Attachment:

　　Personal Information Protection Policy

　　(Amended Version)

　　Dalian Commodity Exchange (with the registered address at No. 129, Hui Zhan Road, Dalian, China, (the "Exchange") is committed to protecting your personal information. The purpose of the Policy is to describe the collection, use and any other conditions of your personal information by the Exchange, and to elaborate on the security measures the Exchange has taken to protect the security of your personal information. Please read the Policy carefully to learn how your personal information will be collected, used and the rights you have with respect to your personal information.

　　Latest update: November 1, 2021

　　The Policy will help you understand the following:

　　1.how the Exchange collects and uses your personal information

　　2.how the Exchange provides your personal information for other personal information processors and publicizes your personal information

　　3.how the Exchange protects your personal information

　　4.your rights and how to exercise them

　　5.how your personal information is transferred worldwide

　　6.the retention period of personal information by the Exchange

　　7.how the Policy will be updated

　　8.how to contact the Exchange

　　The Exchange is fully aware of the importance of personal information to you and will do our best to ensure the security of your personal information. The Exchange is committed to maintaining your trust in the Exchange and will protect your personal information in accordance with the following principles: principle of legality, legitimacy and good faith, principle of clear purpose, principle of informed consent, principle of minimum necessity, principle of quality and safety assurance, principle of subject participation, and principle of openness and transparency, etc. In the meantime, the Exchange hereby promises to take appropriate security measures to protect your personal information according to mature standards of the industry.

　　1.How the Exchange collects and uses your personal information

　　Personal information refers to all kinds of information related to identified or identifiable natural persons that is recorded electronically or otherwise, excluding the anonymized information.

　　The Exchange will collect, use, store, and protect your personal information only for the purposes described below in the Policy. If you choose not to provide certain required personal information, the Exchange may not be able to provide you with the appropriate products or services or may not be able to process your requests for applications, subscriptions or registrations.

　　1.Personal information directly collected by the Exchange and how it will be used

　　If you participate in trading, settlement, delivery and other related activities of various product instruments such as futures, options, swaps, basis trading and warehouse receipts trading and others listed and operated by the Exchange, or you use the services provided by the Exchange, the Exchange will collect your information (including but not limited to the following personal information) and use it for the purposes described below in order to regulate behaviors of participation, better serve the market, protect the legitimate rights and interests of all parties, ensure the normal operation of the Exchange's market, and fulfill the self-regulatory duties:

　　When the Exchange intends to use the information collected for specific purposes for other purposes, the Exchange will seek your prior consent in accordance with the law.

　　2.Personal information indirectly collected by the Exchange and how it will be used

　　In addition to the personal information you directly provide to the Exchange, the Exchange may also obtain information about you (including but not limited to the following personal information) indirectly from third parties in order to regulate the behaviors of market participation, better serve the market, fulfill the self-regulatory duties and protect the legitimate rights and interests of all participants, and the personal information will be used within the scope of achieving the following purposes:

　　3.Exceptions of obtaining authorized consent

　　The Exchange does not need to obtain your authorized consent to collect and use personal information under the following circumstances:

　　1.in connection with the Exchange's performance of statutory duties or obligations;

　　2.in connection with the Exchange's performance of self-regulatory powers;

　　3.directly related to national security and national defense security;

　　4.directly related to public safety, public health and major public interests;

　　5.directly related to criminal investigation, prosecution, trial and enforcement of court decisions;

　　6.in case of any emergency, for the purpose of protecting your or other individual's life, property, reputation and other major legitimate rights and interests and it is hard to obtain your authorized consent;

　　7.processing within a reasonable scope regarding the personal information which is disclosed by yourself or other personal information which has been disclosed legally, unless you expressly refuse to do so. The Exchange will obtain your consent if it has a significant impact on your rights and interests;

　　8.(the collection and use of personal information are) essential to the signing and performance of a contract requested by you, or to the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with the law and the collective contracts concluded in accordance with the law;

　　9.within a reasonable scope, reporting news, public opinion supervision and other activities for public interests;

　　10.(the collection and use of personal information are) essential to maintaining safe and stable operation of the products or services provided;

　　11.requirements put forward by government institutions, law enforcement institutions or similar institutions; or

　　12.other circumstances provided by laws and administrative regulations.

