（This policy is published in Chinese and English; where inconsistencies arise between the two, the Chinese version shall govern.）
JCHX Mining Management Co., Ltd. (hereinafter referred to as "JCHX" or "the Company") fully adheres to all applicable laws, regulations, and regulatory requirements related to data security and personal information protection. We collect only the customer information and personal information necessary to complete our business operations, based solely on legitimate business needs and proper purposes. We consistently and strictly abide by commercial ethics principles and contractual obligations, and employ stringent measures to safeguard the security of users' private data. At the technical protection level, we strictly establish the Company's computer network’s technical protection system in accordance with national network security related classified protection standards, simultaneously strengthen intrusion monitoring and prevention capabilities, and comprehensively enhance the protection effectiveness of important data and personal information through technical means such as data classification and grading, automatic backup, and encrypted transmission and storage.
To fulfill the above commitments, we will implement the following policies:
1. Establish a multi-carrier data security protection system to strictly safeguard the security of paper materials, electronic documents, and information system data, and comprehensively prevent the risks of user data leakage.
2. When collecting users' personal information or sensitive data, we must clearly inform in advance of the purpose of data use and confidentiality terms to ensure that users' right to be informed is fully implemented.
3. Without customer authorization or disclosure obligations explicitly stipulated by laws and regulations, the Company strictly prohibits disclosing or providing private data entrusted to the Company for management by customers to third parties.
Scope of Application
As a public programmatic document, this policy applies to all members (including board members and senior management personnel) of the Company and its subsidiaries (with operational control), and requires relevant suppliers, partners, and their long-term/temporary employees providing services to JCHX to strictly implement it. Additionally, the scope of the policy extends to all operating entities under the Company and its subsidiaries (with operational control), specifically covering mining service project departments/project companies, resource project companies, other business sector’s operating units, etc.
Regarding associated and joint venture enterprises, the Company will actively promote the alignment of their policies and practices with the requirements of these guidelines through the exercise of shareholder/board rights, ensuring that their policy orientation and practical operations comply with the core principles advocated by this policy.
JCHX Mining Management Co., Ltd.
October 29, 2025
