As a digital asset exchange committed to operating in compliance with applicable laws and regulations worldwide, UEEx recognizes the importance of cooperation with law enforcement and regulatory authorities.

We welcome and actively cooperate with lawful regulatory inquiries and law enforcement requests to continuously enhance UEEx’s compliance, risk management, and user asset protection standards in the digital asset industry.

1. Purpose and Scope

UEEx is committed to cooperating, in accordance with applicable laws and regulatory requirements, with law enforcement agencies (“LEAs”), judicial authorities, financial regulators, and other government authorities legally empowered to investigate, supervise, or enforce the law.

Such cooperation supports efforts to combat money laundering (“AML”), terrorist financing (“CFT”), fraud, sanctions evasion, cybercrime, market manipulation, and other unlawful activities, while continuously strengthening the Exchange’s compliance and risk management capabilities.

These Guidelines explain how authorized government authorities may submit requests to UEEx concerning judicial assistance, disclosure of information, preservation of records, account or asset restrictions, and other law enforcement or regulatory matters. They also describe the general principles applied by UEEx when processing such requests.

These Guidelines apply only to government authorities legally empowered to conduct investigations, exercise supervision, or enforce the law, including but not limited to:

• Police authorities;
• Public prosecutors;
• Courts;
• Financial regulatory authorities;
• Financial Intelligence Units (“FIUs”);
• Competent anti-money laundering authorities;
• Tax authorities; and
• Other government authorities legally empowered to investigate, supervise, or enforce the law.

Unless otherwise required by applicable law, these Guidelines do not apply to private individuals, parties to civil litigation, law firms, private investigation agencies, or other third parties that do not exercise lawful governmental authority.

2. Contact Information and Submission Method

All law enforcement and regulatory requests must be submitted through UEEx’s designated official channel:

• Email: audit@ueex.com

To avoid delays, please do not send law enforcement or regulatory requests to other UEEx email addresses or to the email addresses of individual employees.

All requests should comply with the following requirements:

• The requesting officer or representative should submit the request from an official government email domain;
• Requests should generally be prepared in English or Chinese;
• If a request is submitted in another language, an English or Chinese translation should be included. UEEx may require a certified translation where necessary; and
• For cross-border legal assistance requests, UEEx may require documentation issued under a Mutual Legal Assistance Treaty (“MLAT”), a letter rogatory, or other formal legal documentation sufficient to establish the validity and enforceability of the request.

3. Required Contents of a Law Enforcement or Regulatory Request

A request should contain, at a minimum, the following information:

3.1 Information About the Requesting Authority

Please provide:

• Name of the requesting authority;
• Name of the responsible officer or representative;
• Official title;
• Department or division;
• Official email address;
• Official telephone number;
• Case or reference number, if applicable; and
• Legal basis and statutory authority for the request.

Where necessary, UEEx may request:

• Proof of current employment or official status;
• Authorization documents;
• Official law enforcement identification; or
• Other documents sufficient to verify the identity and authority of the requesting person.

3.2 Case Information

The request should describe:

• The background of the case;
• The purpose of the investigation;
• The suspected criminal or unlawful conduct;
• The current status of the case;
• Judicial or administrative procedures already taken or intended to be taken; and
• The specific assistance requested from UEEx.

3.3 Relevant Account or Transaction Information

Relevant identifying information may include:

• UEEx User ID or UID;
• Registered email address;
• Registered telephone number;
• Wallet address;
• Transaction hash or transaction ID (“TXID”);
• Name of the relevant blockchain network;
• Cryptocurrency or token;
• Transaction amount;
• Date and time of the transaction;
• Order ID, withdrawal ID, or deposit ID; and
• Other information that may assist UEEx in identifying the relevant account or transaction.

For matters involving on-chain analysis, authorities are encouraged to provide:

• A blockchain tracing report;
• An analysis of the relevant flow of funds;
• A list of relevant wallet addresses;
• Relevant TXIDs;
• Risk labels assigned to the relevant addresses or transactions and the sources of those labels; and
• Other verifiable on-chain analysis.

Supporting data should preferably be submitted in an editable format, such as Excel, CSV, or TXT, to facilitate review and processing.

3.4 Requested Assistance

The request should clearly specify the assistance sought from UEEx, which may include:

• Account registration or profile information;
• Know Your Customer (“KYC”) information;
• Login records;
• IP address and device records;
• Deposit, trading, withdrawal, or internal transfer records;
• Preservation of specified information;
• Restriction of some or all account functions;
• Restriction of withdrawals or trading activities;
• Freezing of relevant assets; or
• Other assistance that may lawfully be requested.

The request should also specify:

• The scope and relevant period of the requested information;
• The relevant accounts, addresses, or transactions;
• The nature and duration of any requested measure, if applicable; and
• The statutory provisions and legal authority supporting the request.

3.5 Supporting Legal Documents

Supporting documents may include:

• A formal investigation request;
• A court order;
• A search warrant;
• A subpoena;
• A freeze order;
• A preservation or protective order;
• A seizure order;
• Mutual legal assistance documentation; or
• Other duly signed, issued, or legally effective documents.

UEEx may request additional information or documents depending on the nature and circumstances of the case.

4. Emergency Requests

If a case involves a serious and imminent risk to public safety or personal safety, including:

• An imminent threat to life;
• Serious bodily injury;
• Terrorist activity;
• Human trafficking;
• Child sexual exploitation; or
• Another emergency that requires immediate action under applicable law,

the subject line of the email should clearly state: Emergency Request

The request should specifically explain:

• The nature and urgency of the case;
• The immediate risk involved;
• The relevant legal basis;
• Why the ordinary request process cannot be followed; and
• The specific action that the requesting authority asks UEEx to take immediately.

UEEx will prioritize the initial review of a valid emergency request. However, any action will remain subject to an assessment of the facts, the level of risk, applicable law, and the legal documentation provided.

Marking a non-emergency request as an emergency does not guarantee priority handling.

5. Request Review Principles

UEEx reviews each law enforcement or regulatory request individually in accordance with applicable law, its User Agreement, Privacy Policy, and internal compliance policies.

Where necessary, UEEx may request additional:

• Case background;
• Legal basis;
• Legal documentation;
• Blockchain analysis;
• Proof of identity or authorization of the requesting person;
• Clarification of the scope of the information requested; or
• Other information required to process the request.

UEEx reserves the right to request additional documentation, limit the scope of disclosure, delay processing, or reject all or part of a request where permitted by applicable law.

The scope of the information requested should be relevant to the stated purpose of the investigation and should not exceed what is necessary and authorized under applicable law and the relevant legal documents.

6. Preservation of Information

Upon receiving a valid and legally sufficient preservation request, UEEx may preserve account information, identity verification information, login records, transaction records, and other information relevant to the case to prevent such information from being deleted, altered, or overwritten.

Preservation of information does not mean that:

• UEEx has agreed to disclose the preserved information;
• UEEx has determined that the relevant account or user is involved in unlawful activity;
• The required judicial or administrative procedures have been completed; or
• UEEx has agreed to freeze an account or restrict any related assets.

The preservation period will be determined based on the nature of the case, applicable law, relevant legal documents, and the applicable judicial process.

If an extension is required, the requesting authority should generally submit a formal extension request at least thirty (30) days before the preservation period expires. The extension request should explain its legal basis and necessity.

7. Account and Asset Restrictions

UEEx will assess whether to impose restrictions on a particular account or asset only on the basis of a court order, judicial decision, legally binding instrument, or other applicable legal requirement.

Such restrictions may include:

• Restricting deposits or withdrawals;
• Restricting spot, derivatives, or other trading functions;
• Restricting internal account transfers;
• Suspending some or all account functions;
• Freezing specified digital assets; or
• Taking other restrictive measures permitted or required by law.

