Introduction

Lion City Finance (hereinafter referred to as “we,” website: https://www.sgxmain.com) complies with both the Personal Information Protection Law of the People’s Republic of China and Singapore’s Personal Data Protection Act (PDPA), balancing the privacy rights of users in mainland China and Singapore and fully regulating the collection, use, storage, and sharing of personal information. By visiting, browsing, consulting via WhatsApp, leaving messages, or subscribing to updates, you confirm that you have read and agreed to all terms of this Privacy Policy.

1. Scope of Information We Collect

(1) Personal information you voluntarily provide

• When communicating via WhatsApp, leaving on-site messages, or sending inquiry emails: email address, messaging account, and message content;
• When submitting articles, engaging in business cooperation, or pursuing infringement claims: nickname, contact information, company materials, and screenshot evidence;
• Supplementary information voluntarily provided for SGX subscription activities (optional and does not affect basic browsing of indices or individual stocks).

(2) Non-identifying technical data collected automatically

When you access sgxmain.com, the system automatically collects the following data, which cannot identify an individual by itself:

• Device information: device model, operating system, browser type, and device identifier;
• Access logs: IP address, access time, page browsing trail, click behavior, time spent on pages, and external referral sources;
• Cookie cache: stores browsing preferences and subscription status. You may disable cookies in your browser; after that, personalized SGX market updates and browsing history features will stop working.

(3) Sensitive privacy information is not collected mandatorily

We will not proactively request sensitive information such as ID cards, passports, bank cards, or residential addresses. Such data are retained only if you voluntarily provide them for cross-border business or rights-protection purposes; there is no mandatory collection.

2. Permitted Use of Information

Without your separate written authorization, we will never expand the scope of information use. It is used only for the following lawful and necessary purposes:

• Basic website services: record browsing preferences and deliver STI index, SGX blue-chip, REIT, U.S. and Hong Kong cross-market, and Fed macroeconomic updates;
• Customer service support: reply to WhatsApp, email, and messages, and handle market-data corrections, infringement complaints, and content feedback;
• Platform operations optimization: analyze site traffic, popular SGX stocks, and reading data for industry sections to improve update timing;
• Website security protection: detect malicious crawlers, spam messages, and non-compliant traffic-driving accounts to ensure normal browsing for all users;
• Fulfillment of legal obligations in both jurisdictions: cooperate with formal documents issued by China’s public security, cyberspace, and market regulation authorities, as well as Singapore’s PDPC and other regulators, to lawfully obtain relevant information;
• Additional services with your separate consent: daily Singapore market review email updates, which you may unsubscribe from or withdraw authorization at any time.

3. Information Storage and Security Measures

Data storage location rules

Personal information generated by mainland China users is stored on compliant servers in mainland China. Data from Singapore visitors are stored separately in compliance with PDPA requirements. There will be no cross-border data transfer without dual written permission from both jurisdictions. If cross-border storage is needed in the future, we will disclose it in advance and obtain separate authorization.

Data retention periods

• Cookies and browsing logs: retained for 180 days and then automatically cleared;
• Messages, submissions, business, subscription, and customer service records: retained for 3 years after the matter is closed, then anonymized and deleted;
• Requests to delete all personal data: all related records will be permanently deleted within 15 business days.

Security measures

The site uses SSL-encrypted transmission and tiered access permissions. Only authorized customer service and operations staff may access user information. We also conduct regular vulnerability inspections and emergency drills for information leakage. The internet carries inherent risks, so please safeguard your messaging account and do not disclose platform consultation records to third parties.

4. Information Sharing and Disclosure Rules

• We strictly prohibit the sale or rental of any user personal information;
• Only three compliant sharing scenarios are allowed:
  ① With your separate written authorization, we may synchronize submitted content to partner cross-border finance platforms;
  ② We will lawfully disclose corresponding information only in accordance with the laws and regulations of mainland China and Singapore, or through formal judicial/regulatory documents;
  ③ If the platform merges, is acquired, or transfers assets, user information will be transferred along with the assets. The successor must continue to follow this Privacy Policy. If the purpose of information use changes, we will seek your consent again;
• Externally, we publish only de-identified anonymous site traffic and section statistics, which cannot identify any natural person.

5. Your Statutory Privacy Rights

• Right to know and access: Email privacy@sgxmain.com to request a copy of all personal information retained by the platform;
• Right to correct and supplement: If retained contact details or message information are incorrect, you may submit materials to request corrections;
• Right to delete: You may request deletion of all consultation, subscription, and message data at any time; it will be completed within 15 business days;
• Right to withdraw consent: Disable browser cookies or unsubscribe from email updates at any time to stop data collection authorization;
• Right to complain and seek remedies: If you disagree with our privacy handling, you may file a complaint by email and receive a response within 7 business days. Mainland China users may appeal to the cyberspace authority, and Singapore users may seek remedies through local data protection authorities under the PDPC framework.

6. Privacy Protection for Minors

This website is intended for adult cross-border investors and does not provide Singapore stock or REIT investment information services to minors under 18. Minors should not submit any personal information to the platform. If a guardian finds that a minor’s information has been retained, please contact us for immediate deletion.

7. Policy Updates

We may revise this Privacy Policy in accordance with China’s Personal Information Protection Law, Singapore’s PDPA, and the latest regulatory requirements. After updates, the new version will be pinned on the homepage and marked with a new effective date. Continued use of the website means you accept all updated terms. If there are major changes to information collection or cross-border sharing rules, we will notify users separately by email and WhatsApp.