Personal Data Protection and Privacy Policy

Last updated: September 29, 2026

个人资料保护及私隐政策

We recognise the importance of your personal data and your privacy and we are committed to protecting them. This Personal Data Protection and Privacy Policy (the “Policy”) is therefore designed to assist you in understanding how we collect and handle the personal data you may entrust and/or have entrusted to us and comply with the requirements of the Personal Data Protection Act 2012 (the “PDPA”).

我们意识到您的个人资料和隐私的重要性，且致力于保护它们。本个人资料保护及私隐政策（“政策”）旨在协助您了解我们如何收集及处理您可能委托及/或已委托给我们的个人资料，以遵循《2012年个人资料保护法案》(“PDPA”)的要求。

1. Types of Personal Data 个人资料类型

In this Policy, the term “Personal Data” shall have the meaning ascribed to it in the PDPA. Common examples of the Personal Data include names, identification numbers, contact information, medical records, financial data, transactional data (simulated and/or actual), photographs, video images, biometrics and other information relating to any individuals in any forms.

Apart from Personal Data, we may also collect, use, disclose and/or process other types of information which may be linked to an individual for the purpose listed in the below section. For example:

(1) Device information: the device name and model, device unique identifiers (e.g. IMEI, IDFA, IDFV, Android ID), operating system, IP address, MAC address, software installation list, resolution, app download channel, current app version number, language settings, sensor information (e.g. gravity, gyroscope, electromagnetic field, accelerometer sensors), etc.

(2) Operation Log information: the account status, login time, browsing history, IP address, browser type, language used, operating system version, date and time of access, network requests, etc.

(3) Usage information: information in relation to your activities, interactions and behaviours on our online and other technology platforms (such as websites, apps, etc., the “Platforms”), including clicking, browsing, following, favouriting, searching, commenting, sharing, etc.

(4) Other information or data which may be provided by you or to which you may grant us access.

在本政策中，“个人资料”一词应具有在PDPA中被赋予的含义。个人资料的常见例子包括姓名、身份证号码、联系方式、医疗记录、金融数据、交易数据（模拟及／或实际）、照片、视频图像、生物特征和其他任何形式的个人资料。

除个人数据外，我们还可能为以下相关条款所列目的收集、使用、披露及/或处理其他可能与个人相关联的信息。例如：

(1) 设备信息：设备名称及型号、设备唯一标识符（例如 IMEI、IDFA、IDFV、Android ID）、操作系统、IP 地址、MAC 地址、软件安装列表、屏幕分辨率、应用下载渠道、当前应用版本号、语言设置、传感器信息（例如重力传感器、陀螺仪传感器、电磁场传感器、加速度传感器）等。

(2) 操作日志信息：账户状态、登录时间、浏览记录、IP 地址、浏览器类型、使用语言、操作系统版本、访问日期与时间、网络请求等。

(3) 使用信息：您在我们的在线及其他技术平台上（例如网站、应用程序等，“平台”）的活动、互动及行为相关的信息，包括点击、浏览、关注、收藏、搜索、评论、分享等。

(4) 其他由您提供给我们或允许我们访问的信息或数据。

2. Collection of Personal Data 个人资料收集

Generally, we collect Personal Data in the following ways:

(1) when you submit any form, including but not limited to application forms or other forms relating to your accounts opened and maintained with us, and any of our products or services provided by us;

(2) when you enter into any agreement or provide other documentation or information in respect of your interactions with us, or when you use our services;

(3) when you interact with our staff, including relationship managers and their assistants via telephone calls (which may be recorded), letters, fax, face-to-face meetings, emails and other methods of communications;

(4) when your images are captured by us via closed-circuit television cameras while you are within our premises, or via photographs or videos taken by us or our representatives when you attend events hosted by us;

(5) when you use, visit, and interact with us, including but not limited to clicking, browsing, following, favouriting, searching, commenting, sharing, through Platforms.

(6) when you use some of our services provided through Platforms, including but not limited to registering, opening, establishing and maintaining any online accounts with us, and utilizing our online simulated and/or live trading platforms, facilities and functionalities;

(7) when you request that we contact you, or include you in an email or other mailing list; or when you respond to our request for additional Personal Data, our promotions and other initiatives;

(8) when you are contacted by, and respond to, our marketing representatives, agents and other service providers;

(9) when we seek information about you and receive your Personal Data from third parties in connection with your relationship with us, for example, from referrers, business partners, external or independent asset managers, public agencies or the relevant authorities;

(10) through physical access, internet and information technology monitoring processes;

(11) in connection with any investigation, litigation, registration or professional disciplinary matter, criminal prosecution, inquest or inquiry which may relate to you or any Connected Person; and/or

(12) when you submit your Personal Data to us for any other reason.

