Company: MASK
Filing Date: 2025-06-24
Form Type: F-1
Source: 0001185185-25-000685
Chunk: 190

Company: 3 E Network Technology Group Ltd
Filing Date: 2025-06-24
Form: F-1
Chunk 190
---
 a manner that contravenes the BVI DPA. |

| ● | any information available to the data controller as to the source of the personal data and the data subject’s right to request         
 access to and correct the personal data. Where consent has been given to processing of personal data, the data subject may at any time 
 withdraw his or her consent;                                                                                                           |

Offences committed under the BVI DPA may result
in fines (up to US$500,000 in certain cases) or imprisonment. Further, a data subject who suffers damage or distress as a result of their
data being processed in contravention of the BVI DPA may institute civil proceedings in the BVI courts.

<div align='center'>114</div>

Regulations Related to our Business Operation in Hong Kong

Regulations Relating to Personal Data and Privacy Protection

In Hong Kong, the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong, “ PDPO”) applies to data users who control the collection, holding, processing or use of personal data in Hong Kong. These data users shall not do any act, or engage in a practice, that contravenes any of the data protection principles (“ DPP”), set out in Schedule 1 to the PDPO. DPP set out that (1) personal data must be collected in a lawful and fair way, for a purpose directly related to a function or activity of the data user. Data subjects must be notified of the purpose for which the data is to be used for and the classes of persons to whom the data may be transferred. Data collected should be adequate but not excessive; (2) personal data must be accurate and should not be kept for a period longer than necessary for the fulfilment of the purpose for which the data is or is to be used; (3) personal data must be used for the purpose for which the data is collected or for a directly related purpose unless voluntary and explicit consent with a new purpose is obtained from the data subject; (4) a data user shall take practicable steps to safeguard any personal data held against unauthorized or accidental access, processing, erasure, loss or use; (5) a data user shall take practicable steps to ensure that its policies and practices in relation to personal data, the kind of personal data it holds and the main purposes for which the personal data is or is to be used for are made known to the public; and (6) a data shall be entitled to request access to