Confidentiality Statement

KGI Financial Holding Co., Ltd. and its Subsidiaries

Client Data Protection and Confidentiality Statement

KGI Financial Holding Co., Ltd. (formerly known as China Development Financial Holding Corporation) and its subsidiaries (hereinafter collectively referred to as the “Group”) have always dedicated to providing diversified and comprehensive financial products and services. Committed to safeguarding the customer ’ data, the Group has stipulated and announced on its official websites the “Customer Data Protection and Confidentiality Statement” in compliance with the “Financial Holding Company Act”, “Regulations Governing the Cross-Selling among Subsidiaries of Financial Holding Company”, “Self-Disciplinary of Financial Holding Company and its Subsidiaries”, “Personal Data Protection Act” and other related statutes and regulations. The Group hereby declares that it will follow the principles as described below to protect the rights and interests of the Group customers while collecting, processing, and using the  customer data.

1. Measures of Data Collection

The Group collects customer data for marketing activities and transactions. It does so with the customer’s consent or based on provisions in contractual agreements signed by the customer, according to existing laws. Public information and data disclosed by regulatory authorities or by authorized third parties is also collected.

2. Methods of Data Storage and Custody

The Group strictly conforms with the principle of safety and confidentiality to safeguard the customer data. Customer data obtained by the Group is rigorously stored in the Group or in the data storage host of the third party commissioned by the Group to manage the information system, and the authority is controlled according to business rights and responsibilities. The customer data shall be shared in accordance with the relevant laws and regulations and management systems of the Group. Unauthorized persons shall not and cannot obtain the customer data.

3. Security and Protection Measures

The Group uses information security technology to transmit and encrypt information, and firewalls are installed to prevent illegal intrusions and to control the transmission of internal messages in order to prevent customer information from being accessed illegally or destroyed.

4. Classification, Scope of Use , and Items

The customer data refers to the customer basic information, account information, credit information, investment information, and insurance information, etc. The classification and scope of use are as follows, but the actual items will be adjusted according to business nature:

(1) Basic information: including name, date of birth, ID number, passport number, telephone/mobile/fax number, address, email address, education level, occupation, family information, type of legal capacity, etc.

(2) Account information: including account number or number with similar function, credit card account number, deposit account number, transaction account number, deposit and loan and other transaction and financial information.

(3) Credit information: including records of bounced check, cancellation records, refusal/banning records, and business operation status.

(4) Investment information: including information on the target, amount and time of investment in or sale of investment.

(5) Insurance information: including relevant information on the type of insurance, term, insured amount, payment method, claims status and refusal records.

When the Group conducts cross-selling, it will comply with the regulations dictated by the competent authorities, relevant trade associations, or other units that have the power to supervise the business activities of the Group, or interactively use and disclose customer information in accordance with the scope of information agreed in the application form or relevant contract between the customer and the company in the group.

5. Purpose of Using Customer Data

The Group discloses, transfers or uses customer information for marketing business (including cross-selling), entrusting a third party to handle business-related affairs, complying with the requirements of the competent authority, managing and supervising subsidiaries, etc., subject to regulatory permission or customer approval. .

6. Disclosure of Customer Data

The customer data will be used and disclosed in compliance with the “Financial Holding Company Act”, “Regulations Governing the Cross-Selling among Subsidiaries of Financial Holding Company”, “Self-Disciplinary of Financial Holding Company and its Subsidiaries”, “Personal Data Protection Act”, and other related regulations by the Group. Except for parties permitted by law, obtaining the customer’s consent, or commissioned by the Group to collect, use and process the customer data under the authority of and on behalf of the Group, the customer data will not be disclosed to and used by any other third party.

7. Methods for Change and Modification of Customer Data

The Group will maintain the completeness and accuracy of customer data. If the customer data requires modification, the customer may apply to amend the data by contacting the business locations of the Group directly or through the Group’s sales representative or customer service.

8. Ways to Withdraw

The customer may give notice to the Group at any time whenever the customer is unwilling to receive any information regarding the financial services or sales promotion of the Group. The Group will no longer send any relevant messages or materials to the customer and will stop using the customer data after a reasonable operating period from the date of such notice.

The modifications of the “Customer Data Protection and Confidentiality Statement”, if any, will be announced on the Group’s websites or via means deemed public by the competent authority. If there is any amendment regarding the 7th or 8th principle of the above, the subsidiaries of Group will further notify you in writing or email in addition to the public announcement.

In accordance with the provisions of Article 13, Item 3 of the Regulations Governing the Cross-Selling among Subsidiaries of Financial Holding Company, we would like to list the names and contact numbers of companies within the Group that sharing customer data: