From time to time, it is necessary for individual/company customers to supply Tai Shing Stock Investment Company Limited ("Tai Shing") with personal data in connection with the opening, maintenance and continuation of accounts, provision of financial services, products and administrative matters.

Customers have the obligation to declare proper announcement on the personal information form if they are unwilling to provide such personal data. Customers also have the obligation to provide such personal data per the Securities and Futures Commission or any other related authorities request within a limited time.

Failure to provide such personal data may result in Tai Shing being unable to open, maintain and continue the accounts or provide services and products to customers.

It is also the case that data is collected from customers in the ordinary course of the continuation of the financial relationship, for example, when customers make enquiry about personal account information or generally communicate verbally or in writing with the Tai Shing, by means of documentation or telephone recording system as the case may be.

The purposes for which personal data relating to a customer may be used are as follows:

• conducting customer risk assessments and/or anti-money laundering reviews;
• the day to day operation and maintenance of accounts and financial services;
• conducting credit checks;
• monitoring continued credit checks and financial position of customer;
• designing financial services or related products for customers' use;
• marketing financial services or related products to customer;
• determining the amount of indebtedness owed to or by customers;
• collection of amounts outstanding from customers;
• complying with the requirements to make disclosure under any rules, regulations, guidelines, codes of conduct or courts order binding on Tai Shing;
• any other purpose relating to or in connection with the business or dealings of the Tai Shing Group;
• purposes relating to any of the above.

Personal data held by Tai Shing relating to a customer will be kept confidential but Tai Shing may provide such personal data to:

• any agent, contractor or third party service provider who provides administrative, telecommunications, computer, trade execution, payment or securities clearing or other services to Tai Shing in connection with the operation of its business;
• any other person under a duty of confidentiality to Tai Shing including a related company of Tai Shing which has undertaken to keep such information confidential;
• any banking or financial institution with which the customer has or proposes to have dealings with;
• any group company of Tai Shing namely, any subsidiary or affiliate of Tai Shing Group or non-group company for marketing purposes;
• any actual or proposed assignee of Tai Shing or participant or sub-participant or transferee of Tai Shing's rights in respect of the customer; and
• any person to whom Tai Shing is under an obligation to disclose under any law, rules, regulations, directions, guidelines applicable to Tai Shing.

Any actual or proposed assignee or participant or subsidiary participant of Tai Shing or the authorizer of Tai Shing' rights over the client; and subject to relevant legislation, court orders, or any regulatory regulations: any Exchanges, entities, regulators and agencies and governments. Normally, under such circumstances, Tai Shing will be required to abide by confidentiality obligations and cannot notify the customer or obtain the customer's consent before disclosing relevant information to the above-mentioned persons.

There may be situations where customers elect to provide personal data to Tai Shing through electronic means such as Internet or voice recording system. Whilst Tai Shing generally uses its best endeavors to maintain the security and integrity of its systems, due to unforeseen circumstances or other reasons, electronic communication may not be the most reliable medium of communication. In this regard, customers should exercise caution of such weaknesses and communicate personal data through electronic devices with care.

Tai Shing intends to use a customer's data in direct marketing and Tai Shing requires the customer's consent (which includes an indication of no objection) for that purpose. In this connection, please note that:

• the name, contact details, products and services portfolio information, transaction pattern and behaviour, financial background and demographic data of a customer held by Tai Shing from time to time may be used by Tai Shing in direct marketing;
• the following classes of services, products and subjects may be marketed:
  • financial, insurance, fund and related services and products;
  • reward, loyalty or privileges programmes and related services and products;
• the above services, products and subjects may be provided or solicited by Tai Shing and/or:
  • Tai Shing's group companies;
  • third party financial institutions, insurers, securities and investment services providers;
• in addition to marketing the above services, products and subjects itself, Tai Shing also intends to provide the data described in paragraph (i) above to all or any of the persons described in paragraph (iii) above for use by them in marketing those services, products and subjects, and Tai Shing requires the customer's written consent (which includes an indication of no objection) for that purpose;
• If a customer does not wish Tai Shing to use or provide to other persons his data for use in direct marketing as described above, the customer may exercise his opt-out right by notifying Tai Shing.
• A customer may provide his consent for Tai Shing to use or provide to other persons his data for use in direct marketing as described above by notifying the Customer Services Department of Tai Shing.

Important Note:

The above represents your present choice as to whether or not to receive direct marketing contact or information which shall become effective and shall replace any choice regarding direct marketing communicated by you to Tai Shing prior to this application ONLY AFTER this securities account application is approved AND executed. Accordingly, if you wish Tai Shing to update your choice in relation to direct marketing arrangement immediately, please contact our staff for separate arrangement.

Please note that your above choice applies to the direct marketing of the classes of products, services and/or subjects as set out in Tai Shing Stock Investment Company Limited Policy under the Personal Data (Privacy) Ordinance ("Policy"). Please also refer to the Policy on the kinds of personal data which may be used in direct marketing and the classes of persons to which your personal data may be provided for them to use in direct marketing.

Customers of Tai Shing may have the right to :

• check whether Tai Shing holds personal data about him and the right of access to such personal data;
• to request Tai Shing to cease using your personal data for direct marketing purposes;
• to require Tai Shing to correct any personal data relating to him which is inaccurate; and
• to ascertain Tai Shing's policies and practices in relation to data and to be informed of the kind of personal data held by Tai Shing.

Tai Shing may charge a reasonable fee for processing such data access request.

After closure of account/termination of service, Tai Shing shall continue to hold data relating to the customer(s) for a period of seven years or such other period as prescribed by applicable laws and regulations.

Nothing in this statement shall limit the rights of customers under the Ordinance.

The person to whom requests for access to data or correction of data or for information regarding policies and practices and kinds of data held are to be addressed as follows: