MYbank e-CNY Wallet Policy on Personal Information Protection

Version dated March 2023

For the purpose of performing agreements relating to the e-CNY Wallet service, Zhejiang E-Commerce Bank Co., Ltd. (“MYbank”) as the authorized operator, and Alipay.com Co., Ltd. (“Alipay”) as the technology cooperative institution (MYbank together with Alipay as “we”) will collect, store, use, protect and provide to external parties your information in accordance with the MYbank e-CNY Wallet Policy on Personal Information Protection (this “Policy”). In the meantime, we will explain to you through this Policy how we provide you with services regarding access to and update, management and protection of your information. This Policy is closely related to your use of the e-CNY wallet services. It is suggested that you carefully read and understand this Policy in its entirety and make choices you deem appropriate. We strive to use plain and concise language to prepare this Policy. The terms of this Policy which are material to your rights and interests and the sensitive personal information involved in this Policy are highlighted in bold for your attention.

This Policy includes the following contents:

I. Collection and Use of Your Personal Information Based on e-CNY Wallet Services

II. How We Provide Information for External Parties

III. Our Storage and Protection of Your Personal Information

IV. Managing your Wallet

V. Protection of Minors

VI. Application and Update of this Policy

VII. How to Contact Us

In order to comply with national laws, regulations and regulatory provisions (such as implementation of identity verification management, performance of anti-money laundering duties and taking of risk prevention measures), and to provide services to you and improve the quality of services, we need to collect, store, use and provide to external parties your information. We will process your information in accordance with this Policy to make available to you quality, convenient and personalized services and better protect the security of your Wallet and funds.

How We Collect Information

According to relevant laws, regulations and national standards, we may process your personal information in accordance with law under the following circumstances:

(1) we have obtained your consent;

(2) the information is necessary for entry into and performance of a contract upon your request;

(3) the information is necessary for the performance of statutory obligations, such as necessary information required by anti-money laundering, counter-terrorist financing, identity verification management and other relevant laws and regulations;

(4) the information is in direct relation to national security or national defense security;

(5) the information is necessary for responding to public health emergencies, or for protecting the life, health and property safety of natural persons in emergencies;

(6) the information is in direct relation to criminal investigation, prosecution, trial, enforcement of judgment, etc.;

(7) the personal information collected is made public by yourself;

(8) the personal information is collected from legally and publicly disclosed information, such as legal news reports, government information disclosures or other channels;

(9) the information is necessary for maintaining the secure and stable operation of the services provided, such as detecting and handling the malfunction of products or services;

(10) other circumstances prescribed by laws and regulations.

It should be noted that when the processing of your personal information falls under the circumstances set forth in items (2) to (10) above, we may act in accordance with applicable laws and regulations without your consent. In the course of your use of the MYbank e-CNY wallet services, we need to collect certain of your information under the following circumstances to provide you with services, protect the security of your Wallet and funds, prevent credit risk, improve the quality of our services and comply with national laws, regulations and regulatory provisions:

I. Collection and Use of Your Personal Information Based on e-CNY Wallet Services

1. Opening and Upgrade of Wallet. For the purpose of opening a MYbank e-CNY wallet (“e-CNY Wallet” or “Wallet”), you are required to provide a legitimate mobile phone number, which shall be verified by message verification code. If the mobile phone number provided by you for the purpose of opening the wallet is identified as being likely to be used by more than one person, MYbank may share the information of the mobile phone number provided by you when opening the wallet with an institution in cooperation with MYbank (such as Alipay) that legally keeps your information and show you the Alipay account information corresponding to such mobile phone number, in order to identify the actual user and establish the association with the Alipay account you successful login, so that you can use the e-CNY Service after completing the association operation in the Alipay client. When you upgrade your identity-verified wallet, we need to collect your identity information (such as name, ID number, and biometrics authentication), information of the linked bank card, and the mobile linked with bank account. To avoid repeated submissions, to the extent necessary under regulatory requirements, we will collect such information from a cooperative institution (such as Alipay) that legally keeps your information and conduct cross verification. If you do not provide the above information, you will not be able to open an identity-verified wallet.

2. E-CNY Conversion (Wallet Top Up/Deposit with Bank). When you conduct wallet top up/bank deposit operations that involve e-CNY conversion, we will record your operation data and share such data with the corresponding bank or e-CNY trading system. Such operation data include your wallet information, information of accounts involved in wallet top up/deposit with bank (bank account number, bank account name, and account bank) and transaction information. If you refuse to provide the above information, you will not be able to carry out e-CNY conversion.

3. Money Transfer of e-CNY. When you use e-CNY to transfer money, you need to input recipient's wallet number, recipient's name, mobile phone number and amount to be transferred based on the page prompts. If you do not agree to the collection and sharing of the above information, you will not be able to transfer money in e-CNY. To make it easier for you to input mobile phone number quickly when transferring money to your friends, you can authorize us to read your contact information by accessing the contacts. We will only read the name and mobile phone number of the contact selected by you and transmit such information to the server on an encrypted basis. No other information will be read or shared.

4. Collection and Making of Payment via QR Code. When you use a QR code to collect or make a payment, we will collect your transaction information and wallet information directly or from the counterparty for the purpose of recording and managing the payments. Transaction information includes name of the counterparty, transaction amount, transaction time and traded goods; wallet information includes wallet number, wallet name and wallet level. If you do not agree to the collection and sharing of the above information, you will not be able to use QR codes to collect or make payments. When you use “Scan-to-Pay” to make a payment, you will be required to grant access to the camera. If you refuse to grant such access, you will not be able to scan the QR code. However, this does not affect your use of wallet number or mobile phone number / email to make payments.

5. Balance and Transaction. To make it easier for you to check and manage the balance and transaction of your e-CNY Wallet, we may display such information to you through relevant pages on the e-CNY APP and other information channels. When we display such information to you on other platforms or interfaces authorized by you, we will share the necessary wallet information and identity information, the details of which shall be as displayed on the relevant pages. If you refuse to share the above information, you will not be able to check and manage your wallet on such platforms or interfaces.

6. Cash Red Packet. When sending a red packet, you need to choose the type of the red packet, fill in the mobile phone number of the recipient of the red packet, or authorize access to your address book to choose the recipient, and fill in the amount and number of the red packet based on the page prompts. The above information contains your sensitive personal information. If you do not provide the above information, you may not be able to send certain types of red packet, but it will not affect your use of other types of red packet or other services provided by us. Meanwhile, you may choose different covers of the red packet and fill in blessing messages; if you don't provide such information, the system will match a red packet cover and blessing message for you by default, which will not affect your use of the red packet. If you choose to send a red packet in a group, you may share the link with a third party through the function component provided by us, and the third party can receive your red packet by clicking the link and following the page prompts. When other people receive the red packet sent by you, we will show the user, who receives your red packet, your real name (if you use your identity-verified Wallet to send the red packet) or the name of your e-CNY Wallet (if you use your anonymous Wallet to send the red packet), in order to help the recipient of the red packet confirm the identity of the sender. When receiving a red packet, you can choose the e-CNY Wallet used for receiving the cash red packet. When you receive a red packet, we will show the user, who sends the red packet, your real name (if you use your identity-verified Wallet to receive the red packet), or the name of your e-CNY Wallet and the last four digits of your mobile phone number (if you use your anonymous Wallet to receive the red packet), in order to help the sender confirm the identity of the recipient. Your e-CNY Wallet name and the last four digits of your mobile phone number will also be displayed to the other users who receive the same red packet. If you click the link to receive red packets through a third-party platform, you will be required to authorize to display your nickname on the third-party platform, name of your e-CNY Wallet and the last four digits of your mobile phone number on the relevant pages.

7. Security Management. To guarantee the provision of secure e-CNY Wallet services to you and prevent risks associated with transactions and funds, when you open and use the e-CNY Wallet, we need to record your operation, including your device model, IP address, device software version, device identification code, location, network usage habits and other log information related to the wallet services. If you refuse to provide the above information, the security verification in the transaction environment may be affected.

8. Customer Service. When you use the e-CNY Wallet services, we will collect your operation records, the information you provide when contacting our customer service team, and the information you send to us when participating in questionnaire surveys, so as to continuously optimize the wallet services. We will also contact you to the extent necessary to optimize our service experience, and ask you to evaluate and give feedbacks on the wallet services. If you are not willing to participate in our user experience surveys, your use of the e-CNY Wallet services will not be affected.

9. Analysis and Processing. We will generate comprehensive statistics on, analyze and process your information by redaction, de-identification or otherwise to provide you with more accurate, personalized, smooth and convenient services, or to help us evaluate, improve or design our services and operational activities.

10. Regulatory Reporting. We will report the information submitted or generated in the course of your use of the wallet in accordance with the regulatory requirements. The specific information to be reported will be subject to the regulatory requirements.

II. How We Provide Information for External Parties

1. Sharing. We will not share your personal information with any company, organization or individual other than the e-CNY trading system, except under the following circumstances:

(1) sharing of your personal information with your explicit consent;

(2) sharing of your personal information with external parties in accordance with laws, regulations or mandatory requirements of competent governmental authorities;

(3) sharing of your personal information with our affiliated companies to the extent necessary, subject to the purposes stated in this Policy. Our affiliated companies will strictly protect the security of your personal information and will seek your authorization/consent again if the purpose of processing your personal information is to be changed.

(4) Where certain of our services are provided by our authorized cooperators, we will share your personal information with our authorized cooperators to the extent necessary, subject to the purposes stated in this Policy. Our partners have no right to use the shared personal information for any other purpose.

2. Transfer. We will not transfer your personal information to any company, organization or individual, except under the following circumstances:

(1) obtaining your explicit prior consent;

(2) in accordance with laws, regulations or mandatory administrative or judicial requirements;

(3) if any transfer of personal information is involved in asset transfer, acquisition, merger, reorganization or bankruptcy liquidation, we will keep you informed and require the new company or organization that holds your personal information to continue to be bound by this Policy; if the purpose of use or processing method of personal information is changed, we will require such company or organization to seek explicit consent from you again.

3. Public Disclosure. We will publicly disclose your personal information only under the following circumstances:

(1) we have obtained your explicit consent;

(2) disclosure required by law: we may publicly disclose your personal information to the extent required by laws, legal proceedings, actions or mandatory requirements of regulatory governmental authorities.

4. Risk Prevention and Regulatory Compliance

In accordance with the provisions of laws, financial institutions shall perform statutory obligations such as anti-money laundering obligations. With reference to the relevant regulatory requirements, Ant Group implements unified risk management policies and procedures throughout the group, and establishes an internal information sharing system for necessary information such as customer identification information of financial institutions, so as to establish a group-wide suspicious transaction monitoring system and prevent risk transmission among financial institutions within Ant Group. We undertake that such internal information sharing will be solely for the purpose of performing statutory obligations such as anti-money laundering obligations. We will ensure the security of information and bear strict confidentiality obligations under laws.

5. Entrusted Processing

To improve the efficiency of information processing, reduce the cost of information processing or improve the accuracy of information processing, we may entrust competent professional agencies to process user information on our behalf (such as answering calls on customer service hotline, and handling disputes). However, we will require the entrusted companies to comply with strict confidentiality obligations and take effective confidentiality measures by entering into written agreements, conducting on-site audits or otherwise, and prohibit them from using such information for any purpose beyond your authorization. After termination of entrustment, the entrusted companies will no longer keep your personal information.

III. Our Storage and Protection of Your Personal Information

1. The personal information we collect and generate in the People's Republic of China will be stored in the People's Republic of China. If certain of our services involve cross-border business which requires us to transfer to an overseas entity the relevant personal information collected in China, subject to laws and regulations and the regulations of relevant regulatory authorities, we will explain to you the purpose and method of cross-border transfer of personal information, the overseas entity, the type of personal information involved and other matters, obtain your consent, and require the overseas entity to keep your personal information obtained by it in confidence by entering into an agreement, conducting on-site verification or taking other effective measures. We will keep your personal information only for the period necessary for the purposes described in this Policy and for the period prescribed by laws, regulations and regulatory authorities. For example, we will keep your identity and transaction information for the period prescribed by the Anti-Money Laundering Law of the People's Republic of China.

2. In order to protect the security of your information, we will take a variety of reasonable and necessary measures to protect your information after collection. For example, in a technical development environment, we will only use de-identified information for statistical analysis; when we provide research reports to external parties, we will de-identify the information contained in the reports. We will store the de-identified information separately from the information that can be used to resume the identification of individuals, so as to ensure that no individual will be re-identified in the subsequent processing of de-identified information.

3. We are committed to achieving industry-leading level of information security protection. To protect the security of your information, we are committed to using a variety of security technologies and supporting management systems to minimize the risk of divulgence, damage, misuse, unauthorized access, unauthorized disclosure and alteration of your information. For example, we use network security sockets layer (SSL) for encrypted transmission, encrypt the information for storage, and strictly restrict access to data center. When we transmit and store sensitive personal information (including biometric authentication information), we will adopt encryption, authority control, de-identification / anonymization and other security measures.

4. We have established a department responsible for personal information protection to assess the impact on personal information security for the processing of personal information. In the meantime, we have established relevant internal control system to apply the principle of minimum necessary authority to our staff who may have access to your information, systematically monitor the processing of your information by our staff, continuously train our staff on relevant laws and regulations and privacy security guidelines and enhance their security awareness, and organize security examinations for all staff on an annual basis. In addition, our relevant networks/systems have passed the evaluation for national cybersecurity classified protection. We also engage an external independent third party to assess our information security management system every year.

5. We have prepared a contingency plan for personal information security incidents and regularly organize emergency response trainings and drills for the relevant internal staff, so as to enable them to understand their job responsibilities and emergency response strategies and procedures. If unfortunately a personal information security incident occurs, in accordance with the requirements of laws and regulations, we will promptly inform you of the basic information and possible impact of the security incident, the actions we have taken or will take to dispose of the incident, the suggestions on risk prevention and mitigation by yourself, and the remedial measures for you, etc. We will promptly inform you about the incident by means of message or public announcement. When it is difficult to inform individual information subjects separately, we will adopt reasonable and effective methods to issue a public announcement. In the meantime, in accordance with the requirements of regulatory authorities, we will also report the disposition of personal information security incident on our own initiative. If your legitimate rights and interests are damaged, we will bear the corresponding legal liability.

6. Please be sure to properly keep the mobile phone number used to open your wallet and other identity information. When you use the wallet services, we will identify you by using the mobile phone number used to open your wallet and other identity information. Once you leak the above information, you may suffer losses or other adverse consequences. If you find that the mobile phone number used to open your wallet and/or other identity information may be or have been leaked, please contact us immediately so that we can take appropriate measures in a timely manner to avoid or mitigate relevant losses.

7. After you have terminated your use of the MYbank e-CNY Wallet services, we will cease the collection and use of your information, unless otherwise required by laws, regulations or regulatory authorities. If we cease operations, we will timely cease the collection of your personal information, notify you of the cessation of operations by sending notice or public announcement, and delete or anonymize your personal information we hold.

IV. Managing your Wallet

When you use the e-CNY Wallet services, in order to make it easier for you to access and manage your information and guarantee your right to cancel your Wallet, we have provided you with corresponding operation settings in the client. You may follow the instructions below.

1. Management of Wallet Information. You can manage your wallet information via “e-CNY APP --- MYbank Wallet” or “Alipay APP --- MY --- e-CNY”, e.g., you can check your wallet number, balance, transaction, etc. If you find that any of your information is incorrect, you may contact customer service of e-CNY APP by phone at 956196, via “e-CNY APP --- My --- Help and Feedback”, or by email at privacy-protection-officer-mybank@service.mybank.cn to request correction or deletion. For security and identification purposes and in accordance with laws, regulations and regulatory provisions, you are required to pass verification before you can change your verified name or linked mobile phone number.

2. Cancellation of Wallet Service. You can choose to cancel your wallet via “e-CNY APP --- MYbank Wallet --- More”. If you choose to cancel your wallet, the information you provide based on the wallet services and the information generated in the course of your use of the wallet services will be retained for the minimum period required by the regulatory authorities. Upon the expiration of such retention period, your information will be deleted or anonymized.

3. Exceptions. Notwithstanding the foregoing, in accordance with relevant laws, regulations and national standards, we may not be able to respond to your request under the following circumstances:

(1) where the request is in relation to the performance of obligations under national laws and regulations or relevant regulations of industry regulatory authorities;

(2) where the request is in direct relation to national security or national defense security;

(3) where the request is in direct relation to public security, public health, or major public interest;

(4) where the request is in direct relation to criminal investigation, prosecution, trial, enforcement of judgment, etc.;

(5) where there is sufficient evidence that you are intentionally malicious or abuse your rights;

(6) where responding to your request will lead to significant damage to any other individual or organization's legitimate rights and interests.

4. Cessation of Service. If we are unable to continue to provide you with e-CNY Wallet services due to reasons such as security management, business development planning and changes in policies, the information you provide based on the e-CNY Wallet services and the information generated in the course of your use of the e-CNY Wallet services will be retained for the minimum period required by the regulatory authorities. Upon the expiration of such retention period, your information will be deleted or anonymized.

V. Protection of Minors

1. We expect parents or guardians to guide minors in their use of our services. We will protect the confidentiality and security of minor's information in accordance with relevant national laws and regulations.

2. If you are a minor and require to open/use the anonymous Wallet and other relevant functions, it is suggested that you carefully read the MYbank e-CNY Wallet Policies on Children's Personal Information Protection and obtain the consent of your parents or guardian before using our services or providing your information to us.

3. If you are the parent or guardian of a minor, please contact us using the contact details set forth above if you have any queries regarding the processing of information of the minor of whom you are the guardian.

VI. Application and Update of this Policy

1. For more detailed rules and protective measures regarding your personal information, please read the MYbank Privacy Policy on MYbank's website or in its client. Matters not covered by this Policy shall be governed by the foregoing policy. In the event of any inconsistency between this Policy and the foregoing policy, this Policy shall prevail.

2. We will update this Policy in due time upon the occurrence of any of the following material changes:

(1) any change in our basic information, e.g., change in owners resulting from merger, acquisition or restructuring;

(2) any change in the scope, purpose or rules for the collection, storage or use of personal information;

(3) any change in the recipients, scope or purpose of our provision of personal information to external parties;

(4) any change in the manner in which you access and manage your personal information;

(5) any change in data security capacity or information security risk;

(6) any change in the channels and mechanisms for users to make inquiries and complaints, or in external dispute resolution institution and its contact information;

(7) any other change that may materially affect your rights and interests regarding personal information.

3. Please understand that the services we provide to you are constantly updating and developing. If you choose to use other services not covered in the foregoing and we need to collect your information based on such services, we will separately explain to you the scope and purpose of information collection and obtain your consent through page prompts, interaction process or other methods specified in agreement. We will use, store, provide to external parties and protect your information in accordance with this Policy and the corresponding user agreement; if you choose not to provide the above information, you may not be able to use certain or certain part of our services, but this does not affect your use of other services provided by us.

4. We will not reduce your rights under this Policy without your explicit consent. For material changes, we will also give a notice to you in more prominent manner. For example, we will notify you by message or public announcement. To enable you to receive our notice in a timely manner, it is suggested that you notify us immediately when your contact information is updated. By continuing to use the MYbank e-CNY Wallet services after an update to this Policy takes effect, you have fully read, understood and accepted the updated agreement and are willing to be bound by the updated agreement.

5. If this Policy is available in any other language, the simplified Chinese version shall prevail to the extent of any inconsistency between such version and the simplified Chinese version.

VII. How to Contact Us

If you have any queries about this Policy, or have any relevant complaints or comments on the realization of rights of the subject of personal information, you may contact us by phone at 956196, via “e-CNY APP --- My --- Help and Feedback” or sending email to privacy-protection-officer-mybank@service.mybank.cn. We will review the issues involved as soon as possible, and promptly deal with such issues upon verification of your identity. We will reply within a maximum period of fifteen working days or the period stipulated by laws and regulations.

MYbank e-CNY Wallet Policy on Children's Personal Information Protection

Version dated March 2023

Zhejiang E-Commerce Bank Co., Ltd. (“MYbank”) as the authorized operator, and Alipay.com Co., Ltd. (“Alipay”) as the technology cooperative institution (MYbank together with Alipay as “we”) is well aware of the importance of personal information for Children under the age of 14 (“you” or the “Children”) and their guardians, and appreciates the trust placed in us by you and your guardians. In order to better protect the information of the Children, in addition to the MYbank e-CNY Wallet Policy on Personal Information Protection and the privacy policy, authorization agreement and other personal information processing rules (collectively, the “Personal Information Processing Rules”) specified in various business functions (collectively, the “Services”) provided by the MYbank e-CNY wallet (the “e-CNY Wallet” or the “Wallet”), we will, through this MYbank e-CNY Wallet Policy on Children's Personal Information Protection (this “Policy”), explain to you and your guardians how MYbank will process and protect the personal information of the Children (the “Children's Information”) and specify the rights available to you and your guardians.

This Policy is the special rules developed on the basis of the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy. In case of any discrepancy between this Policy and the MYbank e-CNY Wallet Policy on Personal Information Protection or the MYbank Privacy Policy, this Policy shall prevail; for any matter not specified herein, the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy shall apply as a reference. If any information processed by us in our performance of Services cannot be identified as the Children's personal information, the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy shall apply. In order to protect the legitimate rights and interests of the Children, the Children shall use our Services under the guidance of their guardians.

If you are the guardian of the Children, please read this Policy carefully and confirm whether you agree to this Policy and consent to your child's use of our products or services. You must make sure your child uses our products or services with your consent and under your guidance. If you are under the age of 14, please ensure that you read this Policy accompanied by and under the guidance of your guardian and obtain the consent of your guardian before using our products or services.

How We Collect the Children's Information

When users use the Services provided by us, we may need to collect some information from users for the purpose of providing Services to users, improving the quality of our Services, protecting the security of users' Wallets and funds, and complying with national laws, regulations and regulatory requirements. Such information may involve the Children's Information. In the MYbank e-CNY Wallet Policy on Personal Information Protection, we have specified the types and purposes of information to be collected by the specific Services. Please kindly understand that currently the Children can use the Services relating to anonymous Wallet only when accompanied by and under the guidance of their guardians.

The Children-related Services we provide are constantly updating and developing. If users elect to use any Service not covered in the MYbank e-CNY Wallet Policy on Personal Information Protection, the MYbank Privacy Policy and this Policy, and we need to collect the Children's Information based on such Service, we will separately explain the scope, purpose and use of the information collected and obtain the consent of you and your guardians through page prompts, interaction process or other methods specified in agreement.

How We Store and Protect the Children's Information

1. We will store and protect the Children's Information in accordance with the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy. The Children's Information collected and generated in the course of our onshore operations will be stored in the People's Republic of China, and the Children's Information will be kept only for the period necessary for the purposes specified in the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy and for the period required by regulatory authorities.

2. We have prepared a contingency plan for the Children's Information security incidents and regularly organize emergency response trainings and drills for the relevant internal staff, so as to enable them to understand their job responsibilities and emergency response strategies and procedures. If unfortunately a Children's Information security incident occurs, in accordance with the requirements of laws and regulations, we will promptly inform you and your guardians of the basic information and possible impact of the security incident, the actions we have taken or will take to dispose of the incident, the suggestions on risk prevention and mitigation available to you and your guardians, the remedial measures for you and your guardians, etc. We will promptly inform you and your guardians about the incident by means of APP push notification, message or otherwise. If it is difficult to inform users separately, we will adopt reasonable and effective methods to issue relevant warning. In the meantime, in accordance with the requirements of regulatory authorities, we will also report to them about the disposition of the Children's Information security incident.

3. After the Children terminate the use of the Services relating to e-CNY Wallet provided by MYbank, we will cease the collection and use of the Children's Information, unless otherwise required by laws, regulations or regulatory authorities. If we cease operations, we will promptly cease the collection of the Children's Information, notify users of the cessation of operations by sending message to each user or issuing a public announcement, and delete the Children's Information in our possession, unless otherwise required by laws, regulations or regulatory authorities.

How We Use the Children's Information

1. In order to comply with national laws, regulations and regulatory requirements, provide users with Services and improve the quality of Services, or protect the security of users' Wallets and funds, we will use the Children's Information in accordance with the MYbank e-CNY Wallet Policy on Personal Information Protection, the MYbank Privacy Policy and this Policy.

2. When we intend to use the Children's Information for any purpose not specified in the MYbank e-CNY Wallet Policy on Personal Information Protection, the MYbank Privacy Policy and this Policy, we will obtain the consent of you and your guardians again in accordance with laws, regulations and national standards.

3. We will not disclose the Children's personal information in any way whatsoever, unless such disclosure is necessary to perform statutory obligations in accordance with the relevant provisions of laws and administrative regulations or to perform the relevant service agreements among you, your guardians and us, or is made in other statutory circumstances.

How We Provide the Children's Information to External Parties

1. We undertake to keep the Children's Information strictly confidential, and to provide the Children's Information to external parties only in the circumstances set forth in the MYbank e-CNY Wallet Policy on Personal Information Protection, the MYbank Privacy Policy and this Policy. If it is necessary to share the Children's Information with a third party for the purpose of providing Services to users, we will assess the legitimacy, rightfulness and necessity of the third party's collection of the Children's Information. We will require the third party to take protective measures for the Children's Information and to strictly comply with relevant laws, regulations and regulatory requirements.

2. To improve the efficiency of information processing, reduce the cost of information processing or improve the accuracy of information processing, we may entrust competent affiliates or other professional agencies to process the Children's Information on our behalf. We will require the entrusted companies to comply with strict confidentiality obligations and take effective confidentiality measures by entering into written agreements, conducting on-site audits or otherwise, prohibit them from using such Children's Information for any purpose beyond the authorization of you and your guardians, and require them to perform the following obligations in accordance with law:

(1) processing the Children's Information in accordance with laws, administrative regulations and our requirements;

(2) assisting us in responding to applications submitted by the Children's guardians;

(3) taking measures to safeguard information security, and giving timely feedback to us when any leak of the Children's Information occurs;

(4) deleting the Children's Information in a timely manner upon termination of entrustment;

(5) refraining from entrusting others to process the Children's Information;

(6) other obligations to be performed in accordance with law in connection with the protection of the Children's Information.

How Children Realize Their Rights to Personal Information

1. When the Children or their guardians use the e-CNY Wallet provided by MYbank, in order to make it easier for the Children or their guardians to access and manage information, we have provided corresponding operation settings in the client relevant to e-CNY, and the guardians may follow or guide the Children to follow the instructions set forth in the MYbank e-CNY Wallet Policy on Personal Information Protection and the MYbank Privacy Policy. Meanwhile, the guardians may request correction or deletion of the Children's Information by contacting us by phone at 956196, by “e-CNY APP --- My --- Help and Feedback” or by email to privacy-protection-officer-mybank@service.mybank.cn.

2. In any of the following circumstances, you and your guardians may request deletion of the corresponding Children's Information by contacting us via phone at 956196, by “e-CNY APP --- My --- Help and Feedback” or by email to privacy-protection-officer-mybank@service.mybank.cn.:

(1) we collect, store, use or provide to external parties the Children's Information in violation of laws and administrative regulations or agreements among you, your guardians and us;

(2) we collect, store, use or provide to external parties the Children's Information beyond the scope of purposes or the necessary period;

(3) the Children's guardians withdraw their consent;

(4) the Children or their guardians terminate the use of products or services by means of cancellation or otherwise.

3. If you have any questions about this Policy, or have any complaints, comments or inquiries regarding the processing of the Children's personal information and the rights of the subjects of personal information, please contact us via phone at 956196, by “e-CNY APP --- My --- Help and Feedback” or by email to privacy-protection-officer-mybank@service.mybank.cn. We will review the issues involved as soon as possible, and promptly deal with such issues upon verification of your identity. We will reply within a maximum period of fifteen working days or the period stipulated by laws and regulations.

Application and Update of this Policy

We will update this Policy in due time upon the occurrence of any of the following material changes:

(1) any change in our basic information, e.g., change in owners resulting from merger, acquisition or restructuring;

(2) any change in the scope, purpose or rules for the collection, storage, use or provision to external parties of the Children's Information;

(3) any change in the place and period of storage of the Children's Information and the method of disposition upon expiration;

(4) any change in data security capacity, information security risk or measures for safeguarding the security of the Children's Information;

(5) any change in the consequences of refusal to give consent;

(6) any change in the channels and mechanisms for users to make inquiries and complaints, or in external dispute resolution institution and its contact information;

(7) any change in the channels and methods for correction and deletion of the Children's Information;

(8) any other change that may materially affect the rights and interests of the Children's Information.

Due to the large number of users of MYbank Services, in case of any update of this Policy, we will notify you and your guardians by sending message or issuing a public announcement. By continuing to use the relevant Services provided by MYbank after an update to this Policy takes effect, you and your guardians have fully read, understood and accepted the updated rules and are willing to be bound by the updated rules. Further, to enable you and your guardians to receive our message in a timely manner, you are advised to notify us promptly after your contact information is changed.

If this Policy is available in any other language, the simplified Chinese version shall prevail to the extent of any inconsistency between such version and the simplified Chinese version.