accepted in countries other than Poland, but certain terminology current in Anglo-Saxon countries has been adopted to the extent practicable. In the event of any discrepancies in interpreting the terminology, the Polish language version is binding. PricewaterhouseCoopers Polska spółka z ograniczoną odpowiedzialnością Audyt sp. k. , ul. Polna 11, 00-633 Warsaw, Poland, T: +48 (22) 746 4000, F:+48 (22) 742 4040 , www.pwc.pl PricewaterhouseCoopers Polska Spółka z ograniczoną odpowiedzialnością Audyt sp. k. is entered into the National Court Register maintained by the District Court for the Capital City of Warsaw, under KRS number 0000750050, NIP 526-021-02-28. The seat of the Company is in Warsaw at Polna 11 str. Independent Registered Auditor’s Report To the General Shareholders’ Meeting and the Supervisory Board of PKO Bank Hipoteczny S.A. Report on the audit of annual financial statements Our opinion In our opinion, the accompanying annual financial statements: • give a true and fair view of the financial position of PKO Bank Hipoteczny S.A. (the “Bank”) as at 31 December 2023 and the Bank’s financial performance and the cash flows for the year then ended in accordance with the applicable International Financial Reporting Standards as adopted by the European Union and the adopted accounting policies; • comply in terms of form and content with the laws applicable to the Bank and the Bank’s Articles of Association; • have been prepared on the basis of properly maintained books of account in accordance with the provisions of Chapter 2 of the Accounting Act of 29 September 1994 (the “Accounting Act”). Our opinion is consistent with our additional report to the Audit Committee issued on the date of this report. What we have audited We have audited the annual financial statements of PKO Bank Hipoteczny S.A. which comprise: • the statement of financial position as at 31 December 2023; and the following prepared for the financial year ended on that date; • the income statement; • the statement of comprehensive income; • the statement of changes in equity; • the cash flows statement, and • the notes comprising a description of the significant adopted accounting policies and other explanations . Basis for opinion We conducted our audit in accordance with the National Standards on Auditing in the wording of the International Standards on Auditing as adopted by the resolution of the National Council of Statutory Auditors (“NSA”) and pursuant to the Law of 11 May 2017 on Registered Auditors, Registered Audit Companies and Public Oversight (the “Law on Registered Auditors”) and the Regulation (EU) No. 537/2014 of 16 April 2014 on specific requirements regarding the statutory audit of public-interest entities (the “EU Regulation”). Our responsibilities under NSA are further described in the Auditor’s responsibilities for the audit of the financial statements section of our report. We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion. Independence We are independent of the Bank in accordance with the International Code of Ethics for Professional Accountants (including International Independence Standards) issued by the International Ethics Standards Board for Accountants (IESBA Code) as adopted by resolution of the National Council of Statutory Auditors and other ethical requirements that are relevant to our audit of the financial statements in Poland. We have fulfilled our other ethical responsibilities in accordance with these requirements and the IESBA Code. During the audit, the key registered auditor and the registered audit firm remained independent of the Bank in accordance with the independence requirements set out in the Act on Registered Auditors and in the EU Regulation. 3 Our audit approach Overview • The overall materiality threshold adopted for the purposes of our audit was set at PLN 25 million, which represents 0,2% of total liabilities arising from the issue of mortgage covered bonds and bonds as at 31 December 2023. • We have audited the annual financial statement of the Bank for the period ended 31 December 2023. • Estimating the expected credit losses for loans and advances to customer Materiality Bank scoping Key audit matters 4 As part of designing our audit, we determined materiality and assessed the risks of material misstatement in the financial statements. In particular, we considered where the Bank’s Management Board made subjective judgements; for example, in respect of significant accounting estimates that involved making assumptions and considering future events that are inherently uncertain. As in all of our audits we also addressed the risk of management override of internal controls, including among other matters, consideration of whether there was evidence of bias that represented a risk of material misstatement due to fraud. Materiality The scope of our audit was influenced by our application of materiality. An audit is designed to obtain reasonable assurance whether the financial statements are free from material misstatement. Misstatements may arise due to fraud or error. They are considered material if, individually or in aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of the financial statements. Based on our professional judgement, we determined certain quantitative thresholds for materiality, including the overall materiality for the financial statements as a whole, as set out in the table below. These, together with qualitative considerations, helped us to determine the scope of our audit and the nature, timing and extent of our audit procedures and to evaluate the effect of misstatements, if any, both individually and in aggregate on the financial statements as a whole. Overall materiality 25 mln PLN How we determined it About 0,2% of total liabilities in respect of mortgage-covered bonds and bonds in issue as at December 31, 2023 Rationale for the materiality benchmark applied We chose the balance of liabilities in respect of mortgage-covered bonds and bonds in issue as the basis for determining materiality, because PKO Bank Hipoteczny SA is a specialized bank and its main purpose is to secure financing for the PKO Bank Polski Group by issuing mortgage-covered bonds and bonds. We adopted the materiality threshold of 0,2%, because based on our professional judgment, it is consistent with quantitative materiality threshold acceptable for the auditing of specialized mortgage banks. We agreed with the Audit Committee that we would report to them misstatements of the financial statements identified during our audit above 2,5 mln PLN, as well as misstatements below that amount that, in our view, warranted reporting for qualitative reasons. 