Privacy and security policy

We take your personal information and privacy very seriously and protect them with utmost care. When you use AJBridge's services, we may collect, store, utilize, transmit, provide, disclose, or delete your information. To clarify how we handle this data during your use of our services, we have established the Privacy and Security Policy (hereinafter referred to as "this Policy"). This document outlines our procedures for accessing, updating, deleting, and safeguarding your information, as well as the methods we employ to ensure its security and transparency throughout your experience with AJBridge.

This policy is closely related to your use of the Service and processing of your personal information and enterprise information. We strongly recommend that you read this policy carefully. We will highlight the clauses involving your important interests and responsibilities in bold. If you have any questions, you can contact us through the contact information specified in this policy.

This Privacy Policy will help you understand the following:

1. Your relevant rights

2. How do we collect your information?

3. When do we collect your information?

4. What information do we collect?

5. How do we use your information?

6. When do we share your information?

7. How do we save and protect your information?

8.How do we protect the information of minors?

9. How long will we keep your information?

10. Changes to our Privacy and Security Policy

11.How do you contact us?

12. Language

13. Definition

14. Special provisions

1. Your relevant rights include:

(1) Access: You may request to obtain the personal information we have about you at any time. We will try our best to reply to your inquiry within 5 working days after receiving your request;

(2) Right to update: If you find that there is any inaccuracy or incompleteness in the personal data we keep, you can update the information through your account on our platform. If there is any problem when logging in to your account or changing online, please inform us, and we will update the records accordingly;

(3) Right to stop marketing: You have the right to request us not to use your personal information for marketing purposes or explicitly tell us that you do not want us to send marketing messages to you with specific personal information;

(4) Right to data transfer: You have the right to request us to provide your personal information to other data controllers, such as third-party service providers;

(5) Right to delete information: You have the right to request us to delete the data or information that is no longer needed or no longer bound by AJBridge's relevant legal obligations within the scope permitted by law;

(6) Withdrawal of Consent: Certain features on our platform require information you've authorized or device permissions you've granted to function properly. You may revoke such consent by disabling the corresponding service. Once consent is withdrawn, we will no longer provide the feature and cease processing your personal information. However, this withdrawal won't affect any prior data processing activities we conducted based on your prior authorization.

2. How do we collect your information?

We collect information you voluntarily provide through your registered account on our platform and by using our services or those of our business partners. Where permitted by law or with your authorization, we may also obtain such information from third parties (including marketing agencies, market research firms, suppliers, contractors, consultants, colleagues, business contacts, public websites, and government agencies), as well as data automatically generated during your use of our platform and services.

We and the third-party service providers we use will collect information about your use of our platform and our services through cookies, web beacons and other technologies.

(1) Cooperation between AJBridge and third-party software development kit (SDK) service providers

To ensure stable client operation and functionality, we integrate authorized partners' SDKs or similar applications into our platform. For detailed information on these integrations, please refer to Appendix I: "List of Personal Information Shared with Third Parties". We conduct rigorous security audits on the APIs (Application Programming Interfaces) and SDKs provided by authorized partners, and establish strict data protection protocols with them to ensure compliance with this policy and other relevant confidentiality measures. Should you identify any risks associated with these SDKs or similar applications, please immediately terminate the operations and contact us promptly.

(2) How AJBridge uses Cookies

Cookies are alphanumeric identifiers we transmit to your computer's hard drive through your web browser. They store records and collect information including: your IP address (and domain name), browser software, browser type and configuration, language settings, geographical location, operating system, reference websites, visited web pages and content. This data helps us ensure website functionality, secure your login, compile statistics on how visitors reach and navigate our site, enhance and optimize web pages, and improve your browsing experience. By understanding and remembering your specific preferences, we can provide tailored experiences in the future. You can edit browser settings to block cookies. Visitors may still access our site if their browser is configured to reject cookies. However, disabling all cookies (including essential ones) will likely cause most website functions to fail and may even prevent login to our services. For more details, please refer to our Cookie Policy.

3. When do we collect your information?

We may collect and retain any information you provide to us as you use our services, including when you add information to a web form, add or update your account information, participate in dispute resolution, or otherwise communicate with us regarding our services.

4. What is the purpose of our collection and what information do we collect?

(1) Implement the functions necessary for our products or services

When you use our products or services, you may need to provide us with or authorize us to collect personal information required for the corresponding products or services under the following circumstances. If you refuse to provide information required for some functions or services, you may not be able to use some functions or services, but this will not affect your normal use of other functions or services.

Registration and certification

When you register for an AJBridge account, you need to provide us with your mobile phone number/email information and set a password to create an AJBridge account. We will send you SMS verification code/verification email/invite you to enter your login password to verify the validity of your information and verify your identity.

After logging into your AJBridge account, you can customize your personal information including phone number, contact address, and other details. Before using our services, you must complete enterprise verification. During this process, you will need to provide us with basic corporate information, business licenses, and identity documents for all relevant individuals (including legal representatives, directors, actual controllers, ultimate beneficiaries, and authorized agents). This includes names, ID numbers, and copies or photos of identification documents and relevant certificates a flat 。

We will collect the transaction password set by you, which will be used to verify your identity and ensure the security of your transactions when you initiate collection, foreign exchange settlement and withdrawal, transfer and other business needs.

5

make collections

In order to provide you with the collection service, when you receive the payment, you need to provide trade-related materials (including contracts, invoices and other relevant materials) to complete the payment account operation. If required by risk compliance review, we will require you to provide more transaction information according to specific circumstances.

Settlement and withdrawal

To activate the foreign exchange withdrawal service, you must first bind a designated account by providing your financial details (including debit card or bank account information). In addition to submitting your financial data and trade-related documentation provided during payment, you will need to submit shipping documents or logistics support materials corresponding to your shipments. Depending on the specific circumstances, we may request additional transaction-related information for risk compliance review purposes.

Regular withdrawals

To realize the function of ordinary withdrawal, you need to bind the ordinary withdrawal account first. You need to provide the financial information (including debit card or bank account information) of the ordinary withdrawal account you bind.

transfer accounts

To realize the function of transfer, you need to provide the bank account information of the recipient and related business information.

(2) Optimize service experience, customer service and user rights and interests protection

To optimize your service experience, enhance customer support, and protect your rights as a user, we may collect the following information about you. If you do not provide or consent to retaining this information, we may be unable to offer certain services related to service optimization, customer support, and rights protection. However, this will not affect your access to other services provided by us.

Optimize our experience

We and our third-party service providers may collect the following information: your domain name, your browser type and operating system, your Internet Protocol (IP) address, the duration of your visit to our website or use of our services, your activities on our website, and the reference URL or web page that directs you to our website.

Customer service communication

When contacting our customer service team, you will need to provide your AJBridge account details (including phone number, company information, and job title) along with transaction records for identity verification. To ensure service quality, protect platform users 'rights, prevent fraud, and verify the accuracy of your provided information during interactions, we will record both incoming and outgoing calls. Chat conversations through our online service will also be collected. In specific scenarios where verifying transaction backgrounds or assisting with payment processing is necessary, we may collect the spouse's name, ID number, and bank account details of the legal representative.

Protection of user rights and interests

We will collect your feedback/advice from time to time or information provided when reporting to us.

(3) Device permissions and device information collected for the purpose of providing additional functions

To provide you with convenient and high-quality services, we may request certain permissions on your device. When using specific features, you may see pop-up prompts asking for authorization. You can disable some or all permissions through your mobile device's settings. The activation/deactivation methods may vary depending on the operating system of your device. For detailed instructions, please refer to the manufacturer's documentation or system guidelines. For a complete breakdown of our permission requests, please see Appendix II "List of Device Permissions Invoked" below.

In order to provide you with risk control guarantee and optimize our services, we may read your device information (including device identification information, device status information and device environment information).

In addition, we may require you to provide additional business and/or identity information, for example, if you send or receive certain high-value or high-value transactions, or as required to comply with applicable legal anti-money laundering obligations.

During your use of our services, if you provide us with any personal data of any person (other than you), you warrant that you have obtained the consent of the relevant person to disclose his/her personal data to us and that he/she consents to our collection, use and disclosure of such personal data for the purposes specified in this Privacy Policy.

5. How will your information be used?

We collect your information to provide you with a safe, smooth, efficient and customized experience.

We may use your personal information for the following purposes:

(1) Verify your identity;

(2) To exercise our rights and fulfill our obligations related to the contract between the parties, handle or manage your account, and communicate with you about changes in our services or any terms and conditions of service;

(3) To achieve the purpose of you providing us with specific information, including responding to your inquiries, providing you with the information you request and providing customer service support;

(4) Customize the content and information we send or display to you, and provide you with other functions to manage our internal operations services when using our websites and services, including for troubleshooting, data analysis, testing, research, statistics and survey purposes;

(5) Protecting our customers, employees and company property —— For example, investigate fraud, harassment or other types of illegal activity involving us or other companies with which we do business;

(6) Comply with any applicable laws and/or regulatory requirements;

(7) Send you service progress or result notice, such as payment notice;

(8) Provide you or allow selected third parties to provide you with information about goods or services that we consider valuable to you;

(9) For purposes directly related to or incidental to the foregoing.

6. When do we share your information?

As a global company, AJBridge may share data with its affiliated companies, business partners, or relevant entities ("relevant parties"). When entering into contracts with data processors, AJBridge exercises due diligence to implement necessary procedures and safeguards to comply with legal and regulatory requirements. We may share your personal information with relevant parties for the following purposes:

(1) With our affiliated company, we may share personal data with them when necessary to provide services or conduct routine technical activities. We will implement reasonable protective measures to ensure the security of your personal information. Access to personal data will only be granted to individuals who need to access it for the purpose of fulfilling our service obligations, agreements, or business operations.

(2) With Business Partners: To fulfill and execute our services or agreements, we may share certain customer data (such as company profiles, bank account details, transaction records) with business partners including banks, payment institutions, and financial service providers. The recipients of such data sharing are determined by your specific service selections or business engagements. We will not share data with parties unrelated to your chosen services. Furthermore, we will sign strict confidentiality agreements with all sharing partners, requiring them to implement robust data security measures in accordance with our privacy policies. When third parties provide certain services, we must share your personal information to enable these services.

(3) We may provide personal information to regulatory authorities when required by relevant agencies or entities authorized to inspect AJBridge under their legal obligations. We may also share personal data with courts, law enforcement agencies, or other entities in compliance with legal requirements or to protect the rights and property of AJBridge or third parties.

(4) Protecting Us and Others We may disclose your information if we deem it necessary to investigate, prevent illegal activities, suspected fraud, violations of our Terms and Conditions or this Privacy Policy, or as evidence in litigation involving us;

(5) Sharing with Advertisers and Media Partners: We may collaborate with the aforementioned partners to utilize processed desensitized data through various forms for commercial purposes including optimizing ad placements and enhancing marketing effectiveness. Unless authorized by you, we will not share your personally identifiable information with these partners. We will provide them with audience targeting strategy data or advertiser performance metrics without disclosing any personal identity information, or aggregate such data to ensure it cannot be used for identification.

(6) Assist us to improve and optimize our website analysis and search engine;

(7) Sharing with potential acquirers or investors, if a merger, acquisition or sale of all or part of our assets is involved, we will notify you via email, account messages and/or prominent notices on our platform of any changes in the ownership or use of your personal data and your relevant rights to your personal data;

Personal information collected and generated during our operations within the People's Republic of China will be stored on third-party cloud servers in China. For service delivery purposes, we may share your information with commercial partners outside the Chinese mainland region or with our corporate group. Such sharing will require your explicit authorization when activating specific services, and you can identify the recipient through the service activation interface. While complying with applicable laws and regulations, we will make every reasonable effort to ensure data transfer complies with local legal requirements. We will also implement all necessary measures (including encrypted transmission, access restrictions, and data processing agreements with recipients specifying mutual obligations) to safeguard your personal information and ensure compliance with this Privacy Policy.

7. How do we save and protect your information?

(1) Protection of your personal information

We will strictly abide by relevant laws and regulations, respect and protect users 'personal privacy. Unless stipulated in the privacy protection agreement signed with users, website service terms and other published guidelines, we will not disclose or disclose users' personal identity information without authorization.

(2) Technical measures and data security measures

We implement industry-standard physical, electronic, and administrative security measures to protect your personal information. We establish data classification management, system security protocols, and secure development standards to regulate information storage and usage. Comprehensive data security controls are enforced through confidentiality agreements with information handlers, enhanced monitoring systems, and internal governance frameworks.

We will implement all reasonable and feasible measures to protect your personal information. For example: encrypting data exchange between your browser and AJBridge using SSL; employing encryption technology to ensure data confidentiality; implementing two-factor authentication for account security; preventing malicious attacks through trusted protection mechanisms; conducting regular cybersecurity training and assessments for relevant personnel, ensuring website administrators fully understand the importance of network security and strictly adhere to established regulations.

(3) Security authentication

We have established a perfect communication mechanism with regulatory agencies and third-party evaluation agencies to provide comprehensive security guarantee for your information.

You are obligated to protect your account and password. You must not disclose, provide, lend, or transfer your account credentials to any third party. If you accidentally leak your login details, please immediately notify us through our website's public messaging system or by calling our customer service hotline. This allows us to lock down relevant permissions and prevent unauthorized access. After submitting valid identification documents and completing our verification process, you may reset your password and resume normal usage.

8.How do we protect the information of minors?

We take the protection of minors 'personal information very seriously. Our platform primarily serves adults. If you are a minor, we recommend that your parents or guardians read this policy and use our services or provide your information only after obtaining their consent. If your guardian disagrees with your use of our services or information sharing under this policy, please immediately stop using our services and notify us promptly so we can take appropriate measures. We will protect the confidentiality and security of minors' personal information in accordance with relevant national laws and regulations.

When collecting minors' personal information with parental or guardian consent for our products/services, we will only use, share, transfer, or disclose such information when legally permitted, explicitly authorized by parents/guardians, or necessary for protecting minors. If we discover that the collected personal data lacks verifiable parental/guardian consent, we will promptly implement appropriate measures to address the situation.

9. How long will we keep your information?

In accordance with applicable laws, AJBridge will retain certain personal and transactional data after your platform account is deactivated. Your data will only be accessed internally for legally required purposes and processed exclusively when absolutely necessary. Information will be retained for seven years from the date of termination of your business relationship with AJBridge or the conclusion of any single service provided by us. Should investigations or lawsuits related to money laundering, terrorist financing, or other suspicious transactions involving you or your transactions remain unresolved after the seven-year retention period, such information will be retained until the conclusion of those legal proceedings.

If the relevant service provider ceases operations, we will cease collecting and processing your personal information within the scope permitted by law. Furthermore, provided that such actions do not violate applicable laws and regulations, we will either delete your personal information or anonymize it. We will notify you of this termination and issue a public notice to ensure your awareness of the situation and enable you to exercise your legal rights.

10. Changes to our Privacy and Security Policy

We may periodically update this Privacy Policy and release revised versions on our platform. We may notify you of the updates through one or more methods including email, SMS, pop-up notifications, or information push. If you continue using the service after this updated policy takes effect, it indicates that you have fully read, understood, and accepted the revised terms and agree to be bound by them. You can check the updated content at any time through "Settings-About Us-Privacy and Security Policy".

11.How do you contact us?

If you have any questions, comments or suggestions about this policy or our data processing, you may contact us as follows:

Tel: 185-1020-1449

Email: cs@ajbridge.com

You have the right to cancel your AJBridge account. You can send a cancellation application to us 30 days in advance through your registered email address, and note the reason for cancellation to cs@ajbridge.com, We will process your cancellation application after receiving it.

12. Language

This policy is presented in Chinese. We may translate it into other languages. If there is any conflict or inconsistency between the translated version and the Chinese version of this policy, the Chinese version shall prevail.

13. Definition

(1) We mean Weide Fintech Co., LTD.

(2) AJBridge Company means Verde Fintech Limited and the entities we display from time to time on specific service interfaces.

(3) Relevant service party refers to the subject displayed in the service interface when you use a specific service.

(4) Commercial partners refer to the partners we choose based on the use of specific services or the subjects that obtain your personal information based on providing services to you, such as banks, payment institutions and other financial service institutions we cooperate with.

(5) Identity information refers to the information indicating your identity, including name, ID number, id card, passport number, passport, position information, work card and copies or photocopies of the foregoing documents.

