AUDIT, RISK AND COMPLIANCE COMMITTEE'S REPORT

The Audit, Risk and Compliance Committee ("ARCC") is pleased to present its report for the financial year ended 31 May 2026.

The ARCC is an independent statutory committee appointed by the shareholders of the Company. In addition to its statutory duties, the Board has delegated further duties to the Committee. This report covers both these sets of duties and responsibilities.

MANDATE AND TERMS OF REFERENCE

The Committee has adopted comprehensive and formal terms of reference which have been approved by the Board and which are reviewed on an annual basis. The responsibilities of the ARCC include:

• examining and reviewing the Group's financial statements and reporting of interim and final results;
• reviewing and considering, for recommendation to the Board, the consolidated budget for the ensuing financial year;
• overseeing integrated reporting;
• overseeing the Internal Risk and Compliance Committee function;
• overseeing the function of the Group Compliance Officer;
• ensuring that Blu Label implements an effective policy and plan for risk management that has been disseminated throughout the organisation and integrated within day-to-day activities in order to enhance the Company's ability to achieve its strategic objectives;
• ensuring that the disclosure regarding risk is comprehensive, timely and relevant;
• ensuring that a combined/integrated assurance model is applied to provide a co-ordinated approach to all assurance activities and appropriately address all the significant risks facing Blu Label;
• reviewing and satisfying itself of the expertise, resources and experience of the Blu Label finance function;
• overseeing the Group internal audit function;
• establishing, implementing and maintaining a compliance function with adequate policies and procedures to ensure compliance with rules, regulations, statutes and procedures applicable to Blu Label;
• reporting annually to the Board and shareholders describing the Committee's composition, responsibilities and how they were discharged as well as any other information required by rule or by law, including the approval of non-audit services;
• resolving any disagreements between management and the auditor regarding financial reporting;
• retaining independent counsel, accountants, or others to advise the Committee or assist in the conduct of an investigation;
• seeking any information it requires from employees – all of whom are directed to co-operate with the Committee's requests – or external parties; and
• meeting with the organisation's officers, external auditors, internal auditors, or outside counsel as necessary.

MEMBERSHIP AND MEETINGS HELD

In accordance with the requirements of the Companies Act, No 71 of 2008 ("the Companies Act"), Ms LE Mthimunye, Ms NP Mnxasana, Mr SJ Vilakazi and Mr RD Mokhobo were appointed to the Committee by shareholders at the AGM held on 21 November 2025 in the following positions:

• LE Mthimunye (NED Chairlady);
• NP Mnxasana (NED);
• SJ Vilakazi (NED); and
• RD Mokhobo (NED).

The members of the Committee collectively have experience in audit, accounting, commerce, economics, law, corporate governance and general industry. All the members of the ARCC are NEDs.

The Committee meets regularly and the quorum for each meeting is three members present throughout the meeting. Mandatory attendees at the meetings are the joint Chief Executive Officers and the Financial Director of Blu Label. The external audit partner from SNGGT and a director from Deloitte, to whom Blu Label outsources its internal audit function, are also attendees. Both internal and external auditors are afforded the opportunity to address the meeting and have unlimited access to the Committee. During the year, the Committee met with the external and internal auditors respectively without the presence of management. The internal audit function reports directly to the ARCC and is also responsible to the Financial Director on day-to-day administrative matters.

STATUTORY DUTIES DISCHARGED

In execution of its statutory duties during the year under review, the Committee:

• nominated and recommended to shareholders the reappointment of SNGGT as independent external auditors, with Mr Alex Philippou, the audit partner, as the registered independent auditor;
• approved the fees to be paid to SNGGT and other external auditors, where applicable, and approved the terms of engagement;
• maintained a non-audit services policy which determines the nature and extent of any non-audit services that SNGGT may provide to the Group;
• discharged those statutory duties as prescribed by section 94 of the Companies Act, acting in its capacity as the appointed Audit Committee of the subsidiary companies of Blu Label;
• considered the Committee's report describing how duties have been discharged; and
• submitted matters to the Board concerning the Company's accounting policies, financial controls, records and reporting, and key risks identified in the enterprise-wide risk management ("ERM") process, as appropriate.

OTHER DUTIES TO DISCHARGE

FINANCIAL STATEMENTS AND REPORTING

THE COMMITTEE:

• monitored compliance with accounting standards and legal requirements and ensured that all regulatory compliance matters had been considered in the preparation of the financial statements;
• reviewed feedback from the JSE proactive monitoring panel and included additional disclosure where relevant;
• reviewed and confirmed compliance with the JSE regulations relating to the sign-off by the CEOs and FD on the internal financial controls;
• reviewed the external auditor's report to the Committee and management's responses thereto and made appropriate recommendations to the Board of Directors regarding actions to be taken;
• reviewed and commented on the annual financial statements, interim reports, paid advertisements, announcements and the accounting policies and recommended these to the Board for approval;
• reviewed and recommended to the Board for adoption the consolidated budget for the FY27 financial year; and
• considered the going concern status of the Company and Group on the basis of review of the annual financial statements and the information available to the Committee and recommended such going concern status for adoption by the Board.

The Board statement on the going concern status of the Group and Company is contained in the Directors' report.

EXTERNAL AUDIT AND NON-AUDIT SERVICES

The ARCC has satisfied itself as to the independence of the external auditor, SNGGT, as set out in section 94(7) of the Companies Act, which includes consideration of compliance with criteria relating to independence or conflicts of interest as prescribed by the Independent Regulatory Board for Auditors, including rotation of the designated individual partner.

Requisite assurance was sought from and provided by SNGGT that internal governance processes within the firm support and demonstrate its claim to independence. SNGGT has been the auditor of the Company for four years.

To assess the effectiveness of the external auditors, the Committee considered the quality, delivery and execution of the agreed audit plan and variations from the plan, as well as the robustness and perceptiveness of SNGGT in its handling of key accounting treatments and disclosures. The ARCC has been informed of the most recent results of SNGGT's regulatory and firm inspection and is satisfied.

The Committee, in consultation with Executive Management, agreed to the engagement letter, terms, audit plan and budgeted audit fees for the 2026 financial year.

Any non-audit services to be provided by the external auditors are governed by a formal written policy which incorporates a monetary delegation of authority in terms of non-audit services to be provided.

The fees applicable to the services totalled Rnil (2025: Rnil).

The ARCC has nominated, for approval at the AGM, the reappointment of SNGGT as registered auditor for FY27. The Committee also satisfied itself in terms of paragraph 5.7(h)(iii) of the JSE Listings Requirements that SNGGT and the designated individual partner are suitable for appointment.

INTERNAL AUDIT AND INTERNAL CONTROLS

Blu Label's internal audit was outsourced to Deloitte for the year and the role of the Chief Audit Executive is fulfilled by the Engagement Director. The ARCC concludes that the Chief Audit Executive and internal audit arrangements are effective and independent.

THE COMMITTEE:

• between the internal and external audit functions in order to avoid duplication of work and to work towards an effective and efficient combined assurance approach;
• examined and reviewed the progress made by internal audit against the approved 2025/26 audit plan;
• considered the combined assurance arrangements for the 2025/26 financial year;
• approved the risk-based internal audit plan for the 2025/26 financial year;
• considered the effectiveness of internal audit;
• considered internal audit findings and corrective actions taken in response to such findings; and
• reviewed the annual statement from internal audit on the effectiveness of the organisation's governance, risk management and internal control processes.

The ARCC concluded that appropriate financial reporting procedures have been established and were operating, as contemplated in paragraph 5.7(h)(ii) of the JSE Listings Requirements, which includes consideration of all the entities in the consolidated annual financial statements.

In carrying out its responsibility of ensuring appropriate financial reporting procedures are in place, the ARCC has had oversight of the procedures performed by management to ensure that internal financial controls are adequate in design and operating effectiveness, and has considered all deficiencies reported by management to the ARCC and external auditors together with steps taken to remedy such deficiencies.

The ARCC concludes that the combined assurance arrangement is effective and will continue to evolve as the Group grows.

