Meaning all PII (name, address , id scans, ip, ...) are available to Chinese individuals.

The argument that the dev website is just developped in China doesn't hold as you can see that the prod admin panel is also partially in Chinese.

And what to say about the admin that is really using 123456 as password in production...