BAIYU Holdings (BYU) Risk Analysis

The PRC anti-monopoly enforcement agencies have in recent years strengthened enforcement under the PRC Anti-monopoly Law, including levying significant fines, with respect to concentration of undertakings and cartel activity, mergers and acquisitions, as well as abusive behavior by companies with market dominance. In March 2018, the SAMR was formed as a new governmental agency to take over, among other things, the anti-monopoly enforcement functions from the relevant departments under the Ministry of Commerce of People's Republic of China ("MOFCOM"), the National Development and Reform Commission of the PRC, and State Administration of Industry and Commerce of the PRC. The SAMR issued a new set of guidelines with respect to merger control review in September 2018, and issued the Notice on Anti-monopoly Enforcement Authorization on December 28, 2018, which grants authorizations to the SAMR's provincial branches to enforce anti-monopoly laws within their respective jurisdictions. The SAMR has imposed several administrative penalties on various companies for failing to duly make filings as to their transactions subject to merger control review by the SAMR. The scope of the companies that were penalized is broad, and covers a variety of different industries. Significant regulatory uncertainty existed as to whether prior filing of notification of concentration is required for business concentration involving variable interest entities prior to 2020. In November 2020, the Anti-monopoly Bureau of SAMR released the draft Guidelines on Anti-monopoly Issues in Platform Economy, or the Platform Economy Anti-monopoly Guidelines, for public comment and in February 2021, adopted the Platform Economy Anti-monopoly Guidelines, which for the first time specified that, any concentration made between the variable interest entities shall be regulated by the Anti-monopoly Law. In addition, the Platform Economy Anti-monopoly Guidelines set out detailed standards and rules in respect of the definition of relevant markets, typical types of cartel activities and abusive behaviors by online platform operators with market dominance, which provide further guidelines for enforcement of anti-monopoly laws against online platform operators. For instance, online platform operators that use technological advantages, such as data and algorithms, to eliminate or restrict competition or impose price restrictions or exclusivity requirements on users may be deemed to be abusing dominant market position. Prior to the effectiveness of the Platform Economy Anti-monopoly Guidelines, the SAMR has already fined certain companies that acquired businesses using variable interest entities without obtaining merger control approval or without prior filing of notification of concentration, indicating its increased scrutiny over historical cases of concentration of undertakings involving companies using variable interest entities and heightened enforcement efforts over past failure to file prior notification of concentration of undertakings for such transactions. Since 2020, the SAMR has fined companies that acquired or merged with or cooperated with onshore or offshore entities, including those operated through variable interest entities, for failure to file prior notification before conducting the mergers or cooperation transactions. Although we do not believe we were legally required to make a merger control review filing or obtain merger control approval in relation to the historical merger, there can be no assurance that regulators will agree with us, particularly, in light of the enforcement actions since 2020. In addition, as there were few cases where companies using variable interest entities were investigated for failure to make filings in connection with concentration of undertakings prior to 2020, we did not file prior notification of concentration of undertakings for our historical transactions. There can also be no assurance that regulators will not initiate other anti-monopoly enquiry or investigation into, or take enforcement actions against, the historical merger or require us to submit filings in relation to such historical transactions. We may be subject to penalty in connection with any such enquiry or investigation, if we are determined by the SAMR to have failed to make the requisite filings, including fines up to RMB500,000 per case, and in extreme cases where any such transaction is determined by the SAMR to have constituted concentration of undertakings under the applicable PRC anti-monopoly law, we may be ordered to terminate the contemplated concentration, to dispose of our equity or asset within a prescribed period, or to transfer our business within a prescribed time or to take any other necessary measures to return to the pre-concentration status. We may also be subject to claims from our competitors or users, which could adversely affect our business and operations. Furthermore, any new requirements or restrictions, or proposed requirements or restrictions, could result in adverse publicity or fines against us. On June 24, 2022, the Decision of the Standing Committee of the National People's Congress to Amend the Anti-Monopoly Law of the PRC was adopted and became effective on August 1, 2022, which stipulates that the State Council's anti-monopoly enforcement agency may order business operators to cease illegal concentration, to dispose of shares, assets or businesses within a defined period of time, or to take other necessary measures to restore to the state before the concentration. The enforcement agency may also impose upon a business operator (i) a fine up to ten percent of the business operator's sales revenue in the past year, if the concentration of undertakings has or may have an effect of excluding or limiting competition, or (ii) a fine up to RMB5 million if the concentration of undertakings does not have the effect of excluding or limiting competition. Stricter anti-monopoly and anti-unfair competition enforcement by the PRC regulatory authorities, especially enforcement actions focused on platform economy, may, among other things, prohibit us from future acquisitions, divestitures or combinations our plans to make, impose fines or penalties, require divestiture of certain of our assets, or impose other restrictions that limit or require us to modify its operations, including limitations on our contractual relationships or restrictions on our pricing or revenue models, which could materially and adversely affect our business, financial condition, results of operations and future prospects. Furthermore, as we continue to navigate the evolving legislative environment and varied local implementation practices of anti-monopoly and competition laws and regulations in the PRC, we have attended and may continue to be required to attend administrative guidance meetings or other communications with regulators from time to time. We may continue to receive greater scrutiny and attention from regulators and more frequent and stringent investigations or reviews by regulators, which will increase our compliance costs. It could also be time-consuming to comply with the relevant regulations described above to complete future transactions and carry out our business operations. Heightened regulatory inquiries, investigations and other governmental actions and approval requirements from governmental authorities such as the SAMR may be uncertain and could delay or inhibit our ability to complete these transactions and carry out our business operations, which could affect our ability to expand its business, maintain its market share or otherwise achieve the goals of our acquisition strategy, divert significant management time and attention and our financial resources, bring negative publicity, subject us to liabilities or administrative penalties, and/or materially and adversely affect our financial conditions, operations and business prospects. As of the date hereof, regulatory actions related to data security or anti-monopoly concerns in Hong Kong do not have a material impact on our ability to conduct business, accept foreign investment in the future, continue to list on a United States stock exchange. However, new regulatory actions related to data security or anti-monopoly concerns in Hong Kong may be taken in the future, and such regulatory actions may have a material impact on our ability to conduct business, accept foreign investment, continue to list on a United States stock exchange.

We have entered into certain contractual arrangements with a variable interest entity, Tongdow Internet Technology, which contracts consist of (i) the Exclusive Business Cooperation Agreement, (ii) the Share Pledge Agreement, (iii) the Exclusive Option Agreement, (iv) the POA, and (v) the Reporting Agreement. See "Our Company - Our Business - VIE Agreements." BAIYU and its shareholders do not own any equity interests in Tongdow Internet Technology. The VIE contractual arrangements with Tongdow Internet Technology and its equity holder enable BAIYU to consolidate the financial statements of the VIE and its subsidiaries under U.S. GAAP and to be regarded as the primary beneficiary of the VIEs for accounting purposes, and enable us to obtain substantially all of the economic benefits arising from Tongdow Internet Technology. Although we believe the structure we have adopted is consistent with longstanding industry practice, the PRC government may not agree that these arrangements comply with PRC licensing, registration or other regulatory requirements, with existing policies or with requirements or policies that may be adopted in the future. If we or Tongdow Internet Technology are found to be in violation of any existing or future PRC laws, rules or regulations, or fail to obtain or maintain any of the required permits or approvals, we could be subject to severe penalties. The relevant PRC regulatory authorities would have broad discretion to take action in dealing with these violations or failures, including revoking the business and operating licenses of our PRC subsidiary or Tongdow Internet Technology, requiring us to discontinue or restrict our operations, restricting our right to collect revenue, blocking one or more of our websites, requiring us to restructure our operations or taking other regulatory or enforcement actions against us. The imposition of any of these measures could result in a material adverse effect on our ability to conduct all or any portion of our business operations. In addition, it is unclear what impact the PRC government actions would have on us and on our ability to consolidate the financial results of Tongdow Internet Technology in our consolidated financial statements, if the PRC government authorities were to find our legal structure and contractual arrangements to be in violation of PRC laws, rules and regulations. If the imposition of any of these government actions causes us to lose our right to direct the activities of Tongdow Internet Technology or otherwise separate from the entity and if we are not able to restructure our ownership structure and operations in a satisfactory manner, we would no longer be able to consolidate the financial results of Tongdow Internet Technology in our consolidated financial statements. Any of these events would have a material adverse effect on our business, financial condition and results of operations. The contractual arrangements with the VIE and its shareholder may be less effective than direct ownership in providing operational control.   We have relied and expect to continue to rely on contractual arrangements with the VIE and its shareholder to conduct our operations in China. These contractual arrangements, however, may be less effective than direct ownership in providing us with operational control over the VIE. For instance, the VIE and its shareholder could breach their contractual arrangements with us by, among other things, failing to conduct the operations of the VIE in an acceptable manner or taking other actions that are detrimental to our interests.   If we had direct ownership of the VIE in China, we would be able to exercise our rights as a shareholder to effect changes in the board of directors of the VIE, which in turn could implement changes, subject to any applicable fiduciary obligations, at the management and operational level. However, under the current contractual arrangements, we rely on the performance by the VIE and its shareholder of their obligations under the contracts to direct the VIE's activities. The shareholder of the VIE may not act in the best interests of our company or may not perform its obligations under these contracts. If any dispute relating to these contracts remains unresolved, we will have to enforce our rights under these contracts through the operations of PRC law and arbitration, litigation and other legal proceedings and therefore will be subject to uncertainties in the PRC legal system. See "- We face uncertainty with respect to the enforceability of the contractual arrangements with the VIE and its shareholder, and any failure by the VIE or its shareholder to perform their obligations under our contractual arrangements with them would have a material and adverse effect on our business."   We face uncertainty with respect to the enforceability of the contractual arrangements with the VIE and its shareholder, and any failure by the VIE or its shareholder to perform their obligations under our contractual arrangements with them would have a material adverse effect on our business.   If the VIE or its shareholder fail to perform their respective obligations under the contractual arrangements, we may have to incur substantial costs and expend additional resources to enforce such arrangements. We may also have to rely on legal remedies under PRC law, including seeking specific performance or injunctive relief, and contractual remedies, which we cannot assure you will be sufficient or effective under PRC law. For instance, if the shareholder of the VIE were to refuse to transfer its equity interests in the VIE to us or our designee if we exercise the purchase option pursuant to these contractual arrangements, or if they were otherwise to act in bad faith toward us, then we may have to take legal actions to compel them to perform their contractual obligations. In addition, if any third parties claim any interest in such shareholder's equity interests in the VIE, our ability to exercise shareholder's rights or foreclose the share pledge according to the contractual arrangements may be impaired. If these or other disputes between the shareholder of the VIE and third parties were to impair our contractual control over the VIE, our ability to consolidate the financial results of the VIE would be affected, which would in turn result in a material adverse effect our business, operations and financial condition.   All the agreements under our contractual arrangements with the VIE are governed by PRC law and provide for the resolution of disputes through arbitration in China. Accordingly, these contracts would be interpreted in accordance with PRC law and any disputes would be resolved in accordance with PRC legal procedures. As of the date of this report, the agreements under the contractual arrangements with the VIE have not been tested in a court of law. However, uncertainties in the PRC legal system could limit our ability to enforce these contractual arrangements. Meanwhile, there are very few precedents and little formal guidance as to how contractual arrangements in the context of a consolidated variable interest entity should be interpreted or enforced under PRC law. There remain significant uncertainties regarding the ultimate outcome of such arbitration should legal action become necessary. In addition, under PRC law, rulings by arbitrators are final, parties cannot appeal the arbitration results in courts, and if the losing parties fail to carry out the arbitration awards within a prescribed time limit, the prevailing parties may only enforce the arbitration awards in PRC courts through arbitration award recognition proceedings, which would require additional expenses and delay. In the event we are unable to enforce these contractual arrangements, or if we suffer significant delay or other obstacles in the process of enforcing these contractual arrangements, we may not be able to exert effective contractual control over the VIE, and our ability to conduct our business may be negatively affected. See "- Risks Related to Doing Business in China - Uncertainties with respect to the PRC legal system, including uncertainties regarding the interpretation and enforcement of laws, and sudden or unexpected changes of PRC laws and regulations with little advance notice could adversely affect us and limit the legal protections available to you and us, and the Chinese government may exert more oversight and control over offerings that are conducted overseas, which changes could materially hinder our ability to offer or continue to offer our securities, and cause the value of our securities to significantly decline or become worthless."   Changes in China's economic, political or social conditions or government policies could have a material adverse effect on our business and operations.   Substantially all of our assets and operations are located in the PRC. Accordingly, our business, financial condition, results of operations and prospects may be influenced to a significant degree by political, economic and social conditions in the PRC generally. The Chinese economy differs from the economies of most developed countries in many respects, including the level of government involvement, development, growth rate, management of foreign exchange and allocation of resources. Although the Chinese government has implemented measures emphasizing the utilization of market forces for economic reform, the reduction of state ownership of productive assets, and the establishment of improved corporate governance in business enterprises, a substantial portion of productive assets in the PRC is still owned by the government. In addition, the Chinese government continues to play a significant role in regulating industry development by imposing industrial policies. The Chinese government also exercises significant regulation over the PRC's economic growth through allocating resources, managing payment of foreign currency-denominated obligations, setting monetary policy and providing preferential treatment to particular industries or companies. While the Chinese economy has experienced significant growth over past decades, growth has been uneven, both geographically and among various sectors of the economy. Any adverse changes in economic conditions in the PRC, in the policies of the Chinese government or in the laws and regulations in the PRC could have a material adverse effect on the overall economic growth of the PRC. Such developments could adversely affect our business and operating results, lead to a reduction in demand for our services and adversely affect our competitive position. The Chinese government has implemented various measures to encourage economic growth and guide the allocation of resources. Some of these measures may benefit the overall Chinese economy, but may have a negative effect on us. For example, our financial condition and results of operations may be adversely affected by government management over capital investments or changes in tax regulations. In addition, in the past the Chinese government has implemented certain measures, including interest rate adjustment, to adjust the pace of economic growth. These measures may cause decreased economic activity in the PRC, which may adversely affect our business and operating results.   A severe or prolonged downturn in the global or Chinese economy could materially and adversely affect our business and our financial condition.   Although the Chinese economy has grown steadily in the past decade, there is considerable uncertainty over the long-term effects of the expansionary monetary and fiscal policies adopted by the People's Bank of China and financial authorities of some of the world's leading economies, including the United States and China. There have been concerns over unrest and terrorist threats in the Middle East, Europe and Africa, which have resulted in volatility in oil and other markets. There have also been concerns on the relationship among China and other Asian countries, which may result in or intensify potential conflicts in relation to territorial disputes. Economic conditions in China are sensitive to global economic conditions, as well as changes in domestic economic and political policies and the expected or perceived overall economic growth rate in China. Any severe or prolonged slowdown in the global or Chinese economy may materially and adversely affect our business, results of operations and financial condition.   Fluctuations in exchange rates could have a material and adverse effect on our results of operations and the value of your investment.   The value of the Renminbi against the U.S. dollar and other currencies may fluctuate and is affected by, among other things, changes in political and economic conditions and the foreign exchange policy adopted by the PRC government. It is difficult to predict how long such appreciation of Renminbi against the U.S. dollar may last and when and how the relationship between the Renminbi and the U.S. dollar may change again. All of our revenues and substantially all of our costs are denominated in Renminbi. We are a Delaware holding company and we may rely on dividends and other distributions on equity paid by our PRC subsidiaries for our cash and financing requirements, including the funds necessary to pay dividends and other cash distributions to our shareholders and service any debt we may incur. Any significant revaluation of Renminbi may materially and adversely affect our results of operations and financial position reported in Renminbi when translated into U.S. dollars, and the value of, and any dividends payable on, the common stock in U.S. dollars. To the extent that we need to convert U.S. dollars into Renminbi for our operations, appreciation of the Renminbi against the U.S. dollar would have an adverse effect on the Renminbi amount we would receive. Conversely, if we decide to convert our Renminbi into U.S. dollars for the purpose of making payments for dividends on our common stock or for other business purposes, appreciation of the U.S. dollar against the Renminbi would have a negative effect on the U.S. dollar amount.   U.S. regulatory bodies may be limited in their ability to conduct investigations or inspections of our operations in China.   Any disclosure of documents or information located in China by foreign agencies may be subject to jurisdiction constraints and must comply with China's state secrecy laws, which broadly define the scope of "state secrets" to include matters involving economic interests and technologies. There is no guarantee that requests from U.S. federal or state regulators or agencies to investigate or inspect our operations will be honored by us, by entities who provide services to us or with whom we associate, without violating PRC legal requirements, especially as those entities are located in China. Furthermore, under the current PRC laws, an on-site inspection of our facilities by any of these regulators may be limited or prohibited.   The PRC government's significant oversight and discretion over our business operation could result in a material adverse change in our operations and the value of our common stock.   We conduct our business primarily through our PRC subsidiaries. Our operations in China are governed by PRC laws and regulations. The PRC government has significant oversight and discretion over the conduct of our business, and it may influence our operations, which could result in a material adverse change in our operation, and our shares of stock may decline in value or become worthless. Also, the PRC government has recently indicated an intent to exert more oversight and supervision over offerings that are conducted overseas and foreign investment in China-based issuers. Any such action could significantly limit or completely hinder our ability to offer or continue to offer securities to investors. In addition, implementation of industry-wide regulations directly targeting our industry or our operations could cause the value of our securities to significantly decline. Therefore, investors of our company and our business face PRC regulatory uncertainty that may materially and adversely affect our business and operations and the value of our shares. The PRC government has the ability to exert substantial supervision over any offering or listing of securities conducted overseas and/or foreign investment in China-based issuers, and, as a result, may limit or completely hinder our ability to offer or continue to offer securities to investors, and may cause the value of such securities to significantly decline or be worthless.    The PRC government recently initiated a series of regulatory actions and statements to regulate business operations in China, including cracking down on illegal activities in the securities market, enhancing supervision over China-based companies listed overseas using the variable interest entity structure, adopting new measures to extend the scope of cybersecurity reviews, and expanding the efforts in anti-monopoly enforcement.   On February 17, 2023, the CSRC released the Trial Administrative Measures for Administration of Overseas Securities Offerings and Listings by Domestic Companies (the "Trial Measures") and five supporting guidelines, which came into effect on March 31, 2023. Pursuant to the Trial Measures, subsequent securities offerings of an issuer in the same overseas market where it has previously offered and listed securities shall be filed with the CSRC within three (3) working days after the offering is completed, which may subject us to additional compliance requirements in the future, and we cannot assure you that we will be able to get the clearance of filing procedures under the Trial Measures on a timely basis, or at all. If a domestic company fails to complete the filing procedures or conceals any material fact or falsifies any major content in its filing documents, such domestic company may be subject to administrative penalties by the CSRC, such as order to rectify, warnings, fines, and its controlling shareholders, actual controllers, the person directly in charge and other directly liable persons may also be subject to administrative penalties, such as warnings and fines.   As of the date of this report, none of the Company, our PRC subsidiaries, have received any filing or compliance requirements from CSRC for the listing at Nasdaq and all of its overseas offerings. As the Trial Measures were only enacted recently, there remains uncertainty as to the interpretation and implementation of the Trial Measures and the supporting guidelines, including but not limited to the interpretation of the concept "substance over form", as well as other PRC regulatory requirements related to overseas securities offerings and other capital markets activities; thus, we cannot assure you that the relevant Chinese regulatory authorities, including the CSRC, would reach the same conclusion as us.   On February 24, 2023, the CSRC and other PRC governmental authorities jointly issued the revised Provisions on Strengthening Confidentiality and Archives Administration of Overseas Securities Offering and Listing by Domestic Companies (the "Revised Confidentiality Provisions"), which came into effect on March 31, 2023. According to the Revised Confidentiality Provisions, Chinese companies that directly or indirectly conduct overseas offerings and listings, shall strictly abide by the laws and regulations on confidentiality when providing or publicly disclosing, either directly or through their overseas listed entities, materials to securities services providers. In the event such materials contain state secrets or working secrets of government agencies, the Chinese companies shall first obtain approval from authorities, and file with the secrecy administrative department at the same level with the approving authority; in the event that such materials, if divulged, will jeopardize national security or public interest, the Chinese companies shall comply with procedures stipulated by national regulations. The Chinese companies shall also provide a written statement of the specific sensitive information provided when providing materials to securities service providers, and such written statements shall be retained for inspection. As the Revised Confidentiality Provisions were recently promulgated, their interpretation and implementation remain substantially uncertain.   As of the date of this report, we have not received any inquiry, notice, warning, or sanctions from CSRC or other Chinese governmental authorities. If the CSRC or other PRC governmental authorities later promulgate new rules or interpretations requiring that we obtain their approval for future offerings or listings outside of mainland China or for foreign investments in our securities, we may be unable to obtain such approvals in a timely manner, or at all. Any such circumstance could significantly or completely limit our ability to raise capital through securities offerings, hinder our ability to execute strategic plans in a timely manner or at all, and could cause the value of our securities to significantly decline. The Holding Foreign Companies Accountable Act, recent regulatory actions taken by the SEC and PCAOB, and proposed rule changes submitted by U.S. stock exchanges calling for additional and more stringent criteria to be applied to China-based public companies could add uncertainties to our capital raising activities and compliance costs.   Pursuant to the Holding Foreign Companies Accountable Act (the "HFCAA"), if the Public Company Accounting Oversight Board (the "PCAOB"), is unable to inspect an issuer's auditors for three consecutive years, the issuer's securities are prohibited to trade on a U.S. stock exchange. The PCAOB issued a Determination Report on December 16, 2021 which found that the PCAOB is unable to inspect or investigate completely registered public accounting firms headquartered in: (1) mainland China of the People's Republic of China because of a position taken by one or more authorities in mainland China; and (2) Hong Kong, a Special Administrative Region and dependency of the PRC, because of a position taken by one or more authorities in Hong Kong. Furthermore, the PCAOB's report identified the specific registered public accounting firms which are subject to these determinations. On June 22, 2021, the U.S. Senate passed the Accelerating Holding Foreign Companies Accountable Act, and on December 29, 2022, legislation entitled "Consolidated Appropriations Act, 2023" (the "Consolidated Appropriations Act") was signed into law by President Biden, which contained, among other things, an identical provision to the Accelerating Holding Foreign Companies Accountable Act and amended the HFCAA by requiring the SEC to prohibit an issuer's securities from trading on any U.S. stock exchanges if its auditor is not subject to PCAOB inspections for two consecutive years instead of three, thus reducing the time period for triggering the prohibition on trading. On August 26, 2022, the PCAOB announced that it had signed a SOP with the CSRC and the Ministry of Finance of China. The SOP Agreements establishes a specific, accountable framework to make possible complete inspections and investigations by the PCAOB of audit firms based in mainland China and Hong Kong, as required under U.S. law. On December 15, 2022, the PCAOB announced that it was able to secure complete access to inspect and investigate PCAOB-registered public accounting firms headquartered in mainland China and Hong Kong completely in 2022. The PCAOB Board vacated its previous 2021 determinations that the PCAOB was unable to inspect or investigate completely registered public accounting firms headquartered in mainland China and Hong Kong. However, whether the PCAOB will continue to be able to satisfactorily conduct inspections of PCAOB-registered public accounting firms headquartered in mainland China and Hong Kong is subject to uncertainties and depends on a number of factors out of our and our auditor's control. The PCAOB continues to demand complete access in mainland China and Hong Kong moving forward and is making plans to resume regular inspections in early 2023 and beyond, as well as to continue pursuing ongoing investigations and initiate new investigations as needed. The PCAOB has also indicated that it will act immediately to consider the need to issue new determinations with the HFCAA if needed.   Each of Audit Alliance LLP, our previous auditor, and Enrome LLP, our current auditor, is based in Singapore and is registered with PCAOB and subject to PCAOB inspection. As of the date of this report, neither Audit Alliance LLP, our previous auditor, nor Enrome LLP, our current auditor, is based subject to the determinations as to inability to inspect or investigate completely as announced by the PCAOB on December 16, 2021. However, we cannot assure you whether Nasdaq or regulatory authorities would not apply additional and more stringent criteria to us after considering the effectiveness of our auditor's audit procedures and quality control procedures, adequacy of personnel and training, or sufficiency of resources, geographic reach or experience as it relates to the audit of our financial statements.   We are subject to a variety of laws and regulations regarding cybersecurity and data protection, and any failure to comply with applicable laws and regulations, including improper use or appropriation of personal information provided directly or indirectly by our customers or end users, could have a material adverse effect on our business, financial condition and results of operations.   In China, regulatory authorities have implemented and may implement further legislative and regulatory proposals concerning cybersecurity, information security, privacy, and data protection. New laws and regulations may be introduced, or existing ones may be interpreted or applied in ways that are uncertain or change over time. Non-compliance with these regulations could result in penalties or significant legal liabilities. On November 7, 2016, the Standing Committee of the National People's Congress of the PRC issued the Cyber Security Law of the PRC, or Cyber Security Law, which became effective on June 1, 2017. Pursuant to the Cyber Security Law, network operators must not collect users' personal information without their consent and may only collect users' personal information necessary to the provision of services. Providers are also obliged to provide security maintenance for their products and services and shall comply with provisions regarding the protection of personal information as stipulated under the relevant laws and regulations. The Civil Code of the PRC (issued by the National People's Congress of the PRC on May 28, 2020 and effective from January 1, 2021) provides the main legal basis for privacy and personal information infringement claims under PRC civil law.   PRC regulators, including the CAC, the Ministry of Industry and Information Technology, and the Ministry of Public Security, have been increasingly focused on regulation in areas of data security and data protection. The PRC regulatory requirements regarding cybersecurity are constantly evolving. For instance, various PRC regulatory bodies, including the CAC, the Ministry of Public Security and the State Administration for Market Regulation (the "SAMR"), have enforced data privacy and protection laws and regulations with varying and evolving standards and interpretations. In addition, certain internet platforms in mainland China have reportedly been subject to heightened regulatory scrutiny in relation to cybersecurity matters. In April 2020, the PRC government promulgated the Cybersecurity Review Measures (the "2020 Cybersecurity Review Measures"), which came into effect on June 1, 2020. In July 2021, the CAC and other related authorities released a draft amendment to the 2020 Cybersecurity Review Measures for public comments. On December 28, 2021, the PRC government promulgated amended Cybersecurity Review Measures (the "2022 Cybersecurity Review Measures"), which came into effect and replaced the 2020 Cybersecurity Review Measures on February 15, 2022. Compared with the 2020 Cybersecurity Review Measures, the 2022 Cybersecurity Review Measures contain the following key changes: (i) internet platform operators who are engaged in data processing are also subject to the regulatory scope; (ii) the CSRC is included as one of the regulatory authorities for purposes of jointly establishing the state cybersecurity review mechanism; (iii) internet platform operators holding personal information of more than one million users and seeking to have their securities list on a stock exchange in a foreign country shall file for cybersecurity review with the Cybersecurity Review Office; (iv) the risks of core data, material data or large amounts of personal information being stolen, leaked, destroyed, damaged, illegally used or illegally transmitted to overseas parties and the risks of critical information infrastructure, core data, material data or large amounts of personal information being influenced, controlled or used maliciously by foreign governments and any cybersecurity risk after a company's listing on a stock exchange shall be collectively taken into consideration during the cybersecurity review process; and (v) critical information infrastructure operators and internet platform operators covered by the 2022 Cybersecurity Review Measures shall take measures to prevent and mitigate cybersecurity risks in accordance with the requirements therein. According to the 2022 Cybersecurity Review Measures, (i) critical information infrastructure operators that purchase network products and services and internet platform operators that conduct data processing activities shall be subject to cybersecurity review in accordance with the 2022 Cybersecurity Review Measures if such activities affect or may affect national security; and (ii) internet platform operators holding personal information of more than one million users and seeking to have their securities list on a stock exchange in a foreign country shall file for cybersecurity review with the Cybersecurity Review Office. Under the Regulation on Protecting the Security of Critical Information Infrastructure promulgated by the State Council on July 30, 2021, effective September 1, 2021, "critical information infrastructure" is defined as important network facilities and information systems in important industries and fields, such as public telecommunication and information services, energy, transportation, water conservancy, finance, public services, e-government and national defense, science, technology and industry, as well as other important network facilities and information systems that, in case of destruction, loss of function or leak of data, may severely damage national security, the national economy and the people's livelihood and public interests. And the PRC competent authorities shall be responsible for organizing the determination of critical information infrastructure in the industry and field concerned according to the determination rules, and inform the critical information infrastructure operators of the determination results in a timely manner and notify the public security department under the State Council of the same. As of the date of this report, neither we nor any of our PRC subsidiaries has been informed by any PRC governmental authority that we or any of our PRC subsidiaries is a "critical information infrastructure operator." Based on the opinion of our PRC counsel, Tahota (Beijing) Law Firm, according to its interpretation of the currently in-effect PRC laws and regulations, neither we nor any of our PRC subsidiaries qualify as a critical information infrastructure operator. As of the date of this report, neither we nor any of our PRC subsidiaries have conducted any data processing activities that affected or may affect national security, or hold personal information of more than one million users. On November 14, 2021, the CAC released the draft Administrative Regulation on Network Data Security for public comments through December 13, 2021 (the "Draft Regulation on Network Data Security"). Under the Draft Regulation on Network Data Security, (i) data processors, i.e., individuals and organizations who can decide on the purpose and method of their data processing activities at their own discretion, that process personal information of more than one million individuals shall apply for cybersecurity review before listing in a foreign country; (ii) foreign-listed data processors shall carry out annual data security evaluation and submit the evaluation report to the municipal cyberspace administration authority; and (iii) where the data processor undergoes merger, reorganization and subdivision that involves important data and personal information of more than one million individuals, the recipient of the data shall report the transaction to the in-charge authority at the municipal level. As of the date of this report, neither we nor any of our PRC subsidiaries has been required by any PRC governmental authority to apply for cybersecurity review, nor have we or any of our PRC subsidiaries received any inquiry, notice, warning, sanction in such respect or been denied permission from any PRC regulatory authority to list on U.S. exchanges. Based on the opinion of our PRC counsel, Tahota (Beijing) Law Firm, according to its interpretation of the currently in-effect PRC laws and regulations, neither we nor any of our PRC subsidiaries are subject to the cybersecurity review, by the CAC under the 2022 Cybersecurity Review Measures with respect to the offering of our securities or the business operations of our PRC subsidiaries, because neither we nor any of our PRC subsidiaries qualifies as a critical information infrastructure operator or has conducted any data processing activities that affect or may affect national security or holds personal information of more than one million users. However, as PRC governmental authorities have significant discretion in interpreting and implementing statutory provisions and there remains significant uncertainty in the interpretation and enforcement of relevant PRC cybersecurity laws and regulations if the PRC regulatory authorities take a position contrary to ours, we cannot assure you that we or any of our PRC subsidiaries will not be deemed to be subject to PRC cybersecurity review requirements under the 2022 Cybersecurity Review Measures or the Draft Administrative Regulations (if enacted) as a critical information infrastructure operator or an internet platform operator that is engaged in data processing activities that affect or may affect national security or holds personal information of more than one million users, nor can we assure you that we or our PRC subsidiaries would be able to pass such review. If we or any of our PRC subsidiaries fails to receive any requisite permission or approval from the CAC for the business operations of our PRC subsidiaries, or the waiver for such permission or approval, in a timely manner, or at all, or inadvertently concludes that such permission or approval is not required, or if applicable laws, regulations or interpretations change and obligate us to obtain such permission or approvals in the future, we or our PRC subsidiaries may be subject to fines, suspension of business, website closure, revocation of business licenses or other penalties, as well as reputational damage or legal proceedings or