RISK MANAGEMENT AND COMPLIANCE

In relation to the governance of risk, the Committee:

• reviewed the integrity of the risk control systems and ensured that the risk policies and strategies of the Company are effectively managed;
• made recommendations to the Board concerning the levels of risk tolerance and appetite, and monitored the management of risk exposures against these levels;
• reviewed and recommended to the Board the approval of the Integrated Risk Assurance Policy and Framework;
• monitored bi-annual risk assessments and reviewed the consolidated strategic risk profile to evaluate and ensure all material risks had been identified as they pertain to the triple context of Blu Label, and are being managed appropriately;
• provided feedback to the Board on significant risks, including emerging risks and significant changes to the Company's risk profile;
• ensured that management considered and implemented appropriate risk responses to significant risks;
• considered the relevance and effectiveness of information and technology governance systems, processes and mechanisms to manage technology-related risks;
• reviewed and recommended to the Board risk information for disclosure, in accordance with King V principles;
• reviewed legal matters that could have a material impact on the Group in conjunction with Blu Label's legal adviser; and
• reviewed developments in corporate governance and best practice and considered their impact and implications across the Group with particular reference to the principles of King V.

The ARCC is satisfied that it has dedicated sufficient time to its responsibility towards the governance of risk.

The Committee is satisfied that it has exercised sufficient, ongoing oversight of compliance through:

• the continued appointment of a dedicated Compliance Officer for the Group;
• the approval of the compliance strategy;
• the approval of the regulatory compliance policy and the compliance process;
• annual review of the Company's regulatory universe in order to prioritise regulatory compliance efforts;
• ongoing development and review of compliance risk management plans;
• continuous monitoring of the regulatory environment to ensure that the Group keeps abreast of matters affecting its regulatory environment; and
• identification and monitoring of key compliance risks across the Group.

EXPERTISE AND EXPERIENCE OF THE FINANCIAL DIRECTOR AND FINANCE FUNCTION

The Committee considered the appropriateness of the expertise and experience of the Financial Director and finance function in accordance with paragraph 5.7(h)(i) of the JSE Listings Requirements and governance best practice and has satisfied itself that the Group Financial Director has appropriate expertise and experience.

The ARCC concluded that the finance function is adequately resourced with technically competent individuals and is effective. The Committee confirms that it is satisfied that Mr Dean Suntup possesses the appropriate expertise and experience to discharge his responsibilities as Financial Director. The Committee is also satisfied that appropriate financial reporting procedures have been established and are operating effectively.

ANNUAL FINANCIAL STATEMENTS

The Committee has reviewed the accounting policies and financial statements of the Company and the Group and is satisfied that they are appropriate and comply with IFRS Accounting Standards, the JSE Listings Requirements and the requirements of the Companies Act of South Africa.

The Committee has evaluated the Group annual financial statements of Blu Label Unlimited Group Limited for the year ended 31 May 2026 and, based on the information provided to the Committee, the Committee recommend the adoption of the annual financial statements by the Board.

The significant audit matters considered by the Committee were the acquisition of control of Cell C Holdings Limited ("Cell C"), the pre-listing restructuring and subsequent loss of control of Cell C and the classification and measurement of the Sisonke shares as "Held for Sale".

These matters were addressed as follows: Management assessed the transactions involving Cell C in detail and obtained in-depth advice from a financial reporting specialist to determine the appropriate accounting treatment under IFRS Accounting Standards as detailed in the financial statements. For the purchase price allocation ("PPA") under IFRS 3 and for measuring any derivative instruments, fair values were determined by, or inputs were provided by, external valuation specialists.

INTEGRATED ANNUAL REPORT

The Committee considered the integrated annual report, incorporating the annual financial statements for the year ended 31 May 2026. The Committee considered the sustainability information as disclosed in the integrated annual report and assessed its consistency with operational and other information known to its members. The Committee recommended the approval of the integrated annual report to the Board. The ARCC is satisfied that it has complied with its legal, regulatory and other responsibilities as per its terms of reference and that it has executed its duties in terms of paragraph 5.7(h)(iii) of the JSE Listings Requirements in its assessment of the suitability of the auditor. The Committee members approved the contents of the ARCC report on 28 September 2026.

On behalf of the Audit, Risk and Compliance Committee

LE MTHIMUNYE

Chairlady

30 September 2026