Missions Points Network Company Limited (“MPNCL”, “we”, “us”, or “our”) is a joint venture between, inter alia, New World Development Company Limited and Chow Tai Fook Jewellery Group Limited, and forms part of the New World Group and CTFJ Group (as defined in the MPNCL Personal Information Collection Statement (“PICS”)). MPNCL is committed to protecting personal data of individuals in territories where we do business. If you are:

1. an individual located in Mainland China who visits or uses the Application or visits the Website of MPNCL, or otherwise uses MPNCL’s products and/or services including but not limited to the loyalty program “K Dollar Program” managed and operated by MPNCL and/or any other loyalty program managed and operated by other entities through which the relevant loyalty points can be converted to points under the “K Dollar Program”, by phone or any other means from Mainland China; and/or
2. an individual holding a Mainland China passport and/or resident identity card who visits the premises, including but not limited to malls, shops, and/or buildings where “K Dollar” under MPNCL’s “K Dollar Program” can be earned and/or used in Hong Kong or otherwise uses MPNCL’s products and/or services by phone or any other means in Hong Kong,

your personal data will be processed by MPNCL in accordance with this Addendum in addition to the MPNCL Privacy Policy Statement (“Privacy Policy Statement”) and PICS, as well as the applicable data protection laws and regulations in Mainland China. Therefore, before using MPNCL’s products and/or services or providing any personal data to us, please ensure that you have carefully read, understood and agree to the PICS, the Privacy Policy Statement and this Addendum. For the purpose of this Addendum, “Mainland China” refers to the People’s Republic of China excluding the Hong Kong Special Administrative Region of the People’s Republic of China (“Hong Kong”), the Macau Special Administrative Region of the People’s Republic of China and Taiwan. Unless defined otherwise, all defined terms (capitalised terms) in this Addendum shall have the same meaning as the defined terms in the Privacy Policy Statement and PICS. In the event of any conflict or inconsistency, they shall be resolved in the following order of precedence (from higher to lower) in respect of such conflict or inconsistency: - (a) this Addendum; (b) the PICS; and (c) the Privacy Policy Statement.

In this Addendum, “personal data” refers to various information related to an identified or identifiable natural person recorded electronically or by other means and does not include anonymized information. Personal data involved in this Addendum includes those set out in the PICS and Clause 5 of the Privacy Policy Statement. In addition, “sensitive personal data” refers to “personal data” that, once leaked or illegally used, may easily lead to violation of the personal dignity of a natural person or harm of personal or property safety. The “sensitive personal data” involved in the PICS, the Privacy Policy Statement and this Addendum includes yearly income, marital status, Log Files, credit card and electronic/digital payment information, tracking information about your use of the Applications and/or the Website (as the case may be) and transaction information (including your characteristics and transaction behavior on the Applications and/or the Website (as the case may be)) (“Tracking Data”), the relevant transactional and/or activity records under or relating to your account(s) with the relevant club(s)/loyalty programme(s) operated by us, our relevant Affiliates and/or relevant Marketing Partners (if applicable, as the case may be), browsing history on the Applications and/or third party website browser (and where such third party browser is involved, the personal data we may collect will depend upon your privacy setting with the website browser) and personal data of minors aged under 18. “Process” or “processing” of “personal data” includes the collection, storage, use, processing, transmission, provision, disclosure, deletion, etc. of “personal data”.

Apart from the PICS and Clauses 5 and 6 of the Privacy Policy Statement, the following also applies to how we collect and process your personal data:-

1. 1. 1. Your personal data will be processed by MPNCL for the purposes as further specified in this Clause 3 and set out in the relevant PICS (“Purposes”). In particular, for us to carry out the Purposes and provide you with the relevant products/services, the personal data (including sensitive personal data) set out below (either collected from you directly and/or via K11 Loyalty Program Limited, Discovery Park Commercial Services Limited, New World Loyalty Programme Limited, Chow Tai Fook Membership Program, Humansa Limited and/or any other entities which manage and operate other loyalty programs under which the relevant loyalty points can be converted to points under the “K Dollar Program”). If such information are not available or not accurate, we may not be able to provide the relevant products/services to you. For the avoidance of doubt, if/where applicable, we will indicate which kind of personal data is mandatory or optional for you to provide at the relevant time of data collection, e.g. when you register your membership account(s) with the relevant club(s)/loyalty programme(s) operated by us:-
    