一般来说，我们收集个人资料的方式如下：

(1) 您所提交的任何形式的表格，包括但不限于与您开立并由我们维护的账户、我们提供的任何产品或服务有关的申请表格或其他表格；

(2) 当您与我们达成任何协议或提供其他文件或信息时，或当您使用我们的服务时；

(3) 当您与我们的员工互动时，包括关系经理和他们的助手通过电话（可能会被记录）、信件、传真、面对面的会议、电子邮件和其他通讯方式；

(4) 当您在我们的房内，您的图像被我们通过闭路电视摄像机捕捉到，或者是通过我们或我们的代表在您参加由我们主持的活动时拍摄的照片或视频；

(5) 当您通过平台使用、访问并与我们互动时，包括但不限于点击、浏览、关注、收藏、搜索、评论、分享；

(6) 当您通过平台使用我们的一些服务，包括但不限于您向我们注册、开立、设立及维护任何在线账户，及使用我们的在线模拟及／或实际交易平台、设施和功能；

(7) 当您要求我们联系您，或者把您包括在电子邮件或其他邮件列表中；或当您回应我们要求提供额外的个人资料，我们的改进方式和其他措施；

(8) 当您与我们的市场代表、代理商及其他服务供应商联系并作出回应时；

(9) 当我们因您与我们之间的关系而向第三方寻求有关您的信息，并从第三方取得您的个人资料时，例如介绍人、业务合作伙伴、外部或独立资产管理人、公共机构或者有关部门；

(10) 通过实际接触、互联网和信息技术监测过程；

(11) 与任何可能与您或任何关联人士有关的任何调查、诉讼、注册或专业纪律事项、刑事起诉、死因研讯或调查；及／或

(12) 当您出于其他原因向我们提交您的个人资料。

3. Purpose for Collection, Use, Disclosure and Processing of Personal Data 收集、使用、披露和处理个人资料的目的

We may collect, use, disclose and/or process your Personal Data for any of the following purposes:

(1) responding to, processing and handling your enquiries and application for account opening/closing, services and products by us;

(2) providing and updating our services, products and facilities to you, as well as services, products and facilities by other external providers provided through the us from time to time;

(3) administering and/or managing the relationship between us and/or your account;

(4) carrying out your instructions or responding to any enquiries by you;

(5) carrying out due diligence or other screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures (including but not limited to those designed to combat financial crime, “know-your customer”, anti-money laundering, counter-terrorist financing or anti-bribery), that may be required by law or that may have been put in place by us;

(6) providing you with generic or personalized marketing, advertising and promotional information, materials and/or documents relating to banking, investment, credit and/or financial products and/or services that we may be selling, marketing, offering or promoting, whether such products or services exist now or are created in the future;

(7) enhancing and improving the quality of our services, products, facilities, Platforms.

(8) preventing, detecting and investigating fraud, misconduct, any unlawful action or omission, whether relating to your application or any other matter relating to your account(s), and whether or not there is any suspicion of the aforementioned;

(9) managing the administrative and business operations of the Companies and complying with internal policies and procedures (including but not limited to those relating to auditing, finance, accounting and business continuity planning);

(10) managing the safety and security of our premises and services (including but not limited to carrying out CCTV surveillance and conducting security clearances);

(11) complying with the requirement of any applicable law or regulatory authority;

(12) enforcing our legal and / or contractual rights against you; and

(13) any other purposes which we notify you of at the time of obtaining your consent.

我们可收集、使用、披露及／或处理您的个人资料，以作下列任何用途：

(1) 对我们的开户／关户、服务和产品的查询和申请进行处理；

(2) 为您提供和更新我们的服务、产品和设施，以及其他外部供应商提供的服务、产品和设施；

(3) 管理和/或处理我们与/或您的帐户的关系；

(4) 执行您的指示或回应您的任何询问；

(5) 依照法律或监管义务或风险管理程序开展尽职调查或其他审查活动（包括背景调查）（包括但不限于那些旨在打击金融犯罪、“了解您的客户”、反洗钱、反恐融资或反贿赂），该等义务或程序可能为法律所要求，或由我们所实施；

(6) 向您提供与银行、投资、信贷及／或金融产品及／或我们可能销售、营销、提供或推广的产品及／或服务有关的通用的或个人化的市场、广告及推广资料、素材及／或文件，不论该等产品或服务现在是否存在或将在未来推出；

(7) 提升及改进我们的服务、产品、设施及平台的质量。

(8) 防止、检测和调查欺诈、不当行为、任何违法行为或不作为，是否与您的申请有关或与您的帐户有关的任何其他事项，以及是否对前述事项有任何怀疑；

(9) 管理公司的行政和业务运作，并遵守内部政策和程序（包括但不限于与审计、财务、会计和业务连续性规划相关的）；

(10) 管理我们的场所及服务的安全（包括但不限于进行闭路电视监控及保安检查）；

(11) 符合任何适用法律或监管机构的要求；

(12) 执行我们对您的法律和/或合约权利；和

(13) 在取得您的同意时，我们通知您的任何其他目的。

4. Disclosure of Personal Data 披露个人资料

We will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law, your Personal Data may be provided, for one or more of the purposes stated above, to the following entities or parties, whether they are located overseas or in Singapore:

(1) our associated group companies and successor-in-interest to our business or assets;

(2) our third party service providers, agents, contractors, or professional advisers;

(3) relevant government regulators, government ministries, exchange, statutory boards or authorities or law enforcement agencies who have jurisdiction over us or our associated group companies or over any transaction entered into by you;

(4) any liquidator, receiver, administrator, judicial manager, trustees-in-bankruptcy, custodian or other similar official who has been so appointed, pursuant to bankruptcy, winding-up or insolvency proceedings instituted in Singapore or elsewhere, in respect of you or your assets;

(5) financial institutions, brokerage houses, clearing houses, depository, depository agents, managers, administrators, fund houses, registrars, custodians, external banks, nominee banks and investment vehicles in relation to investment product settlement processing; and

(6) any other party to whom you authorise us to disclose your Personal Data to.

我们将采取合理措施保护您的个人资料不受未经授权的披露。根据任何适用法律的规定，您的个人资料可以因上述的一个或多个目的，而提供给下列人士，无论该等人士是在海外还是在新加坡：

(1) 我们相关的集团公司和对我们的业务或资产感兴趣的公司；

(2) 我们的第三方服务提供商、代理商、承包商或专业顾问；

(3) 对我们、我们的关联集团公司或您所进行的任何交易具有管辖权的相关政府监管机构、政府部门、交易所、法定委员会或机构、或执法机构；

(4) 与您或您的资产有关，而在新加坡或其他地区启动的任何破产、清盘、债务清偿程序的清算人、接管人、管理人、司法管理人、破产受托人、托管人或其他类似的官员；

(5) 与投资产品结算业务有关的金融机构、经纪公司、清算机构、保管人、保管代理人、管理人、基金公司、注册商、托管人、外部银行、名义持有人银行、投资实体；和

(6) 任何您授权我们披露您个人资料的任何一方。

5. Transfer of Personal Data Overseas 跨境转移个人资料

To the extent that we may need to transfer Personal Data outside of Singapore, whether to our associated group companies, business partners, external or third party service providers, agents, contractors, or professional advisers, or simply to data storage facilities, we shall do so in accordance with the PDPA to ensure that we provide a standard of protection to personal data so transferred that is comparable to the protection under the PDPA.

在我们可能需要将个人数据转移至新加坡境外的范围内，无论是转移给我们的关联集团公司、业务合作伙伴、外部或第三方服务提供商、代理人、承包商或专业顾问，或仅是转移至数据存储设施，我们均将按照PDPA的规定进行该等转移，以确保被转移的个人数据获得与PDPA所提供保护水平相当的保护。

6. Access to and Correction of Personal Data 查阅及改正个人资料

6.1 Upon request in such form or manner as we may specify, we will provide you with access to your Personal Data or other appropriate information on your Personal Data in accordance with the requirements of the PDPA. We may charge you a reasonable fee for the handling and processing of your requests to access to your Personal Data.

6.2 Please ensure that your Personal Data is accurate, complete and up to date. Upon request in such form or manner as we may specify, we will correct an error or omission in your Personal Data that is in our possession or control in accordance with the requirements of the PDPA.

