UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

FORM 20-F

(Mark One)

☐ REGISTRATION STATEMENT PURSUANT TO SECTION 12(b) OR 12(g) OF THE SECURITIES EXCHANGE ACT OF 1934

OR

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2025

OR

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

OR

☐ SHELL COMPANY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

Commission file number 001-38833

UP FINTECH HOLDING LIMITED

(Exact name of Registrant as specified in its charter)

Cayman Islands

(Jurisdiction of incorporation or organization)

1 Raffles Place, #35-61 One Raffles Place

Singapore (048616)

(Address of principal executive offices)

John Fei Zeng, Chief Financial Officer

1/F, 308 Des Voeux Road Central

Sheung Wan, Hong Kong

Telephone: +852-27602579

(Name, Telephone, E-mail and/or Facsimile number and Address of Company Contact Person)

Securities registered or to be registered pursuant to Section 12(b) of the Act:

Securities registered or to be registered pursuant to Section 12(g) of the Act: None

Securities for which there is a reporting obligation pursuant to Section 15(d) of the Act: None

Indicate the number of outstanding shares of each of the issuer’s classes of capital or common stock as of the close of the period covered by the annual report.

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.

☒ Yes ☐No

If this report is an annual or transition report, indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934.

☐ Yes ☒ No

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.

☒ Yes ☐ No

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files).

☒ Yes ☐ No

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company that prepares its financial statements in accordance with U.S. GAAP, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards† provided pursuant to Section 13(a) of the Exchange Act. ☐

†The term “new or revised financial accounting standard” refers to any update issued by the Financial Accounting Standards Board to its Accounting Standards Codification after April 5, 2012.

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark which basis of accounting the registrant has used to prepare the financial statements included in this filing:

If “Other” has been checked in response to the previous question indicate by check mark which financial statement item the registrant has elected to follow.

◻ Item 17 or ◻ Item 18

If this is an annual report, indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).

☐ Yes ☒ No

TABLE OF CONTENTS

PRESENTATION OF FINANCIAL AND CERTAIN OTHER INFORMATION

UP Fintech Holding Limited, together with its consolidated subsidiaries (collectively, the “Company” or the “Group”), is a leading integrated financial technology platform providing cross-market, multi-product investment experience for investors around the world. In this annual report on Form 20-F, unless otherwise specified or the context otherwise indicates, all references to “UP Fintech Holding Limited” and the “Company” refer to the business and operations of the Company and its consolidated subsidiaries.

This annual report on Form 20-F includes the consolidated financial statements of the Company for the years ended December 31, 2023, 2024 and 2025 (the “Consolidated Financial Statements”) prepared in accordance with United States Generally Accepted Accounting Principles (“U.S. GAAP”) as issued by the Financial Accounting Standards Board.

The financial statements are presented in U.S. dollars. All references to “U.S. dollars,” “US$,” “U.S. $” and “$” refer to the currency of the United States of America.

The language of this annual report on Form 20-F is English. Certain legislative references and technical terms have been cited in their original language so that the correct technical meaning may be ascribed to them under applicable law.

CONVENTIONS THAT APPLY TO THIS REPORT

Except where the context otherwise requires and for the purposes of this Annual Report on Form 20-F only, the following is a glossary of certain terms used throughout this report:

Unless otherwise noted, the translations from Renminbi to U.S. dollars and from U.S. dollars to Renminbi in this report were made at a rate of RMB6.9931 to US$1.0000, the exchange rate set forth in the H.10 statistical release of the Federal Reserve Board on December 31, 2025 and the translations from Hong Kong dollars to U.S. dollars and

from U.S. dollars to Hong Kong dollars in this report were made at a rate of HK$7.7833 to US$1.00, the exchange rate in effect as of December 31, 2025. We make no representation that Renminbi or U.S. dollar amounts referred to in this report could have been or could be converted into U.S. dollars or Renminbi, as the case may be, at any particular rate or at all.

All discrepancies between the amounts identified as total amounts in Item 18. Financial statements and the amounts identified in any table as the sum of the amounts listed therein are due to rounding.

Summary of Risk Factors

An investment in our ADSs or Class A ordinary shares involves significant risks. Below is a summary of material risks we face, organized under relevant headings. The operational risks associated with being based in and having operations in the Chinese mainland also apply to operations in Hong Kong. While entities and businesses in Hong Kong operate under different sets of laws from the Chinese mainland, the legal risks associated with being based in and having operations in the Chinese mainland could apply to our operations in Hong Kong, if the laws applicable to the Chinese mainland become applicable to entities and businesses in Hong Kong in the future. These risks are discussed more fully in “Item 3.D. Key Information—Risk Factors.”

Risks Related to Our Chinese Operations and Operating Structure

We are subject to additional risks as a result of doing business in China, as summarized immediately below and described in more detail below under the heading “Risks Related to Doing Business in China.”

Risks Related to Doing Business in China

FORWARD-LOOKING STATEMENTS

This report contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended (the “1933 Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”). These forward-looking statements involve risks and uncertainties. All statements other than statements of current or historical facts are forward-looking statements. These statements involve known and unknown risks, uncertainties and other factors that may cause our actual results, performance or achievements to be materially different from those expressed or implied by the forward-looking statements.

You can identify these forward-looking statements by words or phrases such as “may,” “might,” “will,” “intend,” “expect,” “anticipate,” “aim,” “estimate,” “intend,” “plan,” “believe,” “likely to” or other similar expressions. We have based these forward-looking statements largely on our current expectations and projections about future events and financial trends that we believe may affect our financial condition, results of operations, business strategy and financial needs. These forward-looking statements include, but are not limited to, statements about:

You should read this annual report and the documents referred to herein with the understanding that our actual future results may be materially different from and worse than what we expect. Other sections of this report include additional factors which could adversely impact our business and financial performance, including those described under the heading “Risk Factors.” Moreover, we operate in an evolving environment. New risk factors and uncertainties emerge from time to time and it is not possible for our management to predict all the risk factors and uncertainties, nor can

we assess the impact of all the factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements. We qualify all of our forward-looking statements by these cautionary statements.

You should not rely upon forward-looking statements as predictions of future events. We undertake no obligation to update or revise any forward-looking statements, whether as a result of new information, future events or otherwise.

Projections, assumptions and estimates of our future performance and the future performance of the industry in which we operate are necessarily subject to a high degree of uncertainty and risks due to a variety of factors, including those described in Item 3.D “Risk Factors” and elsewhere in this annual report. You should not place undue reliance on these forward-looking statements.

PART I

Item 1. Identity of Directors, Senior Management and Advisers

Not applicable.

Item 2. Offer Statistics and Expected Timetable

Not applicable.

Item 3. Key Information

UP Fintech is not a Chinese operating company but a Cayman Islands holding company with no material operations of its own, whose operations are conducted by its subsidiaries and through contractual arrangements with VIEs based in China. This structure involves unique risks to investors. We conduct our operations primarily through our Singapore subsidiaries, New Zealand subsidiaries, U.S. subsidiaries, Hong Kong subsidiaries and the VIEs and their respective subsidiaries in China. The VIE structure is used to replicate foreign investment in Chinese-based companies where Chinese law prohibits direct foreign investment in the operating companies, and contractual arrangements with the VIEs may not be as effective as ownership in providing operational control. Chinese regulatory authorities could disallow this structure, which would likely result in a material change in our operations and/or value of our American Depositary Shares, or “ADSs,” including that it could cause the value of such securities to significantly decline or become worthless. There is no assurance that the PRC government will not regulate transfer of cash to or from the holding company, the subsidiaries, the VIEs and investors. For more information about our operations, refer to “Item 3. Key Information – Certain Summary Financial Information Regarding the Company, Its Subsidiaries, and Consolidated VIEs.” Additionally, VIE agreements have not been tested in a court of law. For more information regarding these and other risks, refer to “Item 3. Key Information – Certain Risks Related to Our Chinese Operations and Operating Structure.”

A diagram of our corporate structure, as of the date of this annual report, reflecting our significant subsidiaries, the consolidated VIEs, and subsidiaries of the VIEs, is set forth below:

On December 2, 2021, the Securities and Exchange Commission, or SEC, adopted final rules, including amendments to Form 20-F, to implement the Holding Foreign Companies Accountable Act, or the HFCAA, which was signed into law on December 18, 2020 and further amended by the Consolidated Appropriations Act, 2023 signed into law on December 29, 2022. The HFCAA requires the SEC to prohibit the securities of any “covered issuer” from being traded on any of the U.S. securities exchanges, including The Nasdaq Stock Market, or traded “over-the-counter” if the auditor of the covered issuer’s financial statements is not subject to PCAOB inspection for three consecutive years. The SEC rules establish procedures the SEC will follow in determining whether a registrant is a “Commission-Identified Issuer” (as defined in the final rule). On December 16, 2021, the PCAOB issued a report on its determinations that it is unable to inspect or investigate PCAOB-registered public accounting firms headquartered in Chinese mainland and in Hong Kong because of positions taken by PRC authorities in those jurisdictions. Our independent registered public accounting firm was subject to the determinations announced by the PCAOB on December 16, 2021. On May 26, 2022, the SEC added the Company to its conclusive list of Commission-Identified Issuers. The SEC’s rules require each Commission-Identified Issuer to submit documentation to the SEC annually on or before its annual report due date establishing that it is not owned or controlled by a governmental entity in that foreign jurisdiction. The SEC will impose an initial trading prohibition on an issuer as soon as practicable after it has been conclusively identified as a Commission-Identified Issuer for two consecutive years.

On August 26, 2022, the PCAOB announced that it signed a Statement of Protocol with the China Securities Regulatory Commission, or the CSRC, and the Ministry of Finance, which it described as the first step toward completely opening access for the PCAOB to inspect and investigate registered public accounting firms in Chinese mainland and Hong Kong. On December 15, 2022, the PCAOB vacated its 2021 determination that the positions taken by authorities in Chinese mainland and Hong Kong prevented it completely from inspecting and investigating registered public accounting firms headquartered in those jurisdictions. As a result, the SEC will not provisionally or conclusively identify an issuer as a Commission-Identified Issuer if it files an annual report with an audit report issued by a registered public accounting firm headquartered in mainland China or Hong Kong on or after December 15, 2022, until such time as the PCAOB issues a new determination.

In light of the PCAOB’s decision to vacate its 2021 determination and until such time as the PCAOB issues any new adverse determination, the SEC has stated that there are no issuers at risk of having their securities subject to a trading prohibition under the HFCAA. The Consolidated Appropriations Act, 2023, amended the HFCAA in two significant ways: (i) reducing the consecutive non-inspection years required to trigger HFCAA prohibitions from three to two, and (ii) allowing any foreign jurisdiction to be the basis for the PCAOB’s incomplete access to inspect or investigate a company’s auditor. Initially, the HFCAA applied only if the PCAOB’s inability to inspect or investigate resulted from a stance taken by an authority in the foreign jurisdiction where the relevant public accounting firm operated. Following the Consolidated Appropriations Act, 2023, the HFCAA now also applies if the PCAOB’s inability to inspect or investigate the relevant accounting firm arises from a stance taken by an authority in any foreign jurisdiction, irrespective of the location of the accounting firm. However, whether the PCAOB will continue to be able to satisfactorily conduct inspections of PCAOB-registered public accounting firms headquartered in Chinese mainland and Hong Kong is subject to uncertainty and depends on a number of factors out of our control. If the PCAOB again becomes unable to conduct a full inspection of our independent registered public accounting firm’s audit documentation related to their audit reports, then our common stock will again be subject to potential delisting from The Nasdaq Stock Market. For more information about these risks, see the risk factor below under the heading “We may be subject to consequences pursuant to the Holding Foreign Companies Accountable Act and related regulations, including the potential for our ADSs to be prohibited from trading on U.S. securities exchanges, including The Nasdaq Stock Market, and in the U.S. over-the-counter market, which will limit the liquidity of our ADSs and our access to U.S. capital markets.”

We are subject to multiple risks arising from our corporate structure, including our status as a holding company incorporated in the Cayman Islands that conducts a portion of our business through China-based VIEs with which we have only contractual relationships and in which we do not own an equity interest, and our operations in China, including potential actions or decisions by PRC or U.S. regulatory authorities restricting or affecting our business activities in the PRC or our access to U.S. capital markets. Certain of these risks, as well as other information relating to our corporate structure and operations in China, are highlighted in this section. This information should be considered in conjunction with the other risks described below under “Risk Factors,” and the information set forth under the heading “Certain Risks Related to Our Chinese Operations and Operating Structure” is incorporated by reference in “Item 3. Key Information – D. Risk Factors.”

Certain Risks Related to Our Chinese Operations and Operating Structure

Shareholders may face difficulties in protecting your interests, and your ability to protect your rights through the U.S. courts may be limited, because we are registered under Cayman Islands law.

We are an exempted company limited by shares incorporated under the laws of the Cayman Islands. Our corporate affairs are governed by our memorandum of association and articles of association, the Companies Act of the Cayman Islands and the common law of the Cayman Islands. The rights of shareholders to take action against the directors, actions by minority shareholders and the fiduciary responsibilities of our directors to us under Cayman Islands law are to a large extent governed by the common law of the Cayman Islands. The common law of the Cayman Islands is derived in part from comparatively limited judicial precedents in the Cayman Islands as well as from the common law of England, the decisions of whose courts are of persuasive authority, but are not binding, on a court in the Cayman Islands. The rights of our shareholders and the fiduciary responsibilities of our directors under Cayman Islands law are not as clearly established as they would be under statutes or judicial precedents in some jurisdictions in the United States. In particular, the Cayman Islands has a less developed body of securities laws than the United States. Some U.S. states, such as Delaware, have more fully developed and judicially interpreted bodies of corporate law than the Cayman Islands. In addition, Cayman Islands companies may not have the standing to initiate a shareholder derivative action in a federal court of the United States.

Shareholders of Cayman Islands exempted companies like ours have no general rights under the Cayman Islands law to inspect corporate records or to obtain copies of lists of shareholders of these companies. Our directors have the discretion under our fourth amended and restated articles of association to determine such times and such days that our register and branch register of members, as the case may be, shall be open to inspection by our shareholders or other persons. This may make it more difficult for shareholders to obtain the information needed to establish any facts necessary for a shareholder motion or to solicit proxies from other shareholders in connection with a proxy contest.

Certain corporate governance practices in the Cayman Islands differ significantly from requirements for companies incorporated in other jurisdictions such as the United States. We rely on home country practice with respect to certain corporate governance matters. Our shareholders may be afforded less protection than they otherwise would have under rules and regulations applicable to U.S. domestic issuers.

As a result of all of the above, public shareholders may have more difficulties in protecting their interests in the face of actions taken by the management, members of the board of directors or controlling shareholders than they would have as public shareholders of a company incorporated in the United States.

If the agreements that establish the structure for operating some of our activities in China do not comply with PRC regulations, if we fail to obtain all required permissions and approvals required by Chinese regulatory authorities, or if these regulations change in the future, we could be subject to severe penalties or be forced to relinquish our interests in those operations.

Our WFOEs have entered into a series of contractual arrangements with the VIEs and their respective shareholders, respectively, which enable us to (i) exercise effective control over the VIEs, and (ii) receive substantially all of the economic benefits of the VIEs. As a result of these contractual arrangements, we have control over and are the primary beneficiary of the VIEs and hence consolidate their financial results into our consolidated financial statements under U.S. GAAP. See Item 4 “Information on the Company” for further details.

To our knowledge, we believe that (i) the ownership structures of the VIEs in China and our WFOEs, comply with all existing PRC laws and regulations; (ii) the contractual arrangements between our WFOEs, the VIEs and their respective shareholders governed by PRC law are valid, binding and enforceable, and in compliance with PRC laws or regulations currently in effect; and (iii) except as disclosed under the risk factor headed “We may be adversely affected by the complexity, uncertainties and changes in the PRC regulations of Internet-related businesses and companies, and any lack of requisite licenses, permits or approvals applicable to our business may have a material adverse effect on our business and results of operations”, our PRC subsidiaries and the VIEs have received all permissions or approvals that we believe are required and necessary to conduct our business operations within the PRC in all material aspects. However, there are uncertainties regarding the interpretation and application of the existing and future PRC laws, regulations and rules. Accordingly, the PRC regulatory authorities may take a view that

is not consistent with the opinion of the Company and our PRC legal counsel. It is uncertain whether any new PRC laws or regulations relating to variable interest entity structures will be adopted or if adopted, what they would provide. If we or any of the VIEs are found to be in violation of any existing or future PRC laws or regulations, fail to obtain or maintain any of the required permits or approvals, or inadvertently conclude that such permissions or approvals are not required, or if applicable laws, regulations, interpretations or administrative policy change and we are required to obtain such permissions or approvals in the future but are unable or fail to do so, the relevant PRC regulatory authorities would have broad discretion to take action in dealing with such violations or failures, including, without limitation:

The imposition of any of these penalties would result in a material and adverse effect on our ability to conduct our business. In addition, it is unclear what impact the PRC government actions would have on us and on our ability to consolidate the financial results of the VIEs in our consolidated financial statements, if the PRC government authorities were to find our legal structure and contractual arrangements to be in violation of PRC laws and regulations. If the imposition of any of these government actions causes us to lose our right to direct the activities of the VIEs and we are not able to restructure our ownership structure and operations in a satisfactory manner, or any other significant penalties imposed on us in this event, there would have a material adverse effect on our activities in China, and our ability to conduct our business may be negatively affected. This could have a material adverse effect on the market price of our ADSs.

Uncertainties exist with respect to the interpretation and implementation of the Foreign Investment Law of the PRC and how it may impact the viability of our current corporate structure, corporate governance and business operations.

On March 15, 2019, the National People’s Congress adopted the Foreign Investment Law of the PRC, or the FIL, which became effective on January 1, 2020 and replaced the Wholly Foreign-Invested Enterprise Law of the PRC, the Sino-Foreign Cooperative Joint Venture Enterprise Law of the PRC and the Sino-Foreign Equity Joint Venture Enterprise Law of the PRC, together with their implementation rules and ancillary regulations. On December 26, 2019, the State Council published the Implementation Rules of the Foreign Investment Law, or the FIL Implementation Rules, which took effect on January 1, 2020.

The FIL embodies an expected PRC regulatory trend to rationalize its foreign investment regulatory regime in line with prevailing international practice and the legislative efforts to unify the corporate legal requirements for both foreign and domestic investments. However, since it is relatively new, uncertainties still exist in relation to its interpretation and implementation. For example, the FIL removes all references to the terms of “de facto control” or “contractual control” as defined in the draft published in 2015 by the Ministry of Commerce, or the MOFCOM, and adds a catch-all clause to the definition of “foreign investment” so that foreign investment, by its definition, includes “investments made by foreign investors in China through other means defined by other laws or administrative regulations or provisions promulgated by the State Council” without further elaboration on the meaning of “other means.” The FIL Implementation Rules also remain silent on contractual arrangements. It leaves leeway for the future legislations promulgated by the State Council to provide for contractual arrangements as a form of foreign investment.

We currently use contractual arrangements to operate certain businesses, including the consolidated VIEs, in which foreign investors are prohibited or restricted from investing. It is uncertain whether our corporate structure, including our existing VIE structures, will be seen as violating the foreign investment rules.

In addition, the FIL grants national treatment to foreign invested entities, except for those foreign invested entities that operate in industries deemed to be either “restricted” or “prohibited” in the “negative list”. The current Special Administrative Measures for Market Access of Foreign Investment (Negative List) (2024 Edition) was issued by the National Development and Reform Commission, or the NDRC, and the MOFCOM on September 8, 2024 and became effective on November 1, 2024. Furthermore, on December 19, 2020, the NDRC and the MOFCOM jointly issued the Measures for Security Review of Foreign Investment, effective on January 18, 2021, which provides detailed guidance regarding security review of foreign investment that has a potential impact on national security. However, there remain a number of unclear issues under the Measures, including but not limited to its view towards contractual arrangements, including VIE arrangements. Changes in PRC laws and regulations could materially adversely affect the contractual arrangements. If future legislations prescribed by the State Council mandate further actions to be taken by companies with respect to existing contractual arrangement, we may face uncertainties as to whether we can complete such actions in a timely manner, or at all. Failure to take timely and appropriate measures to comply with any of these or similar regulatory compliance requirements could materially and adversely affect our current corporate structure, corporate governance and business operations.

We rely on contractual arrangements with the VIEs and their respective shareholders for a large portion of our business operations, which may not be as effective as equity ownership in providing operational control, and which we may not be able to enforce in a court of law.

We are a holding company with no material operations of our own. We conduct our operations primarily through our Singapore subsidiaries, New Zealand subsidiaries, U.S. subsidiaries, Hong Kong subsidiaries and the VIEs and their respective subsidiaries in China. We have relied and expect to continue to rely on contractual arrangements with the VIEs and their respective shareholders to conduct certain of our key supporting functions. Additionally, the VIEs were responsible for generating approximately 0.6% of our revenues for the year ended December 31, 2025. The VIEs are consolidated for accounting purposes, but we do not have and may never have an equity interest in the VIEs. These contractual arrangements are used to provide investors with exposure to foreign investment in China-based companies where Chinese law prohibits direct foreign investment in the operating companies and may not be as effective as equity ownership in providing us with control over the VIEs. For example, the VIEs and their respective shareholders could breach their contractual arrangements with us by, among other things, failing to conduct their operations in an acceptable manner or taking other actions that are detrimental to our interests. Our contractual arrangements with the VIEs and their respective shareholders are described in detail below under the heading “Item 3. Key Information — Contractual Arrangements with the VIEs and Their Respective Shareholders.”

If we had equity ownership of the VIEs, we would be able to exercise our rights as a shareholder to effect changes in the board of directors of the VIEs, which in turn could implement changes, subject to any applicable fiduciary obligations, at the management and operational level. However, under the current contractual arrangements, we rely on the performance by the VIEs and their respective shareholders of their obligations under the contracts to exercise control over the VIEs. The shareholders of the consolidated VIEs may not act in the best interests of our company or may not perform their obligations under these contracts. Such risks exist throughout the period in which we intend to operate certain portions of our business through the contractual arrangements with the VIEs. If any disputes relating to these contracts remain unresolved, we will have to enforce our rights under these contracts through the operations of PRC law and arbitration, litigation and other legal proceedings and therefore will be subject to uncertainties in the PRC legal system. See “Item 3. Key Information - Certain Risks Related to Our Chinese Operations and Operating Structure - Any failure by the VIEs or their shareholders to perform their obligations under our contractual arrangements with them would have a material and adverse effect on our business.” Therefore, our contractual arrangements with the VIEs may not be as effective in ensuring our control over the relevant portion of our business operations as equity ownership would be.

Our PRC legal counsel has advised us that there are uncertainties regarding the interpretation and application of current and future PRC laws, regulations and rules, including those governing VIE arrangements. Additionally, the VIEs contractual arrangements have not been tested in a Chinese court of law. Accordingly, the PRC regulatory authorities may take a view that is contrary to the opinion of our PRC legal counsel. It is uncertain whether any new PRC laws

or regulations relating to variable interest entity structures will be adopted or if adopted, what they would provide. If we or any of the VIEs are found to be in violation of any existing or future PRC laws or regulations, or fail to obtain or maintain any of the required permits or approvals, the relevant PRC regulatory authorities would have broad discretion to take action in dealing with such violations or failures. Additionally, Chinese regulatory authorities could disallow this structure, which would likely result in a material change in our operations and/or a material change in the value of our securities, including that it could cause the value of such securities to significantly decline or become worthless.

Any failure by the VIEs or their shareholders to perform their obligations under our contractual arrangements with them would have a material and adverse effect on our business.

We refer to the shareholders of each VIE as its nominee shareholders because although they remain the holders of equity interests on record in each of the VIEs, pursuant to the terms of the relevant power of attorney, each such shareholder has irrevocably authorized the relevant WFOE to exercise his, her or its rights as a shareholder of the relevant VIE. Additionally, our WFOEs have the sole discretion to receive from the relevant VIE an annual service fee and will make discretionary determinations on whether to collect services fees and on the amount of fees to be collected in future years. To the extent that our WFOEs do not choose to charge service fees to the VIEs, we will not have any contractual rights to collect funds from the VIEs that would be legally enforceable upon liquidation or sale of the VIEs. Under such circumstances, our investors would not derive any benefit from the operation of, or our contractual arrangements with, the VIEs. Furthermore, if the VIEs or their shareholders fail to perform their respective obligations under the contractual arrangements, we may have to incur substantial costs and expend additional resources to enforce such arrangements. We may also have to rely on legal remedies under the PRC law, including seeking specific performance or injunctive relief, and claiming damages, which we cannot assure will be effective under the PRC law. For example, if the shareholders of the VIEs refuse to transfer their equity interests in the VIEs to us or our designee if we exercise the purchase option pursuant to these contractual arrangements, or if they otherwise act in bad faith towards us, then we may have to take legal actions to compel them to perform their contractual obligations.

All of the agreements under our contractual arrangements are governed by the PRC law and provide for the resolution of disputes through arbitration in China. Accordingly, these contracts would be interpreted in accordance with the PRC law and any disputes would be resolved in accordance with PRC legal procedures. There are uncertainties regarding the interpretation and application of current and future PRC laws, regulations and rules regarding the status of the rights of our Cayman Islands holding company with respect to its contractual arrangements with the VIEs and their shareholders. It is uncertain whether any new PRC laws or regulations relating to variable interest entity structures will be adopted or if adopted, what they would provide. Additionally, the legal system in the PRC is developing and rapidly evolving. As a result, uncertainties in the PRC legal system could limit our ability to enforce these contractual arrangements. See “Item 3. Key Information - Certain Risks Related to Our Chinese Operations and Operating Structure - The legal system of the PRC is developing and rapidly evolving, and there are inherent uncertainties that may affect the protection afforded to us.” Meanwhile, there are very few precedents and little formal guidance as to how contractual arrangements in the context of a VIE should be interpreted or enforced under the PRC law. There remain significant uncertainties regarding the ultimate outcome of such arbitration. In addition, under the PRC law, rulings by arbitrators are final, parties cannot appeal the arbitration results in courts, and if the losing parties fail to carry out the arbitration awards within a prescribed time limit, the prevailing parties may only enforce the arbitration awards in PRC courts through arbitration award recognition and enforcement proceedings, which would require additional expenses and delay. In the event we are unable to enforce these contractual arrangements, or if we suffer significant delays or other obstacles in the process of enforcing these contractual arrangements, we may not be able to exert effective control over the VIEs, and our ability to conduct our business may be negatively affected.

The shareholders of the VIEs may have potential conflicts of interest with us, which may materially and adversely affect our business.

The shareholders of the VIEs may have potential conflicts of interest with us. These shareholders may breach, or cause the VIEs to breach, or refuse to renew, the existing contractual arrangements we have with them and the VIEs, which would have a material and adverse effect on our ability to effectively control the VIEs and receive economic benefits from them. For example, the shareholders may be able to cause our agreements with the VIEs to be performed in a manner adverse to us by, among other things, failing to remit payments due under the contractual arrangements to us

in a timely manner. We cannot assure you that when conflicts of interest arise any or all of these shareholders will act in the best interests of our company or such conflicts will be resolved in our favor. Currently, we do not have any arrangements to address potential conflicts of interest between these shareholders and our company, except that we could exercise our purchase option under the Exclusive Option Agreements with these shareholders to request them to transfer all of their equity interests in the VIEs to a PRC entity or individual designated by us, to the extent permitted by the PRC law. If we cannot resolve any conflict of interest or dispute between us and these shareholders, we would have to rely on legal proceedings, which could result in disruption of our business and subject us to uncertainties as to the outcome of any such legal proceedings.

Contractual arrangements in relation to the VIEs may be subject to scrutiny by the PRC tax authorities and they may determine that we or our PRC VIEs owe additional taxes, which could negatively affect our financial condition and the value of your investment.

Under applicable PRC laws and regulations, arrangements and transactions among related parties may be subject to audit or challenge by the PRC tax authorities. We could face material and adverse tax consequences if the PRC tax authorities determine that the VIE contractual arrangements were not entered into on an arm’s length basis in such a way as to result in an impermissible reduction in taxes under applicable PRC laws, rules and regulations, and adjust the income of the VIEs in the form of a transfer pricing adjustment. A transfer pricing adjustment could, among other things, result in a reduction of expense deductions recorded by the VIEs for PRC tax purposes, which could in turn increase their liabilities without reducing our WFOEs’ tax expenses. In addition, the PRC tax authorities may impose late payment fees and other penalties on the VIEs for the adjusted but unpaid taxes according to the applicable regulations. Our financial position could be materially and adversely affected if the VIEs’ tax liabilities increase or if it is required to pay late payment fees and other penalties.

We may lose the ability to use and enjoy assets held by the VIEs that are material to the operation of certain portions of our business if the VIEs go bankrupt or become subject to a dissolution or liquidation proceeding.

As part of our contractual arrangements with the VIEs, the VIEs and their subsidiaries hold certain assets that are material to the operation of certain portion of our business, including intellectual properties. If the VIEs go bankrupt and all or part of their assets become subject to liens or rights of third-party creditors, we may be unable to continue some or all of our business activities, which could materially and adversely affect our business, financial condition and results of operations. Under the contractual arrangements, the VIEs may not, in any manner, sell, transfer, mortgage or dispose of their assets or legal or beneficial interests in the business without our prior consent. If the VIEs undergo a voluntary or involuntary liquidation proceeding, independent third-party creditors may claim rights to some or all of these assets, thereby hindering our ability to operate our business, which could materially and adversely affect our business and results of operations.

The PRC government may regulate transfer of cash to or from the holding company, the subsidiaries, the VIEs and investors.

A majority of our revenues were generated from our wholly owned subsidiaries in New Zealand, Singapore and the United States for the years ended December 31, 2023, 2024 and 2025. Most of the consolidated VIEs and their subsidiaries operate business in the PRC and their main functions are to support our licensed/registered entities in New Zealand, Singapore, and the United States, etc. (“Licensed Entities”). Certain of the costs generated by VIEs and their subsidiaries are covered by these Licensed Entities through inter-company transactions, and we expect that the Licensed Entities will cover a substantial majority of such costs in the future. In general, the holding company transfers funds from financing (including funds from its IPO, follow-on equity offerings, and offerings of convertible bonds, as applicable) to Licensed Entities in the form of capital injections or loans to support their business expansion. These Licensed Entities pay the consolidated VIEs and their subsidiaries periodically for the services rendered through inter-company transactions, pursuant to the terms of the contractual arrangements between them. To date, we have not experienced difficulty in transferring cash to or from the holding company, the subsidiaries, the VIEs, and investors. However, there is no assurance that the PRC government will not further regulate transfer of cash in the future.

If we fail to protect customer data and privacy, our reputation, financial condition and results of operations will be materially and adversely affected.

We are dependent on information technology networks and systems to securely process, transmit and store electronic information and to communicate among our locations and with our customers and partners. Due to the volume and sensitivity of the personal information and customer data we manage and the nature of our brokerage services and ESOP management services, the security features of our platform and information systems are critical.

We have adopted security policies and measures, including encryption technology, to protect our proprietary data and customer’s privacy. All customer and transaction data are saved in our own database and operating systems. Only database administrators with the proper authorization have access to the database. In addition, all employees should sign non-disclosure agreements when they join and leave our company. However, we cannot guarantee our employees will not breach the non-disclosure agreements in the future. Further, as the breadth and complexity of the infrastructure of our platform continues to grow, the potential risk of system breakdown or function failure increases and it is the same for the potential risk of security breaches and cyber-attacks such as viruses, malware or phishing attempts by cyber criminals or other wrongdoers seeking to steal our customer’s data for financial gain or to harm our business operations or reputation. Further, if any person, including any of our employees, negligently disregards or intentionally breaches our established controls with respect to customer data, or otherwise mismanages or misappropriates that data, we could be subject to significant monetary damages, regulatory enforcement actions, fines or even criminal prosecution in one or more jurisdictions. Unauthorized disclosure of sensitive or confidential customer data, whether through system failure, employee negligence, fraud or misappropriation, could damage our reputation and cause us to lose customers. Cyber-attacks could also adversely affect our operating results, consume internal resources, and result in litigation or potential liabilities for us and otherwise harm our business. Historically, we received complaints from our customers regarding the leakage of their personal information. Although we have conducted investigation on such leakage, we cannot guarantee that there will not be other similar incidents and complaints. Further, our security management programs are reviewed annually, and therefore, we cannot ensure that such programs will be updated promptly.

In addition, by virtue of third party channels, our corporate customers utilize our technology to serve their own customers. Consequently, any leak or abuse of customer data by our third party channels may be perceived by the customers as a result of our failure to protect the customer data and privacy. Any failure or perceived failure by us to prevent information security breaches or to comply with privacy policies or privacy-related legal obligations, or any compromise of security that results in the unauthorized release or transfer of personally identifiable information or other customer data, could cause our customers to lose trust in us and could expose us to legal claims.

A growing number of legislative and regulatory bodies have adopted consumer notification requirements in the event of unauthorized access to or acquisition of certain types of personal data. Such breach notification laws continue to evolve and may be inconsistent from one jurisdiction to another, which might become a particular concern as we accelerate our international expansion. For information regarding risks relating to privacy and data security laws to which we are subject in China, see “– We may be subject to regulatory compliance costs and enforcement activity relating to Chinese privacy and data security laws.”

In addition, laws and regulations in certain jurisdictions impose specific regulatory requirements on cross border transmission of important personal data. We are subject to domestic and international laws relating to the collection, use, retention, security and transfer of personally identifiable information among us and our international subsidiaries. Non-compliance could result in significant penalties or legal liability. Foreign data protection, privacy, and other laws and regulations can impose different obligations or be more restrictive that those in Chinese mainland. Regulatory authorities around the world are considering a number of legislative and regulatory proposals concerning data protection. Also, the interpretation and application of consumer and data protection laws in the U.S., Europe and elsewhere are often uncertain. It is possible that these laws may be interpreted and applied in a manner that is inconsistent with our data practices. These legislative and regulatory proposals, if adopted, and such interpretations could, in addition to the possibility of fines, result in an order requiring that we change our data practices, which could have an adverse effect on our business and results of operations.

We cannot assure that the measures we currently adopt to assess the personal data security could satisfy the requirements of the relevant governmental authorities or any future measures when published. Further, to comply with

those obligations will incur substantial costs and could increase negative publicity surrounding any incident that compromises user data. Although we have made substantial efforts to ensure our compliance with the applicable privacy regulations in various jurisdictions, we may not be capable of adjusting our internal policies in a timely manner and any failure to comply with applicable regulations could also result in regulatory enforcement actions against us.

We may be subject to regulatory compliance costs and enforcement activity relating to Chinese privacy and data security laws.

In China, the government is still ramping up regulations with regard to personal information protection. On October 1, 2020, the Information Security Technology - Personal Information Security Specification (GB/T 35273-2020) , or the 2020 Specification took effect. Although the 2020 Specification is a recommended guideline, and it is not enforceable by law, the authority will use this standard to evaluate our compliance with China’s legal guidelines and regulations regarding personal information protection. Besides, Personal Information Protection Law promulgated by SCNPC on August 20, 2021 became the most relevant law in China regarding personal information protection and came into effect on November 1, 2021. The Personal Information Protection Law provides serve punishment for those who violates regulations when processing personal information. For details of the relevant PRC Laws, please refer to the section “Regulations on Privacy Protection” below.

In addition, the Cyber Security Law of the PRC, which was promulgated by the Standing Committee of the National People’s Congress, or the SCNPC and became effective on June 1, 2017, requires operators of key information infrastructures, which include, among others, public communications and information service and financial industry and other important industries and fields, shall store personal information and important data gathered and produced during operations in China within the territory of China. Where such information and data need to be transmitted overseas based on commercial demand, a security assessment shall be conducted in accordance with the measures formulated by the national cyberspace administration authority in concert with the relevant departments under the State Council. On December 28, 2021, the CAC and other twelve PRC regulatory authorities jointly revised and promulgated the Measures for Cybersecurity Review, or the Cybersecurity Review Measures, which came into effect on February 15, 2022. Pursuant to the Cybersecurity Review Measures, besides the procurement of network products and services by critical information infrastructure operators, any data processing activities by network platform operators that affects or may affect national security shall be subject to the cybersecurity review as well. In accordance with the Cybersecurity Review Measures, operators mastering personal information of more than one million users must apply to the Cybersecurity Review Office for cybersecurity review when they seek for listing in a foreign country. In addition, the CAC published the Decision on Amending the Cyber Security Law (Draft for Comments), or the Decision on the Cyber Security Law on September 14, 2022, pursuant to which the legal liabilities of violating the Cyber Security Law are strengthened. However, as of the date of this annual report, the period for public comment on the draft of the Cyber Security Law has ended while no official rules have been issued, and the Cybersecurity Review Measures and the Decision on the Cyber Security Law remain unclear on whether the relevant requirements will be applicable to companies that have been listed in the United States. Although all of the data centers used for our brokerage service are located overseas, we have several servers located in China to provide user community support and market information. We might need to transmit certain personal data between different locations, and since such data are used for financial services, we might be subject to security assessment requirements as set forth in the Cyber Security Law of the PRC.

Furthermore, the Regulations on Network Data Security was promulgated by the State Council on September 24, 2024 and became effective on January 1, 2025, according to which, a network data handler may transmit personal information abroad if it meets any of the following conditions: (1) having passed the security assessment for data cross-border transmission organized by the state cyberspace administration; (2) having been certified by a specialized agency in respect of the protection of personal information in accordance with the provisions of the state cyberspace administration; (3) meeting the provisions on standard contract for cross-border transmission of personal information as developed by the state cyberspace administration; (4) necessary to provide personal information abroad in order to conclude or perform a contract to which it is a party; (5) necessary to provide personal information of employees abroad under the employment rules and regulations formulated in accordance with the law and collective contracts concluded in accordance with the law; (6) necessary to provide personal information abroad in order to perform statutory duties or obligations; (7) necessary to provide personal information abroad in order to protect the life, health and property security of natural persons in an emergency; and (8) other conditions provided for in laws, administrative

regulations or by the state cyberspace administration. In addition, network data processors engaging in network data processing activities that affect or may affect national security shall undergo national security review.

We cannot assure that the measures we currently adopt to assess the personal data security could satisfy the requirements of the relevant governmental authorities in China or any future measures when published. Further, to comply with those obligations will incur substantial costs and could increase negative publicity surrounding any incident that compromises user data. Although we have made substantial efforts to ensure our compliance with the applicable privacy regulations in various jurisdictions, we may not be capable of adjusting our internal policies in a timely manner and any failure to comply with applicable regulations could also result in regulatory enforcement actions against us. For more information regarding risks relating to privacy and data security regulations affecting our business and operations, see “– If we fail to protect customer data and privacy, our reputation, financial condition and results of operations will be materially and adversely affected.”

We may be adversely affected by the complexity, uncertainties and changes in the PRC regulations of Internet-related businesses and companies, and any lack of requisite licenses, permits or approvals applicable to our business may have a material adverse effect on our business and results of operations.

The PRC government extensively regulates the Internet industry, including foreign ownership of, and the licensing and permit requirements pertaining to, companies in the internet industry. These Internet-related laws and regulations are relatively new and evolving, and their interpretation and enforcement involve significant uncertainties. As a result, in certain circumstances it may be difficult to determine what actions or omissions may be deemed to be in violation of applicable laws and regulations.

We only have contractual control over the entities that provide Internet information provision services in China. We do not own such entities due to the restriction of foreign investment in businesses providing value-added telecommunication services in China, including Internet information provision services. This may significantly disrupt our business, subject us to sanctions, compromise enforceability of related contractual arrangements, or have other harmful effects on us.

The evolving PRC regulatory system for the Internet industry may lead to the establishment of new regulatory agencies. For example, in May 2011, the State Council announced the establishment of a new department, the CAC, with the involvement of the State Council Information Office, the Ministry of Industry and Information Technology, or the MIIT, and the Ministry of Public Security. The primary role of this new agency is to facilitate the policy-making and legislative development in this field, to direct and coordinate with the relevant departments in connection with online content administration and to deal with cross-ministry regulatory matters in relation to the Internet industry. In practice, PRC regulators, including the CAC, have been increasingly focused on regulation in the areas of data security and data protection, and are enhancing the protection of privacy and data security by rule-making and enforcement actions at central and local levels. For example, on July 7, 2022, the CAC promulgated the Measures on Security Assessment of Cross-border Data Transfer, or the Data Export Measures, which has become effective on September 1, 2022. The Data Export Measures require that any data processor which processes or exports personal information exceeding certain volume threshold under such measures shall apply for security assessment by the CAC before transferring any personal information abroad. The security assessment requirement also applies to any transfer of important data outside of China. We expect that these areas will receive greater and continued attention and scrutiny from regulators and the public going forward, which could increase our compliance costs and subject us to heightened risks and challenges associated with data security and protection.

Considering our business arrangement and development plan, we have set up another set of VIE structures and intend the new VIE or its subsidiaries to apply for or hold the value-added telecommunications business license(s) as soon as practical to conduct value-added telecommunications business such as Internet information services. See “Item 3. Key Information – Description of Certain PRC Regulations Affecting Our Business.” We cannot guarantee that our new VIE, Beijing Yiyi or its subsidiary, will continue or maintain such value-added telecommunications business license due to uncertainties from PRC governmental authorities.

Beijing Yiyi’s subsidiary, Beijing U-Tiger Network Technology Co., LTD, holds the License for Production and Operation of Radio and TV Programs issued on June 4, 2024, and the Business License for Value-added Telecommunications Business issued on July 22, 2022. Beijing Yiyi’s subsidiary, Beijing Yixin Xiangshang

Technology Co.,LTD, holds the Business License for Value-added Telecommunications Business issued on July 25, 2024. Beijing Yiyi’s subsidiary, Beijing Zhi Jian Feng Yi Information Technology Co., LTD, holds the License for Production and Operation of Radio and TV Programs issued on July 27, 2023, the Business License for Value-added Telecommunications Business issued on March 21, 2024, the License for Publication Business issued on April 25, 2022.

In addition, our provision of certain services online may subject us to license requirements in China. For instance, we provide some recorded videos as a way of customer education and occasionally launch other audio-video contents on our platform and our community, which may result in audio-video license requirements from the Ministry of Culture and Tourism, or MCT, National Radio and Television Administration, Cyberspace Administration of China, or their provincial level branches. The Internet Audio-Video Program Services Regulations only allow state-owned or state-controlled enterprises to apply for certain licenses, which means that we may not be able to obtain all required licenses. We also provide some digital works on our website and APP, which may require online publishing service license issued by the National Radio and Television Administration, or the NRTA, or its provincial level branches. In addition, we reprint some articles related to the stock market on our website and APP, and therefore may be subject to permit and approval requirements from the State Council Information Office. Furthermore, we also need to strictly follow the requirements applicable to online content providers set forth by the relevant regulatory authorities, especially for financial information. See “Item 3. Key Information – We are subject to numerous regulations in the PRC, and compliance with these regulations may result in costs, expenses, regulatory enforcement action, and reputational harm that may have a material adverse effect on our business and results of operations” and “Item 3. Key Information – Description of Certain PRC Regulations Affecting Our Business.” Failure to comply with these license or other requirements may subject us to penalties, which may adversely affect our business operations and reputation.

The interpretation and application of the existing PRC laws, regulations and policies and possible new laws, regulations or policies relating to the Internet industry have created uncertainties regarding the legality of the existing and future foreign investments in, and the businesses and activities of, Internet businesses in China, including our business. We cannot assure you that we have obtained all the permits or licenses related to our Internet related business in China that might be required for conducting our supporting functions in China or will be able to maintain our existing licenses or obtain new ones. In the event that the PRC government considers that we were operating without the proper approvals, licenses or permits, promulgates new laws and regulations that require additional approvals or licenses, or imposes additional restrictions on the operation of any part of our business, it has the power, among other things, to bring enforcement action against us, levy fines, confiscate our income, revoke our business licenses, and require us to discontinue our relevant business or impose restrictions on the affected portion of our business. Any of these actions by the PRC government may have a material adverse effect on our business and results of operations.

The audit report included in this annual report has been prepared by our independent registered public accounting firm, whose work the Public Company Accounting Oversight Board was previously unable to inspect and, as such, you have previously been deprived of the benefits of such inspection and may be deprived of such benefits in the future if the work of our independent registered public accounting firm is unable to be inspected again.

Our independent registered public accounting firm that has issued the audit report included in this annual report, KPMG Huazhen LLP, as an auditor of companies that are traded publicly in the United States and as a firm registered with the Public Company Accounting Oversight Board (United States), or the PCAOB, is required by the laws of the United States to undergo regular inspections by the PCAOB to assess its compliance with the laws of the United States and professional standards.

Because we have substantial operations within the PRC and the PCAOB was unable to conduct inspections of the work of our independent registered public accounting firm as it relates to those operations without the approval of the Chinese authorities prior to 2022, our independent registered public accounting firm was not inspected fully by the PCAOB prior to 2022. This prior lack of PCAOB inspections in the PRC prevented the PCAOB from regularly evaluating our independent registered public accounting firm’s audits and its quality control procedures. As a result, investors were previously deprived of the benefits of PCAOB inspections. As discussed above under “Item 3. Key Information,” in 2022 the PCAOB was able to secure complete access to inspect and investigate audit firms in the PRC for the first time, and on December 15, 2022, the PCAOB vacated its 2021 determination that the positions taken by authorities in Chinese mainland and Hong Kong prevented it from inspecting and investigating completely registered public accounting firms headquartered in those jurisdictions.

There can be no guarantee that the PCAOB will continue to be able to fully inspect our independent registered public accounting firm’s work in the future, due to factors outside our control. Inspections of other firms that the PCAOB has conducted outside the PRC have identified deficiencies in those firms’ audit procedures and quality control procedures, which may be addressed as part of the inspection process to improve future audit quality. The inability of the PCAOB to conduct full inspections of auditors in the PRC made it more difficult to evaluate the effectiveness of our independent registered public accounting firm’s audit procedures or quality control procedures as compared to auditors outside the PRC that are subject to PCAOB inspections, which could cause investors to lose confidence in our reported financial information and procedures and the quality of our financial statements.

We may be subject to consequences pursuant to the Holding Foreign Companies Accountable Act and related regulations, including the potential for our ADSs to be prohibited from trading on U.S. securities exchanges, including The Nasdaq Stock Market, and in the U.S. over-the-counter market, which will limit the liquidity of our ADSs and our access to U.S. capital markets.

As discussed above under “Item 3. Key Information,” the HFCAA requires the SEC to prohibit the securities of any “covered issuer,” from being traded on any of the U.S. securities exchanges, including The Nasdaq Stock Market, or traded “over-the-counter,” if the auditor of the covered issuer’s financial statements is not subject to PCAOB inspection for, initially, three consecutive years. In December 2021, the SEC adopted final rules, including amendments to Form 20-F, to implement the HFCAA and establish procedures the SEC will follow in determining whether a registrant is a “Commission-Identified Issuer” (as defined in the final rule). Consistent with the HFCAA, these amendments require the submission of documentation to the SEC establishing that a “Commission-Identified Issuer” is not owned or controlled by a governmental entity in that foreign jurisdiction and also require disclosure in a foreign issuer’s annual report regarding the audit arrangements of, and governmental influence on, such registrant, including any consolidated VIEs or other similar structures. On May 26, 2022, the SEC added the Company to its conclusive list of Commission-Identified Issuers.

In December 2022, the Accelerating Holding Foreign Companies Accountable Act was signed into law, which amended the HFCAA to (i) shorten the three-year period to two years and (ii) allow any foreign jurisdiction to be the basis for the PCAOB’s incomplete access to inspect or investigate a company’s auditor. Initially, the HFCAA applied only if the PCAOB’s inability to inspect or investigate resulted from a stance taken by an authority in the foreign jurisdiction where the relevant public accounting firm operated. Following the Consolidated Appropriations Act, 2023, the HFCAA now also applies if the PCAOB’s inability to inspect or investigate the relevant accounting firm arises from a stance taken by an authority in any foreign jurisdiction, irrespective of the location of the accounting firm.

On December 16, 2021, the PCAOB issued a report on its determinations that it is unable to inspect or investigate PCAOB-registered public accounting firms headquartered in Chinese mainland and in Hong Kong because of positions taken by PRC authorities in those jurisdictions. Our independent registered public accounting firm was subject to the determinations announced by the PCAOB on December 16, 2021. On August 26, 2022, the PCAOB announced that it signed a Statement of Protocol with the CSRC and the Ministry of Finance, which it described as the first step toward opening access for the PCAOB to inspect and investigate completely registered public accounting firms in Chinese mainland and Hong Kong. On December 15, 2022, the PCAOB vacated its 2021 determination that the positions taken by authorities in Chinese mainland and Hong Kong prevented it from inspecting and investigating completely registered public accounting firms headquartered in those jurisdictions. Consequently, the PCAOB is currently able to inspect the work of PCAOB-registered independent registered public accounting firms, including ours, in Chinese mainland and Hong Kong.

In light of the PCAOB’s decision to vacate its 2021 determination and until such time as the PCAOB issues any new adverse determination, the SEC has stated that there are no issuers at risk of having their securities subject to a trading prohibition under the HFCAA. However, whether the PCAOB will continue to be able to satisfactorily conduct inspections of such firms is subject to uncertainty and depends on a number of factors out of our control. If the PCAOB again becomes unable to conduct a full inspection of our independent registered public accounting firm’s audit documentation related to their audit reports for two consecutive years, then our ADSs may be prohibited from trading on U.S. securities exchanges, including The Nasdaq Stock Market, and in the U.S. over-the-counter market, which will limit the liquidity of our ADSs and our access to U.S. capital markets.

The HFCAA, related SEC and PCAOB rules, and any additional rulemaking efforts to increase U.S. regulatory access to audit information in China, could cause investor uncertainty for affected companies, including us, and the market price of our ADSs could be materially adversely affected.

We are subject to numerous regulations in the PRC, and compliance with these regulations may result in costs, expenses, regulatory enforcement action, and reputational harm that may have a material adverse effect on our business and results of operations.

We are subject to numerous regulations in the PRC, including those described in detail below under “Item 3. Key Information – Description of Certain PRC Regulations Affecting Our Business.” These regulatory requirements are evolving, and new regulatory requirements affecting us may be adopted. Compliance with these regulations involves costs, fees, and expenses, as well as time and attention from our leadership team. Additionally, if we fail to comply in full with applicable regulations, we may be subject to government enforcement action, which may be costly, impose operational burdens on us, and cause us reputational harm, any of which could have a material adverse effect on our business and results of operations.

The legal system of the PRC is developing and rapidly evolving, and there are uncertainties that may affect the protection afforded to us.

Our business and activities in China are governed by the PRC laws and regulations. The PRC legal system is generally based on written statutes. Prior court decisions may be cited for reference but have limited precedential value. Since 1979, PRC legislation and regulations have significantly enhanced the protections afforded to various industries in China. However, as these laws and regulations are developing and continue to evolve, interpretation and enforcement of these laws and regulations involve significant uncertainties and different degrees of inconsistency. Some of the laws and regulations are still in the developmental stage and are therefore subject to policy changes. Many laws, regulations, policies and legal requirements have only been recently adopted by PRC central or local government agencies, and their implementation, interpretation and enforcement may involve uncertainty due to the lack of established practice available for reference. We cannot predict the effect of future legal developments in China, including the promulgation of new laws, changes in existing laws or their interpretation or enforcement, or the preemption of local regulations by national laws. For example, the PRC government has recently published new policies that significantly affected certain industries such as the education and internet industries, and we cannot rule out the possibility that it will in the future release regulations or policies regarding our industry that could adversely affect our business, financial condition and results of operations. As a result, there are uncertainties as to the legal protections available to us. Furthermore, due to the limited volume of published cases and the non-binding nature of prior court decisions, the outcome of the dispute resolution may not be as consistent or predictable as in other more developed jurisdictions, which may limit the legal protection available to us. For example, the Securities Law most recently amended in December 2019 and effective on March 1, 2020, stipulated that the offering and trading of securities outside the PRC which disrupt the domestic market order of the PRC and harm the legitimate rights and interests of domestic investors shall be dealt with pursuant to the relevant provisions of this Securities Law, and legal liability shall be pursued.

The PRC government’s significant oversight over our business operation could result in a material adverse change in our operations and the value of our ADSs, and it has recently indicated an intent to exert more oversight and control over overseas securities offerings and other capital markets activities and foreign investment in China-based companies.

As a result of its significant oversight authority into businesses operating in the PRC, the PRC government may regulate our operations as the government deems appropriate to advance regulatory and societal goals and policy positions. Uncertainties regarding the enforcement of laws and the fact that rules and regulations in the PRC can change quickly with little advance notice, along with the risk of the PRC government's significant oversight over our operations, could have a material adverse effect on our business, financial position, results of operations, access to the capital markets, and the market value of our ADSs.

Furthermore, on July 6, 2021, the General Office of the Communist Party of China Central Committee and the General Office of the State Council issued Several Opinions Concerning Lawfully and Strictly Cracking Down Illegal

Securities Activities. These opinions call for strengthened regulation over illegal securities activities and supervision on overseas listings by China-based companies like us, and propose to take effective measures, such as promoting the construction of relevant regulatory systems to deal with the risks and incidents faced by China-based overseas-listed companies. On February 17, 2023, the CSRC promulgated Trial Administrative Measures of the Overseas Securities Offering and Listing by Domestic Companies, or the Overseas Listing Trial Measures and relevant five guidelines, which became effective on March 31, 2023.

The Overseas Listing Trial Measures comprehensively improve and reform the existing regulatory regime for overseas offering and listing of Chinese mainland domestic companies’ securities and regulates both direct and indirect overseas offering and listing of Chinese mainland domestic companies’ securities by adopting a filing-based regulatory regime.

On the same day, the CSRC also held a press conference for the release of the Overseas Listing Trial Measures and issued the Notice on Administration for the Filing of Overseas Offering and Listing by Domestic Companies, which, among others, clarifies that (i) prior to the effective date of the Overseas Listing Trial Measures, Chinese mainland domestic companies that have already completed overseas listing shall be regarded as “existing companies”, which are not required to fulfill filing procedure immediately but shall be required to complete the filing if such existing companies conduct refinancing in the future; and (ii) the CSRC will solicit opinions from relevant regulatory authorities and complete the filing of the overseas listing of companies with contractual arrangements which duly meet the compliance requirements, and support the development and growth of these companies by enabling them to utilize two markets and two kinds of resources.

We believe, to the best of our knowledge, our business operations do not violate any of the above PRC laws and regulations currently in force in all material respects. Nevertheless, we cannot guarantee that new rules or regulations promulgated in the future will not impose any additional requirement on us. If there are any other approvals, filings and/or other administration procedures to be obtained from or completed with any other PRC regulatory agencies as required by any new laws and regulations for any of our future proposed offering of securities overseas or the listing of the ADSs, we cannot assure you that we can obtain the required approval or complete the required filings or other regulatory procedures in a timely manner, or at all. Any failure to obtain the relevant approvals or complete the filings and other relevant regulatory procedures may subject us to regulatory actions or other sanctions from such PRC regulatory agencies, which may have a material adverse effect on our business, financial condition or results of operations. Additionally, if our clients fail to meet regulatory requirements, it may impact our underwriting business, thereby having a negative effect on our revenue. For more details, please refer to “Description of Certain PRC Regulations Affecting Our Business - Regulations Relating to Overseas Offerings”.

PRC regulation of loans and direct investment by offshore holding companies to PRC entities may delay or prevent us from using proceeds we received from our initial public offering and the Concurrent Private Placement to make loans or additional capital contributions to our PRC subsidiaries.

In 2015, the SAFE published the Circular of the State Administration of Foreign Exchange on Reforming the Management Approach regarding the Settlement of Foreign Exchange Capital of Foreign-invested Enterprises, or the SAFE Circular 19, which has come into effect since June 1, 2015. According to the SAFE Circular 19, foreign-invested enterprises are allowed to convert their registered capital from foreign exchange to Renminbi and apply such funds to equity investment within the PRC, conditioned upon the investment target’s duly registration with local bank of such reinvestment and open a corresponding special account pending for foreign exchange settlement payment. Further, such conversion will be handled at the bank level and does not need to be approved by the SAFE. The SAFE Circular 19 prohibits foreign-invested enterprises from, among other things, using an RMB fund converted from its foreign exchange capital for expenditure beyond its business scope, investment in securities, providing entrusted loans, repaying loans between nonfinancial enterprises or purchasing real estate not for self-use. The SAFE promulgated the Circular on Reforming and Standardizing the Foreign Exchange Settlement Management Policy of Capital Account, or the SAFE Circular 16, effective on June 9, 2016, which reiterates some of the rules set forth in the SAFE Circular 19, but changes the prohibition against using RMB capital converted from foreign currency-denominated registered capital of a foreign-invested enterprise to issue RMB entrusted loans, to the prohibition against using such capital to issue loans to non-associated enterprises.

As a holding company incorporated under the laws of the Cayman Islands, with some of our operations conducted in China, we may make loans to our PRC subsidiaries and VIEs, or we may make additional capital contributions to our wholly foreign-owned subsidiaries in China. Any loans provided by us to our PRC subsidiaries and VIEs are subject to PRC regulations and foreign exchange loan registrations. Such loans to any of our PRC subsidiaries and VIEs cannot exceed a statutory limit and must be filed with SAFE through the online filing system of SAFE pursuant to the applicable PRC regulations. Any such loan with a term of one year or more must be recorded and registered with the National Development and Reform Commission. In addition, the capital of a foreign invested enterprise may not be used for the following purposes: (i) directly or indirectly used for payment beyond the business scope of the enterprises or the payment prohibited by relevant laws and regulations; (ii) directly or indirectly used for investment in securities or investments other than banks’ principal-secured products unless otherwise provided by relevant laws and regulations; (iii) the granting of loans to non-affiliated enterprises, except where it is expressly permitted in the business license; and (iv) paying the expenses related to the purchase of real estate that is not for self-use (except for the foreign-invested real estate enterprises).

Our ability to make loans or capital contributions to our subsidiaries and VIEs may be constrained by these regulations, and if we fail to comply with such regulations, our ability to capitalize the relevant PRC subsidiaries or fund our operations may be negatively affected, which could materially and adversely affect the liquidity of our relevant PRC subsidiaries or our business, financial condition, results of operations and growth prospects.

We may be subject to penalties, including restrictions on our ability to inject capital into our PRC subsidiaries, if our PRC resident shareholders or beneficial owners fail to comply with relevant PRC foreign exchange regulations.

On July 4, 2014, the SAFE issued the Circular on Several Issues Concerning Foreign Exchange Administration of Domestic Residents Engaging in Overseas Investment, Financing and Round-Trip Investment via Special Purpose Vehicles, or the SAFE Circular 37, which replaced the previous Notice on Relevant Issues Concerning Foreign Exchange Administration for Domestic Residents’ Financing and Roundtrip Investment Through Offshore Special Purpose Vehicles, effective on November 1, 2005, or the SAFE Circular 75. The SAFE Circular 37 requires PRC individuals, institutions and foreign individuals who have a habitual residence in the PRC due to economic interests, or collectively referred as the PRC residents, to register with the SAFE or its local branches in connection with their direct establishment or indirect control of an offshore entity, for the purpose of overseas investment and financing, with such PRC residents’ legally owned assets or equity interests in domestic enterprises or offshore assets or interests. Such offshore entity is referred to as an offshore special purpose vehicle. In addition, such PRC residents must update their foreign exchange registrations with the SAFE when the offshore special purpose vehicle undergoes material events relating to any change of basic information (including change of such PRC residents, name and operation term), increases or decreases in investment amount, share transfers or exchanges, or mergers or divisions. According to the Circular on Further Simplifying and Improving the Administration of Foreign Exchange Concerning Direct Investment released on February 13, 2015 by the SAFE, local banks will examine and handle foreign exchange registration for overseas direct investment, including the initial foreign exchange registration and amendment registration, under the SAFE Circular 37 from June 1, 2015.

If any shareholder holding interest in an offshore special purpose vehicle, who is a PRC resident as determined by the SAFE Circular 37, fails to fulfill the required foreign exchange registration with the local SAFE branches or its designated banks, the offshore special purpose vehicle may be restricted in its ability to contribute additional capital to its PRC subsidiaries. Moreover, failure to comply with the SAFE registration described above could result in liability under PRC laws for evasion of applicable foreign exchange restrictions.

Mr. Tianhua Wu and some other individual shareholders, who indirectly hold shares in our company and who are known to us as being PRC residents have completed the SAFE registration pursuant to the SAFE Circular 37. We have requested all of our current shareholders and/or beneficial owners to disclose whether they or their shareholders or beneficial owners fall within the ambit of the SAFE Circular 37 and urged relevant shareholders, upon learning that they are PRC residents, to register with the local SAFE branch or its designated bank as required under the SAFE Circular 37. However, we may not be fully informed of the identities of all our shareholders or beneficial owners who are PRC residents, and we cannot provide any assurance that all of our shareholders and beneficial owners who are PRC residents will comply with our requests to make, obtain or update any applicable registrations or comply with other requirements pursuant to the SAFE Circular 37 or other related rules in a timely manner. Failure of our existing and future shareholders who are PRC residents to register or amend their foreign exchange registrations in a timely

manner pursuant to the SAFE Circular 37 and subsequent implementation rules may subject such beneficial owners or our wholly-owned PRC subsidiary to fines and legal sanctions. Failure to register or comply with the relevant requirements may also limit our ability to contribute additional capital to our WFOEs for the research and development and other supporting functions. These risks may have a material adverse effect on our business and results of operations.

You may be subject to PRC withholding tax on dividends from us and PRC income tax on any gain realized on the transfer of our shares or ADSs if we are deemed a PRC resident enterprise.

