Priority Technology Holdings (PRTH) Risk Factors

We have a substantial amount of indebtedness and may incur other debt in the future. Our level of debt and the covenants to which we agreed could have negative consequences on us, including, among other things, (i) requiring us to dedicate a large portion of our cash flow from operations to servicing and repayment of the debt; (ii) limiting funds available for strategic initiatives and opportunities, working capital and other general corporate needs and (iii) limiting our ability to incur certain kinds or amounts of additional indebtedness, which could restrict our ability to react to changes in our business, our industry and economic conditions. Substantially all of our indebtedness is variable rate debt, primarily based on SOFR, which replaced LIBOR effective June 30, 2023. As a result of this variable rate debt, an increase in interest rates generally, such as those we have recently experienced, would adversely affect our profitability. We may enter into pay-fixed interest rate swaps or other derivative transactions to limit our exposure to changes in floating interest rates. Such instruments may result in economic losses should interest rates decline to a point lower than our fixed rate commitments. We would be exposed to credit-related losses, which could impact the results of operations in the event of fluctuations in the fair value of the interest rate swaps due to a change in the credit worthiness or non-performance by the counterparties to the interest rate swaps.

We have actively acquired businesses and expect to continue to make acquisitions of businesses and assets in the future. The acquisition and integration of businesses and assets involve a number of risks. These risks include valuation (negotiating a fair price for the business and assets), integration (managing the process of integrating the acquired business' people, products, technology, and other assets to realize the projected value and synergies), regulatory (obtaining any applicable regulatory or other government approvals), and due diligence (identifying risks to the prospects of the business, including undisclosed or unknown liabilities or restrictions). There can be no assurances that we will be able to complete suitable acquisitions for a variety of reasons, including the identification of and competition for acquisition targets, the need for regulatory approvals, the inability of the parties to agree to the structure or purchase price of the transaction and our inability to finance the transaction on commercially acceptable terms. In addition, any potential acquisition can subject us to a variety of other risks: - If we are unable to successfully integrate the benefits plans, duties and responsibilities and other factors of interest to management of employees of the acquired business, we could lose employees to our competitors in the region, which could significantly affect our ability to operate the business and complete the integration;- If the integration process causes any delays with the delivery of our services, or the quality of those services, we could lose customers to our competitors;- Any acquisition may otherwise cause disruption to the acquired company's business and operations and relationships with financial institution sponsors, customers, merchants, employees and other partners;- Any acquisition and the related integration could divert the attention of our management from other strategic matters including possible acquisitions and alliances and planning for new product development or expansion into new markets for payments technology and software solutions; and - The costs related to the integration of an acquired company's business and operations into ours may be greater than anticipated.

Our business is affected by laws and regulations and examinations that affect us and our industries. Regulation and proposed regulation of the payments industry has increased significantly in recent years. Failure to comply with regulations or guidelines may result in the suspension or revocation of a license or registration, the limitation, suspension or termination of service, including money transmission services, and the imposition of civil and criminal penalties, including fines, or may cause customers or potential customers to be reluctant to do business with us, any of which could have an adverse effect on our financial condition. Interchange fees are subject to intense legal, regulatory and legislative scrutiny. In particular, the Dodd-Frank Act limits the amount of debit card fees charged by certain issuers, allowing merchants to set minimum dollar amounts for the acceptance of credit cards and allowing merchants to offer discounts or other incentives for different payment methods. These types of restrictions could negatively affect the number of debit transactions, which would adversely affect our business. The Dodd-Frank Act also created the CFPB, which has assumed responsibility for enforcing federal consumer protection laws, and the FSOC, which has the authority to determine whether any non-bank financial company, which may include us within the definitional scope, should be supervised by the Federal Reserve because it is systemically important to the U.S. financial system. Any such designation would result in increased regulatory burdens on our business, which increases our risk profile and may have an adverse impact on our business, financial condition and results of operations. We and many of our merchants may be subject to Section 5 of the Federal Trade Commission Act prohibiting unfair or deceptive acts or practices. That statement and other laws, rules and or regulations, including the Telemarketing Sales Act, may directly impact the activities of certain of our merchants and, in some cases, may subject us, as the merchant's electronic processor or provider of certain services, to investigations, fees, fines and disgorgement of funds if we were deemed to have improperly aided and abetted or otherwise provided the means and instrumentalities to facilitate the illegal or improper activities of the merchant through our services. Various federal and state regulatory enforcement agencies, including the Federal Trade Commission and state attorneys general, have authority to take action against non-banks that engage in unfair or deceptive practices or violate other laws, rules and regulations and to the extent we are processing payments or providing services for a merchant that may be in violation of laws, rules and regulations, we may be subject to enforcement actions and as a result may incur losses and liabilities that may impact our business. Our business may also be subject to the FCRA, which regulates the use and reporting of consumer credit information and also imposes disclosure requirements on entities that take adverse action based on information obtained from credit reporting agencies. We could be liable if our practices under the FCRA are not in compliance with the FCRA or regulations under it. Separately, the Housing Assistance Tax Act of 2008 included an amendment to the Internal Revenue Code that requires the filing of yearly information returns by payment processing entities and third-party settlement organizations with respect to payments made in settlement of electronic payment transactions and third-party payment network transactions occurring in that calendar year. Transactions that are reportable pursuant to these rules are subject to backup withholding requirements. We could be liable for penalties if our information returns do not comply with these regulations. These and other laws and regulations, even if not directed at us, may require us to make significant efforts to change our products and services and may require that we incur additional compliance costs and change how we price our services to merchants. Implementing new compliance efforts may be difficult because of the complexity of new regulatory requirements and may cause us to devote significant resources to ensure compliance. Furthermore, regulatory actions may cause changes in business practices by us and other industry participants which could affect how we market, price and distribute our products and services, which could limit our ability to grow, reduce our revenues or increase our costs. In addition, even an inadvertent failure to comply with laws and regulations, as well as rapidly evolving social expectations of corporate fairness, could damage our business or our reputation.