　　2.How the Exchange provides your personal information for other personal information processors and publicizes your personal information

　　1.Providing your personal information for other personal information processors

　　The Exchange will not provide your personal information for any company, organization or individual other than itself, except with your separate consent or under any of the circumstances specified in item (3) of Article I.

　　2.Publicizing

　　The Exchange will not publicize your personal information, except with your separate consent or under any of the circumstances specified in item (3) of Article I.

　　3.How the Exchange protects your personal information

　　1.The Exchange has put in place security measures to protect the personal information you provide from unauthorized access, publicizing, use, modification, damage or loss. The Exchange will take all reasonable and practical steps to protect your personal information.

　　2.The Exchange has obtained the following certifications:

　　ISO 9000 Quality Management System, ISO 20000 IT Service Management System, ISO 27001 Information Security Management System, ISO 22301 Business Continuity Management System, etc.

　　3.The Exchange's data security capabilities：

　　The Exchange has adopted the verification or cryptographic techniques to ensure the integrity and confidentiality of personal information.

　　4.The Exchange will take all reasonable and practical steps to ensure that the unrelated personal information is not collected. The Exchange will only retain your personal information for the shortest period necessary to achieve the purposes set forth in the Policy, except for the need to extend the retention period or as permitted by laws and regulations.

　　5.The Exchange hereby reminds you that the website of the Exchange may contain links to websites of third parties. When you visit any website via such links, the Exchange cannot control over such website, and the Exchange is not responsible for the legality and security of the personal information protection policy, practices and contents of the relevant third party.

　　4.Your rights and how to realize them

　　1.Your rights

　　The Exchange respects your right to take control of your personal information and, without prejudice to the performance of the Exchange's contractual or statutory obligations and self-regulatory duties, you have the following rights:

　　1.Accessing and duplicating your personal information

　　Except as otherwise provided by law, you may access and duplicate your personal information by contacting the Exchange through the contact information disclosed in the Policy.

　　2.Correcting and supplementing your personal information

　　Except as otherwise provided by law, if you find that the Exchange collects or uses your personal information with any errors or incompleteness, you may contact the Exchange to request corrections or supplements.

　　3.Deleting your personal information

　　Under the following circumstances, you may request the Exchange to delete your relevant personal information through the contact information disclosed in the Policy:

　　1.the purpose of processing your personal information by the Exchange has been fulfilled, unfulfillable or is no longer necessary to be fulfilled;

　　2.the process of your personal information by the Exchange violates laws, administrative regulations or the agreements with you;

　　3.the Exchange stops providing products or services or the storage time limit has expired;

　　4.you withdraw the consent; or

　　5.the laws and regulations provide that the Exchange shall delete your personal information;

　　In accordance with relevant laws, your deletion request may not be responded to under the following circumstances, that is, may not be deleted:

　　1.the Exchange processes your personal information when performing tasks in order to comply with the legal obligations or to protect the public interests;

　　2.the Exchange processes your personal information when providing cooperation with regard to criminal investigation, prosecution, response to prosecution, trial, and enforcement of court decisions; or

　　3.other circumstances specified in the Policy under which the Exchange is unable to respond to your request.

　　4.Changing the scope of your authorized consent

　　Each business function needs some basic personal information to complete. For the collection and use of non-essential personal information, you may give or withdraw your consent to the Exchange through the contact information disclosed in the Policy.

　　When you withdraw your consent, the Exchange will no longer collect or use the corresponding personal information. However, your decision to withdraw your consent will not affect the previous collection and use of personal information based on your authorization.

　　5.Restricting the automatic decision-making of information system

　　Except as otherwise provided by law, the Exchange will not use the personal information collected to make any automated decision that would have a legal effect or similar material impact on you without manual intervention. If you become aware of such behavior, you have the right to request an explanation from the Exchange, and the Exchange will provide appropriate remedies.