As described above, we may be treated as a PRC resident enterprise for PRC tax purposes. Under the EIT Law and its implementation rules, PRC withholding tax at the rate of 10% is normally applicable to PRC sourced dividends payable to investors that are non-PRC resident enterprises, which do not have an establishment or place of business in PRC, or which have such establishment or place of business if the relevant income is not effectively connected with the establishment or place of business. Any gain realized on the transfer of ADSs or shares by such non-PRC resident enterprise investors is also subject to a 10% PRC income tax if such gain is regarded as income derived from sources within the PRC. Under the PRC Individual Income Tax Law and its implementation rules, PRC sourced dividends paid to non-PRC individual investors are generally subject to a PRC withholding tax at a rate of 20% and gains from PRC sources realized by such investors on the transfer of ADSs or shares are generally subject to a 20% PRC income tax. While substantially all of our brokerage operations are in New Zealand or Singapore, it is unclear whether dividends we pay with respect to our ADSs, or the gain realized from the transfer of our ADSs, would be treated as the income derived from sources within the PRC and as a result be subject to PRC income tax if we were considered a PRC resident enterprise, as described above. See Item 3.D “Risk Factors — Risks Related to Doing Business in China – We may be deemed to be a PRC resident enterprise under the Enterprise Income Tax Law, or the EIT Law, and be subject to the PRC taxation on our worldwide income, which may significantly increase our income tax expenses and materially decrease our profitability.” If PRC income tax were imposed on gains realized through the transfer of our ADSs or on dividends paid to our non-resident investors, the value of your investment in our ADSs may be materially and adversely affected. Any PRC tax liability described above may be reduced under applicable tax treaties. However, it is unclear whether our ADS holders whose jurisdictions of residence have tax treaties or arrangements with China will be able to obtain the benefits of such tax treaties or arrangements, if the prerequisites provided under the relevant treaties or arrangements were not satisfied.

We may not be able to obtain certain tax benefits for dividends paid by our PRC subsidiaries to us through our Hong Kong subsidiaries.

Pursuant to the EIT Law and its implementation rules, if a non-resident enterprise has not set up an establishment in the PRC, or has set up an establishment therein but its income has no actual connection with such establishment, it will be subject to a withholding tax on its PRC-sourced income at a rate of 10%. Pursuant to the Arrangement between the Chinese mainland and the Hong Kong Special Administrative Region for the Avoidance of Double Taxation and the Prevention of Fiscal Evasion with Respect to Taxes on Income, or the “Double Taxation Arrangement,” the withholding tax rate on dividends paid by a PRC enterprise to a Hong Kong enterprise is reduced to 5% from a standard rate of 10% if the Hong Kong enterprise directly holds at least 25% of the equity interests of the PRC enterprise. There are also other conditions for enjoying the reduced withholding tax rate according to other relevant tax rules and regulations. See Item 4.B “Business Overview-Operating and Financial Review and Prospects-Regulations Relating to Tax-PRC Regulations on Dividend Withholding Tax.” We cannot assure you that our determination regarding our qualification to enjoy the preferential tax treatment will not be challenged by the relevant PRC tax authority that or we will be able to complete the necessary filings with the relevant PRC tax authority and enjoy the preferential withholding tax rate of 5% under the Double Taxation Arrangement with respect to dividends to be paid by our PRC subsidiaries to our Hong Kong subsidiaries.

PRC regulations may restrict our ability to convert Renminbi into foreign currency and remit such currency out of the PRC to pay capital expenses.

The Group’s revenues were largely generated by our wholly owned subsidiaries outside of PRC, which pay the consolidated VIEs and their subsidiaries periodically for the services rendered through inter-company transactions. We do not rely on the consolidated VIEs to distribute earnings to the parent company or to U.S. investors. Under existing PRC foreign exchange regulations, payments of current account items, including profit distributions, interest

payments and trade and service-related foreign exchange transactions, can be made in foreign currencies without the prior SAFE approval as long as certain routine procedural requirements are fulfilled. Therefore, our PRC subsidiaries are allowed to pay dividends in foreign currencies to us without prior SAFE approval by following certain routine procedural requirements. However, approval from or registration with competent government authorities is required where Renminbi is to be converted into foreign currency and remitted out of China to pay capital expenses such as the repayment of loans denominated in foreign currencies. The PRC government may at its discretion restrict access to foreign currencies for current account transactions in the future, which could have a material adverse effect on our business.

Contractual Arrangements with the VIEs and Their Respective Shareholders

We use contractual arrangements to control the VIEs due to restrictions or prohibitions on foreign ownership of Internet technology services and other related businesses in China. According to the Negative List (as defined elsewhere in this report) that took effect on November 1, 2024, the restrictions on the controlling stake of Internet technology service companies still exist, and foreign investments in this business are also restricted by other qualifications and requirements under relevant regulations in China.

Our WFOEs, Beijing Bohu and Beijing Yixin, respectively, have the sole discretion to receive from the relevant VIE an annual service fee at an amount of at least 99% of the respective VIE’s annual net profit. In addition, Beijing Bohu and Beijing Yixin are entitled to receive certain fees for other technical services at the amount mutually agreed upon by Beijing Bohu or Beijing Yixin and the respective VIE. Beijing Bohu and Beijing Yixin did not collect any service fees from the VIEs in the last three fiscal years and will make discretionary determinations on whether to collect services fees and on the amount of fees to be collected. We do not have unfettered access to Beijing Bohu’s, Beijing Yixin’s and the respective VIEs’ revenues due to PRC legal restrictions on the payment of dividends by PRC companies, foreign exchange control restrictions, and the restrictions on foreign investment, among others.

As a result of our direct ownership in Beijing Bohu and Beijing Yixin, and the contractual arrangements with the VIEs, we are regarded as the primary beneficiary of the VIEs, and we treat them as our consolidated affiliated entities under U.S. GAAP. We have consolidated the financial results of the VIEs in our consolidated financial statements in accordance with U.S. GAAP.

Agreements that provide us with effective control over the VIEs

Powers of Attorney. Pursuant to the Powers of Attorney dated November 1, 2023 among Beijing Bohu and each of the shareholders of Beijing Rongke, which replaced and superseded the prior version dated October 11, 2022 because some of the shareholders exited Beijing Rongke, each of the shareholders of Beijing Rongke irrevocably authorized Beijing Bohu to act as its attorney-in-fact to exercise all of its rights as a shareholder of Beijing Rongke, including, but not limited to, the right to attend shareholders’ meetings, vote on any resolution that requires a shareholder vote, such as the sale, transfer, disposal and pledge of all or part of the equity interest owned by such shareholder, and decide on the appointment and removal of directors, supervisors and officers. Beijing Bohu can assign or transfer under the aforementioned Powers of Attorney at its own discretion to any other person or entity without notice to or consent from any or all of the shareholders of Beijing Rongke. The Power of Attorney will remain effective and irrevocable with respect to each shareholder of Beijing Rongke until he or she ceases to be a shareholder of Beijing Rongke.

On October 30, 2018, Beijing Yixin and each of the shareholders of Beijing Yiyi entered into a Power of Attorney, which contain terms substantially similar to the Powers of Attorney executed by the shareholders of Beijing Rongke described above.

Exclusive Option Contracts. Pursuant to the Exclusive Option Contract dated November 1, 2023, among Beijing Bohu, Beijing Rongke and each shareholder of Beijing Rongke, which replaced and superseded the version dated October 11, 2022 because some of the shareholders exited Beijing Rongke, the shareholders of Beijing Rongke have irrevocably granted Beijing Bohu an exclusive option to purchase all or part of their equity interests in Beijing Rongke.

Beijing Rongke has irrevocably granted Beijing Bohu an exclusive option to purchase all or part of its assets. Beijing Bohu or its designated person(s) may exercise such options at RMB10 or at the lowest price permitted under applicable PRC laws, whichever is lower. The shareholders of Beijing Rongke undertake that, without Beijing Bohu’s prior written consent, they will not, among other things, (i) create any pledge or encumbrance on their equity interests in Beijing Rongke, (ii) transfer or otherwise dispose of their equity interests in Beijing Rongke, (iii) change Beijing Rongke’s registered capital, (iv) supplement, revise or amend Beijing Rongke’s articles of association, or (v) allow Beijing Rongke to merge with any other entity. In addition, Beijing Rongke undertakes that, without Beijing Bohu’s prior written consent, it will not, among other things, create any pledge or encumbrance on any of its assets, or enter into any material contracts (except in the ordinary course of business). The Exclusive Option Contract will remain effective for a term of ten years and renewable in accordance with the sole discretion of Beijing Bohu.

On October 30, 2018, Beijing Yixin and each shareholder of Beijing Yiyi entered into an Exclusive Option Contract which contain terms substantially similar to the Exclusive Option Contract described above.

Spouse Consent Letters. Pursuant to the Spouse Consent Letters dated December 17, 2018, the spouse of each married shareholder of Beijing Rongke which restated and amended the version dated June 7, 2018, unconditionally and irrevocably agreed not to assert any rights over the equity interest in Beijing Rongke held by and registered in the name of their spouse. In addition, each of them agreed to be bound by the contractual arrangements described here if the spouse obtains any equity interest in Beijing Rongke for any reason.

On October 30, 2018, the spouse of each shareholder of Beijing Yiyi signed two Spouse Consent Letters, which contain terms substantially similar to the Spouse Consent Letters described above.

Commitment Letters. Pursuant to the Commitment Letters dated November 1, 2023, the shareholders of Beijing Rongke which replaced and superseded the version dated October 11, 2022 because some of the shareholders exited Beijing Rongke, undertake that, when Beijing Bohu exercises its options under the Exclusive Option Contracts, they will refund, without any conditions, any amount and fees to Beijing Bohu which exceed the share purchase price provided in the Exclusive Option Contracts.

On October 30, 2018, each of the shareholders of Beijing Yiyi executed a Commitment Letter, which contain terms substantially similar to the Commitment Letters described above.

Agreements that allow us to receive economic benefits from the VIEs

Equity Pledge Contracts. Pursuant to the Equity Pledge Contract dated November 1, 2023 among Beijing Bohu(previously known as Ningxia Yixin), Beijing Rongke (previously known as Ningxia Rongke) and each shareholder of Beijing Rongke, which replaced and superseded the version dated October 11, 2022 because some of the shareholders exited Beijing Rongke, the shareholders of Beijing Rongke have agreed to pledge 100% of the equity interests in Beijing Rongke for the benefit of Beijing Bohu. In the event of a breach by Beijing Rongke or its any shareholder of contractual obligations under the Equity Pledge Contract, Beijing Bohu, as pledgee, will have the right to dispose of the pledged 100% equity interests in Beijing Bohu and will have priority in receiving the proceeds from such disposal.

The shareholders of Beijing Rongke also undertake that, without prior written consent of Beijing Bohu, they will not dispose of, create or allow any encumbrance on the pledged equity interests and rights. Beijing Rongke further undertakes that, there is no other pledge or any other encumbrance on the assets owned by it that will or is likely to affect Beijing Bohu’s pledged equity interests and rights, including but not limited to any transfer of intellectual property rights or transfer of any asset with a value exceeding RMB0.5 million (except in the ordinary course of business). Beijing Rongke further undertakes that, without the prior written consent of Beijing Bohu, they will not assist or allow any encumbrance to be created on the pledged equity interests. The equity pledge under the Amended Equity Pledge Contract will not be effective until Beijing Rongke and its shareholders complete relevant registration with appropriate government authorities.

On October 30, 2018, Beijing Yixin, Beijing Yiyi and each shareholder of Beijing Yiyi entered into an Equity Pledge Contract, which contains terms substantially similar to the Amended Equity Pledge Contract described above.

We completed the registration of the equity pledge of Beijing Yiyi on December 27, 2018 under the Equity Pledge Contract with the State Administration for Market Regulation (the “SAMR”), in accordance with the PRC Property Rights Law.

Exclusive Business Cooperation Agreements. Pursuant to the Exclusive Business Cooperation Agreement dated June 7, 2018 between Beijing Bohu and Beijing Rongke, Beijing Bohu has the exclusive right to provide Beijing Rongke with the consulting and technical services required by Beijing Rongke’s business. Without Beijing Bohu’s prior written consent, Beijing Rongke may not accept any services subject to this Exclusive Business Cooperation Agreement from any third party. Beijing Rongke agrees to pay Beijing Bohu an annual service fee at an amount of no less than 99% of its net profit or the amount which is adjusted at any time at the sole discretion of Beijing Bohu. Beijing Bohu has the exclusive ownership of all the intellectual property rights created as a result of the performance of the Exclusive Business Cooperation Agreement, to the extent permitted by applicable PRC laws. Beijing Rongke also undertakes that upon the request of Beijing Bohu, it will assist Beijing Bohu in the consummation of the assignment or transfer of the relevant intellectual property rights, including but not limited to entering into a transfer or license agreement at no or a nominal consideration as well as fulfilling the necessary registration. To guarantee Beijing Rongke’s performance of its obligations thereunder, its shareholders have pledged their equity interests in Beijing Rongke to Beijing Bohu pursuant to the Equity Pledge Contract. The Exclusive Business Cooperation Agreement will remain effective for a term of ten years and unconditionally renewable at the sole discretion of Beijing Bohu.

On October 30, 2018, Beijing Yixin and Beijing Yiyi entered into an Exclusive Business Cooperation Agreement, which contains terms substantially similar to the Exclusive Business Cooperation Agreement described above.

Description of Certain PRC Regulations Affecting Our Business

We are subject to regulation by multiple PRC laws, regulations, and governing authorities, as described in more detail below. To date, except as disclosed under the risk factor headed “We may be adversely affected by the complexity, uncertainties and changes in the PRC regulations of Internet-related businesses and companies, and any lack of requisite licenses, permits or approvals applicable to our business may have a material adverse effect on our business and results of operations” and subject to the official interpretation and implementation of and potential further action pursuant to CSRC 1230 Notice (as defined below), to our knowledge our PRC subsidiaries and the VIEs have received all permissions or approvals that we believe are required and necessary to conduct our current business operations within the PRC in all material aspects. In reaching this determination, we have relied in part on the advice of our PRC legal counsel, JunHe LLP. However, there is no guarantee that we will be able to obtain all requisite permissions and approvals in the future. Besides, if the CSRC imposes other further regulatory actions or penalties on us, our business and results of operations within the PRC may be materially and adversely affected. In addition, there are uncertainties regarding the interpretation and application of current and future PRC laws, regulations and rules and the PRC regulatory authorities may take a view that is contrary to the opinion of us. For more information, refer to the risk factor above under the heading “If the agreements that establish the structure for operating some of our activities in China do not comply with PRC regulations, or if we fail to obtain all required permissions and approvals required by Chinese regulatory authorities or if these regulations change in the future, we could be subject to severe penalties or be forced to relinquish our interests in those operations.”

PRC Regulations Relating to Securities and Futures Brokerage Business

Under existing PRC securities laws and regulations, including the Securities Law of the PRC, which became effective on March 1, 2020, operating securities business in the PRC, including, among others, securities brokerage business, futures brokerage business, stock option brokerage business, and securities and futures investment consulting services, requires a securities brokerage license or certain other approvals from the Chinese Securities Regulatory Commission, or the CSRC. In addition, the Securities Law also stipulates that the offering and trading of securities outside the PRC which disrupt the domestic market order of the PRC and harm the legitimate rights and interests of domestic investors are subject to the relevant provisions of the Securities Law and the legal liabilities imposed thereunder. The Securities Law places particular emphasis on, among other things, (i) the reform of the registration-based IPO system, (ii) the imposition of more severe punishments for violations, and (iii) the enhancement of protection for retail investors.