Our services include the processing, transmission and storing of sensitive business and personal information about our merchants, merchants' customers, vendors, partners and other third parties. This information may include credit and debit card numbers, bank account numbers, personal identification numbers, names and addresses or other sensitive business information. This information may also be stored by third parties to whom we outsource certain functions or other agents ("associated third parties"). We may have responsibility to the card networks, FIs, and in some instances, our merchants, and/or ISOs, for our failure or the failure of our associated third parties to protect this information. Information security risks for us and our competitors have substantially increased in recent years in part due to the proliferation of new technologies and the increased sophistication, resources and activities of hackers, terrorists, activists, organized crime, and other external parties, including hostile nation-state actors. The techniques used to obtain unauthorized access, disable or degrade service, sabotage systems or utilize payment systems in an effort to perpetrate financial fraud change frequently and are often difficult to detect and all of which we are vulnerable to. We have been the target of brute force attempts to obtain unauthorized access to our systems. Threats may derive from human error, fraud or malice on the part of employees or third parties, or may result from accidental technological failure. Computer viruses can be distributed and spread rapidly over the internet and could infiltrate our systems or those of our associated third parties. Additionally, denial of service or other attacks could be launched against us for a variety of purposes, including interfering with our services or to create a diversion for other malicious activities. Our defensive measures may not prevent down-time, unauthorized access or use of sensitive data. While we maintain insurance coverage that will cover certain aspects of cyber risks, such insurance coverage may be insufficient to cover all losses. Furthermore, we do not control the actions of our third-party partners and customers in their systems. These third parties may experience security breaches and any future problems experienced by these third parties, including those resulting from cyber attacks or other breakdowns or disruptions in services, could adversely affect our ability to conduct our business or expose us to liability. Further, our agreements with our bank sponsors and our third-party payment processors (as well as payment network requirements) require us to take certain protective measures to ensure the confidentiality of merchant and consumer data. Any such actions, attacks or failure to adequately comply with these protective measures could hurt our reputation, force us to incur significant expenses in remediating the resulting impacts, expose us to uninsured liability, result in the loss of our bank sponsors or our ability to participate in the payment networks, or subject us to fees, penalties, sanctions, litigation or termination of our bank sponsor agreements or our third-party payment processor agreements. As a result of information security risks, we must continuously develop and enhance our controls, processes and practices designed to protect our computer systems, software, data and networks from attack, damage or unauthorized access. This continuous development and enhancement will require us to expend additional resources, including to investigate and remediate significant information security vulnerabilities detected. Despite our investments in security measures, we are unable to assure that any security measures will not be subject to system or human error.

The Electronic Payments industry depends heavily on the overall level of consumer, commercial and government spending. We are exposed to general economic conditions that affect consumer confidence, consumer spending, consumer discretionary income and changes in consumer purchasing habits. A sustained deterioration in general economic conditions or increases in interest rates could adversely affect our financial performance by reducing the number or aggregate dollar volume of transactions made using Electronic Payments. If our merchants make fewer sales of their products and services using Electronic Payments, or consumers spend less money through Electronic Payments, we will have fewer transactions to process at lower dollar amounts, resulting in lower revenue. In addition, a weakening in the economy could force merchants to close at higher than historical rates, resulting in exposure to potential losses and a decline in the number of transactions that we process. We also have material fixed and semi-fixed costs, including rent, debt service, contractual minimums and salaries, which could limit our ability to quickly adjust costs and respond to changes in our business and the economy.