　　6.Transferring your personal information

　　You have the right to obtain the copies of your personal information by means disclosed in the Policy. The Exchange will provide you or the personal information processor designated by you (provided that you provide the transferring approach) with copies of your personal information in accordance with the law to the extent technically practicable and reasonable.

　　7.Limiting or rejecting the collection and use of personal information

　　Even if the collection and use of your personal information are based on legitimate reasons, you can still make a request to the Exchange to limit or reject the Exchange's collection and use of your personal information. When the Exchange decides whether to respond to your request, it may take some time to verify whether the previous legitimate reason for the Exchange to process your personal information takes precedence over your right to do so.

　　For example, if you do not want to accept the commercial advertisements sent by the Exchange, you may reject subsequent delivery of commercial advertisements through the contact information disclosed in the Policy.

　　2.Exercise of the above rights

　　You may find out whether the above rights are applicable to you and how to exercise them through the contact information disclosed in the Policy.

　　In order to ensure security, the Exchange may ask you to verify your identity before processing your request. The Exchange will respond to your request as soon as possible. Generally, the Exchange will reply within 30 days from the date of receipt of your request and respond to your claims if possible.

　　The Exchange will not charge fees for your reasonable requests in principle; however, the Exchange will charge a certain amount of fees for repeated requests beyond reasonable limits, as the case may be. The Exchange may reject requests that involve unwarranted repetition, require excessive technical means (e.g., developing a new system or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are highly impractical.

　　The Exchange may not be able to respond to your request under some of the following circumstances:

　　1.in connection with the Exchange's performance of statutory duties or obligations;

　　2.in connection with the Exchange's performance of self-regulatory powers;

　　3.directly related to national security and national defense security;

　　4.directly related to public safety, public health and major public interests;

　　5.directly related to criminal investigation, prosecution, trial and enforcement of court decisions;

　　6.there being sufficient evidence to prove that you have subjective malice or abuse your rights;

　　7.in case of any emergency, for the purpose of protecting your or other individual's life, property, reputation and other major legitimate rights and interests and it is hard to obtain consent of the subject；

　　8.responding to your request will cause serious damage to the legitimate rights and interests of you or other individuals and organizations;

　　9.essential to the signing and performance of a contract requested by you, or to the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with the law and the collective contracts concluded in accordance with the law;

　　10.essential to maintaining the safe and stable operation of the product or service provided, or

　　11.in case of involving trade secrets.

　　5.How your personal information is transferred worldwide

　　The personal information collected and generated by the Exchange within the territory of the People's Republic of China ("China") will be stored within the territory of China. But if you are a natural person outside the territory of China who accepts the services provided by the Exchange, your personal information may be transferred outside of China based on your separate consent or other legitimate reasons; under such circumstance, the Exchange will conduct security assessment and take other corresponding security measures to satisfy the legal and compliance requirements for the outward transmission of personal information.

　　6.The storage period of personal information by the Exchange

　　The Exchange shall only store your personal information for the shortest period necessary to achieve the personal information processing purposes set forth in the Policy and/or within the period prescribed by law.

　　7.How the Policy will be updated

　　The Exchange reserves the right to update or modify the Policy from time to time. The Exchange will publish any changes to the Policy on this webpage, and the Exchange recommends that you regularly review the Personal Information Protection Policy. Your continuing use of the products or services provided by the Exchange after the Policy has been updated means that you have fully read, understood, and accepted the updated policy on the protection of personal information.

　　8.How to contact the Exchange

　　If you have any questions, comments or suggestions on the Policy, the Exchange has set up the personal information protection specialist, and you may contact the Exchange through the following ways:

　　Telephone: 0411-84808888

　　Facsimile: 0411-84808588

　　E-mail: info@dce.com.cn

　　Disclaimer: This English translation may be used for reference only. In case there is any discrepancy between the English version and the original Chinese version, the original Chinese version shall prevail. Dalian Commodity Exchange may change or update this English translation without any prior notice and shall accept no responsibility or liability for damage or loss caused by any error, inaccuracy, misunderstanding, or change with regard to this English translation.