Acceptable Use Policy

This Acceptable Use Policy (the “Policy”) applies to every person and organisation that accesses MyDrillingOperations (“MDO”), which is operated by Prime Frontier International Minerals Corp. (“Provider”). It forms part of the MDO Terms of Service and the MDO Enterprise Cloud Services Agreement. Capitalised terms not defined here have the meanings given in the applicable customer agreement.

1. 1.Lawful and Authorised Use

   1. Users may access MDO only for authorised business purposes and within the permissions assigned to them.
   2. Users must comply with applicable law, site rules, employment requirements, licence conditions and third-party rights.

2. 2.Security

   1. Users must not:
      • Share credentials or bypass authentication;
      • Probe, scan or test for vulnerabilities without Provider's prior written approval;
      • Interfere with the availability of MDO or impose unreasonable automated load;
      • Evade usage limits;
      • Introduce malicious code;
      • Access another customer's tenant or data; or
      • Impersonate any person.

3. 3.Data and Records

   1. Users must not knowingly submit unlawful, misleading, falsified, infringing or malicious content.
   2. Users must follow their organisation's procedures for data quality, approvals, chain of custody and corrections.
   3. Audit records must not be manipulated to conceal actions or incidents.

4. 4.Sensitive Information

   1. Users must minimise personal and sensitive information, particularly in free-text HSE, medical, disciplinary and incident fields.
   2. Credentials, payment card data, state secrets and other specially regulated data must not be entered unless the relevant MDO function and configuration are designed to support it.

5. 5.Operational Reliance

   1. Users must not represent MDO output as a professional certification, statutory approval, definitive geological conclusion or substitute for competent safety and operational judgement.
   2. Critical decisions and external reports require review by authorised personnel.

6. 6.Intellectual Property

   1. Users must not copy, scrape, resell or commercially exploit MDO; reverse engineer it except to the extent that law does not permit this to be prohibited; remove proprietary notices; publish benchmarks without approval; or use access to MDO to build or train a competing product.

7. 7.Integrations and Devices

   1. Users must secure connected devices and integrations, use supported versions, protect data stored offline, synchronise when connectivity returns, and promptly revoke access for lost devices and departed users.

8. 8.Enforcement

   1. Provider may investigate suspected misuse proportionately and restrict or suspend affected access to protect customers and the service.
   2. Serious or repeated violations may result in termination and lawful referral to the authorities.

9. 9.Reporting

   1. Report suspected misuse, vulnerabilities or unauthorised access to security@mydrillingoperations.com.
   2. Do not publicly disclose a suspected vulnerability before Provider has had a reasonable opportunity to investigate and remediate it.

10. 10.Changes

    1. Provider may update this Policy to address new risks, laws or features. Material changes will be communicated or posted in advance.

Last update: October 1, 2026