14. Special provisions

If you are located in Hong Kong, or if you use the Services or functions through our Hong Kong website, network link, application or tool (Hong Kong Site) via the current website, network link, application or tool (Hong Kong Site), you will be subject to the following additional terms:

(1) We collect and process your personal data (information) in accordance with the Personal Data (Privacy) Ordinance ("the Ordinance") of Chapter 486 of the Laws of the Hong Kong Special Administrative Region. The terms "information (data)", "personal information (personal data)", "processing" and "disclosure" used in this Policy are defined in accordance with the Ordinance.

(2) Direct marketing

You agree that AJBridge may use your name and contact information for promotional or marketing purposes, including sending you promotional emails and directly marketing our products, services or activities, or depending on the circumstances, products, services or activities of our group companies or other companies with whom we partner, to the extent permitted by law.

You agree that for the purpose of direct marketing, we may provide your personal information to marketing and call center providers to send you promotional materials and to conduct direct marketing about our services (such materials may be sent to you via SMS, email or other means) to the extent permitted by law.

Prior to providing your personal data to the assignee for direct marketing purposes, we may be required by law to obtain your written consent. In such case, we may use and provide your personal data for any promotional or marketing purposes only after obtaining such written consent.

If consent is required and you provide such consent, you may subsequently withdraw your consent to AJBridge using your personal data for direct marketing purposes and providing it to third parties, after which AJBridge will cease to use or provide such data for direct marketing purposes.

If you have given consent and wish to withdraw it, or if you do not want to receive any marketing communications from us in any form, please contact us as described in this policy.

(3) Data transmission and global processing

Due to the nature of our global operations and the technology required, your personal data may be transferred to third-party service providers outside Hong Kong. We undertake to take all reasonable and necessary steps and make every due effort to ensure that all personal data collected, held, stored, used or otherwise processed outside Hong Kong is handled securely in accordance with this policy and the relevant regulations.

(4) Personal data retention

Your personal information will be stored on third-party servers within China. In accordance with this policy and our legal obligations, contractual commitments, or industry practices, AJBridger will delete, archive, anonymize, or destroy such data upon the expiration of retention periods for specific categories of personal information. Unless prohibited by regulations or applicable laws, or when required by investigations and case proceedings, your personal data will be stored for a limited period.

Once the retention period for a particular category of data expires, AJBridger will delete, archive, anonymize or destroy the data in accordance with our internal policies and procedures, unless prohibited by such regulations or other applicable laws.

You may contact us at the contact information described in this Policy at any time to request the deletion of your personal data. We will delete your personal information in accordance with your request within the scope permitted by law.

(5) The rights of the subject of the data

According to the Regulations, you have the following rights with respect to your personal data, and you may exercise these rights by contacting us at the contact information below at any time.

(a) Verify whether AJBridger holds any of your personal data and access to such data;

(b) Require AJBridger to correct any inaccurate personal information relating to you;

(c) Withdrawal of consent to use or provide personal data for direct promotion;

(d) To file a complaint regarding the processing of data by AJBridger; and

(e) To inquire about the policies and practices of AJBridger regarding personal data.

Questions relating to access, correction, complaint or other inquiries related to your personal data should be submitted to the contact information stated in this policy.

In accordance with applicable laws and regulations, AJBridger is entitled to charge fees directly related to and necessary for the processing of any personal data request.

(6) Contact information

If you wish to exercise your rights under this Policy, or have any questions about this policy or our handling of personal data, please contact us as follows:

Verde Fintech Limited

Address:Suite B66, Room 4801-3, 48/F. Hopewell Centre, No. 183 Queen's Road East, Wanchai, Hong Kong)

Email:cs@ajbridge.com

(7) Definition

We are Verde Fintech Limited

Relevant service provider refers to the subject displayed in the service interface when you use a specific service.

Commercial Partner refers to the partner we have selected based on your use of certain services or the subject that obtains your personal information based on the provision of services to you,

Identity information refers to the information indicating your identity, including name, ID number, id card, passport number, passport, position information, work card and copies or photocopies of the aforementioned documents.

Release date: February 10,2026

Effective date:February 10,2026