6.1 如您按照我们可能指定的形式或方式提出要求，我们将根据PDPA的要求，向您提供您的个人资料或其他有关个人资料的适当资料。我们可以向您收取合理的费用，以处理和处理您的请求访问您的个人资料。

6.2 请确保您的个人资料准确、完整且为最新的。如您按照我们可能指定的形式或方式提出要求，我们将根据PDPA的要求，在您的个人资料中纠正错误或遗漏。

7. Withdrawal of Consent 撤回同意

You may withdraw your consent for the collection, use and/or disclosure of your Personal Data in our possession or under our control by submitting your request. We will process your request from such a request for withdrawal of consent being made, and will thereafter not collect, use and/or disclose your personal data in the manner stated in your request. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your Personal Data, it may mean that we will not be able to continue with your existing relationship with us.

您可以在提交您的请求后，收回您的个人资料的收集、使用及／或披露您的个人资料。我们将处理您要求撤回同意的请求，此后将不收集、使用和/或以您的请求中所述方式披露您的个人资料。然而，您的同意退出可能会导致某些法律后果。因而，根据您撤回同意我们处理您个人资料的范围，我们可能无法继续维持您与我们现有的关系。

8. Retention 保留

Your Personal Data will be held for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We shall cease to retain the Personal Data, or remove the means by which the Personal Data can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which that Personal Data was collected is no longer being served by retention of the Personal Data and retention is no longer necessary for legal or business purposes.

您的个人资料将于实现其收集目的所必需的期间内予以保留，或按照适用法律的要求或允许而予以保留。我们将在合理认为保留该等个人资料已不再有助于实现收集该等个人资料的目的，且无必要因为法律或业务目的而继续保留该等个人资料时，停止保留该等个人资料，或移除可将该等个人资料与特定个人连结的方式。

9. Security and Protection 安全与保护

9.1 We have put in place relevant security procedures and technical and organisational measures to safeguard the Personal Data in our possession or under our control and we will use all reasonable efforts to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. However, we cannot completely guarantee the security of any Personal Data we may have collected from or about you, or that for example no harmful code will enter our website (for example viruses, bugs, Trojan horses, spyware or adware). You should be aware of the risks associated with using websites and take any necessary precautions.

9.2 You are solely responsible for maintaining the confidentiality of the credentials with respect to your accounts (including your username, user ID, passwords and any other identity verification details), and ensuring that such credentials are not shared, disclosed or otherwise provided to any person who is not authorized to access or use your accounts, whether intentionally or unintentionally. You shall not permit or facilitate any unauthorized access to or use of your accounts. Should you fail to do so, you may be exposed to risks, or suffering losses, damages and other adverse consequences directly or indirectly arising from or in connection with unauthorized access or use of your accounts. We will not be responsible or liable for such risks, losses, damages and other adverse consequences incurred by you.

9.1 我们已制定相关的安全程序和技术和组织措施，以保护我们拥有或控制的个人资料，我们将尽一切合理努力防止未经授权的访问、收集、使用、披露、复制、修改、处置或类似的风险。然而，我们不能完全保证我们所收集的任何个人资料的安全性，也不能完全保证我们的网站（例如病毒、bug、木马、间谍软件或广告软件）的任何有害代码都不会进入我们的网站。您应该意识到使用网站的风险，并采取必要的预防措施。

9.2 您应全权负责维持与您账户相关的凭证（包括您的用户名、用户ID、密码及任何其他身份验证信息）的保密性，且应确保该凭证不会遭有意或无意地分享、披露或以其他方式提供给任何无权访问或使用您账户的人士。您不得有允许或促成未经授权访问或使用您的账户的行为。如您未能履行上述责任，您可能面临相关风险，或遭受因未经授权访问或使用您的账户而直接或间接产生或与之相关的损失、损害及其他不利后果。我们不对您因此遭受的任何风险、损失、损害或其他不利后果负责或承担任何责任。

10. Use of Cookies and Similar Technologies 使用Cookies及类似技术

10.1 Cookies are small text files placed stored in your computing or other electronic devices which allow us to remember you or other data about you, including your Personal Data, for the purposes set out in the section above. The Cookies placed by our server can only be read by us, and Cookies cannot access, read or modify any other data on an electronic device.