actions against us, which may have a material adverse effect on our business, financial condition or results of operations. In addition, we could become subject to enhanced cybersecurity review or investigations launched by PRC regulators in the future pursuant to new laws, regulations or policies. Any failure or delay in the completion of the cybersecurity review procedures or any other non-compliance with applicable laws and regulations may result in fines, suspension of business, website closure, revocation of business licenses or other penalties, as well as reputational damage or legal proceedings or actions against us, which may have a material adverse effect on our business, financial condition or results of operations. On June 10, 2021, the Standing Committee of the National People's Congress of the PRC, promulgated the PRC Data Security Law, which became effective in September 2021. The PRC Data Security Law imposes data security and privacy obligations on entities and individuals carrying out data activities, and introduces a data classification and hierarchical protection system based on the importance of data in economic and social development and the degree of harm it will cause to national security, public interests or the rights and interests of individuals or organizations when such data is tampered with, destroyed, leaked or illegally acquired or used. The PRC Data Security Law also provides for a national security review procedure for data activities that may affect national security and imposes export restrictions on certain data and information. On August 20, 2021, the Standing Committee of the National People's Congress promulgated the Personal Information Protection Law, effective November 1, 2021. The Personal Information Protection Law clarifies the definition of personal information, which excludes information that has been anonymized, and the required procedures for personal information processing, the obligations of personal information processors, and individuals' personal information rights and interests. The Personal Information Protection Law provides that, among other things, (i) the processing of personal information is only permissible under certain circumstances, such as prior consent from the subject individual, fulfillment of contractual and legal obligations, furtherance of public interests or other circumstances prescribed by laws and regulations; (ii) the collection of personal information should be conducted in a disciplined manner with as little impact on individuals' rights and interests as possible; and (iii) excessive collection of personal information is prohibited. In particular, the Personal Information Protection Law provides that personal information processors should ensure the transparency and fairness of automated decision-making based on personal information, refrain from offering unreasonably differentiated transaction terms to different individuals and, when sending commercial promotions or information updates to individuals selected through automated decision-making, simultaneously offer such individuals an option not based on such individuals' specific characteristics or a more convenient way for such individuals to turn off such promotions. On July 7, 2022, the CAC promulgated the Measures for the Security Assessment of Outbound Data Transfer, or the Data Transfer Measures, which became effective on September 1, 2022, pursuant to which, to provide data abroad under any of the following circumstances, a data processor shall apply to the national cyberspace administration for the security assessment of the outbound data transfer through the local provincial cyberspace administration: (i) the data processor provides important data abroad; (ii) the critical information infrastructure operator or the data processor that has processed the personal information of over one million people provides personal information abroad; (iii) the data processor that has provided the personal information of over 100,000 people or the sensitive personal information of over 10,000 people cumulatively since January 1 of the previous year provides personal information abroad; and (iv) any other circumstance where an application for the security assessment of outbound data transfer is required by the national cyberspace administration. As of the date of this report, the data collected and generated in our business does not have a bearing on national security, economic operation, social stability, public health and security, among others, and thus may not be classified as important data by the authorities, and, neither we nor any of our PRC subsidiaries have ever provided any personal information collected and generated in the operations within the territory of the PRC to overseas recipients. Given the abovementioned facts and based on the opinion of our PRC legal counsel, Tahota (Beijing) Law Firm, according to its interpretation of the currently in-effect PRC laws and regulations, we or any of our PRC subsidiaries is engaged in any activity that is subject to security assessment as outlined in the Data Transfer Measures. However, as PRC governmental authorities have significant discretion in interpreting and implementing statutory provisions and there remains significant uncertainty in the interpretation and enforcement of relevant PRC data security laws and regulations if the PRC regulatory authorities take a position contrary to ours, we cannot assure you that the activities we or any of our PRC subsidiaries engaging in will not be deemed to be subject to PRC security assessment as stipulated in the Data Transfer Measures in the future, nor can we assure you that we or our PRC subsidiaries would be able to pass such assessment. The promulgation of the above-mentioned laws and regulations indicates heightened regulatory scrutiny from PRC regulatory authorities in areas such as data security and personal information protection. As uncertainties remain regarding the interpretation and implementation of these laws and regulations, we cannot assure you that we or our PRC subsidiaries will be able to comply with such regulations in all respects, and we or our PRC subsidiaries may be ordered to rectify or terminate any actions that are deemed illegal by regulatory authorities. In addition, while our PRC subsidiaries take various measures to comply with all applicable data privacy and protection laws and regulations, there is no guarantee that our current security measures, operation and those of our third-party service providers may always be adequate for the protection of our users, employee or company data against security breaches, cyberattacks or other unauthorized access, which could result in loss or misuse of such data, interruptions to our service system, diminished user experience, loss of user confidence and trust and impairment of our technology infrastructure and harm our reputation and business, resulting in fines, penalties and potential lawsuits.

We are not a Chinese operating company; instead, we are a Delaware holding company that conducts our operations and operates its business in China through our PRC subsidiaries and variable interest entity. Such structure involves unique risks to our investors. The Chinese government may disallow the Company's current holding structure or determine that the contractual arrangements constituting part of the VIE are not compliant with PRC regulations, or that regulations could be changed or interpreted differently in the future, each of which could result in a material change in our operations and materially and adversely affect the value of shares of our common stock or our other securities and could cause the value of our shares or other securities to significantly decline or become worthless. Should the PRC government determine that the VIE structure is inconsistent with the laws and regulations of China, it may result in our inability to assert contractual control over the assets of our PRC subsidiaries or the VIE that conduct all or substantially all our operations. Furthermore, the Chinese regulatory authorities may intervene in or influence the operation of PRC subsidiaries and exercise significant oversight and discretion over the conduct of their business or may exert more control over offerings conducted overseas by, and/or foreign investment in, China-based issuers, which could result in a material change in our operations and/or the value of our common stock. Further, rules and regulations in China may be changed from time to time, and any actions by the Chinese government to exert more oversight and supervision over offerings that are conducted overseas by, and/or foreign investment in, China-based issuers could significantly limit or completely hinder our ability to offer or continue to offer securities to investors and cause the value of such securities to significantly decline or be worthless.

The PRC government imposes controls on the convertibility of Renminbi into foreign currencies and, in certain cases, the remittance of currency out of China. To the extent that our income is received in RMB, shortages in foreign currencies may restrict our ability to pay dividends or other payments, or otherwise satisfy our foreign currency denominated obligations, if any. Under existing PRC foreign exchange regulations, payments of current account items, including profit distributions, interest payments and expenditures from trade-related transactions, can be made in foreign currencies without prior approval from SAFE, as long as certain procedural requirements are met. Approval from appropriate government authorities is required if Renminbi is converted into foreign currency and remitted out of China to pay capital expenses such as the repayment of loans denominated in foreign currencies. The PRC government may, at its discretion, impose restrictions on access to foreign currencies for current account transactions. To address persistent capital outflows and the RMB's depreciation against the U.S. dollar in the fourth quarter of 2016, the People's Bank of China and SAFE implemented a series of capital control measures in the subsequent months, including stricter vetting procedures for China-based companies to remit foreign currency for overseas acquisitions, dividend payments and shareholder loan repayments. The PRC government may continue to strengthen its capital controls and our PRC subsidiaries' dividends and other distributions may be subject to tightened scrutiny in the future. The PRC government also imposes controls on the conversion of RMB into foreign currencies and the remittance of currencies out of the PRC. Therefore, we may experience difficulties in completing the administrative procedures necessary to obtain and remit foreign currency for the payment of dividends from our profits, if any. Furthermore, there can be no assurance that the PRC government will not intervene or impose restrictions on our ability to transfer or distribute cash within our organization or to foreign investors, which could result in an inability or prohibition on making transfers or distributions outside of China and adversely affect our business as well as your investment. To the extent cash in the business is in the mainland PRC or Hong Kong or a PRC or Hong Kong entity, the funds may not be available to fund operations or for other use outside of the PRC or Hong Kong due to interventions in or the imposition of such restrictions and limitations.

We are a Delaware holding company conducting our operations in China through (i) our subsidiaries incorporated in mainland China and (ii) the VIE incorporated in mainland China. We may make loans to our PRC subsidiaries, or we may make additional capital contributions to our PRC subsidiaries, or we may establish new PRC subsidiaries and make capital contributions to these new PRC subsidiaries, or we may acquire offshore entities with business operations in China in an offshore transaction. Most of these ways are subject to PRC regulations and approvals or registration. For example, loans by us to our wholly owned PRC subsidiary to finance its activities cannot exceed statutory limits and must be registered with the local counterpart of SAFE. If we decide to finance our wholly owned PRC subsidiary by means of capital contributions, these capital contributions are subject to registration with the State Administration for Market Regulation or its local branch, reporting of foreign investment information with the PRC Ministry of Commerce, or registration with other governmental authorities in China. SAFE promulgated the Notice of the State Administration of Foreign Exchange on Reforming the Administration of Foreign Exchange Settlement of Capital of Foreign-invested Enterprises, or the SAFE Circular 19, effective June 2015, in replacement of the Circular on the Relevant Operating Issues Concerning the Improvement of the Administration of the Payment and Settlement of Foreign Currency Capital of Foreign-Invested Enterprises, the Notice from the State Administration of Foreign Exchange on Relevant Issues Concerning Strengthening the Administration of Foreign Exchange Businesses, and the Circular on Further Clarification and Regulation of the Issues Concerning the Administration of Certain Capital Account Foreign Exchange Businesses. According to SAFE Circular 19, the flow and use of the RMB capital converted from foreign currency-denominated registered capital of a foreign-invested company is regulated such that RMB capital may not be used for the issuance of RMB entrusted loans, the repayment of inter-enterprise loans or the repayment of banks loans that have been transferred to a third party. Although SAFE Circular 19 allows RMB capital converted from foreign currency-denominated registered capital of a foreign-invested enterprise to be used for equity investments within China, it also reiterates the principle that RMB converted from the foreign currency-denominated capital of a foreign-invested company may not be directly or indirectly used for purposes beyond its business scope. Thus, it is unclear whether SAFE will permit such capital to be used for equity investments in China in actual practice. SAFE promulgated the Notice of the State Administration of Foreign Exchange on Reforming and Standardizing the Foreign Exchange Settlement Management Policy of Capital Account, or SAFE Circular 16, effective on June 9, 2016, which reiterates some of the rules set forth in the SAFE Circular 19, but changes the prohibition against using RMB capital converted from foreign currency-denominated registered capital of a foreign-invested company to issue RMB entrusted loans to a prohibition against using such capital to issue loans to non-associated enterprises. Violations of the SAFE Circular 19 and the SAFE Circular 16 could result in administrative penalties. The SAFE Circular 19 and SAFE Circular 16 may significantly limit our ability to transfer any foreign currency we hold, including the net proceeds from our subsequent offering, to our PRC subsidiary, which may adversely affect our liquidity and our ability to fund and expand our business in China. On October 23, 2019, SAFE promulgated the Notice for Further Advancing the Facilitation of Cross-border Trade and Investment, or the SAFE Circular 28, which, among other things, allows all foreign-invested companies to use Renminbi converted from foreign currency-denominated capital for equity investments in China, as long as the equity investment is genuine, does not violate applicable laws, and complies with the negative list on foreign investment. However, since the SAFE Circular 28 is newly promulgated, it is unclear how SAFE and competent banks will carry this out in practice. In light of the various requirements imposed by PRC regulations on loans to and direct investment in PRC entities by offshore holding companies, we cannot assure you that we will be able to complete the necessary government registrations or obtain the necessary government approvals on a timely basis, or at all, with respect to future loans to our PRC subsidiary or future capital contributions by us to our PRC subsidiary. As a result, uncertainties exist as to our ability to provide prompt financial support to our PRC subsidiary when needed. If we fail to complete such registrations or obtain such approvals, our ability to use the proceeds we expect to receive from our subsequent offerings and to capitalize or otherwise fund our PRC operations may be negatively affected, which could materially and adversely affect our liquidity and our ability to fund and expand our business.

