Company: GLXG
Filing Date: 2025-10-24
Form Type: 20-F
Source: 0001213900-25-102144
Chunk: 197

Company: Galaxy Payroll Group Ltd
Filing Date: 2025-10-24
Form: 20-F
Item: Item 10
Chunk 197
---
 address is Bayside Center 1, 17755 US Highway 19 N, Suite 140, Clearwater
FL 33764 and phone number is (303) 662-1112.

Anti-Money
Laundering - British Virgin Islands

In
order to comply with legislation or regulations aimed at the prevention of money laundering we are required to adopt and maintain anti-money
laundering procedures, and may require subscribers to provide evidence to verify their identity. Where permitted, and subject to certain
conditions, we also may delegate the maintenance of our anti-money laundering procedures (including the acquisition of due diligence
information) to a suitable person.

We
reserve the right to request such information as is necessary to verify the identity of a subscriber. In the event of delay or failure
on the part of the subscriber in producing any information required for verification purposes, we may refuse to accept the application,
in which case any funds received will be returned without interest to the account from which they were originally debited.

If
any person resident in the British Virgin Islands knows or suspects that another person is engaged in money laundering or terrorist financing
and the information for that knowledge or suspicion came to their attention in the course of their business the person will be required
to report his belief or suspicion to the Financial Investigation Agency of the British Virgin Islands, pursuant to the Proceeds of Criminal
Conduct Act (Revised Edition 2020). Such a report shall not be treated as a breach of confidence or of any restriction upon the disclosure
of information imposed by any enactment or otherwise.

BVI
Data Protection

The
Data Protection Act, 2021 (the “ BVI DPA”) came into force in the British Virgin Islands on 9 July 2021. The BVI DPA establishes
a framework of rights and duties designed to safeguard individuals’ personal data, balanced against the need of public authorities,
businesses and organizations to collect and use personal data for lawful purposes. The BVI DPA is centered around seven data protection
principles (the General Principle, the Notice and Choice Principle, the Disclosure Principle, the Security Principle, the Retention Principle,
the Data Protection Principle and the Access Principle) which require that:

  personal data must not be processed without consent                                                                                         
  Where consent has been                                                                                                                      
  a data controller must                                                                                                                      
  personal data must not                                                                                                                      
  a data controller shall, when processing personal data,                                                                                     
  personal data must not be kept