A request for account or asset restrictions should clearly specify:

• The person or entity subject to the restriction;
• The relevant account, wallet address, or assets;
• The legal basis;
• The specific restriction requested;
• The relevant amount or scope of assets;
• The duration of the restriction; and
• The conditions for implementing, extending, modifying, or lifting the restriction.

Unless otherwise required by applicable law, a court order, or a competent authority, restrictions will be implemented in accordance with the relevant legal instrument and the circumstances of the case. Such restrictions may be extended, modified, or lifted as permitted or required by law.

The imposition of restrictions by UEEx does not mean that UEEx has determined that the relevant user committed any criminal offense or other unlawful act.

8. Asset Recovery

Asset recovery is legally distinct from an account or asset restriction.

UEEx will assess a request to return, transfer, seize, or otherwise dispose of digital assets only on the basis of a final and effective judicial decision, court order, or other legally enforceable instrument that is binding upon UEEx.

UEEx will not return or transfer assets solely on the basis of an administrative inquiry letter, a general law enforcement request, a statement from an alleged victim, a police report, or a request from a private third party.

The relevant legal instrument should clearly specify:

• The legal basis for returning or transferring the assets;
• The relevant accounts and assets;
• The type and amount of digital assets;
• The receiving wallet address or account;
• The identity of the intended recipient;
• The required method of execution; and
• Any other information necessary to complete the return or transfer.

Because blockchain transactions are generally irreversible, UEEx may require the requesting authority to reconfirm the receiving address, blockchain network, asset type, and other relevant details before executing a transfer.

9. User Notification

Unless prohibited by applicable law, a court order, or a lawful direction issued by a competent authority, UEEx may notify an affected user of a request or measure in accordance with applicable law, its User Agreement, Privacy Policy, and internal policies.

If a law enforcement authority believes that notifying the user may:

• Prejudice an investigation;
• Result in the concealment, alteration, or destruction of evidence;
• Prejudice the preservation of assets;
• Endanger personal safety;
• Cause a relevant person to flee; or
• Violate applicable law or a legal order,

the request should clearly state the legal basis, specific reasons, and effective duration of the non-disclosure requirement.

10. Confidentiality and Information Security

UEEx will process law enforcement and regulatory requests and related information in accordance with applicable law and its internal information security policies.

The requesting authority should implement appropriate information security measures to protect information disclosed by UEEx. Such information should only be used for the lawful purposes specified in the relevant legal documentation.

Where a request involves a substantial volume of data, sensitive personal information, or special transmission requirements, UEEx may coordinate with the requesting authority to arrange an appropriate secure transmission method.

11. Processing Time

UEEx will determine the order and timing of processing based on the nature and urgency of the case, the scope of the request, the completeness of the supporting documents, the volume of information involved, and applicable legal requirements.

Providing complete legal documentation and accurate account, address, or transaction identifiers will assist UEEx in reviewing and processing the request more efficiently.

Unless otherwise confirmed by UEEx in writing, submission of a request or receipt of an automated response does not mean that UEEx has accepted the request, agreed to complete it within a particular period, or agreed to take any specific action.

12. Reservation of Rights

UEEx reserves the right to conduct an independent review of every law enforcement and regulatory request.

These Guidelines do not constitute a commitment or guarantee by UEEx regarding any specific request. Nothing in these Guidelines should be interpreted as UEEx:

• Accepting or submitting to any particular jurisdiction;
• Agreeing to accept service that has not been properly completed under applicable law;
• Waiving any procedural or substantive right;
• Waiving any defense, immunity, or legal remedy; or
• Acknowledging that any account, transaction, or asset is connected with unlawful activity.

UEEx may determine whether to provide assistance, request additional information, limit the scope of disclosure, delay processing, or reject all or part of a request in accordance with applicable law, judicial procedures, its User Agreement, Privacy Policy, and internal compliance policies.

UEEx reserves the right to amend these Guidelines at any time. Any amendment will take effect from the date of publication.