   No.	Purposes	Personal data we may collect
   1.	For daily operation and administration of your membership, and to contact you in connection with your membership	Name Membership Number Phone number Email address Language Preference Transaction information (including your characteristics and transaction behavior) Credit card and electronic / digital payment information
   2.	To deliver bespoke services and membership benefits to you	Name Membership Number Email address Phone number Month of birth Gender Age Range Language Preference
   3.	To process bookings, purchases, orders or requests made by you	Name Membership Number Phone number Email address
   4.	To send you birthday messages and offers (if you have provided your birthday information) or event reminders	Name Membership Number Email address Phone number Month of birth Language Preference
   5.	Identifying and verifying your identity and/or as a member of any of the relevant club(s)/loyalty programme(s) operated from time to time by us, our relevant Affiliates and/or relevant Marketing Partners (if applicable, as the case may be)	Name Membership Number Phone number Password Email address
   6.	Assisting you to register for your selected or designated membership(s) of other clubs/loyalty programmes of our Affiliates and/or our Marketing Partners by transferring your relevant account information to the aforesaid clubs/loyalty programmes (as the case may be) for the purpose of registration; and enabling the consequent account administration, management and related functions of such selected or designated clubs/loyalty programmes for the purposes of unified access control for your various accounts on the relevant club/loyalty programme’s website, application and/or application platform, data migration or synchronisation for or across your various accounts, and/or unified/centralised management of certain member rewards/benefits initiatives (e.g. K Dollars) that may be applicable to your various accounts. For avoidance of doubt, insofar as your personal data are transferred to such other club(s)/loyalty programme(s) for any of the aforesaid purposes (as applicable), the handling of your personal data will be further subject to the terms and conditions and personal information collection statement of the operator(s) of those other applicable club(s)/loyalty programme(s)	Name Membership number Phone number Email address Age Range Gender Language Preference Month of birth Date of birth Place of residence
   7.	Handling the registration of your membership account(s) with the relevant club(s)/loyalty programme(s) operated by us	Name Membership number Phone number Email address Age Range Gender Language Preference Month of birth Date of birth Place of residence
   8.	Subject to your consent, handling the relevant account binding or unified access control management features (as the case may be) for your membership account(s) with us together with your other selected or designated membership(s) with other clubs/loyalty programmes operated by our Affiliates and/or our Marketing Partners, if any, as the case may be, by processing your relevant account information (including, but not limited to, your membership account number/identifier, name, email and mobile, as applicable) that you may provide to us and/or that we may from time to time receive or otherwise obtain from those other relevant clubs/loyalty programmes (as the case may be) for the purposes of account binding (subject to your consent) or enabling and maintaining unified access control management functions for your relevant accounts (as the case may be)	Phone number Membership number
   9.	For our handling, administration and management of the relevant account administration, management and related functions of your various selected or designated clubs/loyalty programmes’ membership accounts for the purposes of enabling and maintaining unified access control for your various accounts on the relevant club/loyalty programme’s website, application and/or application platform, conducting the relevant data migration or synchronisation for or across your various accounts, unified/centralised management of certain member rewards/benefits initiatives (e.g. K Dollars) that may be applicable to your various accounts (as the case may be), and the consequent data transfers with the operators of such other relevant clubs/loyalty programmes for or relating to the aforesaid purposes	Name Membership number Phone number Email address Age Range Gender Language Preference Month of birth Date of birth Place of residence Transaction information (including your characteristics and transaction behavior) Credit card and electronic/digital payment information
   10.	For our operations, management, administration, processing and/or distribution of the relevant member rewards/benefits (if any) under the relevant promotional campaigns/events, trade promotion competitions, activities, accounts and/or arrangements for our member rewards/benefits initiatives (e.g. K Dollars) that you may be eligible for (if any), subject to our applicable terms and conditions/rules for the foregoing (as the case may be); and in the event that you may be claiming the eligible rewards/benefits (if any) with us through any other clubs/loyalty programmes of our Affiliates and/or our Marketing Partners and/or other participating companies you have registered or transacted with that honour or make available member rewards/benefits (“Other Participating Companies”) running your account(s) with them, for our processing of such cross-club/program claims and handling related data transfers of your relevant account information and transactional records with those other relevant participating clubs/loyalty programmes and/or Other Participating Companies running your account(s) with them (as the case may be) for the administration, processing and/or distribution of the relevant member rewards/benefits (if any)	Name Membership number Phone number Email address Age Range Gender Language Preference Month of birth Date of birth Place of residence Transaction information (including your characteristics and transaction behavior) Credit card and electronic/digital payment information
   11.	Registering you as a user of the Applications and/or the Website (as the case may be)	Name Membership number Phone number Email address Age Range Gender Language Preference Month of birth Date of birth Place of residence
   12.	Activating and linking your KDP rewards/benefits wallet with your relevant account(s) (and corresponding rewards/benefits wallet(s), if any/where applicable) of the other club(s)/loyalty programme(s) of our Affiliates and/or our Marketing Partners and/or Other Participating Companies running your account(s) with them (as the case may be)	Phone number Membership number
   13.	To serve you better and/or maintain your personal data and/or information across multiple pages within or across one or more sessions when using the Applications and/or the Website (as the case may be)	Log Files Tracking Data
   14.	Following registration as a user/member, accessing your account information (including, but not limited to, your name, membership number, etc.) and managing your account (including, but not limited to, changing your password, updating your personal information, subscribing/ unsubscribing from direct marketing, processing eligible member rewards/benefits (if any) for your applicable account(s), etc.)	Log Files Membership number
   15.	Research, development, and analysis in relation to your/customer behaviour including carrying out data sorting and analysis to enable us to better understand your characteristics and transaction behaviour to provide other goods and/or services better tailored to your needs, and to assist us in selecting Marketing Subjects that are likely to be of interest to you, and carrying out aggregated behavioural analysis, including using personal data for statistical analysis, data science studies and data mining. In the event that you have enabled the personalized recommendation feature on the Applications, your personal data will also be used for the AI Use-Cases (as further defined below)	Membership Number Email address Month of birth Gender Age Range Nationality / Place of residence Language Preference Marital Status Family Status Education Level Occupation Place of residence District Have kids or not Transaction information (including your characteristics and transaction behavior) Tracking data Credit card and electronic/digital payment information
   16.	For you to make enquiries, complaints, and/or suggestions to us in relation to the Purposes and/or the Goods and Services (including, but not limited to, through an in-app text box on your mobile device or through our official social media page and/or our official website, or by text message, email and/or mail, and/or other media whether now known or available in the future)	Name Phone number Email address Membership Number
   17.	Seeking your feedback, including through surveys, in relation to the Purposes and/or the Goods and Services (including, but not limited to, through an in-app text box on your mobile device or through our official social media page and/or our official website, or by text message, email and/or mail, and/or other media whether now known or available in the future)	Name Email address Membership Number Interests and favourite activities Transaction information (including your characteristics and transaction behavior)
   18.	Improving the Applications, the Website, the Purposes, and our and our Affiliates’ and Marketing Partners’ Goods and Services	Tracking Data Interests and favourite activities Transaction information (including your characteristics and transaction behavior)
   19.	Direct marketing and cross-marketing for the Marketing Subjects, subject to consent	E-mail address Gender Month of birth Date of birth Phone number Mailing/ correspondence address Tracking Data Interests and favourite activities Social media account information Transaction information (including your characteristics and transaction behavior)
   20.	Data analytics, profiling, information management and database administration	Interests and favourite activities Tracking Data Marital status Family Status Educational level Occupation Yearly Income Language Preference Place of residence Transaction information (including your characteristics and transaction behavior) Credit card and electronic/digital payment information
   21.	Deterring, detection, investigation and/or prevention of activities that may violate, or may be suspected to violate, our policies or may be abusive, illegal, and/or criminal subject to the applicable laws and regulations in the Mainland China	Name Contact details Transaction information (including your characteristics and transaction behavior) Credit card and electronic/digital payment information
   22.	Collection or recovery of any debt owed by you to us or our Affiliates	Name Contact details Transaction information (including your characteristics and transaction behavior)
   23.	The normal management, operation, and maintenance of the Applications, the Website and the provision of the Goods and Services to you, including without limitation sending messages and/or notifications to you in relation to the management, operation, maintenance and administration of the Applications, the Website and the provision of the Goods and Services	Membership number Transaction information (including your characteristics and transaction behavior)
   24.	Storing your personal data (whether by a single or multiple Affiliates (including us) or our Marketing Partners) for the purpose of sharing such personal data with our Affiliates and/or our Marketing Partners for any and all of the other Purposes listed above	Membership number Transaction information (including your characteristics and transaction behavior)

