## Privacy Policy Statement

Hong Kong Exchanges and Clearing Limited, and from time to time, its subsidiaries (together the "Group") (and each being "HKEX", "we", "us" or "member of the Group" for the purposes of this Privacy Policy Statement as appropriate) recognise their responsibilities in relation to the collection, holding, processing, use and/or transfer of personal data under the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). Personal data will be collected only for lawful and relevant purposes and all practicable steps will be taken to ensure that personal data held by us is accurate. We will use your personal data which we may from time to time collect in accordance with this Privacy Policy Statement.

We regularly review this Privacy Policy Statement and may from time to time revise it or add specific instructions, policies and terms. Where any changes to this Privacy Policy Statement are material, we will notify you using the contact details you have provided us with and, where required by the PDPO, give you the opportunity to opt out of these changes by means notified to you at that time. Otherwise, in relation to personal data supplied to us through the HKEX website or otherwise, continued use by you of the HKEX website or your continued relationship with us shall be deemed to be your acceptance of and consent to this Privacy Policy Statement, as amended from time to time.

If you have any questions about this Privacy Policy Statement or how we use your personal data, please contact us through one of the communication channels set out in the "Contact Us" section below.

We will take all practicable steps to ensure the security of the personal data and to avoid unauthorised or accidental access, erasure or other use. This includes physical, technical and procedural security methods, where appropriate, to ensure that the personal data may only be accessed by authorised personnel.

Please note that if you do not provide us with your personal data (or relevant personal data relating to persons appointed by you to act on your behalf) we may not be able to provide the information, products or services you have asked for or process your requests, applications, subscriptions or registrations, and may not be able to perform or discharge the Regulatory Functions (defined below).

## Purpose

From time to time we may collect your personal data including but not limited to your name, mailing address, telephone number, email address, date of birth and login name for the following purposes:

1. to process your applications, subscriptions and registration for our products and services; 2. to perform or discharge the functions of HKEX and any company of which HKEX is the recognised exchange controller (as defined in the Securities and Futures Ordinance (Cap. 571)) ("Regulatory Functions"); 3. to provide you with our products and services and administer your account in relation to such products and services; 4. to conduct research and statistical analysis; 5. to process your application for employment or engagement within HKEX to assess your suitability as a candidate for such position and to conduct reference checks with your previous employers; and 6. other purposes directly relating to any of the above.

2