10.2 When you interact with us on our websites, we automatically receive and record information on our server logs from your browser. We may employ Cookies in order for our server to recognise a return visitor as a unique user including, without limitation, monitoring information relating to how a visitor arrives at the website, what kind of browser a visitor is on, what operating system a visitor is using, a visitor's IP address, and a visitor's click stream information and time stamp (for example, which pages they have viewed, the time the pages were accessed and the time spent per web page).

10.3 We may use Pixel Tags and Web Beacons, which are small objects or transparent image files embedded in websites or emails, and other technologies with functionalities similar to Cookies (“Similar Technologies”) on our Platforms or in our email in order to track your interactions, activities and usage of our platforms or services for the purposes set out in the section above.

10.4 Should you wish to refuse the use of Cookies or Similar Technologies, you may do so by changing the relevant settings on your browser or device. However, you may not be able to enter certain part(s) or utilize certain function(s) of our Platforms. Notwithstanding the foregoing, certain Cookies and Similar Technologies are strictly essential or necessary for the operation of the Platforms and cannot be disabled. Should you not consent to the use of such Cookies or Similar Technologies, you must cease accessing or using the Platforms.

10.1 Cookies是存储在计算机或其他电子设备中的小文本文件，它允许我们记住您或其他有关您的数据，包括您的个人资料，以利用于上述条款所载明的目的。由我们的服务器放置的Cookies只能由我们读取，而Cookies无法访问、读取或修改电子设备上的任何其他数据。

10.2 当您在我们的网站上与我们互动时，我们会自动从您的浏览器接收和记录信息到我们的服务器日志。我们可能使用 Cookies，以便我们的服务器将回访访客识别为唯一用户，包括但不限于监测与访客如何进入网站、访客所使用的浏览器种类、操作系统、IP 地址，以及访客的点击流信息和时间戳有关的信息（例如其浏览过的页面、访问该等页面的时间以及在各网页停留的时间）。

10.3 我们可能会在我们的平台或电子邮件中使用Pixel Tags and Web Beacons，即嵌入于网站或电子邮件中的小型物件或透明图像文件，以及其他具有与Cookies类似功能的技术（“类似技术”），以追踪您与我们平台或服务之间的互动、活动及使用情况，以利用于上述条款所载明的目的。

10.4 如您希望拒绝使用 Cookies 或类似技术，您可通过更改您的浏览器或设备上的相关设置来实现。然而，您可能无法访问平台的某些部分或使用某些功能。此外，某些 Cookies 和类似技术对于平台的运行属于必要技术，因此无法被禁用。如您不同意使用该等 Cookies或类似技术，您必须停止访问或使用平台。

11. Contact Us 联系我们

If you:

(1) have any questions or feedback relating to your Personal Data or this Policy;

(2) would like to withdraw your consent to any use of your Personal Data as set out in this Policy; or

(3) would like to obtain access and make corrections to your Personal Data records,

please contact us as follows:

KGI Securities (Singapore) Pte. Ltd.

Email: [email protected]

如果您：

(1) 对您的个人资料或本政策有任何问题或反馈；

(2) 想撤回您就本政策所载任何个人资料的使用所作出的同意；或

(3) 想要获取并修改您的个人资料记录，

请按下列联系方式联系我们：

KGI Securities (Singapore) Pte. Ltd.

Email: [email protected]

12. Policy Updates 政策更新

We keep this Policy under regular review and we reserve the right to amend the terms of this Policy at our absolute discretion and at any time. Any amended Policy will be posted on our website. You are encouraged to visit our website from time to time to ensure that you are well informed of our latest policies in relation to personal data protection.

我们将定期检讨此政策，并保留在我们绝对酌情及随时修改本政策条款的权利。任何修改后的政策将会在我们的网站上公布。鼓励您经常访问我们的网站，以确保您对我们最新的个人资料保护政策有充分的了解。

13. Governing Law 适用法律

Note that as we are a Singapore registered company, this Policy has been drafted solely in accordance with the laws of Singapore. We do not represent or warrant that this Policy complies with the privacy laws of any other jurisdiction and accordingly, you shall not construe this Policy as such.

请注意，由于我们是新加坡注册公司，本政策完全是根据新加坡法律起草的。我们不保证本政策符合任何其他司法管辖区的隐私相关法律。因此，您不应基于其他司法管辖区的隐私相关法律解释此政策。

Chinese translation is for reference only; English version shall prevail in any event.

中文翻译仅供参考, 悉以英文版本为准

(Sep. 26 version)

（2026年9月版）