In early 2023, the CSRC’s Measures for the Administration of the Securities Brokerage Business took effect. Under these measures, an overseas securities business entity that conducts securities business or establishes a representative office in Chinese mainland shall obtain the approval of the securities regulatory authority of the State Council. The specific measures shall be formulated by the securities regulatory agency of the State Council and submitted to the State Council for approval. An overseas securities business entity violating Article 95 of the Regulations on Supervision and Administration of Securities Firms, directly or through its affiliates conducting activities such as opening accounts, marketing, and providing other overseas securities trading services for domestic investors without authorization, shall be penalized in accordance with the Securities Law of the PRC.

Failure to comply with these laws and regulations may result in penalties, including rectification requirements, confiscation of illegal proceeds, fines, or even shutting down of business. We have received notices from the CSRC under these laws and regulations and have taken measures in response. For further details, see Item 3.D “Risk Factors-Risks Related to Our Business and Industry-We may not be able to obtain or maintain all necessary licenses, permits and approvals and to make all necessary registrations and filings for our activities in multiple jurisdictions and related to residents therein, especially in China or otherwise related to PRC residents.”

PRC Regulations Relating to Foreign Investment

On September 6, 2024, the Special Administrative Measures for Market Access of Foreign Investment (Negative List) (2024 Edition), or the Negative List, was promulgated by the MOFCOM and NDRC and took effect on November 1, 2024, whereby the Special Administrative Measures for Market Access of Foreign Investment (Negative List) (2021 Edition) was simultaneously repealed. Specifically, the Negative List provides that foreign investors shall hold no more than 50% of the equity interests in a service provider operating certain value-added telecommunications services other than for e-commerce, domestic multi-party communication, store and forward class and call center.

On March 15, 2019, the Foreign Investment Law of PRC, or the FIL, was issued by the National People’s Congress and took effect on January 1, 2020, which also provides that the industries in which foreign investment is not restricted and prohibited shall be administered under the principle of equal treatment to domestic investment. On December 26, 2019, the State Council published the FIL Implementation Rules, which took effect on January 1, 2020. Furthermore, on December 19, 2020, the NDRC and the MOFCOM jointly issued the Measures for Security Review of Foreign Investment, effective on January 18, 2021, which provides detailed guidance regarding security review of foreign investment that has a potential impact on national security.

Foreign investment in telecommunications companies in the PRC is governed by the Provisions on Administration of Foreign-Invested Telecommunications Enterprises, or the Foreign-Invested Telecommunications Enterprises Provisions, which were promulgated by the State Council on December 11, 2001, and amended on September 10, 2008 and February 6, 2016. The Foreign-Invested Telecommunications Enterprises Provisions prohibits a foreign investor from holding over 50% of the total equity interests in any value-added telecommunications service business in Chinese mainland. On March 29, 2022, the State Council published the Decision of the State Council to Amend and Repeal Certain Administrative Regulations, among which the Foreign-Invested Telecommunications Enterprises Provisions was further amended. The latest version removes certain requirements for foreign-invested telecommunications enterprises and came into effect on May 1, 2022.

PRC Regulations Relating to Internet Companies

Regulations on Value-Added Telecommunication Services

Pursuant to the Telecommunications Regulations of the PRC, or the Telecommunications Regulations, promulgated by the State Council on September 25, 2000 and amended on July 29, 2014 and February 6, 2016, telecommunication service providers must obtain an operating license prior to the commencement operations. The Telecommunications Regulations categorize telecommunication services into basic telecommunication services and value-added telecommunication services. According to the Catalog of Telecommunications Business, attached to the Telecommunications Regulations, information services provided via fixed network, mobile network and Internet fall within value-added telecommunication services.

Pursuant to the Administrative Measures on Internet Information Services, promulgated by the State Council in 2000 and amended in 2011, “Internet information services” refer to the provision of information through the Internet to online users, and are divided into “commercial Internet information services” and “non-commercial Internet information services”. Under the Telecommunications Regulations and relevant administrative measures, commercial operators of value-added telecommunications services must first obtain a license for conducting Internet content provision services, or an “ICP License”, from the Ministry of Industry and Information Technology, or the MIIT, or its provincial level branches. Otherwise, such operator might be subject to sanctions including corrective orders and warnings, imposition of fines and confiscation of illegal gains and, in the case of significant infringement, orders to close the website.

Our consolidated affiliated entity, Beijing Yiyi’s subsidiaries have applied for or obtained ICP License for providing financial and market information to our users, while we cannot guarantee that Beijing Yiyi’s subsidiaries may at all times continue or maintain such license(s) due to uncertainties from PRC governmental authorities. With respect to the risk of not obtaining, continue or maintain the ICP License, please refer to “Item 3. Key Information – Certain Risks Related to Our Chinese Operations and Operating Structure – We may be adversely affected by the complexity, uncertainties and changes in PRC regulation of Internet-related businesses and companies, and any lack of requisite licenses, permits or approvals applicable to our business may have a material adverse effect on our business and results of operations.”

Regulation on Mobile Internet Applications Information Services

Our APP is also regulated by the Provisions on the Administration of Mobile Internet Applications Information Services, or the APP Provisions, promulgated by the Cyberspace Administration of China (CAC), on June 28, 2016 and amended in 2022. The latest version became effective on August 1, 2022. According to the APP Provisions, the providers of APPs shall not create, copy, publish or distribute information and content that is prohibited by laws and regulations. However, we cannot assure that all the information or content displayed on, retrieved from or linked to our APP comply with the requirements of the APP Provisions at all times. If our APP were found to be violating the APP Provisions, we may be subject to administrative penalties, including warning, service suspension or removal of our APP from the relevant APP store, which may materially and adversely affect our business and operating results. Besides, the MIIT issued the Notice of Carrying out the Filing of Mobile Internet Applications on July 21, 2023, which proposes the requirements that developers of Apps engaged in Internet information services within the PRC must comply with certain filing requirements in accordance with the relevant regulations and such holders shall not engage in the App Internet information service without completion of such filing. See “Item 3. Key Information – Certain Risks Related to Our Chinese Operations and Operating Structure – We may be adversely affected by the complexity, uncertainties and changes in PRC regulation of Internet-related businesses and companies, and any lack of requisite licenses, permits or approvals applicable to our business may have a material adverse effect on our business and results of operations.”

Regulations on Internet Audio-Video Program Services

The Administrative Regulations on Internet Audio-Video Program Services, or the Internet Audio-Video Program Services Regulations promulgated by the State Administration of Press, Publication, Radio, Film and Television, or the “SAPPRFT” (which has been divided into National Radio and Television Administration, or NRTA, National Press and Publication Administration, or NPPA, and China Film Administration), which became effective on January 31, 2008 and was amended on August 28, 2015, sets forth the principal rules and requirements on the Internet audio-video program services. According to the Internet Audio-Video Program Services Regulations and other regulations, an Internet audio-video program service provider must obtain an audio-video license issued by National Radio and Television Administration before spreading audio-video programs via the Internet. The audio-video program services are defined as the activities of making, editing and integrating audio-video programs and providing them to the public via the Internet or providing services for other people to upload and spread audio-video programs. In addition, the Internet Audio-Video Program Services Regulations only allow state-owned or state-controlled enterprises to apply for such license. Any entity that fails to obtain an audio-video license but operates relevant audio-video services may face administrative penalties including warnings, rectification orders and fines of no more than RMB30,000, and in severe cases, bans from doing business, confiscation of equipment utilized in providing such services and fines ranging from one to two times of the investment amounts of the entity.

Regulation on Internet Publishing

On February 4, 2016, the SAPPRFT, and the MIIT jointly issued the Administrative Measures of Internet Publishing Services, or the Internet Publishing Measures, which became effective on March 10, 2016. According to the Internet Publishing Measures, an entity shall obtain an online publishing service license issued by the provincial branch of NPPA to provide online publishing services. Online publishing services refer to the provision of online publications to the public through information networks. Online publications refer to digital works with publishing features such as having been edited, produced or processed and are made available to the public through information networks.

Regulations on Financial Information Services

On December 26, 2018, the CAC promulgated the Provisions on Administration of Financial Information Services, taking effect on February 1, 2019. These provisions set forth general qualification, management and content requirements for financial information service providers if they provide financial information or data that may affect the financial market for users who engage in financial analysis, financial transactions, financial decisions or other financial activities. Specifically, financial information service providers are required to disclose the sources of the financial information or data in a clear and accurate manner, and shall not make, copy, publish or disseminate any content that covers, among others, false financial information that may detriment national financial security or stability of society, fictional event or news regarding the financial market (including that related to securities, funds, futures or foreign currency), or certain financial products or services that are forbidden by the competent regulatory authorities. Violations of any of the requirements in these provisions may subject the financial information service providers to penalties such as public condemnation and rectification orders.

Regulations on Internet News Dissemination

The State Council Information Office promulgated the Interim Administrative Regulations for Publication News by Internet Websites in 2000 and Administrative Regulations for Internet News Information Services in 2017. These regulations stipulate that general websites established by non-news organizations may publish news released by certain official news agencies if such websites satisfy the requirements set forth in these regulations but may not publish news items produced by themselves or other news sources. These regulations also require the general websites of non-news organizations to obtain permit and approval from the State Council Information Office at both the provincial and national level before they commence providing news dissemination services.

Regulations on Cyber Security

Internet information in China is heavily regulated and restricted from as a national security issue stand point. The Standing Committee of the National People’s Congress, or the SCNPC, enacted the Decision on Internet Security Protection in December 2000, as further amended in August 2009, which impose criminal liabilities on persons or entities that: (i) gain improper entry into a computer or system of strategic importance; (ii) disseminate politically disruptive information; (iii) leak state secrets; (iv) spread false commercial information; or (v) infringe intellectual property rights. The Ministry of Public Security has promulgated measures that prohibit the use of the Internet in ways that would result in the leakage of state secrets or dissemination of socially destabilizing content. If an Internet information service provider violates these measures, the MPS and the local security bureaus may revoke its operating license and shut down its websites.

In November 2016, the SCNPC promulgated the Cyber Security Law of the PRC, or the Cyber Security Law, which became effective on June 1, 2017, as further amended on October 28, 2025 and came into effect on January 1, 2026. The Cyber Security Law requires that network operators, which include, among others, Internet information services providers, take technical measures and other necessary measures in accordance with applicable laws and regulations and the compulsory requirements of the national and industrial standards to safeguard the safe and stable operation of its networks. We are subject to such requirements as we are providing certain Internet services through our APP and website. The Cyber Security Law further requires Internet information service providers to formulate contingency plans for network security incidents, report to the competent departments immediately upon the occurrence of any incident endangering cyber security and take corresponding remedial measures. In addition, according to the Cyber Security Law, operators of key information infrastructures, which include public communications and information service, energy, transportation, water conservancy, financial industry, public services, e-government affairs and other

important industries and fields, shall store personal information and important data gathered and produced during operations in the PRC within the territory of the PRC. Where such information and data need to be transmitted overseas based on commercial demand, a security assessment shall be conducted in accordance with the measures formulated by the national cyberspace administration authority in concert with the relevant departments under the State Council.

On December 28, 2021, the CAC and other twelve PRC regulatory authorities jointly revised and promulgated the Measures for Cybersecurity Review, or the Cybersecurity Review Measures, which came into effect on February 15, 2022. Pursuant to the Cybersecurity Review Measures, besides the procurement of network products and services by critical information infrastructure operators, any data processing activities by network platform operators that affects or may affect national security shall be subject to the cybersecurity review as well. In accordance with the Cybersecurity Review Measures, operators mastering personal information of more than one million users must apply to the Cybersecurity Review Office for cybersecurity review when they seek for listing in a foreign country. The CAC may voluntarily conduct cyber security review if any network products and services and activities of data process affects or may affect national security.

We may need to take certain security assessment measures on the personal data transmitted cross border. With respect to the risk of personal information and important data storage and cross border transmission, please refer to “Item 3. Key Information – Certain Risks Related to Our Chinese Operations and Operating Structure – If we fail to protect customer data and privacy, our reputation, financial condition and results of operations will be materially and adversely affected.”

The CSRC's Administrative Measures for Network and Information Security in the Securities and Futures Industries, which went into effect on May 1, 2023, regulate the network and information security of core institutions, operating institutions, and IT system service institutions in the industry. On August 6, 2023, the SAMR and the National Standardization Administration Committee jointly published the Data Security Risk Prevention and Control for Securities and Futures Industry—Guidelines of Data Classification (GB/T 42775-2023), which took effect on the same date, and describes the methods of classifying the data used or generated in the securities and futures industries. Although such specification is not a mandatory national standard but a recommended guideline, and it is not enforceable by law, the authority may use this standard to evaluate an entity’s compliance with China’s legal guidelines and regulations.

On March 17, 2023, the SAMR and the National Standardization Administration Committee announced the issuance of the National Standards of the People’s Republic of China (No. 1 of 2023), which contains 12 sets of national standards on cybersecurity under the National Technical Security Standardization Committee of China, or TC260, including the Information Security Technology - Basic Requirements for Competence of Cybersecurity Workforce (GB/T 42446-2023).

On April 26, 2023, the amended Counterespionage Law of the People’s Republic of China was promulgated which came into effect on July 1, 2023, establishing a close connection between data security and national security. It provides, among others, that engaging in the unauthorized provision of data or conducting cyberattacks against specific authorities is categorized as acts falling within the scope of espionage, and unlawfully acquiring or possessing documents, data, materials, or items that qualify as state secrets is strictly forbidden.

On May 26, 2023, the Secretariat of the National Information Security Standardization Technical Committee published the Practice Guidelines for Cybersecurity Standards - Implementation Guidelines for Cyber Data Security Risk Assessment, implementing the requirements of the Data Security Law on data security risk assessment, which outlines the approach, workflow and key components of the data security risk assessment, including data security management, data processing activities, data security technology, and personal information protection.

On September 11, 2025, the CAC promulgated the Administrative Measures for the Reporting of Cybersecurity Incidents, which came into effect on November 1, 2025, established a report system for network operators who construct or operate networks or provide services through networks, within the territory of the PRC when a cybersecurity incident occurs.

The Regulations on Network Data Security was promulgated by the State Council on September 24, 2024 and became effective on January 1, 2025, according to which, a network data handler may transmit personal information abroad if

it meets any of the following conditions: (1) having passed the security assessment for data cross-border transmission organized by the state cyberspace administration; (2) having been certified by a specialized agency in respect of the protection of personal information in accordance with the provisions of the state cyberspace administration; (3) meeting the provisions on standard contract for cross-border transmission of personal information as developed by the state cyberspace administration; (4) necessary to provide personal information abroad in order to conclude or perform a contract to which it is a party; (5) necessary to provide personal information of employees abroad under the employment rules and regulations formulated in accordance with the law and collective contracts concluded in accordance with the law; (6) necessary to provide personal information abroad in order to perform statutory duties or obligations; (7) necessary to provide personal information abroad in order to protect the life, health and property security of natural persons in an emergency; and (8) other conditions provided for in laws, administrative regulations or by the state cyberspace administration. In addition, network data processors engaging in network data processing activities that affect or may affect national security shall undergo national security review.

Regulations on Privacy Protection

Internet information service providers are also required to maintain the integrity, confidentiality and availability of network data. The Cyber Security Law reaffirms the basic principles and requirements specified in other existing laws and regulations on personal data protection, such as the requirements on the collection, use, processing, storage and disclosure of personal data, and Internet information service providers being required to take technical and other necessary measures to ensure the security of the personal information they have collected and prevent the personal information from being divulged, damaged or lost. Any violation of the Cyber Security Law may subject the Internet information service provider to warnings, fines, confiscation of illegal gains, revocation of licenses, cancellation of filings, shutdown of websites or criminal liabilities.

Under the Several Provisions on Regulating the Market Order of Internet Information Services issued by the MIIT in December 2011 and the Cyber Security Law, an Internet information service provider may not collect any user’s personal information or provide any such information to third parties without that user’s consent, and it must also expressly inform that user of the method, content and purpose of the collection and processing of such user’s personal information and may only collect such information as necessary for the provision of its services. In addition, pursuant to the Decision on Strengthening Internet Information Protection issued by the SCNPC in December 2012, the Order for the Protection of Telecommunication and Internet User’s Personal Information issued by the MIIT in July 2013 and the Cyber Security Law, any collection and use of a user’s personal information must be subject to the consent of the user, abide by the principles of legality, rationality and necessity and be within the specified purposes, methods and scopes. An Internet information service provider must also keep such information strictly confidential, and is further prohibited from divulging, tampering or destroying of any such information, or selling or providing such information to other parties. An Internet information service provider is required to take technical and other measures to prevent the collected personal information from any unauthorized disclosure, damage or loss. Any violation of these laws and regulations may subject the Internet information service provider to warnings, fines, confiscation of illegal gains, revocation of licenses, cancellation of filings, closedown of websites or even criminal liabilities.

Pursuant to the Ninth Amendment to the Criminal Law issued by the SCNPC in August 2015 and becoming effective in November, 2015, any Internet service provider that fails to fulfill the obligations related to Internet information security administration as required by applicable laws and refuses to rectify upon orders, shall be subject to criminal penalty for the result of (i) any dissemination of illegal information in large scale; (ii) any severe effect due to the leakage of the customer’s information; (iii) any serious loss of criminal evidence; or (iv) other severe situation, and any individual or entity that (i) sells or provides personal information to others in a way violating the applicable law, or (ii) steals or illegally obtain any personal information, shall be subject to criminal penalty in severe situation.

In addition, the Interpretations of the Supreme People’s Court and the Supreme People’s Procuratorate of the PRC on Several Issues Concerning the Application of Law in Handling Criminal Cases of Infringing Personal Information, issued in May 2017 and effective June 2017, clarified certain standards for the conviction and sentencing of the criminals in relation to personal information infringement. Further, the NPC promulgated a new National Security Law, effective July 2015, to replace the former National Security Law and covers various types of national security including technology security and information security.

In November 2019, the Secretariat of the Cyberspace Administration of China, the General Office of the MIIT, the General Office of the Ministry of Public Security and the SAMR jointly promulgated the Circular on Issuing the Methods for Identifying Unlawful Collection and Use of Personal Information of Applications, which defines actions that may be regarded as violating the Network Security Law and other personal information protection related regulations, including, among other things, failure to publicize the rules for collection and use of personal information, failure to expressly state the purpose, manner and scope of collecting and using personal information, collection and use of personal information without consent of users, provision of personal information to others without consent, and failure to provide the function of deleting or correcting personal information as required by law. On March 12, 2021, the aforesaid four departments jointly promulgated the Circular on Issuing the Provision on the Range of Personal Information Necessary for Common Types of Mobile Internet Application, which came into effect on May 1, 2021. This circular defines specific information that 39 types of mobile internet application (“APP(s)”), including mobile applications and programs on mobile applications, such as WeChat Mini Program, may collect for the basic functions of such APPs.

On March 6, 2020, the SAMR and Standardization Administration of China, or SAC, jointly published the Information Security Technology - Personal Information Security Specification (GB/T 35273-2020), or the 2020 Specification, proposed by the National Information Security Standardization Technical Committee as an amendment to and replacement for the version published in November 2017 (GB/T 35273-2017). The 2020 Specification, which took effect on October 1, 2020, explains and reinforces the Cyber Security Law. Though the 2020 Specification is not a mandatory national standard but a recommended guideline, and it is not enforceable by law, the authority may use this standard to evaluate an entity’s compliance with China’s legal guidelines and regulations. The 2020 Specification outlines that “controllers” are those who collect personal information for providing a product or service. The “subject” is the individual or entity that provides the personal information to the controller. The 2020 Specification seeks to provide the subject with more autonomy in how and when they provide personal information to controllers. Although the 2020 Specification clarifies issues such as biometric data, multiple business functions, and explicit consent, it is still unclear to what extent the new standard will be enforced in China.

Furthermore, on August 20, 2021, the SCNPC promulgated the Personal Information Protection Law, or the Information Protection Law, which became effective on November 1, 2021. The Information Protection Law stipulates that the Cyberspace Administration of China is responsible for coordinating the protection of personal information and the related supervision and administration. The Information Protection Law also expressly stipulates that those who process personal information in violation of regulations or fail to take necessary security measures when processing personal information will be ordered to make corrections by the authority responsible for personal information protection, and given a warning, with their illegal gains confiscated. If the violator refuses to make corrections, it shall be subject to a fine of not more than RMB1.0 million. The person in charge directly responsible and other persons directly responsible shall be imposed a fine of not less than RMB10,000 but not more than RMB100,000. In case of any severe illegal acts as stipulated in the Information Protection Law, the violator shall be ordered to make corrections by the authority responsible for personal information protection, have its illegal gains confiscated and be subject to a fine of not more than RMB50.0 million or no more than 5% of the turnover in the previous year, as well as a suspension of the relevant business, suspension for rectification, revocation of relevant business permit or business license by the relevant competent authorities. The person in charge directly responsible and other persons directly responsible shall be imposed a fine of not less than RMB100.0 thousand but not more than RMB1.0 million.

The Data Security Law of the People’s Republic of China, or the Data Security Law, was passed by the SCNPC on June 10, 2021 and came into effect on September 1, 2021. The Data Security Law requires the data processor to establish and improve a whole-process data security management system, organize data security education and training, and take corresponding technical measures and other necessary measures to safeguard data security. In conducting data processing activities by using the Internet or any other information network, the data processor shall perform the above data security protection obligations on the basis of the hierarchical cybersecurity protection system. Any violation of the provisions and requirements under the Data Security Law may subject a data processor to rectifications, warnings, fines, suspension of the related business, revocation of licenses or even criminal liabilities.

On July 7, 2022, the CAC promulgated the Measures on Security Assessment of Cross-border Data Transfer, or the Data Export Measures, which became effective on September 1, 2022. The Data Export Measures require that any data processor which processes or exports personal information exceeding certain volume threshold under such

measures shall apply for security assessment by the CAC before transferring any personal information abroad. The security assessment requirement also applies to any transfer of important data outside of China. In December 2022, the MIIT released the Administrative Measures for Data Security in the Field of Industry and Information Technology (for Trial Implementation), which came into effect on January 1, 2023. The Administrative Measures for Data Security in the Field of Industry and Information Technology (for Trial Implementation) requires the data processor in the field of industry and information technology to review data on a periodical basis, identify important data and core data in accordance with the relevant standards and specifications, and form its specific catalogue. The CAC has also issued the First Edition and the Second Edition of Guidelines for Application for Security Assessment of Outbound Data Transfer successively on August 31, 2022 and March 22, 2024, respectively, illustrating the specific requirements for declaration of the cross-border data security assessment, such as methods, processes and materials, and optimizes and simplifies the relevant materials that data processors need to submit. In June 2025, the CAC issued the Third Edition of Guidelines for Application for Security Assessment of Outbound Data Transfer, which optimizes and simplifies the relevant materials required to be submitted by data processors for the application for security assessment of outbound data transfer and specifies the conditions, procedures, and materials required for data processors to apply for an extension of the validity period of the security assessment results.

On February 22, 2023, the CAC issued the Measures for the Standard Contract for the Outbound Transfer of Personal Information, or the Standard Contract Measures, which took effect on June 1, 2023. The Standard Contract Measures apply to the provision of personal information to overseas recipients through standard contract and set out detailed criteria relating to the formality and terms of such contracts. The Standard Contract Measures also require the personal information processor to file such contract with relevant authorities within 10 business days after the contract is effective. To regulate the application of the outboard transfer of personal information through standard contact, the CAC has promulgated the First Edition and the Second Edition of Guidelines for the Recordation of the Standard Contracts for the Outbound Transfer of Personal Information on May 30, 2023 and March 22, 2024.

On March 16, 2023, the TC260 released the draft national standards entitled Information Security Technology - Certification Requirements for Cross-border Transmission of Personal Information, for public comments, which sets out the basic principles and requirements for the protection of the rights and interests of personal information subjects in the cross-border transmission of personal information, and outlines the standards for the third-party certification of companies engaged in the cross-border transfer.

On March 13, 2025, the CAC and Ministry of Public Security jointly promulgated the Measures for the Security Management of the Application of Facial Recognition Technology, which came into effect on June 1, 2025, applies to the activities of applying facial recognition technology to process facial information within the territory of the PRC. According to the Measures for the Security Management of the Application of Facial Recognition Technology, facial recognition technology can only be used when there is a specific purpose and sufficient necessity, take the way that has the least impact on the rights and interests of individuals, and strict protection measures must be implemented

On March 22, 2024, the CAC issued the Regulations on Promoting and Regulating the Cross-border Data Flow, which stipulates the obligations of data processors with cross-border transfer of personal information, such as notification, obtaining individual consent, and conducting personal information protection impact assessments in accordance with laws and administrative regulations, and also sets out several exemptions, including cross-border data transfer (i) for concluding or performing a contract to which an individual is a party, (ii) for the cross-border HR management purpose according to the applicable internal labor rules and a collective contract entered into with the employees , (iii) to safeguard an individual’s life, health or property in the event of an emergency, and (iv) if the handler is not classified as a critical information infrastructure operator, involving less than 100,000 people’s non-sensitive personal information from January 1 of the current year.

On September 24, 2024, the Administrative Regulation of Network Data Security was released by the State Council and became effective on January 1, 2025, stipulates, among others, that a prior cybersecurity review is required for listing abroad of data processors which process over one million users’ personal information, and the listing of data processors in Hong Kong which affects or may affect national security.

On September 24, 2024, the State Council published the Regulations on Network Data Security Management which came into force on January 1, 2025. This Regulation provides that the network data handlers shall be subject to national

security review if their network data handling activities affect or may affect national security, and it provides no further explanation or interpretation as to how to determine what constitutes “affecting national security”. In addition, the Regulations on Network Data Security Management requires network data handlers handling personal information involving over 10 million individuals to comply with certain regulations on important data handlers, including, among others, specifying the person in charge of network data security and the management organization for network data security, and conducting security background review of the person in charge of network data security and personnel in key positions and strengthen the training for the relevant personnel when controlling important data of specific type and scale specified by the relevant competent authority.

On February 12, 2025, the Measures for the Administration of Personal Information Protection Compliance Audits was issued by the CAC and will become effective on May 1, 2025, which stipulates that companies that process personal information of subjects in China shall undergo regular compliance audits.

On July 18, 2025, the CAC promulgated Announcement of the Submission of Information on Persons in Charge of Personal Information Protection, established a system of persons in charge of personal information protection and required such person to report certain information with the local cyberspace administration at the districted city level within specific timeframe.

Regulations Relating to Overseas Offerings

On July 6, 2021, the relevant PRC government authorities issued Opinions on Strictly Cracking Down Illegal Securities Activities in Accordance with the Law. These opinions emphasized the need to strengthen the administration over illegal securities activities and the supervision on overseas listings by China-based companies and proposed to take effective measures, such as promoting the construction of relevant regulatory systems to deal with the risks and incidents faced by China-based overseas-listed companies.

On February 17, 2023, the CSRC promulgated the Trial Administrative Measures of the Overseas Securities Offering and Listing by Domestic Companies, or the Overseas Listing Trial Measures and relevant five guidelines, which became effective on March 31, 2023. The Overseas Listing Trial Measures comprehensively improve and reform the existing regulatory regime for overseas offering and listing of Chinese mainland domestic companies’ securities and regulates both direct and indirect overseas offering and listing of Chinese mainland domestic companies’ securities by adopting a filing-based regulatory regime. It provides, among others, that an overseas securities company that serves as a sponsor or lead underwriter for overseas securities offering and listing by domestic companies shall file with the CSRC within ten (10) working days after signing its first engagement agreement for such business, and submit to the CSRC, no later than January 31 each year, an annual report on its business activities in the previous year associated with overseas securities offering and listing by domestic companies.

On the same day, the CSRC also held a press conference for the release of the Overseas Listing Trial Measures and issued the Notice on Administration for the Filing of Overseas Offering and Listing by Domestic Companies, which, among others, clarifies that (i) prior to the effective date of the Overseas Listing Trial Measures, Chinese mainland domestic companies that have already completed overseas listing shall be regarded as “existing companies”, which are not required to fulfill filing procedure immediately but shall be required to complete the filing if such existing companies conduct refinancing in the future; and (ii) the CSRC will solicit opinions from relevant regulatory authorities and complete the filing of the overseas listing of companies with contractual arrangements which duly meet the compliance requirements, and support the development and growth of these companies by enabling them to utilize two markets and two kinds of resources.

On February 24, 2023, the CSRC released the Provisions on Strengthening the Confidentiality and Archives Administration Related to the Overseas Securities Offering and Listing by Domestic Enterprises, or the Confidentiality and Archives Administration Provisions, which took effect on March 31, 2023. The Confidentiality and Archives Administration Provisions require, among others, that PRC domestic enterprises that seek to offer and list securities in overseas markets, either directly or indirectly, complete approval and filing procedures to competent authorities, if such PRC domestic enterprises or its overseas listing entities provide or publicly disclose documents or materials involving state secrets and work secrets of PRC government agencies to relevant securities companies, securities service institutions, overseas regulatory agencies and other entities and individuals. It further stipulates that providing or publicly disclosing documents and materials which may adversely affect national security or public interests, and

accounting files or copies shall be subject to corresponding procedures in accordance with relevant laws and regulations. Under the Confidentiality and Archives Administration Provisions, we may be required to complete relevant approval or filing procedures, or expend additional resources to comply with the Confidentiality and Archives Administration Provisions if we are recognized to fall within any of the foregoing circumstances. In addition, if the CSRC or other regulatory authorities later promulgate new rules or explanations requiring that we obtain their approvals or accomplish the required filing or other regulatory procedures for future capital-raising activities, we may be unable to obtain a waiver of such approval requirements, if and when procedures are established to obtain such a waiver.

Regulations Relating to Anti-Monopoly

According to the Anti-Monopoly Law of the People’s Republic of China, or the Anti-Monopoly Law, which was promulgated by the SCNPC on August 30, 2007, amended on June 24, 2022, and the 2022 revision became effective on August 1, 2022, the Anti-Monopoly Law applies to the monopolistic practices in domestic economic activities in China as well as the monopolistic practices outside China which have exclusion or restriction effects on domestic market competition. The monopolistic practices under the Anti-Monopoly Law include any monopoly agreement reached by any operators, abuse of market-dominating position by any operators and any concentration of operators which has an effect of eliminating or restricting competition. The agencies designated by the State Council are responsible for enforcement of the Anti-Monopoly Law. The anti-monopoly enforcement agencies of the State Council may, according to work requirements, delegate relevant anti-monopoly enforcement tasks to the corresponding agencies of the people’s governments of provinces, autonomous regions and centrally-administered municipalities pursuant to the provisions of Anti-Monopoly Law. Operators who violate the provisions of the Anti-Monopoly Law will be ordered by the enforcement agencies to stop the illegal act, be imposed a fine or be subject to other restrictive measures.