   1. In addition to the above and/or in advancing some or all of the purposes specified above, the following also applies to our processing of your personal data:-
      1. We and/or our Affiliates will also develop or procure, train and use artificial intelligence (AI) systems and related technologies (“AI Engine”) for the business operations for or relating to the relevant clubs/loyalty programmes managed or operated by us and/or Our Affiliates (as the case may be).
      2. To develop, train, calibrate or otherwise improve the AI Engine, we will anonymize your personal data as aggregate anonymous data to train the AI Engine. Otherwise, subject to your opt-in to the personalised recommendation feature on the Applications, we will use your relevant personal data that you have supplied to us and/or our Affiliates (including but not limited to gender, age group, nationality, marital status, family status, membership tiers, interest tags, purchasing history and/or browsing data) for the purposes of (a) providing you with customised/personalised recommendations and more relevant content, advertisements and/or direct marketing (subject to your consent, see the section entitled “Direct Marketing” in the PICS for more details), (b) facilitating precision marketing, lead generation and enhance conversion with tailored and personalized recommendations, and (c) facilitating and enhancing your user experience under or across your various account(s) and/or designated club(s)/loyalty programme(s)’ website(s), application(s) and/or application platform(s) managed or operated by us and/or our relevant Affiliates (as the case may be) (“AI Use-Cases”).
      3. If/where applicable, likewise subject to your opt-in to the personalised recommendation feature on the Applications, we may transfer your customer ID and content score through a secured electronic process generated from or relating to the deployment of the AI Engine to our relevant Affiliates for their use for the aforesaid AI Use-Cases for or in connection with the management and operation of their club(s)/loyalty programme(s) of which you may also be a member of. For the avoidance of doubt, your interaction and/or transactions with the AI Engine’s recommended content, advertisements and/or direct marketing (if you have so consented) will be tracked, which will enable us and/or our relevant Affiliates (as the case may be) to learn more from your preferences, interests and behaviour, and thus further improving the relevant personalized recommendations and suggestions to provide you with more tailored content, advertisements and/or direct marketing.
      4. You may, at any time and without charge, opt-out from the AI Use-Cases by toggling to disable the personalised recommendation feature on the Applications under “settings” –> “personalised recommendation”. For the avoidance of doubt, your choice to disable such feature will only constitute as your opt-out from the AI Use-Cases, but does not further extend to constitute as your opt-out from direct marketing generally (i.e. direct marketing conducted without involvement or deployment of the AI Engine).
      5. Further, if you would like us to correct any inaccurate personal data processed by the AI Engine, you can make a request to our Personal Data Privacy Officer - please refer to Clause 10 below for the relevant contact details. Once such request has been received, the AI Engine will automatically conduct the corresponding update, and thus the personalised recommendation feature on the Applications will also be updated accordingly. If and where necessary, we and/or our relevant Affiliates may from time to time implement the relevant technical measures to re-calibrate the AI Engine with a view to minimize potential errors and/or improper decision-making.
   2. In general, we process your personal data with your consent, and where appropriate, with separate consent from you for processing your personal data under specific circumstances required by the applicable data protection laws and regulations in Mainland China. You acknowledge and agree that under the following situations, we are not required to obtain your consent to process your personal data:-
      1. the processing is necessary for the conclusion or performance of a contract to which you are a party, or where it is necessary to conduct human resources management according to lawfully formulated labour rules and lawfully concluded collective contracts;
      2. the processing is necessary for the performance of our duties or obligations under any applicable laws and regulations, including those directly related to:
         1. National security and national defence
         2. Criminal investigation, prosecution and trial and execution of court orders, judgments or related matters; or
         3. Public security, public health, or major public interest;
      3. the processing is necessary for responding to public health emergencies, or for the protection of life, health and property safety of natural persons under emergency circumstances;
      4. the personal data is processed within a reasonable scope to conduct news reporting, supervision by public opinion and other activities in the public interest;
      5. the personal data is made available to the public by you or the personal data about you from legitimate public sources is processed within a reasonable scope in accordance with the laws and regulations; or
      6. other circumstances as provided by the laws and regulations.

1. Please refer to Clause 15 of the Privacy Policy Statement and the PICS in relation to your rights to access, correct your personal data and withdraw your consent. Further, in accordance with the applicable data protection laws and regulations in Mainland China, we will ensure that you may exercise the following rights over your personal data, including:-
   1. You may request to delete your personal data if:-
      1. our processing of your personal data breaches laws or regulations;
      2. we collect or use your personal data without your consent;
      3. our processing of your personal data breaches our agreement with you;
      4. you no longer use our products and/ or services, or the purposes described in Clause 3 of this Addendum have been achieved or accomplished;
      5. you withdraw your consent;
      6. we no longer provide products and/or services to you;
   2. Change the scope of your consent;
   3. Obtain a copy of your personal data; or
   4. Request to transfer your personal data to another personal data processor provided that such request is compliant with the applicable laws and regulations.
2. Such requests shall be made to our Personal Data Privacy Officer at 4/F, Tsim Sha Tsui Centre, No.66 Mody Road, Tsim Sha Tsui, Kowloon, Hong Kong (marked Confidential) and with the name of Missions Points Network Company Limited or email to privacy@krewards.com. We will endeavour to reply to your reasonable requests in relation to the above within fifteen (15) PRC working days from the day we receive your request.
3. However, please note we may refuse your requests under the following circumstances:-
   1. Circumstances relevant to the fulfilment of our obligations under laws and regulations, including our provision of your personal data (including your sensitive personal data) generated during the transaction between you and us to the regulatory authority(ies) and or other governmental departments under the laws and regulations of Mainland China;
   2. The data retention period required by any law or administrative regulation has not expired, or it is difficult to delete personal data technically (in such cases, we will take necessary security protection measures to ensure the security of your personal data or anonymize such personal data);
   3. Circumstances directly related to national security and defence security;
   4. Circumstances directly related to public security, public health, or significant public interest;
   5. Circumstances directly related to criminal investigation, prosecution and trial, and execution of court decision;
   6. Circumstances where we have sufficient evidence to prove that you have subjective malice, or you are abusing your rights;
   7. Circumstances where protection of your or other individual’s life, property and other important lawful rights is involved;
   8. Circumstances where responding to your request will cause serious harm to the lawful rights and interests of you or other individuals or organisations (including us); or
   9. Circumstances where trade secrets are involved.

