Amazon Securities Privacy Statement

Privacy Policy and Personal Data Collection Statement

Amazon Securities Limited ("Amazon Securities" or "We") is committed to providing customers with high-quality securities services. Therefore, we have established the following policy and promise to comply with the provisions of the Personal Data (Privacy) Ordinance ("Privacy Ordinance") in Hong Kong, China, to ensure our responsibility for the privacy, confidentiality, and security of customer data. If any of our business operations require compliance with any other privacy laws outside of Hong Kong, this statement will also apply as long as it does not conflict with relevant local laws.

Personal data collection

1. Provided voluntarily by the respondents, we will collect such personal information from visitors to the website/application.

2. Individual clients are required to provide us with data from time to time, including personal identity data (such as name, age, occupation, marital status, email address, phone number, personal identity data, electronic signature, address and other contact data, financial information, credit records, sources of wealth, risk tolerance, investment experience and goals, etc.), transaction records, account funds and securities holding data, IP address, browser type and version, time zone setting, browser plug-in program type, operating system or platform or device data (including mobile device IMEI codes, wireless network and general network data), etc., for the purpose of privacy or other sensitive personal data defined under applicable laws and regulations.

3. Amazon Securities will also collect customer data from public information, the formation of unique internal identification numbers used for organization and reporting, the formation of internal statistical analysis data, entering our website or using applications, conducting telephone recordings and/or using electronic media for communication, or third-party risk intelligence applications.

4. When you visit this site/use the application, you will make a record to analyze the number of visitors and general usage of the website/application.

Personal data usage

1. The data related to customers will only be used for legitimate purposes of Amazon Securities' own business, as well as for product design and discounts. The data related to customers (and other data) may be used for the following purposes:

(1) Provide services or products to customers;

(2) To conduct the first and ongoing Customer Identification (KYC) due diligence process to verify the customer's identity and fulfill our obligations under anti money laundering laws and regulations;

(3) Provide certification services recognized under the Electronic Transactions Ordinance of Chapter 553 of Hong Kong law, such as services provided by certification authorities in Hong Kong or other places (including but not limited to mainland China) for the purpose of verifying customer identity

(4) Handling service requests from customers, customers serving as their/their guarantors, or one or more other persons providing third-party collateral to them/their, or the daily operation of services provided to customers or such persons;

(5) Perform credit review, verification procedures, data confirmation, due diligence, and risk management;

(6) Assist other financial institutions in conducting credit reviews and debt recovery;

(7) Ensure that the customer or any guarantor maintains reliable credit;

(8) Maintain the credit records of customers or any guarantors for current or future reference;

(9) Design financial services or related products for customers to use (including providing financial advice to customers when appropriate);

(10) Promote financial services or related products;

(11) Determine the amount of debt between the customer or any guarantor and Amazon Securities;

(12) Collect outstanding debts from customers or any guarantor;

(13) Meet the data disclosure requests or requirements proposed by laws and regulations;

(14) Enable Amazon Securities to evaluate the proposed transfer transaction by the actual or proposed transferee in the event of a merger, consolidation, restructuring, or other circumstances;

(15) Any purpose permitted by law;

(16) To initiate or defend in any court or competent authority, or participate in any legal or administrative proceedings in any other form;

(17) Comply with the requirements of the Code of Conduct for Company Acquisitions, Mergers, and Share Repurchases issued by the China Securities Regulatory Commission (as amended from time to time) and/or the laws and/or regulatory rules of Hong Kong and/or other places; as well as

(18) Any use related to the above.

2. Amazon Securities will keep confidential the customer information (and other data) we hold, but in order for us to provide services, products, information, and system updates to customers, we may disclose this data, and customers must also provide relevant data. If customers fail to provide data and such information is necessary for providing functions and services, Amazon Securities may not be able to provide services, products, information, and system updates to customers. We may or may disclose data (and other data) to:

(1) Any employee, employee, agent, contractor or third party (such as our IT service provider, electronic data storage service provider, biometric certification service provider, etc.) who provides administrative, credit data, debt recovery, telecommunications, computer, payment or other services related to Amazon Securities' business operations;

(2) Individuals who create and maintain programs and systems for customer data validation and due diligence, and test such programs and systems;

(3) Any Amazon affiliated company, including but not limited to holding companies or affiliated companies located in Hong Kong or elsewhere;

(4) Any person acting as a guarantor or intending to act as a guarantor;

(5) Any person responsible for keeping Amazon Securities confidential, including any person whose Amazon affiliates promise to keep such data confidential;

(6) Any financial institution that engages in or intends to engage in transactions with clients;

(7) Credit data institutions and collection companies (if customers default on debt);

(8) Any actual or proposed transferee of Amazon Securities, or any participant or affiliated participant or transferee of Amazon Securities in relation to customer rights;

(9) Any person, entity or data recipient who has established or intends to establish any business relationship with Amazon Securities;

(10) Any certification authority in Hong Kong or other places (including but not limited to China);

(11) Relevant authorities in Hong Kong or other places shall comply with any applicable laws, regulations, rules or guidelines regarding the Automatic Exchange of Financial Account Data (CRS) or the Foreign Account Tax Compliance Act (FATCA) issued by the United States that are currently and in the future; and

(12) Any legal, regulatory, government, tax, law enforcement, administrative or statutory body, securities exchange or clearing house, or other self regulatory agency or industry organization or group in Hong Kong or elsewhere (including but not limited to China).

Using data for marketing or direct promotion

1. Amazon Securities may use data to transmit to respondents products, services, and other marketing data that the company deems suitable for their needs. We will also invite visitors to websites/applications to participate in market research, opinion polls, and other similar activities. You can choose to receive marketing and other promotional data via email. If you no longer wish to receive promotional data via email or direct mail, you can also contact Amazon Securities customer service at any time to request that such data be no longer collected.

2. Amazon Securities intends to use your personal information for direct promotion, and for this purpose, we must obtain your consent (including expressing no objection). In 2012, Section VIA of the Personal Data (Privacy) (Amendment) Ordinance introduced specific requirements for obtaining your consent (including expressing no objection). Please note that:

(1) Your name, contact details, products and services, investment portfolio information, trading patterns and behaviors, financial background and statistical data held by Amazon Securities from time to time can be used for direct promotions;

(2) The following categories of services, products, and promotional slogans can be promoted:

-Finance, insurance, securities, commodities, investment and related services, products and facilities;

-Rewards, membership rewards, or discount plans related to promotional slogan categories;

-Provide services and products related to promotional slogans categories by Amazon Securities's affiliated partners (the name of such affiliated partners will be provided on the application form for such services and products (as the case may be); and

-Donations and grants made for charitable and/or non-profit purposes;

(3) The above services, products, and promotional slogans can be provided by Amazon Securities and/or the following individuals or (if involving donations and sponsorship) for fundraising:

-Any affiliated company of Amazon Securities;

-Third party financial institutions, underwriters, securities, commodity and investment service providers;

-Third party rewards, membership rewards, cooperative brands or discount program providers;

-Amazon Securities' cooperative brand partners (the names of such cooperative brand partners will be provided on the application form for services and products (as the case may be); and

-Charitable or non-profit organizations;

(4) In addition to promoting the aforementioned services, products, and promotional slogans on their own, Amazon Securities also intends to provide the aforementioned data to all or any of the aforementioned individuals for use in promoting such services, products, and promotional slogans (we may or may not receive any remuneration for this purpose), and we must obtain your written consent for this purpose (including expressing no objection);

(5) If you do not wish Amazon Securities to use or provide your data to others for the aforementioned direct promotional purposes, you may issue a written notice to Amazon Securities Customer Service to exercise your right to refuse to participate in direct sales activities.

3. Amazon Securities may engage in the following activities in accordance with privacy regulations and other applicable laws: pairing, comparing, or exchanging any data or other data provided by customers or related to customers with data (or other data) held by us or any other person for the following purposes:

-Credit review;

-Verify data (or other data);

-Propose or verify data (or other data) that may be used at any time to take action against customers or any other person;

-Transfer such data (or other data) to Hong Kong or elsewhere (regardless of whether such or other data is processed, held, or used outside Hong Kong).

Personal data protection measures

1. Amazon Securities has security measures in place to protect customer data from misuse or unauthorized access, modification, or destruction.

(1) We allow authorized employees and agents to access or use data in a secure manner (encrypting personal data when necessary) in accordance with the principle of "need to know";

(2) We will not distribute customer data to any other person except for the purpose of conducting business activities, complying with applicable laws, protecting against fraud, or offering products and services that we believe may be in the interest of our customers;

(3) The use of customer data between Amazon affiliated companies must comply with strict internal security standards, confidentiality policies, privacy regulations, and other applicable laws;

(4) We constrain employees to fully comply with such standards, policies, and laws; and

(5) We will provide relevant training to employees on the proper handling of data.

2. As we further develop new products and services, we will continue to make every effort to ensure that customer data is used correctly and appropriately protected.

Review and modify information

According to and in accordance with the terms of the Privacy Ordinance, each customer has the right to:

(1) Obtaining information about data processing and requesting access to data related to the parties we hold;

(2) You may issue a written notice to Amazon Securities Customer Service to revoke our consent to process their data at any time. But please note that if we have other legitimate reasons (other than consent), we still have the right to process the relevant data;

(3) In certain cases, we have the right to receive data in a systematic, commonly used, and computer-readable format and/or request that we transmit this data to third parties where technically feasible. Please note that this right only applies to the data provided to us by the data subject;

(4) If the relevant data is inaccurate or incomplete, we have the right to request correction of the data;

(5) The right to request that we remove data in certain circumstances. Please note that in some cases, we are required by law to retain data even if the data subject asks us to remove it;

(6) In certain circumstances, we have the right to object and demand restrictions on our processing of data. Similarly, in some cases, even if the data subject objects or requests us to limit the processing of the data, we can still process the data in accordance with the law and/or refuse the request;

(7) If the data subject believes that we have violated their personal data privacy rights, they have the right to file a complaint with the personal data protection regulatory agency (see details below);

(8) If it involves personal credit records of customers, they may be required to be informed of which data is habitually disclosed to credit data institutions or collection companies, and to obtain more information in order to request access and correction of data from relevant credit data institutions or collection companies; and

(9) After the customer fully repays the outstanding amount and terminates the credit, if there is no significant debt within the five years prior to the termination of the credit (as determined by Amazon Securities), instruct Amazon Securities to request the relevant credit data agency to remove any account data related to the terminated credit from its credit database.

If there is any change in the personal information you provide us, please contact Amazon Securities Customer Service. The email/email address is listed below. We are not responsible for any privacy infringement caused by your failure to notify us of the change. Any requests for accessing and/or correcting any data submitted by customers should be sent to the following address: Amazon Securities Limited Customer Service Department Address: Room 1901, 19th Floor, China Merchants Centre, 168-200 Connaught Road Central, Hong Kong Email: sec.cs@amazonwealth.cn *Please indicate your name and Amazon account or contact number for follow-up purposes. We may request you to provide additional data to verify your identity for follow-up purposes.

According to the terms of the Personal Data (Privacy) Ordinance, Amazon Securities has the right to charge reasonable fees for processing any data access requests.

4. This article will not limit your rights as a data subject under privacy regulations.

Retention of personal information

The retention period of personal information may vary depending on different factors, including:

(1) Purpose of use - We need to continue retaining data for the necessary time for that purpose; and

(2) Legal obligations - The minimum period for retaining data as stipulated by laws and regulations.

Applicable law

1. This clause shall be governed by and interpreted in accordance with the laws of the court in the jurisdiction where Amazon Securities entity is registered and established. The Hong Kong courts have jurisdiction over any disputes or claims arising from or related to the use of Amazon Securities services.

revise

1. Amazon Securities will update this policy in a timely manner in accordance with relevant laws and regulations, changes in business, or other necessary circumstances. Without the explicit consent of the customer, we will not reduce the rights that the customer should enjoy under this policy. We will publish changes to this policy on this page, or inform you of the modified policy through official website publication or other means that you may receive appropriate notifications. The revised terms will take effect immediately after publication, and customers who continue to use Amazon Securities services will agree to the new terms.

other

If customers have any questions about this policy, please contact Amazon Securities customer service department, and we will provide feedback within 40 days of receiving customer requirements.