Company: DKI
Filing Date: 2025-03-17
Form Type: DRS
Source: 0001493152-25-010539
Chunk: 127

Company: DarkIris Inc.
Filing Date: 2025-03-17
Form: DRS
Chunk 127
---
 Law”), “data” refers to any record of information in electronic or any other forms, and “data processing” includes but is not limited to the collection, storage, use, processing, transmission, provision, and public disclosure of data. When conducting data processing activities, enterprises shall comply with laws and regulations, fulfill their obligations to protect data security, collect data in a legal and proper manner, and shall not steal or otherwise illegally acquire data. Furthermore, when enterprises process personal information, they shall fulfill their obligations to protect personal information in accordance with the relevant provisions of the Personal Information Protection Law of the PRC. Personal information processing shall be for a clear and reasonable purpose, directly related to the processing purpose and in a manner that has the minimum impact on the rights and interests of individuals. Additionally, the collection of personal information should be limited to the minimum scope necessary for achieving the processing purpose without being excessive.

As the PRC subsidiary may conduct data processing activities, as well as the collection and handling of personal information (primarily employees’ personal information) during its business operations, it is required to comply with the relevant provisions of the Data Security and Personal Information Protection Law. PRC subsidiary must fulfill the obligations for data security protection and personal information protection; otherwise, it may face administrative penalties such as corrective orders, warnings, or fines imposed by competent authorities.

Besides, online platform operators who possess personal information of more than one million users and intend to go public overseas, or engage in data processing activities that may affect or potentially affect national security, shall be subject to cybersecurity review in accordance with the Cybersecurity Review Measures. As the date of this prospectus, we publish our games through third party platforms which do not disclose any personal information of the gameplayers to us, and we do not collect or hold any personal information of the gameplayers, and have not been informed by any PRC governmental authority of any requirement that it files for a cybersecurity review or a CSRC review.

Based on the nature of our PRC subsidiary’s current business and our understanding of current PRC laws and regulations, neither the Company nor our PRC subsidiary are required to file for cybersecurity review before the Offering and the Listing. However, since the relevant laws and regulations were recently adopted, the interpretation and implementation of these laws and regulations are still subject to current and future PRC laws. Therefore, there can be no assurance that the governmental authority will take a view that is not contrary to or otherwise different from our understanding. If we are deemed to subject to CAC’s cybersecurity review