Privacy Policy

GILLEY’S PARK CITY PRIVACY POLICY, STATE PRIVACY NOTICES & INTERNATIONAL PRIVACY NOTICE

Gilley’s, LLC is the owner and operator of Gilley’s Park City, Gilley’s Gambling Hall, and related venues, restaurants, bars, entertainment spaces, rewards programs, and digital properties in Park City, Kansas, USA. In this Privacy Policy, “Gilley’s,” “we,” “us,” and our refer to Gilley’s, LLC and, where applicable, its business units, affiliates, parent companies, subsidiaries, service providers, and authorized representatives.

Gilley’s is committed to providing an exciting entertainment, dining, gaming, and hospitality experience while respecting the privacy of our guests, website visitors, vendors, employees, applicants, and business partners. This Privacy Policy explains how we collect, use, disclose, store, and protect information from and about you when you visit or use our websites, social media pages, mobile sites, online forms, email or text message programs, Wi-Fi services, rewards programs, ticketing or reservation tools, employment portals, vendor portals, on-property services, and other online or offline services that refer to this Privacy Policy.

This Privacy Policy also includes supplemental notices for residents of certain U.S. states and, where applicable, individuals located outside the United States. If a supplemental notice applies to you and there is a conflict between that notice and the general portions of this Privacy Policy, the supplemental notice will control to the extent required by applicable law.

If you have questions or concerns about this Privacy Policy, please contact us at:

Gilley’s Park City
Attn: General Counsel / Privacy Policy
1500 E. 77th Street North
Park City, Kansas 67147
Email: privacy@playgilleys.com / info@playgilleys.com
Phone: (316) 500-2946

Users of Gilley’s websites should also review the Gilley’s Terms of Use.

I. Scope of This Privacy Policy

A. Gilley’s Websites, Social Media, and Digital Services

This Privacy Policy applies only to websites, web pages, mobile sites, social media pages, online platforms, digital advertisements, email or text programs, online forms, ticketing or reservation links, employment portals, vendor portals, and other digital services that are operated by or on behalf of Gilley’s and that link to or reference this Privacy Policy, collectively referred to as the “Gilley’s Sites.”

This Privacy Policy does not apply to websites, applications, platforms, services, or privacy practices of unaffiliated third parties, even if those third-party services are linked to, embedded in, or accessible from the Gilley’s Sites. Third-party services may include, by way of example, social media platforms, payment processors, ticketing providers, employment application platforms, reservation providers, analytics providers, advertising networks, map providers, email or text vendors, and other vendors or business partners.

B. Gilley’s Park City Property

This Privacy Policy also applies to information we collect in connection with your visit to Gilley’s Park City, including the gambling hall, historical horse racing areas, simulcast wagering areas, entertainment venues, restaurants, bars, arcade and recreation areas, outdoor entertainment spaces, parking areas, customer service areas, rewards program locations, and other facilities operated by or on behalf of Gilley’s.

This Privacy Policy does not apply to other casinos, resorts, restaurants, entertainment venues, websites, or businesses that may be owned, operated, or affiliated with Gilley’s, Phil Ruffin, Ruffin-related entities, parent companies, subsidiaries, or business partners if those properties or services provide their own privacy policy.

II. Visitors Outside the United States

The Gilley’s Sites are operated from the United States, and information collected through the Gilley’s Sites or through our business operations may be stored and processed in the United States and other jurisdictions where we or our service providers operate.

If you access the Gilley’s Sites or provide information to us from outside the United States, you understand that your information may be transferred to, stored in, or processed in the United States. The privacy and data protection laws of the United States may not provide the same level of protection as the laws in your jurisdiction. By using the Gilley’s Sites or providing information to us, you consent to the transfer, storage, and processing of your information in the United States and other jurisdictions as described in this Privacy Policy, subject to any rights you may have under applicable law.

III. Types of Information We Collect

A. Personal Information

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person or household.

We may collect Personal Information that you provide voluntarily through the Gilley’s Sites, on property at Gilley’s Park City, through telephone calls, text messages, email communications, postal mail, social media, customer service interactions, rewards program enrollment, event registration, ticketing, reservations, purchases, promotions, employment applications, vendor relationships, or other interactions with us.

Personal Information we may collect includes, but is not limited to:

Name; postal address; email address; telephone number; date of birth; age; gender; signature; account username or password; rewards program number; government-issued identification information; driver’s license number and state; state identification card information; passport information; Social Security number where required or permitted by law; tax identification information; payment card information; financial account information; transaction history; purchase history; dining, entertainment, and event activity; gaming-related information where permitted by law; wagering-related information where permitted by law; rewards program activity; preferences; survey responses; customer service records; employment application information; vendor contact information; and other information you choose to provide.

Some Personal Information may be considered “Confidential Personal Information” or “Sensitive Personal Information” under applicable law. This may include your name associated with date of birth, payment card information, driver’s license number, state identification card number, Social Security number, passport information, financial account information, precise geolocation, biometric-related information, health-related information, citizenship or immigration status, or other information treated as sensitive under applicable law.

B. Non-Personal Information

“Non-Personal Information” means information that does not identify you personally or that has been aggregated, deidentified, or anonymized so that it cannot reasonably be used to identify you.

When you use the Gilley’s Sites, our servers and service providers may collect Non-Personal Information such as pages visited, referring URLs, links clicked, content viewed, time spent on pages, device type, browser type, operating system, general location, and aggregate usage statistics.

In some cases, Non-Personal Information may be linked with Personal Information. When we link Non-Personal Information with Personal Information, we treat the combined information as Personal Information.

C. Device, Browser, Cookies, and Tracking Information

When you visit, use, or access the Gilley’s Sites, we may collect information about the device and browser you are using, including IP address, device identifiers, browser type, operating system, session activity, referring pages, pages visited, links clicked, forms submitted, material downloaded, approximate location, and interactions with the Gilley’s Sites.

We may use cookies, pixels, tags, beacons, software development kits, application programming interfaces, session replay tools, analytics tools, advertising technologies, and similar technologies to help us recognize you, improve the Gilley’s Sites, troubleshoot errors, measure performance, provide security, understand usage, personalize your experience, deliver relevant advertising, and evaluate marketing effectiveness.

Cookies are small files placed on your device that allow a website to recognize your browser or store information. Some cookies are necessary for the Gilley’s Sites to function. Other cookies help us remember preferences, analyze usage, deliver advertising, measure ad performance, or improve our services.

You may be able to adjust your browser settings to reject or delete cookies. If you reject or delete cookies, some features of the Gilley’s Sites may not function properly. Browser settings may not affect all tracking technologies, and cookie preferences may need to be reset if you use a different browser or device or clear your cookies.

D. Social Media Information

If you interact with Gilley’s through social media platforms or use social media features integrated with the Gilley’s Sites, we may receive information from those platforms, including your name, username, profile information, email address, comments, messages, videos, recordings, images, and other information you make available through the platform.

Your use of social media platforms is also governed by the privacy policies and terms of those platforms. We are not responsible for the privacy practices of third-party social media platforms.

E. Information Collected From Partners and Third Parties

We may obtain Personal Information from business partners, vendors, service providers, affiliates, advertising partners, social media platforms, payment processors, ticketing providers, employment platforms, rewards program providers, data analytics providers, identity verification providers, credit or payment verification services, public databases, government sources, regulators, law enforcement, family members, friends, and other third parties.

We may use Personal Information obtained from third parties in accordance with this Privacy Policy and applicable law. We generally do not control how third parties collect, use, or disclose information they collect directly from you, so you should review their privacy policies before providing information to them.

F. Employment Application Information

If you apply for a job with Gilley’s, we may collect Personal Information such as your name, contact information, work history, education history, professional qualifications, certifications, resume, references, background check information, licensing information, eligibility to work, and other information relevant to your application.

If you are an employee, contractor, vendor representative, business partner, or other professional contact, we may collect information about you in connection with your professional relationship with us, including business contact information, employment-related information, vendor records, training records, access credentials, performance information, and compliance information.

G. Wi-Fi and Location Information

When you use Wi-Fi services made available at Gilley’s Park City, we may collect, directly or through service providers, information about your device, session, bandwidth usage, websites accessed, device identifiers, browser type, approximate or precise physical location, and other technical information.

Even if you choose not to use Wi-Fi services, we may collect information concerning the approximate or precise physical location of your mobile device within and around Gilley’s Park City for operational, security, safety, analytics, fraud prevention, and other non-marketing purposes, where permitted by law. With notice or consent where required, we may also collect location information for marketing, personalization, or guest-experience purposes.

H. Video Surveillance, Security, and Biometric-Related Information

When you visit Gilley’s Park City, we may use video cameras, surveillance systems, access-control systems, license plate recognition systems, security monitoring tools, and other technologies to monitor gaming areas, wagering areas, entrances, exits, parking areas, public areas, restricted areas, cash-handling areas, and other sensitive areas for safety, security, fraud prevention, regulatory compliance, responsible gaming, emergency response, and operational purposes.

Some surveillance or security systems may incorporate facial recognition, biometric-related, or other identity-verification technologies where permitted by law. Such technologies may be used for security, fraud prevention, age or identity verification, exclusion-list screening, self-exclusion compliance, law enforcement cooperation, regulatory compliance, or other legitimate operational purposes.

I. Audio, Electronic, Chat, and Similar Information

When you call, text, chat, email, or otherwise communicate with Gilley’s, we may collect information related to you and your request. We may monitor, record, transcribe, store, or analyze communications for quality assurance, training, customer service, security, compliance, dispute resolution, and operational purposes.

The Gilley’s Sites may include chat features that connect you with chat assistance, which may be provided by human representatives, automated chatbots, artificial intelligence tools, or a combination of these. We and our service providers may record chat sessions, store information associated with those sessions, and use such information to respond to you, improve the chat experience, train personnel, troubleshoot issues, and develop or improve services.

J. Purchase, Transaction, Reservation, Ticketing, and Gaming Information

When you visit, use, or access Gilley’s Park City or the Gilley’s Sites, we may collect information about your activities and transactions, including purchases, dining activity, entertainment activity, event registrations, ticket purchases, reservations, rewards program activity, promotions, offers, redemptions, customer service interactions, and gaming-related activity where permitted by law.

Gaming-related information may include information necessary to operate historical horse racing, simulcast wagering, rewards programs, eligibility checks, regulatory reporting, tax reporting, responsible gaming, exclusion-list compliance, fraud prevention, and other gaming-related operations.

K. Vehicle and Parking Information

When you park a vehicle at or otherwise visit Gilley’s Park City, we may collect information about your vehicle, including images of the vehicle, make, model, color, license plate number, time and date of arrival or departure, parking activity, and related information. This information may be collected through cameras, license plate recognition technology, parking systems, valet systems, security personnel, or manual records.

L. Sensitive Information

We may collect Sensitive Personal Information when you make a purchase, participate in gaming or wagering activity, enroll in a rewards program, verify your age or identity, apply for employment, complete tax or compliance forms, provide payment information, use certain on-property services, or interact with security or regulatory personnel.

Sensitive Personal Information may include payment card information, financial account information, government identification numbers, Social Security number, biometric-related information, medical or health-related information, precise geolocation, citizenship or immigration status, information concerning race or ethnicity if required for employment or compliance purposes, and other categories considered sensitive under applicable law.

We do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about you except as permitted by applicable law.

M. Rewards Program Information

If you participate in Gilley’s PLAY Rewards, Players Club, loyalty, VIP, promotional, or similar programs, we may collect information related to your membership, tier status, preferences, visits, purchases, gaming-related activity where permitted, offers, redemptions, points, benefits, communications preferences, and eligibility.

