Dear Customer,

Security Advice of CMSI

In order to protect your valuable assets, we would like to draw your attention to provide some security advices when using your devices and online accounts.

*  Tips to Help Protect Your Personal Information

1. Do not disclose your personal information (e.g. HKID / passport number, address, account number) to any persons or websites you are suspicious of.

2. Do not expose your logon ID or passwords to any third parties (CMSI staff and Police will never ask you for your password for identity verification purpose).

3. Change your personal information (e.g. ID / passport number, address, mobile & e-mail address) immediately if your information renovated.

* Password Tips

1. Change your password periodically and at least for every 3 months.

2. Avoid reusing the same password for multiple web sites.

3. Use complex characters (such as including uppercase/lowercase letters and numbers).

4. Choose a password that is difficult for others to guess.

* Help Secure Your Device and Account

1. Install recommended security and software updates for your computer or device.

2. Do not open any suspicious emails and instant messages. Do not click hyperlinks in emails/instant messages directly.

3. Do not forward your one time password to other devices.

4. Type the website address (URL) or use a bookmark to enter the website of CMSI. Avoid accessing the website through hyperlink embedded in e-mail, internet search engine and suspicious pop-up window.

5. Use trusted and secured computer or mobile device for online trading. Always log out website or system after finished your trade.

6. To protect your computer or mobile device, activate the auto-lock function; install reputable anti-virus, anti-spyware and anti-malware software and keep them updated; set up a personal firewall.

7. Use the latest versions of operating system, apps, software and browser. Keep software up-to-date.

8. For the network functions, disable any wireless network functions (e.g. Wi-Fi, Bluetooth) not in use. Choose encrypted networks when using Wi-Fi and remove any unnecessary Wi-Fi connection settings.

9. Always consider the data security and privacy when you download and install any software and apps into your computer and mobile device.

10. Don't store your account credentials or password in computers, mobile phones or placed in plain sight, and don't use a single password for all your accounts e.g. email account or banking account.

11. Don't log in your online account when there are unusual pop-up screen or window, or abnormal slow computer response, and when unexpected steps or information are required.

12. Don't use public computer, or unknown and insecure network connection to access your online account.

13. Don't share with other people your computer or mobile device used to access to your online account.

14. Don't download and install any unknown software used to access to your online account.

15. Be vigilant of any fraudulent websites masquerading as legitimate businesses, to lure unsuspecting users into revealing private account information.

16. Check the statements, account balance, SMS and other notification messages provided by CMSI in a timely manner and verify your transaction records. Inform us immediately in case of any suspicious situations.

(please visit our corporate website, http://www.cmschina.com.hk/en/AboutUs/SafeTips, for more security information; and the web site of the Investor Education Centre, a subsidiary of the SFC, for cybersecurity tips through https://www.thechinfamily.hk)

Please do not reply to this system-generated message. If you have any queries, please contact our Customer Services Hotline at (852) 3189-6368 or (86) 400-1200-368.

Yours faithfully,

China Merchants Securities International Co., Limited

This email message is confidential. If you have received this message in error, please contact us on (852) 3189-6368 and delete it from your system. Any unauthorized use or dissemination of this message in whole or in part is strictly prohibited. CMSI cannot guarantee the integrity of this email transmission, as information can be intercepted, corrupted, delayed, lost, or incomplete. CMSI shall not be liable for the improper or incomplete transmission of the information contained in this email, nor for any delay in receipt or damage to your system.