Company: TME
Filing Date: 2025-04-23
Form Type: 20-F
Source: 0000950170-25-056949
Chunk: 45

Company: Tencent Music Entertainment Group
Filing Date: 2025-04-23
Form: 20-F
Item: Item 3
Chunk 45
---
 could result in economic loss, damage our reputation, deter users from using our products, and expose us to legal penalties and liability.
We collect, process, and store significant amounts of data concerning our users, business partners and employees, including personal and transaction data involving our users, only to a minimum extent necessary to enable our business operations and services, and as permitted by applicable laws and regulations. While we have taken reasonable steps to protect such data, there is no guarantee that such steps will be successful. Techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems, are constantly evolving, and we may be unable to anticipate, deter, or prevent such techniques or otherwise implement adequate preventative measures to avoid unauthorized access to such data or our systems.
Like all internet services, our service may be vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, and similar attacks and disruptions from the unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns and cause the loss of critical data or the unauthorized access to our data or our users’ data.
Computer malware, viruses, and computer hacking and phishing attacks have become more prevalent in our industry, have occurred on our systems in the past, and we may experience cyber-attacks of varying degrees in the future, including hacking or attempted hacking into our user accounts and redirecting our user traffic to other internet platforms. Any functions that we use to facilitate interactivity with other internet platforms have the potential to increase the scope of access that hackers may have to our user accounts. Additionally, our use of third-party systems and digital services introduces additional risks. These external platforms might not have the same level of security and data protection standards as ours, increasing the likelihood of data breaches and unauthorized access to sensitive information. Any security flaws in these third-party systems could directly impact our services’ integrity, leading to potential data loss or exposure. Moreover, the interconnected nature of our services with third-party platforms can amplify the risks of cyber-attacks. As we integrate our systems with external services, the pathways through which attackers can gain unauthorized access expand. This integration can potentially expose us to more sophisticated attacks aimed at exploiting vulnerabilities not just within our systems but also within those of our business partners and vendors.
Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, our failure to maintain performance, reliability, security and availability of our products and