[Action Required] New Penalty System and Data Protection Policy updates

<内附中文版>

Dear Developer,

We have some important updates to the Shopee Open Platform:

• New Shopee Open Platform Penalty System
• Actionable solutions added to the Shopee Open Platform Data Protection Policy

Do read through this announcement carefully and complete the Third-party Partner Platform (ISV) Update Form found at the end of the announcement.

New Shopee Open Platform Penalty System

To maintain a fair and safe marketplace for all Shopee users, we’re introducing the Shopee Open Platform Penalty System. You can find the details in the Shopee Open Platform Penalty Policy. Penalty points will be issued to developers who violate the policy in these areas:

• Data Security
• Application Security
• Security Specifications
• Platform Control

A high number of accumulated penalty points can lead to penalties including warnings, suspensions of platform permissions, as well as termination in severe cases.

Updates to Shopee Open Platform Data Protection Policy

We have updated the Shopee Open Platform Data Protection Policy to provide more actionable solutions for you in protecting our users. Here are some key changes that you should take note of:

1.You agree to provide Shopee a declaration of all Systems and key IT assets which process and/or store any Shopee Personal Data or other Restricted Data in the Shopee Open Platform Data Protection Policy.

2.You agree that Shopee reserves the right to perform a security inspection or audit of your data processing facilities and processes used for handling Shopee Personal Data or other Restricted Data, and that you will cooperate with such security inspections upon reasonable notice, in order to ascertain compliance with the relevant laws and requirements.

3.You agree to utilize TLS 1.2 or above and will provide a secure, encrypted communication channel between yourself and your clients for any communications containing or in respect of any Protected Data.

Please refer to Clause 8 and 10.5 for the full terms and make sure you read the updates to the Data Protection Policy carefully. The changes will take effect on 7 September 2021. By continuing to use the Shopee Open Platform after this date, you are agreeing to the new Data Protection Policy.

In addition, you are reminded to store Protected Data (e.g. Partner ID, App Key) securely. It is strictly prohibited to store Restricted or Protected data on a server accessible on a public network without an appropriate access control mechanism in place.

FOR YOUR ACTION

Third-party Partner Platforms should also complete the new Third-party Partner Platform (ISV) Update Form by 17 September 2021. By sharing information such as IP addresses and domain names, it will help us better understand if your data security measures are in place.You should complete this as soon as possible to avoid any penalties or termination of your account.

For future reference of all Open Platform policies, you can visit our Policy page.

Thank you.

----------

<中文版>

亲爱的开发者，

我们对Shopee开放平台进行了一些重要的更新。

• 新的Shopee开放平台处罚系统
• 在Shopee开放平台数据保护政策中增加了可操作的解决方案请仔细阅读本邮件并填写邮件末尾的第三方合作伙伴平台（ISV）更新表。

请仔细阅读本信息并填写信息末尾的第三方合作伙伴平台（ISV）更新表。

新的Shopee开放平台惩罚系统

为了维护所有Shopee用户的公平和安全的市场环境，我们将推出Shopee开放平台惩罚系统。您可以在Shopee开放平台惩罚政策中找到相关细节。对于在以下这些方面违反政策的开发者，我们将对其进行扣分。

• 数据安全
• 应用安全
• 安全规范
• 平台控制

累计罚分过高会导致包括警告、暂停平台权限，以及严重情况下的终止等处罚。

Shopee开放平台数据保护政策的更新

我们已经更新了Shopee开放平台数据保护政策，为您在保护用户方面提供更多可操作的解决方案。以下是您应该注意的一些关键变化。

1.您同意在Shopee开放平台数据保护政策中向Shopee提供所有处理和/或存储任何Shopee个人数据或其他受限数据的系统和关键IT资产的声明。

2.您同意Shopee保留对您用于处理Shopee个人数据或其他受限数据的数据处理设施和流程进行安全检查或审计的权利，并且您将在收到合理通知后配合此类安全检查，以确定是否符合相关法律和要求。

3.您同意使用TLS 1.2或更高版本，并将在您和您的客户之间为包含任何受保护数据或与之相关的任何通信提供一个安全的加密通信渠道。

请参考第8条和第10.5条的全部条款，并确保你仔细阅读数据保护政策的更新。这些变化将于2021年9月7日生效。如果您在此日期之后继续使用Shopee开放平台，即表示您同意新的数据保护政策。

此外，我们提醒您要安全地存储受保护的数据（如合作伙伴ID，应用程序密钥）。严禁将受限数据或受保护数据存储在没有适当访问控制机制的公共网络上的服务器上。

需要采取的行动

第三方合作伙伴平台也应在2021年9月17日前完成新的第三方合作伙伴平台（ISV）更新表。通过分享IP地址和域名等信息，这将有助于我们更好地了解您的数据安全措施是否到位。你应该尽快完成，以避免任何处罚或终止你的账户。

为便于今后参考所有开放平台政策，您可以访问我们的政策页面。

谢谢您。