Privacy Policy

Privacy Policy of the AFCA Financial Service Information Platform

Released on: October 30, 2025

Updated on: October 30, 2025

Thank you for visiting or using the AFCA Financial Service Information Platform (hereinafter referred to as the "Platform"). The Platform is legally owned and operated by the Asian Financial Cooperation Association (hereinafter referred to as "we" or "us"). We deeply understand the importance of personal information and will protect the personal information and privacy security of the subjects using the services of the Platform (hereinafter referred to as "users" or "you") in accordance with the provisions of laws and regulations. We have formulated this Privacy Policy and specially remind you: We hope you carefully read and understand this Privacy Policy before using the Platform and its related services, so as to make appropriate choices.

If you have any questions regarding this Privacy Policy, you can contact us through the contact information we have published. If you disagree with any content of this Privacy Policy, you should immediately stop using our services. When you use any service provided by us, it means you have agreed to our lawful use and protection of your personal information in accordance with this Privacy Policy.

The following text will help you understand in detail how we collect, use, store, transmit, disclose, and protect personal information; it will help you understand the methods for querying, correcting, supplementing, deleting, copying, and transferring personal information. Important contents related to your personal information rights are highlighted in bold for your special attention.

Contents

I. How We Collect and Use Personal Information

II. How We Share, Transfer, and Publicly Disclose Your Personal Information

III. Exceptions to Obtaining Prior Consent for Processing Personal Information

IV. How We Use Cookies

V. How We Store Personal Information

VI. How We Protect the Security of Personal Information

VII. How We Protect Your Rights

VIII. How We Handle Children's Personal Information

IX. Notification of Security Incidents

X. Updates to This Privacy Policy

XI. Contact Us

I. How We Collect and Use Personal Information

1. Account Registration

When you register as an enterprise user of the Platform on behalf of your company/organization, we need to collect the account name and login password you set, the Legal Entity Identifier (LEI) of your company/organization, and relevant contact person information (including your company/organization name and department/position, your name, contact phone number, and email address). We collect the above information to verify the basic information of your company/organization and to assist your company/organization in registering an account. If you do not provide such information, we may not be able to provide registration services to your company, and your company will not be able to enjoy the relevant rights and interests of enterprise users. After your company/organization completes registration, it can independently set an avatar according to its needs. Not uploading an avatar does not affect you or your company/organization's use of the Platform account and services. You must confirm that the submitted contact information has obtained explicit authorization from the personal information subject

If you only browse the public content of the Platform, it is not necessary to register an account or provide the aforementioned information.

2. Publishing/Modifying Financial Cases

When publishing/modifying financial cases on the Platform, member users need to provide contact information (including name and position, telephone/mobile number, email address, and department/office name) of the financial case, and information related to the published/modified financial case. We collect this information to provide financial case services to member users and internal users, enabling them to review relevant content, contact you as needed, understand the latest developments and case details, and discuss potential cooperation, etc. If you do not provide such information, we may not be able to provide you with the service of publishing/modifying financial cases. You need to confirm that the contact information of the financial case you submit has obtained the explicit authorization of the personal information subject.

3. Publishing/Modifying Financial Service Demands

When publishing/modifying financial service demands on the Platform, member users and enterprise users need to provide the user name, the country and region of user registration, user contact information (including name, position, telephone/mobile number, email address, department/office name), Global Legal Entity Identifier (optional for member users, mandatory for enterprise users), and information related to the financial service demands published/modified by the user. We collect the above information to provide you with services related to your financial service demands, enabling partners to contact you, further understand your financial service demands and peer cooperation needs, communicate cooperation intentions, and provide financial services. If you do not provide such information, we may not be able to provide you with the service of publishing/modifying financial service demands. You need to confirm that the user contact information you submit has obtained the explicit authorization of the personal information subject.

4. Other Rules

a. If the information you provide contains another individual's personal information, you should make sure that you have obtained legal authorization before providing such personal information to the Platform.

b. Please note specifically that if information cannot identify your personal identity either alone or in combination with other information, it does not constitute your personal information in the legal sense. When your information can identify your personal identity either alone or in combination with other information, or when we combine data that cannot be linked to any specific personal information with your other personal information, such information will be treated and protected as your personal information in accordance with this Privacy Policy during the period of combined use.

c. Please note that this web page does not involve any personalized advertising. Any emails are sent solely in response to inquiries submitted by you and are for service messages only.

II. How We Share, Transfer, and Publicly Disclose Your Personal Information

(1) Sharing

We will not share (including entrusting for processing and disclosing to external parties) your personal information with any company, organization, or individual, except in the following circumstances:

1. We have obtained your prior consent or authorization.

2. To provide you with the various functions and services described in Article I of this Policy, we may also engage third-party service providers to process your personal information. We require these service providers to use your information only for the purpose of providing services to us and not for their own benefit.

3. Sharing personal information falls under the circumstances stipulated in "Article III: Exceptions to Obtaining Prior Consent for Processing Personal Information" of this Policy.

We will enter into strict confidentiality agreements/terms with the aforementioned third parties that share personal information, requiring them to process personal information in accordance with our instructions, this Privacy Policy, and any other relevant confidentiality and security measures. Regarding the use of sensitive personal information, we require third parties to employ data masking and encryption technologies to better protect your personal information.

(2) Transfer

We will not transfer your personal information to any company, organization or individual, except in the following circumstances:

1. We have obtained your prior consent or authorization.

2. If the transfer of personal information is necessary due to merger, division, dissolution, or declaration of bankruptcy, we will notify you of the name and contact details of the recipient. We will require the recipient to continue fulfilling the obligations under this Policy and other legal obligations. If the recipient changes the original purpose or method of processing, it will obtain your consent again.

3. Transferring personal information falls under the circumstances stipulated in "Article III: Exceptions to Obtaining Prior Consent for Processing Personal Information" of this Policy.

(III) Public Disclosure

We will only publicly disclose your personal information under the following circumstances and while taking security protection measures that comply with industry standards:

1. We have obtained your separate prior consent or authorization.

2. Where it is necessary to provide your personal information pursuant to applicable laws, mandatory administrative law enforcement, or judicial orders, we may disclose your personal information in accordance with the type of personal information required and the method of disclosure.

Public disclosure of personal information falls under the circumstances stipulated in "Article III: Exceptions to Obtaining Prior Consent for Processing Personal Information" of this Policy.

III. Exceptions to Obtaining Prior Consent for Processing Personal Information

Please be aware that in the following circumstances, we may collect and use personal information without obtaining your prior authorization and consent:

1. When it is related to our fulfillment of obligations stipulated by laws and regulations;

2. When it is directly related to national security or national defense security;

3. When it is directly related to public security, public health, or significant public interests;

4. When it is directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.;

5. When it is necessary for protecting the life, property, or other significant legitimate rights and interests of the personal information subject or another individual, but it is difficult to obtain the consent of the individual;

6. When the personal information collected is information that you have voluntarily disclosed to the public;

7. When the personal information is collected from legally publicly disclosed information, such as through lawful news reports, government information disclosure, and other channels;

8. When it is necessary for concluding or performing a contract at your request;

9. When it is necessary for maintaining the safe and stable operation of the Platform's related services, such as discovering and handling faults in the Platform's related services;

10. When it is necessary for lawful news reporting;

11. When it is necessary for academic research institutions to carry out statistics or academic research on the basis of public interests, and de-identify the personal information included in the academic research or description results when providing the results to the public;

12. Other circumstances stipulated by laws and regulations.

IV. How We Use Cookies

To provide you with a more convenient access experience, when you visit the Platform or use the services provided by the Platform, we will use cookies and browser local storage technologies to store your login credentials and account information for identity verification and authorization, ensuring continuous identity authentication during your visit and guaranteeing the security and convenience of Platform services.

We will not use cookies for any purposes other than those described in this Privacy Policy.

V. How We Store Personal Information

1. In accordance with the provisions of laws and regulations, the personal information collected and generated during our operations within China is stored within the territory of the People's Republic of China.

2. During your use of the services, we will continuously store your personal information, adhering to the principle that the storage period shall not exceed the time necessary for providing the services. If we cease operation of the services, you deactivate your account or actively delete personal information, or after the necessary period has expired, we will delete or anonymize your personal information that we hold within a reasonable period in accordance with applicable laws, except for the following circumstances:

a. Compliance with legal requirements for information retention.

b. Where a reasonable extension of the period is necessary for purposes such as finance, auditing, or dispute resolution.

VI. How We Protect the Security of Personal Information

To ensure the security of your information, we will adopt reasonable technical means and measures to guarantee the security of any information collected, preventing loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Please be aware and understand that issues may arise during your use of the Platform due to factors beyond our control. Therefore, we strongly advise you to take active measures to protect the security of your personal information, including but not limited to using complex passwords, changing your password regularly, and not disclosing your account password and other personal information to others.

Please pay special attention that the Platform may contain links to other websites, and these third-party websites have their own independent privacy policies. We are not responsible for the content or activities of these websites. Therefore, when visiting these websites, it is recommended that you carefully read their privacy policies.

VII. How We Protect Your Rights

We attach great importance to your management of personal information and will do our utmost to protect your rights regarding your personal information, enabling you to safeguard your privacy and information security.

However, please understand that specific business functions and services require your information to be completed. When you withdraw your consent or authorization, we will be unable to continue providing you with the corresponding functions and services and will cease processing the corresponding personal information. Nevertheless, your decision to withdraw consent or authorization will not affect the previous processing of personal information conducted based on your authorization.

1. Querying and Correcting Personal Information

Users can query the contact person's company name, department, position, name, contact number, and email address in [Account Information].

Users can independently correct the contact person's email address in [Account Information]. We may not support users in modifying all personal information independently. For further assistance, please contact us via afca_news@afca-asia.org.

2. Copying Personal Information

If you need to obtain a copy of your personal information collected by us through the Platform, you can contact us, and we will process it promptly based on the actual situation.

3. Deleting Personal Information

Under the following circumstances, you can request us to delete personal information:

a. If you withdraw your consent;

b. If the purpose of our processing has been achieved, cannot be achieved, or is no longer necessary for achieving the processing purpose;

c. If you cancel your account, or we cease providing the relevant services, or the storage period has expired;

d. If we process your personal information in violation of laws, administrative regulations, or our agreement;

e. Other circumstances stipulated by applicable laws.

4. Canceling Your Account

You can contact us via afca_news@afca-asia.org to cancel the registered account. After the account is canceled, we will stop providing services to you, and your personal information will be deleted or subject to other reasonable measures prescribed by applicable laws. The account shall not be recoverable after cancellation except as otherwise provided by laws and regulations, and it is recommended that you back up your data properly.

5. Withdrawing Your Consent

You can withdraw your consent. We will no longer process the corresponding personal information after you withdraw your consent. However, your decision to withdraw consent will not affect the previous processing of personal information conducted based on your consent.

6. Responding to Your Above-mentioned Requests

You can exercise your rights by contacting afca_news@afca-asia.org. For security, you may be required to provide a written request or otherwise certify your identity. We may need to verify your identity before processing your request. We will generally respond within 15 working days.

Under the following circumstances, we may be unable to fulfill your request:

a. When it is related to our fulfillment of obligations stipulated by laws and regulations;

b. When it is directly related to national security or national defense security;

c. When it is directly related to public security, public health, or significant public interests;

d. When it is directly related to criminal investigation, prosecution, trial, and execution of judgments, etc.;

e. When we have sufficient evidence indicating that the user has subjective malicious intent or is abusing their rights;

f. When it is necessary for protecting the life, property, or other significant legitimate rights and interests of the user or another individual, but it is difficult to obtain the consent of the individual;

g. When fulfilling the user's request would seriously harm the legitimate rights and interests of the user or other individuals or organizations;

h. When it involves trade secrets.

VIII. How We Handle Children's Personal Information

The Platform is not intended for minors under the age of 18. We undertake not to knowingly collect personal information from minors. Minors are requested not to send personal information to the Platform. If we collect information of minors unknowingly, the Platform will delete it as soon as possible after becoming aware of it. If you believe we may improperly hold information from or about a minor, please contact us.

IX. Notification of Security Incidents

After a security incident occurs, we will, in accordance with the requirements of laws and regulations, promptly inform you of the basic circumstances and potential impact of the security incident, the countermeasures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you, etc. We will promptly inform you of the relevant situation of the incident through the contact information you provided, such as text message notification, phone call, email, etc. If individual notification is difficult, we will issue an announcement in a reasonable and effective manner.

If you know or have reason to believe that your personal information has been lost, misappropriated, misused, or otherwise compromised, or in the event of any actual or suspected misuse of your personal information, you may contact us in accordance with Article XI of this Policy.

X. Updates to This Privacy Policy

We have the right to modify or amend any term of this Privacy Policy at any time in accordance with the law. Once any terms are changed, we will update and post a notice within the Platform, and/or send the latest version of the Privacy Policy to you via message notification, pop-up prompt, or email for your review and confirmation of receipt If you do not agree to the modifications of the provisions, you should take the initiative to stop using the Platform and related services. Otherwise, your continued use of the Platform and its related services will be deemed as your acceptance of the modifications to all terms of this Privacy Policy.

XI. Contact Us

If you have any comments, suggestions, or questions regarding this Policy, or have requests or inquiries concerning your personal information, you may contact us via afca_news@afca-asia.org or by sending a written request to the following address: Asian Financial Cooperation Association, 23F, Building 5, Yard 1, Yuetan South Street, Xicheng District, Beijing. In principle, we will respond within fifteen business days.