Company: JL
Filing Date: 2025-07-28
Form Type: 20-F
Source: 0001213900-25-068049
Chunk: 10

Company: J-Long Group Ltd
Filing Date: 2025-07-28
Form: 20-F
Item: Item 3
Chunk 10
---
 not PRC citizens and do not have their usual place(s) of residence located
in mainland China, we do not fall within the definition of a domestic enterprise and, accordingly, are not subject to the filing requirements
of the Trial Measures, the CSRC Notice and Guideline 7. No such permissions or approvals have been applied for by the Company and/or
its subsidiaries or denied by any relevant authorities.

However,
as the Trial Measures, the CSRC Notice and Guideline 7 are newly published and there exists uncertainty with respect to their implementation
and interpretation, it is highly uncertain whether our public offering and listing on Nasdaq will be deemed an “indirect overseas
offering and listing by companies in mainland China” and subject to the filing procedures. If we are subject to the filing requirements,
we cannot assure you that we will be able to complete such filings in a timely manner or at all. See “ Risk Factors - Risks
Related to Doing Business in Hong Kong - We may become subject to a variety of PRC laws and other obligations regarding data
security with respect to offerings that are conducted overseas and/or foreign investment in China-based issuers, and any failure to comply
with applicable laws and obligations could have a material and adverse effect on our business, financial condition, and results of operations
and may hinder our ability to offer or continue to offer Ordinary Shares to investors and cause the value of our Ordinary Shares to significantly
decline or be worthless

Cybersecurity
Review Measures

On
January 4, 2022, the CAC, the NDRC and several other administrations jointly adopted and published the revised Cybersecurity Review Measures
(“ CRM”), which took effect on February 15, 2022 and replaced the Revised Draft issued on July 10, 2021. Pursuant
to the revised CRM, if a network platform operator holding personal information of over one million users seeks “foreign”
listing, it must apply for cybersecurity review. In addition, operators of critical information infrastructure purchasing network products
and services are also obligated to apply for cybersecurity review for such purchasing activities. Although the CRM provides no further
explanation on the extent of “network platform operator” and “foreign” listing, we do not believe we are obligated
to apply for a cybersecurity review pursuant to the revised CRM, considering that (i) we are not in possession of or otherwise holding
personal information of over one million users, and it is also very unlikely that we will reach such threshold in the near future;