Company: FEBO
Filing Date: 2025-05-14
Form Type: 20-F
Source: 0001641172-25-010075
Chunk: 20

Company: Fenbo Holdings Ltd
Filing Date: 2025-05-14
Form: 20-F
Item: Item 3
Chunk 20
---
 than one million
users’ personal information must go through a cybersecurity review by the cybersecurity review office if it seeks to be listed in
a foreign country.

Our Operating Subsidiaries
may in the future collect and store certain data (including certain personal information) from our customers, who may be PRC
individuals, in connection with our business and operations and for “ Know Your Customers” purposes (to combat money
laundering). Given that: (i) two of our Operating Subsidiaries are incorporated and located in Hong Kong and the other Operating
Subsidiary is incorporated and located in mainland China; and (ii) we have an Operating Subsidiary engaged in business operations in
mainland China, we currently may expect the Measures for Cybersecurity Review (2021)
and the PRC Personal Information Protection Law to apply to our Operating
Subsidiaries.

On February 17, 2023, the China Securities Regulatory Commission (the “ CSRC”) promulgated the Trial Administrative Measures
of Overseas Securities Offering and Listing by Domestic Companies (the “ Trial Measures”) and five supporting guidelines, which
came into effect on March 31, 2023. On February 17, 2023, the CSRC also issued the Notice on the Administrative Arrangements for the Filing
of the Overseas Securities Offering and Listing by Domestic Companies (the “ CSRC Notice”). Pursuant to the Trial Measures
and the CSRC Notice, among other things, (i) a domestic company that seeks to offer or list securities overseas, both directly and indirectly,
must complete certain filing procedures with the CSRC within three working days following its submission of an initial public offering
or listing application; and (ii) domestic companies which have already, directly or indirectly, offered and listed securities in overseas
markets prior to the effectiveness of the Trial Measures are required to fulfill their filing obligations and report relevant information
to the CSRC within three working days after conducting a follow-on offering of equity securities on the same overseas market. If the issuer
meets both of the following criteria, the overseas offering and listing conducted by such issuer shall be deemed an indirect overseas
offering and listing by a PRC domestic company: (i) 50% or more of any of the issuer’s operating revenue, total profit, total assets
or net assets as documented in its audited consolidated financial statements for the most recent fiscal year were derived from PRC domestic
companies; and (ii