Anti-Scraping & Data Security Policy

This Anti-Scraping and Automated Access Policy (the "Policy") is promulgated by HC BUSINESS LIMITED (BRN: 66820292, TCSP License: TC006431) to govern automated access, script execution, and programmatic queries across 86hc.com. Our infrastructure hosts over 3.9 million live and historical corporate dossiers, serving global cross-border investors, law firms, certified accountants, and regulated financial institutions. To preserve system stability, prevent infrastructure exhaustion, and protect statutory data integrity, strict access limits are enforced.

Without prior written authorization and an executed Commercial Enterprise API Agreement from HC BUSINESS LIMITED, the following activities are strictly prohibited:

1. Mass Directory Traversal & Bulk Scraping: Deploying automated scripts, spiders, or headless crawlers to systematically traverse company profiles, corporate registration numbers, or director appointment networks;
2. Rate Limit Evasion: Employing rotating residential proxy pools, Tor exit nodes, botnets, spoofed User-Agents, or cookie forging to circumvent edge reverse-proxy rate limiting;
3. Unauthorized AI / LLM Training Harvesting: Scraping structured corporate graphs, entity relationship trees, or proprietary bilingual translation corpus for training artificial intelligence models or commercial Large Language Models (LLMs);
4. Honeytoken & Canary Probing: Scanning, fuzzing, or triggering decoy endpoints, canary URLs, or intrusion detection traps;
5. Denial of Service (DoS/DDoS): Transmitting high-frequency automated requests exceeding normal human browsing patterns, causing server load spikes, buffer pool degradation, or database connection exhaustion.

Mainstream public search engines (such as Googlebot, Bingbot, and Baiduspider) providing search indexing services are permitted to crawl public pages under strict adherence to the following conditions:

• 100% strict compliance with directives set out in https://www.86hc.com/robots.txt, including Disallow rules and Crawl-delay directives;
• Accurate identification in the HTTP User-Agent header accompanied by verifiable reverse DNS (rDNS) lookup resolving to official search engine hosts;
• Maintaining moderate crawl intervals to prevent query latency spikes for live enterprise users during business peak hours.

86hc.com deploys an advanced 4A-grade intelligent anti-crawling gateway combining multi-layered active defenses:

• Dynamic Behavioral Biometrics: Real-time heuristic algorithms distinguishing authentic human research behavior from automated Headless browsers, Selenium drivers, or Puppeteer automation;
• Edge Sliding-Window Rate Limiting: Enforcing millisecond-level and minute-level concurrent request throttling at Nginx reverse proxy and cloud CDN edge nodes;
• Automated Decoy Honeypot Poisoning: Scrapers triggering anti-crawler rules or probing forbidden directories are silently routed to a synthetic decoy generation engine (200 OK Honeypots). The engine injects plausible but algorithmically fabricated corporate records, protecting production MySQL buffer pools while rendering scraped databases commercially worthless;
• Zero-Width Judicial Watermarking: Platform profiles embed cryptographically irreversible zero-width Unicode characters and timestamped digital watermarks. In the event of illicit data reproduction or commercial resale, these digital watermarks serve as incontestable digital forensics submitted directly to law enforcement authorities.

Unauthorized scraping, database intrusion, and data misappropriation will trigger severe legal liabilities under Hong Kong and cross-border cyber laws:

• Hong Kong Criminal Sanctions: Violation of Section 161 of the Crimes Ordinance (Cap. 200) ("Access to computer with criminal or dishonest intent", punishable by imprisonment for up to 5 years), and Section 27A of the Telecommunications Ordinance (Cap. 106) ("Unauthorized access to computer materials by telecommunications");
• Database Compilation Copyright Infringement: Civil remedies under the Copyright Ordinance (Cap. 528), including interim statutory injunctions, seizure of infringing servers, and substantial punitive damages for commercial piracy;
• Common Law Trespass to Chattels & Breach of Contract: Civil tortious liability for server resource depletion, performance degradation, and breach of platform Terms of Service;
• Anti-Doxxing Compliance Shield: 86hc.com masks statutory identification numbers under the Cap. 622 New Inspection Regime. Any party attempting to scrape, reverse-engineer, or de-mask personal data for illicit 'doxxing' under Section 64 of Cap. 486 shall bear sole and independent criminal and civil liabilities. HC BUSINESS LIMITED reserves all rights to report such illicit actors to the PCPD and the police;
• Cross-Border Judicial Enforcement: Legal proceedings under Articles 27 and 44 of the Cybersecurity Law and the Anti-Unfair Competition Law of Mainland China;
• Official Police Referral: In severe cases of malicious crawling or distributed attacks, HC BUSINESS LIMITED formally refers digital forensic logs to the Cyber Security and Technology Crime Bureau (CSTCB) of the Hong Kong Police Force.

For financial institutions, accounting firms, law offices, and enterprise platforms requiring compliant, high-concurrency, and structured corporate intelligence feeds, HC BUSINESS LIMITED provides authorized, dedicated, and secure Enterprise RESTful API Interfaces with sub-second latency, standardized bilingual JSON schemas, and guaranteed SLA uptimes.

To apply for official API documentation, sandbox tokens, and enterprise licensing quotes, please contact our API Compliance Team at: api@86hc.com or compliance@86hc.com.