Company: CLIK
Filing Date: 2025-10-24
Form Type: 20-F
Source: 0001493152-25-019286
Chunk: 11

Company: Click Holdings Ltd.
Filing Date: 2025-10-24
Form: 20-F
Item: Item 3
Chunk 11
---
 Republic of China”, or “ PRC Personal Information Protection Law”,
which became effective on November 1, 2021. The PRC Personal Information Protection Law applies to the processing of personal information
of natural persons within the territory of China that is carried out outside of China where (1) such processing is for the purpose of
providing products or services for natural persons within China, (2) such processing is to analyze or evaluate the behavior of natural
persons within China, or (3) there are any other circumstances stipulated by related laws and administrative regulations.

On
December 28, 2021, the CAC jointly with the relevant authorities formally published Measures for Cybersecurity Review (2021) which took
effect on February 15, 2022 and replace the former Measures for Cybersecurity Review (2020) issued on July 10, 2021. Measures for Cybersecurity
Review (2021) stipulates that operators of critical information infrastructure purchasing network products and services, and online platform
operator carrying out data processing
activities that affect or may affect national security, shall conduct a cybersecurity review; any online platform operator who controls
more than one million users’ personal information must go through a cybersecurity review by the cybersecurity review office if
it seeks to be listed in a foreign country.

As
of the date of this Annual Report, our clientele is based in Hong Kong. Nonetheless, we may in the future have clients that are Hong
Kong-based public or private entities that may have shareholders or directors who are PRC individuals, or PRC individuals or entities.
Accordingly, we may collect and store certain data (including certain personal information) concerning such clients in connection with
our business and operations and for “ Know Your Customers,” or KYC, purposes. However, given that (i) our operations are solely
located in Hong Kong; (ii) we currently have no clients that are PRC entities, or individuals; (iii) we have not been engaged in data
(including personal information) processing activities (including the collection, storage, use, processing, transmission, provision and
disclosure of data from PRC), we currently are not subject to the cybersecurity review nor prior approval of the CAC.

Having
said that, these statements and regulatory actions are new, it is highly uncertain how soon the legislative or administrative
regulation making bodies will respond and what existing or new laws or regulations or detailed implementations and interpretations
will be modified or promulgated, if any