In July 2014, SAFE promulgated the Circular on Issues Concerning Foreign Exchange Administration over the Overseas Investment and Financing and Roundtrip Investment by Domestic Residents via SPV, or Circular 37, which replaced Relevant Issues Concerning Foreign Exchange Control on Domestic Residents' Corporate Financing and Roundtrip Investment through Offshore SPV, or Circular 75. Circular 37 requires PRC residents to register with local branches of SAFE in connection with their direct establishment or indirect control of an offshore entity, referred to in Circular 37 as a SPV for the purpose of holding domestic or offshore assets or interests. Circular 37 further requires amendment to a PRC resident's registration in the event of any significant changes with respect to the SPV, such as an increase or decrease in the capital contributed by PRC individuals, share transfer or exchange, merger, division or other material event. Under these regulations, PRC residents' failure to comply with specified registration procedures may result in restrictions being imposed on the foreign exchange activities of the relevant PRC entity, including the payment of dividends and other distributions to its offshore parent, as well as restrictions on capital inflows from the offshore entity to the PRC entity, including restrictions on its ability to contribute additional capital to its PRC subsidiaries. Further, failure to comply with the SAFE registration requirements could result in penalties under PRC law for evasion of foreign exchange regulations. In addition, different local SAFE branches may have different views and procedures as to the interpretation and implementation of the SAFE regulations, and it may be difficult for our ultimate shareholders or beneficial owners who are PRC residents to provide sufficient supporting documents required by SAFE or to complete the required registration with SAFE in a timely manner, or at all. Any failure by any of our shareholders who is a PRC resident, or is controlled by a PRC resident, to comply with relevant requirements under these regulations could subject us to fines or sanctions imposed by the PRC government.

On August 8, 2006, MOFCOM, joined by the CSRC, the State-owned Assets Supervision and Administration Commission of the State Council, the State Taxation Administration, the State Administration for Industry and Commerce, and the State Administration of Foreign Exchange of China ("SAFE"), jointly promulgated regulations entitled the Provisions Regarding Mergers and Acquisitions of Domestic Enterprises by Foreign Investors (the "M&A Rules"), which took effect on September 8, 2006, and as amended on June 22, 2009. This regulation, among other things, has certain provisions that require offshore SPV formed for the purpose of acquiring PRC domestic companies and controlled directly or indirectly by PRC individuals and companies, to obtain the approval of MOFCOM prior to engaging in such acquisitions and to obtain the approval of the CSRC prior to publicly listing their securities on an overseas stock market. On September 21, 2006, the CSRC published on its official website a notice specifying the documents and materials that are required to be submitted for obtaining CSRC approval. In addition, the Provisions of Ministry of Commerce on Implementation of Security Review System for Mergers and Acquisitions of Domestic Enterprises by Foreign Investors, issued by MOFCOM in August 2011, specify that mergers and acquisitions by foreign investors involved in "an industry related to national security" are subject to strict review by MOFCOM, and prohibit any activities attempting to bypass such security review, including by structuring the transaction through a proxy or contractual control arrangement. On March 15, 2019, the PRC National People's Congress enacted the Foreign Investment Law of the PRC (the "Foreign Investment Law"), which became effective on January 1, 2020. The Foreign Investment Law has replaced the previous major laws and regulations governing foreign investment in the PRC, including the Sino-foreign Equity Joint Ventures Enterprises Law of the PRC, the Sino-foreign Co-operative Enterprises Law of the PRC and the Wholly Foreign-invested Enterprise Law of the PRC. According to the Foreign Investment Law, "foreign-invested enterprises" refers to enterprises that are wholly or partly invested by foreign investors and registered under the PRC laws within China, and "foreign investment" refers to any foreign investor's direct or indirect investment activities in China, including: (i) establishing foreign-invested enterprises in China either individually or jointly with other investors; (ii) obtaining stock shares, equity shares, shares in properties or other similar interests of Chinese domestic enterprises; (iii) investing in new projects in China either individually or jointly with other investors; and (iv) investing through other methods provided by laws, administrative regulations or provisions prescribed by the State Council. On December 26, 2019, the State Council issued Implementation Regulations for the Foreign Investment Law of the PRC (the "Implementation Rules") which came into effect on January 1, 2020, and replaced the Implementing Rules of the Sino-foreign Equity Joint Ventures Enterprises Law of the PRC, the Implementing Rules of the Sino-foreign Co-operative Enterprises Law of the PRC and the Implementing Rules of the Wholly Foreign-invested Enterprise Law of the PRC. According to the Implementation Rules, in the event of any discrepancy between the Foreign Investment Law, the Implementation Rules and the relevant provisions on foreign investment promulgated prior to January 1, 2020, the Foreign Investment Law and the Implementation Rules will prevail. The Implementation Rules also set forth that foreign investors that invest in sectors on the "Negative List" in which foreign investment is restricted shall comply with special management measures with respect to, among others, shareholding and senior management personnel qualification in the Negative List. Pursuant to the Foreign Investment Law and the Implementation Rules, the existing foreign-invested enterprises established prior to the effective date of the Foreign Investment Law are allowed to keep their corporate organization forms for five years from the effectiveness of the Foreign Investment Law before such existing foreign-invested enterprises must change their organization forms and organization structures in accordance with the PRC Company Law, the Partnership Enterprise Law of the PRC and other applicable laws. After the Foreign Investment Law and the Implementation Rules became effective on January 1, 2020, the provisions of the M&A Rules remained effective to the extent they are not inconsistent with the Foreign Investment Law and the Implementation Rules. We believe that our business is not in an industry related to national security, but we cannot preclude the possibility that the competent PRC government authorities may publish explanations contrary to our understanding or broaden the scope of such security reviews in the future, in which case our future acquisitions and investment in the PRC, including those by way of entering into contractual control arrangements with target entities, may be closely scrutinized or prohibited. Moreover, according to the Anti-Monopoly Law of the PRC, the SAMR shall be notified in advance of any concentration of undertaking if certain filing thresholds are triggered. We may grow our business in part by directly acquiring complementary businesses in China. Complying with the requirements of the laws and regulations mentioned above and other PRC regulations necessary to complete such transactions could be time-consuming, and any required approval processes, including obtaining approval from the SAMR, may delay or inhibit our ability to complete such transactions, which could materially and adversely affect our ability to expand our business or maintain our market share.