In order to prevent and curb the monopolistic conducts in the field of platform economy, the Anti-monopoly Commission of the State Council issued the Guidelines to Anti-Monopoly in the Field of Internet Platforms on February 7, 2021, which regulates the competition among Internet platforms. To determine the abuse of market dominance in the platform economy, first define the relevant market, analyze whether the operator has a dominant position in the relevant market, and then analyze whether it constitutes abuse of market dominance according to individual circumstances.

On March 10, 2023, the SAMR issued the Provisions on Prohibiting the Abuse of Administrative Power to Eliminate and Restrict Competition, the Provisions on Anti-Monopoly Agreements, the Provisions on Prohibition of Abuse of Dominant Market Position, and the Regulations on the Review of Concentration of Undertakings, all of which came into effect on April 15, 2023. The SAMR amended the Provisions on Prohibiting the Abuse of Administrative Power to Eliminate and Restrict on December 18, 2025 and amended the Provisions on Anti-Monopoly Agreements on December 9, 2025, both of which came into effect on February 1, 2026. These Provisions are promulgated to implement the Anti-Monopoly Law of the PRC, and further strengthen the anti-monopoly legal system.

PRC Regulations Relating to Foreign Exchange

Regulations on Foreign Currency Exchange

The core regulations governing foreign currency exchange in China are the Foreign Exchange Administration Regulations, as amended in August 2008. Certain organizations in the PRC, including foreign invested enterprises, may purchase, sell and/or remit foreign currencies at certain banks authorized to conduct foreign exchange business upon providing valid commercial documents. However, approval of SAFE, is required for capital account transactions.

In 2014, the SAFE decided to further reform the foreign exchange administration system in order to satisfy and facilitate the business and capital operations of foreign invested enterprises, and issued the Circular on the Relevant Issues Concerning the Launch of Reforming Trial of the Administration Model of the Settlement of Foreign Currency Capital of Foreign-Invested Enterprises in Certain Areas on July 4, 2014 or SAFE Circular 36. The SAFE Circular 36 suspends the application of the SAFE Circular 142 in certain areas and allows a foreign-invested enterprise registered in such areas to use the RMB capital converted from foreign currency registered capital for equity investments within the scope of business, which will be regarded as the reinvestment of foreign-invested enterprise.

On March 30, 2015, the SAFE issued the Circular on the Reforming of the Management Method of the Settlement of Foreign Currency Capital of Foreign-Invested Enterprises, or the SAFE Circular 19, which took effect on June 1, 2015, and replaced the SAFE Circular 142 and the SAFE Circular 36. According to the SAFE Circular 19, the foreign exchange capital of foreign-invested enterprises shall be subject to the Discretional Foreign Exchange Settlement. The Discretional Foreign Exchange Settlement refers to the foreign exchange capital in the capital account of a foreign-invested enterprise for which the rights and interests of monetary contribution has been confirmed by the local foreign exchange bureau (or the book-entry registration of monetary contribution by the banks) can be settled at the banks based on the actual operational needs of the foreign-invested enterprise. The proportion of Discretional Foreign Exchange Settlement of the foreign exchange capital of a foreign-invested enterprise is temporarily determined to be 100%. The Renminbi converted from the foreign exchange capital will be kept in a designated account and if a foreign-invested enterprise needs to make further payment from such account, it still needs to provide supporting documents and go through the review process with the banks.

The SAFE issued the Circular on Reforming and Regulating the Policies for the Administration of Foreign Exchange Settlement under the Capital Account, or the SAFE Circular 16, in June 2016, which became effective simultaneously and was further revised in December, 2023. Pursuant to the SAFE Circular 16, enterprises registered in the PRC may also convert their foreign debts from foreign currency to Renminbi on a discretionary basis. The SAFE Circular 16 provides an integrated standard for conversion of foreign exchange under capital account items (including but not limited to foreign currency capital and foreign debts) on a discretionary basis which applies to all enterprises registered in the PRC. The SAFE Circular 16 reiterates the principle that Renminbi converted from foreign currency-denominated capital of a company may not be directly or indirectly used for purposes beyond its business scope or prohibited by PRC laws or regulations, while such converted Renminbi shall not be provided as loans to its non-affiliated entities. As the SAFE has not provided detailed guidelines with respect to its interpretation or implementations, it is uncertain how these rules will be interpreted and implemented.

In January 2017, the SAFE promulgated the Circular on Further Promoting the Reform of Foreign Exchange Administration and Improving the Examination of Authenticity and Compliance, or the SAFE Circular 3, which took effect on the same day. The SAFE Circular 3 sets out various measures to tighten genuineness and compliance verification of cross-border transactions and cross-border capital flow, which include without limitation requiring banks to verify board resolutions, tax filing form, and audited financial statements before wiring foreign invested enterprises’ foreign exchange distribution above US$50,000, and strengthening genuineness and compliance verification of foreign direct investments.

Our PRC subsidiaries’ distributions to their offshore parents are required to comply with the requirements as described above.

Regulations on Foreign Exchange Registration of Offshore Investment by PRC Residents

PRC residents or entities who have contributed legitimate domestic or offshore interests or assets to the special purpose vehicles, or the “SPVs”, but have yet to obtain the SAFE registration before the implementation of the Circular 37 shall register their ownership interests or control in such SPVs with the SAFE or its local branch. An amendment to the registration is required if there is a material change in the registered SPV, such as any change of basic information including change of such PRC resident’s name and operation term, increases or decreases in investment amounts, transfers or exchanges of shares, or mergers or divisions. Failure to comply with the registration procedures set forth in Circular 37, or making misrepresentation or failure to disclose controllers of foreign-invested enterprise that is established through round-trip investment, may result in restrictions on the foreign exchange activities of the relevant foreign-invested enterprises, including payment of dividends and other distributions, such as proceeds from any reduction in capital, share transfer or liquidation, to its offshore parent or affiliate, and the capital inflow from the offshore parent, and may also subject relevant PRC residents or entities to penalties under PRC foreign exchange administration regulations.

In February 2015, the SAFE further promulgated the Circular of the State Administration of Foreign Exchange on Further Simplifying and Improving Policies for the Foreign Exchange Administration of Direct Investment, or the SAFE Circular 13, effective June 2015. This SAFE Circular 13 has amended the SAFE Circular 37 by requiring PRC residents or entities to register with qualified banks rather than the SAFE or its local branch in connection with their establishment or control of an offshore entity established for the purpose of overseas investment or financing. The

SAFE Circular 37 is applicable to our shareholders who are PRC residents and may be applicable to any offshore acquisitions that we make in the future. All of our shareholders who, to our knowledge, are subject to the above SAFE regulations have completed the necessary registrations with the local SAFE branch or qualified banks as required by the SAFE Circular 37.

Mr. Tianhua Wu and some other individual shareholders who indirectly hold shares in our company and who are known to us as being PRC residents had completed the necessary registrations with the local SAFE branch or qualified banks as required by the SAFE Circular 37 in relation to their investment in our company. See “Item 3. Key Information— Certain Risks Related to Our Chinese Operations and Operating Structure – We may be subject to penalties, including restrictions on our ability to inject capital into our PRC subsidiaries, if our PRC resident shareholders or beneficial owners fail to comply with relevant PRC foreign exchange regulations.”

PRC Regulations Relating to the Individual Foreign Exchange

On December 25, 2006, the PBOC issued the Administrative Measures for Individual Foreign Exchange, or the PBOC Order 3, which took effect on February 1, 2007. In addition, on January 5, 2007, the SAFE promulgated the Circular of the State Administration of Foreign Exchange on Issuing the Detailed Rules for the Implementation of the Measures for the Administration of Individual Foreign Exchange, or the SAFE 2007 Circular 1, which took effect on the same day with the PBOC Order 3. Pursuant to the provision of the PBOC Order 3 and the 2007 Circular 1, individual foreign exchange businesses in the PRC can be classified into domestic and overseas individual foreign exchange businesses as per transaction, and current accounts and capital accounts as per transaction property. Annual quota management shall be implemented for individual settlement of exchange and individual foreign exchange purchase within the territory of the PRC. The annual quota for domestic individual’s current accounts equivalent to US$50,000 (including US$50,000). In case the total amount of the foreign exchange remitted abroad from his/her foreign exchange savings account in a same day does not exceed the amount equivalent to US$50,000 (including US$50,000), he/she shall deal with it at a bank by presenting his/her valid identity certificate; if the total amount is more than the aforesaid amount, he/she shall handle it by presenting the authentic voucher under the current account indicating the trading volume. As for capital account, a domestic individual may purchase foreign exchange or remit abroad his/her self-owned foreign exchange upon the approval of the local foreign exchange department and shall conduct the corresponding formalities for the registration of foreign exchange for investing abroad. In March 2016, Beijing Rongke received an inquiring notice from the SAFE that required it to review and report the status of our customers’ account opening and fund transfers on our platform. Beijing Rongke made a written submission to the SAFE, which clarified that, among others, (i) at that time, Beijing Rongke was a related party to Tiger Holdings Group Limited (already de-registered), both of which did not participate in the process of the foreign currency purchase by our customers, and (ii) Beijing Rongke was a technology company and Tiger Holdings Group Limited was a registered financial service provider in New Zealand. See Item 3.D “Risk Factor-Risks Related to Our Business and Industry-Violations of the relevant SAFE rules and regulations may give rise to regulatory inquiries, investigations or other actions, which may disrupt our business and could materially and adversely impact our results of operations and financial condition.” We believe that we took necessary measures in response to such inquiry and as of the date of this report, we have not received any further similar inquiry or rectification requirement from the SAFE. However, we cannot assure you that the SAFE will take the same view as us and do not expect a formal notice from the SAFE to inform us whether Beijing Rongke had satisfied the requirements in the aforementioned notice.

Regulations Relating to Intellectual Property Rights

PRC Regulations for Copyright

The Copyright Law of the PRC, promulgated in 1990 and amended in 2001 and 2010, or the Copyright Law, and its related implementing regulations, promulgated in 2002 and amended in 2013, are the principal laws and regulations governing the copyright related matters. On November 11, 2020, the SCNPC issued amendment to the Copyright Law, which became effective on June 1, 2021. The amended Copyright Law expands the scope of work protected by the copyright, the content of copyright, and the remedies for infringement of the copyright. Registration of copyright is voluntary, and it is administrated by the China Copyright Protection Center.

PRC Regulations for Patent

Pursuant to the Patent Law of the PRC, or the Patent Law, as amended in 2008, after the grant of the patent right for an invention or utility model, except where otherwise provided for in the Patent Law, no entity or individual may, without the authorization of the patent owner, exploit the patent, that is, make, use, offer to sell, sell or import the patented product, or use the patented process, or use, offer to sell, sell or import any product which is a direct result of the use of the patented process, for production or business purposes. The Detailed Rules for the Implementation of the Patent Law of the PRC, as amend in 2023, promulgated by the State Council provide for patentable inventions, utility models and designs, which must meet three conditions: novelty, inventiveness and practical applicability. After a patent right is granted for a design, no entity or individual shall, without the permission of the patent owner, exploit the patent, that is, for production or business purposes, manufacture, offer to sell, sell, or import any product containing the patented design. Once the infringement of patent is confirmed, the infringer shall, in accordance with the regulations, undertake to cease the infringement, take remedial action, and pay damages, etc. On October 17, 2020, the SCNPC issued amendment to the Patent Law, which became effective on June 1, 2021. The amended Patent Law expands the definition of appearance design, enhances the protection on appearance design, increases the amount of compensation for infringement, and extends the litigation period for infringement of patent.

PRC Regulations for Trademark

Pursuant to the Trademark Law of the PRC, as amended in 2013 and 2019, the right to exclusive use of a registered trademark shall be limited to trademarks which have been approved for registration and to goods for which the use of such trademark has been approved. The period of validity of a registered trademark shall be ten years, counted from the day the registration is approved. According to this law, using a trademark that is identical to or similar to a registered trademark in connection with the same or similar goods without the authorization of the owner of the registered trademark constitutes an infringement of the exclusive right to use a registered trademark. The infringer shall, in accordance with the regulations, undertake to cease the infringement, take remedial action, and pay damages, etc. See Item 3.D “Risk Factors-Risks Related to Our Business and Industry-We may not be able to protect our intellectual property rights.”

PRC Regulations for Domain Name

Pursuant to the Measures for the Administration of Internet Domain Names promulgated on August 24, 2017 and effective on November 1, 2017, the “domain name” shall refer to the character mark of hierarchical structure, which identifies and locates a computer on the Internet and corresponds to the Internet protocol address of that computer. The principle of “first come, first serve” is followed for the domain name registration service. After completing the domain name registration, the applicant becomes the holder of the domain name registered by the same. Any organization or individual may file an application for settlement with the domain names dispute resolution institution or file a lawsuit in the PRC courts in accordance with the PRC law, if such organization or individual consider the domain names registered or used by others infringe upon the legal rights and interests of the former.

PRC Regulations Relating to Dividend Distribution

The principal regulations governing the distribution of dividends paid by wholly foreign-owned enterprises include the Wholly Foreign-Owned Enterprise Law issued in 1986 and most recently amended in 2016, and the Detailed Rules for the Implementation of the Law of the People’s Republic of China on Wholly Foreign-owned Enterprises issued in 1990 and most recently amended in 2014 , both of which have been superseded from January 1, 2020 by the FIL and FIL Implementation Rules, and the Company Law of the People’s Republic of China issued in 1999 and most recently amended in 2023. Under these regulations, wholly foreign-owned enterprises in China may pay dividends only out of their accumulated profits, if any, as determined in accordance with PRC accounting standards and regulations, provided that, a wholly foreign-owned enterprise in China shall firstly set aside at least 10% of its after-tax profit based on PRC accounting standards each year to its general reserves until its cumulative total reserve funds reaches 50% of its registered capital. These reserve funds, however, may not be distributed as cash dividends.

Certain Summary Financial Information Regarding the Company, Its Subsidiaries, and Consolidated VIEs

Cash Flows Among the Company, Its Subsidiaries, and Consolidated VIEs

The Group’s main revenues were mostly generated from our wholly owned subsidiaries in New Zealand, Singapore, Hong Kong and the United States for the years ended December 31, 2023, 2024 and 2025. Most of the consolidated VIEs and their subsidiaries operate business in the PRC and their main functions are to support our Licensed Entities. Certain of the costs generated by VIEs and their subsidiaries are covered by these Licensed Entities through inter-company transactions, and we expect that the Licensed Entities will cover a substantial majority of such costs in the future. In general, the holding company transfers funds from financing (including funds from its IPO, follow-on equity offerings, and offerings of convertible bonds, as applicable) to Licensed Entities in the form of capital injections or loans in order to support their business expansion. These Licensed Entities pay the consolidated VIEs and their subsidiaries periodically for the services rendered through inter-company transactions, pursuant to the terms of the contractual arrangements between them. The Group currently does not have any cash management policies specifically governing these transfers between VIE and subsidiaries. Instead, we are guided by the contractual arrangements to which we are a party and, to the extent permissible under those contractual arrangements, the discretion of our management. To date, we have not experienced difficulty in transferring cash to or from the holding company, the subsidiaries, the VIEs, and investors. However, there is no assurance that the PRC government will not regulate transfer of cash.

To illustrate cash flows among the holding company, its subsidiaries, and consolidated VIEs by type, please refer to the following tables (all in US$ thousands):

Our subsidiaries and the consolidated VIEs did not declare or distribute any dividends or distributions for the years ended December 31, 2023, 2024 and 2025. Additionally, the holding company did not declare nor distribute any dividends or distribution for the years ended December 31, 2023, 2024 and 2025.

Condensed Consolidated Financial Information relating to the VIEs

As of and for the year ended December 31, 2025:

As of and for the year ended December 31, 2024: