Company: XHG
Filing Date: 2025-10-29
Form Type: F-3/A
Source: 0001213900-25-103499
Chunk: 51

Company: XChange TEC.INC
Filing Date: 2025-10-29
Form: F-3/A
Chunk 51
---
, they shall
promptly notify the relevant operators and the Ministry of Public Security.

Currently, the cybersecurity laws and regulations
have not directly affected our business and operations, but in anticipation of the strengthened implementation of cybersecurity laws and
regulations and the expansion of our business, we face potential risks if we are deemed as a critical information infrastructure operator
under the

Cybersecurity Law. In such case, we must fulfill
certain obligations as required under the Cybersecurity Law and other applicable laws, including, among others, storing personal information
and important data collected and produced within the PRC territory during our operations in China, which we are already doing in our business,
and we may be subject to review when purchasing internet products and services. When the amended Measures of Cybersecurity Review take
effect in February 2022, we may be subject to review when conducting data processing activities, and may face challenges in addressing
its requirements and make necessary changes to our internal policies and practices in data processing. As of the date of this prospectus,
we have not been involved in any investigations on cybersecurity review made by the CAC on such basis, and we have not received any inquiry,
notice, warning, or sanctions in such respect. Based on the foregoing, we and our PRC legal counsel, Beijing Kingdom Law Firm, do not
expect that, as of the date of this prospectus, the current applicable PRC laws on cybersecurity would have a material adverse impact
on our business.

On September 1, 2021, the PRC Data Security Law
became effective, which imposes data security and privacy obligations on entities and individuals conducting data-related activities,
and introduces a data classification and hierarchical protection system based on the importance of data in economic and social development,
as well as the degree of harm it will cause to national security, public interests, or legitimate rights and interests of individuals
or organizations when such data is tampered with, destroyed, leaked, or illegally acquired or used. As of the date of this prospectus,
we have not been involved in any investigations on data security compliance made in connection with the PRC Data Security Law, and we
have not received any inquiry, notice, warning, or sanctions in such respect. Based on the foregoing, we do not expect that, as of the
date of this prospectus, the PRC Data Security Law would have a material adverse impact on our business.

<div align='center'>24</div>

On July 6, 2021, the relevant P