Your personal data will be kept by us for no longer than necessary for the fulfillment of the Purposes. Please refer to Clause 8 of the Privacy Policy Statement for further details.

1. To achieve the Purposes under Clause 3 of this Addendum, you understand and agree that we may entrust the processing of your personal data (including sensitive personal data) to agents, contractors, suppliers and service providers as set out in the PICS and Clauses 9 and 11 in the Privacy Policy Statement as well as other entities specified under Index 3.
2. The aforesaid entities entrusted by us have no authority to use your personal data for any other purposes. If there is any change to the purpose of processing of your personal data, we will ask for your consent again.
3. Your personal data may also be shared with the New World Group and joint venture companies and Chow Tai Fook Jewellery group of companies which includes CTFJ and its subsidiaries and other affiliated or related companies from time to time, together referred to as “Affiliates” and our “Marketing Partners” located within or outside Hong Kong, which include property developers, banks, financial and investment institutions, credit card and electronic/digital payment companies, insurance companies, private clubs, concierge and customer service providers, retail outlets and online businesses (for various products and services including but not limited to fashion and beauty, accessories, hair dressing and grooming, health and personal cares, luxury, home and living, food, wine and beverage, electronics, books and stationery, cigarettes and cigars, baby and children, veterinary and pet care, outdoor equipment), shopping malls, loyalty programmes, department stores, watches and jewellers, hotel chains, restaurants and lounges, catering services providers, healthcare and senior care, services and/or products providers including but not limited to body care, medical/pharmaceutical, health and wellness, art and culture, advertising and marketing, consultancy, gallery and exhibition, event management, green and nature, sports and recreation, travel and accommodation, leisure and entertainment, housekeeping, agriculture, installation and repair, engineering, architectural, transportation and logistics, telecommunication, media and information technology, business management, corporate innovation, accelerator and incubation programmes, competitions, conferences and events, legal, charities, education, pre-school, primary, secondary and/or tertiary education institutions etc. and our Marketing Partners for KDP may include Other Participating Companies that we may collaborate with from time to time as further listed here: https://hk.krewards.com/where-to-use/, the details of which are set out in Index 1 of this Addendum.

