PROVIDENT FINANCIAL HOLDINGS INC

Management Report on Internal Control Over Financial Reporting

This management report includes the subsidiary institution of Provident Financial Holdings, Inc. (the "Corporation"), Provident Savings Bank, F.S.B. which is subject to Part 363 in the statement of management's responsibilities; the report on management's assessment of compliance with the Federal laws and regulations pertaining to insider loans and the Federal and, if applicable, State laws and regulations pertaining to dividend restrictions; and the report on management's assessment of internal control over financial reporting.

Management of the Corporation is responsible for preparing the Corporation’s annual consolidated financial statements in accordance with generally accepted accounting principles; for establishing and maintaining an adequate internal control structure and procedures for financial reporting, including controls over the preparation of regulatory financial statements in accordance with the instructions for the Parent Company Only Financial Statements for Small Holding Companies (Form FR Y-9SP); and for complying with the Federal laws and regulations pertaining to insider loans and the Federal and, if applicable, State laws and regulations pertaining to dividend restrictions. The Corporation's internal control over financial reporting was designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles.

To comply with the requirements of Section 404 of the Sarbanes-Oxley Act of 2002, the Corporation designed and implemented a structured and comprehensive assessment process to evaluate its internal control over financial reporting across the enterprise. The assessment of the effectiveness of the Corporation's internal control over financial reporting was based on criteria established in Internal Control-Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Management's assessment of the Corporation's internal control over financial reporting was also conducted to meet the reporting requirements of Section 112 of the Federal Deposit Insurance Corporation Improvement Act (FDICIA), which include controls over the preparation of the schedules equivalent to the basic financial statements in accordance with the instructions for the Parent Company Only Financial Statements for Small Holding Companies (Form FR Y-9SP).

Because of its inherent limitations, including the possibility of human error and the circumvention of overriding controls, a system of internal control over financial reporting can provide only reasonable assurance and may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. Based on its assessment, management has concluded that, as of June 30, 2025, the Corporation's internal control over financial reporting, including controls over the preparation of regulatory financial statements in accordance with the instructions for the Parent Company Only Financial Statements for Small Holding Companies (Form FR Y-9SP), is effective based on the criteria established in Internal Control-Integrated Framework (2013).

Management of the Corporation has assessed the Corporation's compliance with the Federal laws and regulations pertaining to insider loans and the Federal and, if applicable, State laws and regulations pertaining to dividend restrictions during the fiscal year ended on June 30, 2025. Management has concluded that the Corporation complied with the Federal laws and regulations pertaining to insider loans and the Federal and, if applicable, State laws and regulations pertaining to dividend restrictions during the fiscal year ended on June 30, 2025.