5 Key audit matters Key audit matters are those matters that, in our professional judgement, were of most significance in our audit of the financial statements of the current period. They include the most significant identified risks of material misstatements, including the identified risks of material misstatement resulting from fraud. These matters were addressed in the context of our audit of the financial statements as a whole, and in forming our opinion thereon. We do not provide a separate opinion on these matters. Key audit matter How our audit addressed the key audit matter Estimating the expected credit losses for loans and advances to customers As at 31 December 2023, the gross balance of mortgage loans and advances amounted 17 992 474 thousand PLN at the level of created allowances for expected credit losses (“ECL”) of 93 767 thousand PLN. According to the International Reporting Standard Financial 9 “Financial instruments” The Bank’s Management is obliged to include in the financial statements values of expected credit losses for loans and advances to customers, which may occur in the period of 12 months or other period of life asset, depending on classification of individual assets to categories (“stages”) risk from taking into account the impact of future macroeconomic conditions for level of credit risk allowances. The Bank’s Management Board monitors the correctness functioning of models through comparison of results estimated by models for real credit losses (historical verification procedures) to ensure that the level of portfolio allowances for expected credit losses for loans and advances to customers is suitable. Level of expected allowances for credit losses in the loan portfolio we considered to be a key issue audit due to: • significant judgment used by Bank’s Management Board in modelling future scenarios and variable forecasting macroeconomic, with probability of occurrence of individual scenarios and using expert corrections to reflect As part of our procedures, we have updated our understanding of the internal control environment for the recognition and calculation of expected credit losses. We verified the effectiveness of selected key control mechanisms implemented by the Bank, in particular: • procedures in the area of data entry. used for the calculation expected credit losses; • procedures for the timely and complete identification of significant increases in credit risk (stage 2) and impairment (stage 3). As part of the work on statistical models, we have performed the following procedures, for which we have involved our internal specialists in the field of credit risk modelling: • assessment of whether the methodology used by the Bank for estimating credit losses for loan and advances to customers complies with the requirements of IFRS 9, in particular verification of the Bank's approach to the application of criteria for identification of significant increase in credit risk, definition of default, parameters. probability of loss, loss ratio in the event of insolvency and consideration of prospective information when calculating expected credit losses; • assessment of the Bank's assumptions and expert corrections applied in the model; • critical analysis of key judgments and assumptions, including macroeconomic 6 characteristics that not yet included in models; • high degree of uncertainty associated with an estimate of the allowance for the expected credit losses; • comprehensiveness of audit procedures and the evidence of the study due to the level of complexity calculations and amount of data used to estimate allowances for expected credit losses. Note 27 Expected credit losses, Note 26 Loans and advances to customers and Note 45.2 Allowances for expected credit losses in the financial statements includes detailed information on the methods and models used and the level of expected credit losses for loans and advances to customers. scenarios and adopted probability of occurrence of individual scenarios; • analysis of model adaptation to the current conditions; • independent tests of credit risk parameters; • verification of the correctness of the assignment credit exposure to stages according to IFRS 9 on a selected sample of contracts. In addition, we have done the following procedures: • we have reconciled selected inputs used to determine default parameters and estimate expected credit losses; • we have recalculated the expected credit losses based on the assumptions adopted by the Bank; • we have performed analytical procedures in the scope of covering the loans portfolio with expected credit losses and their changes in 2023 and transferring exposures between the stages during 2023; • we analysed the results of the analysis prepared by the Bank’s Management Board of the sensitivity of the level of allowances for expected credit losses as a result of deterioration or improvement risk parameters. We also assessed the completeness and adequacy of disclosures in the financial statements in accordance with the accounting standards applicable to the Bank. Responsibility of the Management and Supervisory Board for the financial statements The Management Board of the Bank is responsible for the preparation, based on the properly maintained books of account of the annual financial statements that give a true and fair view of the Bank’s financial position and results of operations, in accordance with International Financial Reporting Standards as adopted by the European Union, the adopted accounting policies, the applicable laws and the Bank’s Articles of Association, and for such internal control as the Management Board determines is necessary to enable the preparation of financial statements that are free from material misstatement, whether due to fraud or error. 7 In preparing the financial statements, the Bank’s Management Board is responsible for assessing the Bank’s ability to continue as a going concern, disclosing, as applicable, matters related to going concern and using the going concern basis of accounting unless the Management Board either intends to liquidate the Bank or to cease operations, or has no realistic alternative but to do so. The Bank’s Management Board and members of the Supervisory Board are obliged to ensure that the financial statements comply with the requirements specified in the Accounting Act. Members of the Supervisory Board are responsible for overseeing the financial reporting process. Auditor’s responsibility for the audit of the financial statements Our objectives are to obtain reasonable assurance about whether the financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor’s report that includes our opinion. Reasonable assurance is a high level of assurance, but is not a guarantee that an audit conducted in accordance with the NSA will always detect a material misstatement when it exists. Misstatements can arise from fraud or error and are considered material if, individually or in aggregate, they could reasonably be expected to influence economic decisions of users taken on the basis of these financial statements. The scope of the audit does not include an assurance on the Bank’s future profitability nor the efficiency and effectiveness of the Bank’s Management Board conducting its affairs, now or in future. As part of an audit in accordance with NSA, we exercise professional judgement and maintain professional scepticism throughout the audit. We also: • Identify and assess the risks of material misstatement of the financial statements, whether due to fraud or error, design and perform audit procedures responsive to those risks, and obtain audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control. • Obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Bank’s internal control. • Evaluate the appropriateness of accounting policies used and the reasonableness of accounting estimates and related disclosures made by the Bank’s Management Board. • Conclude on the appropriateness of the Bank’s Management Board’s use of the going concern basis of accounting and, based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the Bank’s ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor’s report to the related disclosures in the financial statements or, if such disclosures are inadequate, to modify our opinion. Our conclusions are based on the audit evidence obtained up to the date of our auditor’s report. However, future events or conditions may cause the Bank to cease to continue as a going concern. • Evaluate the overall presentation, structure and content of the financial statements, including the disclosures, and whether the financial statements represent the underlying transactions and events in a manner that achieves fair presentation. 8 We communicate with the Audit Committee regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant deficiencies in internal control that we identify during our audit. We also provide the Audit Committee with a statement that we have complied with relevant ethical requirements regarding independence, and to communicate with them all relationships and other matters that may reasonably be thought to bear on our independence, and where applicable, actions taken to eliminate threats or safeguards applied. From the matters communicated to the Audit Committee, we determine those matters that were of most significance in the audit of the financial statements of the current period and are therefore the key audit matters. We describe these matters in our auditor’s report unless law or regulation precludes public disclosure about the matter or when, in extremely rare circumstances, we determine that a matter should not be communicated in our report because the adverse consequences of doing so would reasonably be expected to outweigh the public interest benefits of such communication. Other information, including the report on the operations Other information Other information comprises: • a PKO Bank Hipoteczny Directors’ Report for 2023 (“the Report on the operations”) and the corporate governance statement which is separate part of the Report on the operations, • other documents comprising the Annual Report for the financial year ended 31 December 2023 (“the Annual Report”) (together “Other information”). Other information does not include the financial statements and our auditor’s report thereon. Responsibility of the Management and Supervisory Board The Management Board of the Bank is responsible for the preparation of the Other Information in accordance with the law. The Bank’s Management Board and the members of the Supervisory Board are obliged to ensure that the Report on the operations of the Bank including its separate parts complies with the requirements of the Accounting Act. Registered auditor’s responsibility