In principle, we collect, produce and process the personal information in the Mainland China in accordance with the business purposes set out in Clause 3 of this Addendum and they will be stored in the Mainland China and Hong Kong. You understand, authorise and consent that we may transfer your personal information outside Mainland China to our headquarters in Hong Kong, Affiliates, Marketing Partners and other entities outside Mainland China (please refer to Index 2 of this Addendum for further details), and to the servers and/or data centres in Hong Kong of our partners, co-operators, agents, contractors, suppliers and service providers whom we have entrusted to process your personal information (please refer to Index 3 of this Addendum for further details), due to business needs and solely for achieving the business purposes set out in Clause 3 of this Addendum and to the maximum extent permitted by law and in accordance with the mandatory requirements under the laws and regulations of the Mainland China. Hong Kong has enacted personal information protection laws, and we will also ensure that your personal information is adequately protected in accordance with this Addendum. If you would like to learn more about the storage and cross-border transfer of your personal information, withdraw your consent and/or exercise your other rights in accordance with Clause 4 of this Addendum, please contact us via the means set out in Clause 10 of this Addendum and we will respond to your request to a reasonable extent. We will not transfer your personal data to any company, organisation or individual outside of NWG, CTFJ Group, the Affiliates and/or Marketing Partners, except under the following circumstances:

1. Transfer with separate consent. After obtaining your separate consent, we will transfer your personal data to other parties in accordance with this Addendum;
2. When we are involved in any actual or proposed transfer of business, transfer of shares, re-structuring, amalgamation, merger, sale, transfer or purchase of us or our business or our Affiliates or our Affiliates' businesses (please refer to the PICS and Clause 18 of the Privacy Policy Statement);
3. We may otherwise transfer your personal data in accordance with applicable laws and regulations, requirements under legal proceedings, compulsory administrative or judicial requirements.

Please refer to Annex A for the rules for processing minors’ personal data. If parents or legal guardian are aware that personal data of any minors aged below eighteen (18) under their care have been provided to us without consent, please notify us immediately to delete such personal data. In any case, we and/or our relevant Affiliates will not use any minors’ personal data in the AI Engine for any purposes (whether for the purpose of training the AI Engine and/or any of the AI Use-Cases).

Further, the following Clauses in the Privacy Policy Statement shall apply:-

1. Clause 4 shall apply in respect of the use of cookies and other tracking mechanisms;
2. Clause 12 shall apply in respect of the security of personal data;
3. Clause 13 shall apply in respect of circumstances where MPNCL excludes liability for disclosure of your personal data, which will be subject to the applicable laws and regulations in Mainland China;
4. Clause 17 shall apply in respect of the update of the Privacy Policy Statement and this Addendum.

If you have any questions, comments or suggestions regarding this Addendum, or wish to exercise your rights over your personal data in accordance with the Privacy Policy Statement or this Addendum, please feel free to contact our Personal Data Privacy Officer at 4/F, Tsim Sha Tsui Centre, No.66 Mody Road, Tsim Sha Tsui, Kowloon, Hong Kong (marked Confidential) and with the name of Missions Points Network Company Limited or via privacy@krewards.com.

If there is any inconsistency or conflict between the English and Chinese versions of this Addendum, the English version shall prevail.