Company: MASK
Filing Date: 2025-12-30
Form Type: F-1
Source: 0001185185-25-002198
Chunk: 121

Company: 3 E Network Technology Group Ltd
Filing Date: 2025-12-30
Form: F-1
Chunk 121
---
 functioning and enforcement of the BVI DPA. Offences under the BVI DPA include

| ● | processing sensitive                           
 personal data in contravention of the BVI DPA; |

| ● | willfully obstructing                                                                     
 the Information Commissioner or an authorized officer in the conduct of his or her duties 
 and functions;                                                                            |

| ● | willfully disclosing                                      
 personal information in contravention of the BVI DPA; and |

| ● | collecting, storing                                                            
 or disposing of personal information in a manner that contravenes the BVI DPA. |

Offences committed under the BVI DPA may result in fines (up to US$500,000 in certain cases) or imprisonment. Further, a data subject who suffers damage or distress as a result of their data being processed in contravention of the BVI DPA may institute civil proceedings in the BVI courts. 74 Regulations Related to our Business Operation in Hong Kong Regulations Relating to Personal Data and Privacy Protection In Hong Kong, the Personal Data (Privacy) Ordinance (Chapter 486 of the Laws of Hong Kong, “ PDPO”) applies to data users who control the collection, holding, processing or use of personal data in Hong Kong. These data users shall not do any act, or engage in a practice, that contravenes any of the data protection principles (“ DPP”), set out in Schedule 1 to the PDPO. DPP set out that (1) personal data must be collected in a lawful and fair way, for a purpose directly related to a function or activity of the data user. Data subjects must be notified of the purpose for which the data is to be used for and the classes of persons to whom the data may be transferred. Data collected should be adequate but not excessive; (2) personal data must be accurate and should not be kept for a period longer than necessary for the fulfilment of the purpose for which the data is or is to be used; (3) personal data must be used for the purpose for which the data is collected or for a directly related purpose unless voluntary and explicit consent with a new purpose is obtained from the data subject; (4) a data user shall take practicable steps to safeguard any personal data held against unauthorized or accidental access, processing, erasure, loss or use; (5) a data user shall take practicable steps to ensure that its policies and practices in relation to personal data, the kind of personal data it holds and the main purposes for