Company: TME
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056949
Chunk: 148

Company: Tencent Music Entertainment Group
Filing Date: 2025-04-23
Form: 20-F
Item: Item 4
Chunk 148
---
 user data only to the extent necessary for our product functions and services upon receipt of the consent from our users. For example, we collect certain basic information, such as QQ or Weixin account number or phone number, for user account registration and verification purposes. To enable precise content curation and distribution to offer superb music discovery experience, we may access and analyze users’ playlists and listening history on our platforms. In the event that users purchase any paid music and audio content, or music-related merchandise, users need to provide certain personal information, such as name and address, to facilitate the transactions. We notify users of the types, potential uses, duration of data preservation and users’ rights, among other things, with respect to the data we collect from them.
• Data usage. We fully disclose the potential uses of personal information and data that we collect from users in our privacy policies. In the event that we need to use the personal information and data for purposes other than as disclosed in the privacy policies, we will notify the users and seek their explicit consent before we proceed.
• Data protection. We limit access to our servers that store our user and internal data on a “need-to-know” basis. We also adopt an advanced data encryption system designed to ensure the secured storage and transmission of data, and prevent any unauthorized member of the public or third parties from accessing or using our data in any unauthorized manner. Furthermore, we implement comprehensive data masking of user data for the purpose of fending off potential hacking or security attacks. In addition, we have adopted an incident response plan, which provides a well-defined, organized approach for handling any potential threat to servers and data, as well as taking appropriate actions when the data breach concerns personal information. We provide group-wide regular trainings to our employees that focus on cybersecurity awareness topics critical to our business operations, including the best practices to protect data from loss, modification, leakage or theft.

• Data storage and retention. We require that personal information and data we collect in China be stored and preserved within China. While we only preserve user data to enable our product functions and services, users have the option to delete their personal information generated when using our products and services, such as listening history and playlists. Upon termination of our products or services, we will destruct or anonymize user data that we collect within a reasonable period in compliance with applicable laws and regulations.
• Data transmission. Subject to certain exceptions specified in our privacy policies, transmission of any personal information and data that we collect with our users without their explicit consent is prohibited.