Our opinion on the financial statements does not cover the Other Information. In connection with our audit of the financial statements, our responsibility is to read the Other Information and, in doing so, consider whether the Other Information is materially inconsistent with the information in the financial statements, our knowledge obtained in our audit, or otherwise appears to be materially misstated. If, based on the work performed, we identified a material misstatement in the Other Information, we are obliged to inform about it in our audit report. In accordance with the requirements of the Law on the Registered Auditors, we are also obliged to issue an opinion on whether the Report on the operations has been prepared in accordance with the law and is consistent with information included in annual financial statements, and audit the financial information included in 9 the Report on the operations in accordance with the scope described in this audit report and the requirements of the Banking Law of 29 August 1997 (“the Banking Law”). Moreover, we are obliged to issue an opinion on whether the Bank provided the required information in its corporate governance statement. Statement on the Other information We declare, based on the knowledge of the Bank and its environment obtained during our audit, that we have not identified any material misstatements in the Report on the operations and the remaining Other information. Opinion on the Report on the operations Based on the work we carried out during our audit, in our opinion, the Report on the operations of the Bank: • has been prepared in accordance with the requirements of Article 49 of the Accounting Act and para. 70 of the Regulation of the Minister of Finance dated 29 March 2018 on current and periodical information submitted by issuers of securities and conditions for considering as equivalent the information required under the legislation of a non-Member State (“Regulation on current information”) and Article 111(1–2) of the Banking Law; • is consistent with the information in the financial statements. Opinion on the corporate governance statement In our opinion, in its corporate governance statement, the Bank included information set out in para. 70.6 (5) of the Regulation on current information.. In addition, in our opinion, information specified in paragraph 70.6 (5)(c)–(f), (h) and (i) of the said Regulation included in the corporate governance statement are consistent with the applicable provisions of the law and with information included in the financial statements. Report on other legal and regulatory requirements Information on compliance with prudential regulations The Management Board of the Bank is responsible for complying with the applicable prudential regulations set out in separate legislation, and in particular, for correct determination of the capital ratios. The capital ratios as at 31 December 2023 have been presented in Note 57 of the financial statements and include Common Equity Tier 1 capital ratio, Tier 1 capital ratio and the total capital ratio. We are obliged to inform in our report on the audit of the financial statements whether the Bank has complied with the applicable prudential regulations set out in separate legislation, and in particular, whether the Bank has correctly determined its capital ratios. For the purposes of the said information, the following legal acts are understood as separate legislation: Regulation (EU) no. 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms and amending Regulation (EU) No 648/2012, as amended (“CRR”), 10 the Banking Law and the Act of 5 August 2015 on macro-prudential supervision over the financial system and on crisis management in the financial system (“the Act on macro-prudential supervision”). It is not the purpose of an audit of the financial statements to present an opinion on compliance with the applicable prudential regulations specified in the separate legislation specified above, and in particular, on the correct determination of the capital ratios, and therefore, we do not express such an opinion. Based on the work performed by us, we inform you that we have not identified: • any cases of non-compliance by the Bank with the applicable prudential regulations set out in separate legislation referred to above, in the period from 1 January to 31 December 2023; • any irregularities in the determination by the Bank of the capital ratios as at 31 December 2023 in accordance with the separate legislation referred to above; which would have a material impact on the financial statements. Statement on the provision of non-audit services To the best of our knowledge and belief, we declare that the non-audit services we have provided to the Bank and Bank’s Parent Company are in accordance with the applicable laws and regulations in Poland and that we have not provided any non-audit services prohibited under Article 5(1) of the EU regulation and Article 136 of the Law on Registered Auditors. The non-audit services which we have provided to the Bank during the audited period are disclosed in the Report on the Bank’s operations. Appointment We were first appointed to audit the annual financial statements of the Bank by resolution of the Supervisory Board dated 27 February 2019 and re-appointed by resolution dated 29 October 2021. We have been auditing the Bank’s financial statements without interruption since the financial year ended 31 December 2020, i.e. for four consecutive years. The Key Registered Auditor responsible for the audit on behalf of PricewaterhouseCoopers Polska spółka z ograniczoną odpowiedzialnością Audyt sp.k., a company entered on the list of Registered Audit Companies with the number 144, is Agnieszka Accordi. Agnieszka Accordi Key Registered Auditor No. 11665 Warsaw, 28 February 202 4