We may combine rewards program information with information collected through the Gilley’s Sites, on-property systems, business partners, affiliates, or service providers to operate the program, personalize offers, evaluate eligibility, comply with law, prevent fraud, provide benefits, and improve our guest experience.

N. Surveys, Promotions, and Events

We may collect information when you participate in surveys, sweepstakes, contests, promotions, events, concerts, watch parties, tournaments, giveaways, or similar activities. This information may include contact information, preferences, responses, eligibility information, photographs, videos, recordings, and other information necessary to administer the activity.

O. Information Required by Law or Regulation

Because Gilley’s operates in a regulated gaming environment, we may collect information required or requested by regulators, law enforcement, tax authorities, courts, payment processors, auditors, or other governmental or regulatory entities. This may include identification, tax, transaction, gaming, surveillance, compliance, security, and responsible gaming information.

IV. How We Use the Information We Collect

A. Marketing Purposes

We may use Personal Information and Non-Personal Information for marketing purposes, including to send or display offers, promotions, event announcements, dining information, entertainment information, gaming-related offers where permitted, rewards program communications, newsletters, advertisements, surveys, and other communications by postal mail, email, direct mail, social media, telephone, text message, push notification, online advertising, or other means.

We do not permit Confidential Personal Information or Sensitive Personal Information to be used for marketing purposes except where permitted by law and consistent with this Privacy Policy.

You may opt out of certain marketing communications as described in the “Your Communication Preferences” section below. Opting out of marketing communications will not prevent us from sending transactional, service-related, legal, safety, security, regulatory, or account-related communications.

B. Non-Marketing Purposes

We may use information we collect for non-marketing purposes, including to:

  1. provide, operate, maintain, and improve Gilley’s Park City and the Gilley’s Sites;
  2. verify your identity, age, eligibility, and account information;
  3. process purchases, reservations, ticketing, event registrations, food and beverage orders, and other transactions;
  4. operate rewards, loyalty, VIP, promotional, and membership programs;
  5. record and access gaming-related activity where permitted by law;
  6. operate historical horse racing, simulcast wagering, and other regulated activities where permitted by law;
  7. comply with gaming, tax, payment, employment, alcohol, safety, security, and other legal or regulatory requirements;
  8. administer promotions, contests, sweepstakes, surveys, events, and offers;
  9. personalize your experience and provide customer service;
  10. respond to inquiries, requests, complaints, and feedback;
  11. conduct research, analytics, statistical analysis, and demographic analysis;
  12. create and update customer profiles;
  13. assess and improve products, services, facilities, events, marketing, and operations;
  14. protect Gilley’s, its guests, employees, vendors, property, systems, rights, and interests;
  15. prevent, detect, investigate, and respond to fraud, theft, cheating, suspicious activity, underage activity, self-exclusion violations, security incidents, cyber incidents, and other unlawful or prohibited activity;
  16. cooperate with law enforcement, regulators, courts, auditors, payment processors, and governmental authorities;
  17. collect debts or enforce agreements;
  18. evaluate employment applications and manage employment, contractor, or vendor relationships;
  19. perform background checks where permitted by law;
  20. process financial transactions;
  21. maintain business records;
  22. satisfy contractual obligations;
  23. respond to legal claims, subpoenas, investigations, audits, or litigation;
  24. protect public safety, national security, or matters of public importance where disclosure is necessary or appropriate; and
  25. perform any other purpose disclosed at the time of collection or permitted by law.

C. Combining Information

We may link Personal Information, such as your name or email address, with device information, transaction information, rewards program information, gaming-related information, social media information, public information, third-party data, or other information to help us identify your preferences, interests, eligibility, risk profile, or customer profile.

V. How We Share Information

A. Sharing Within Gilley’s and Affiliates

We may share information among Gilley’s, the Gilley’s Sites, Gilley’s Park City, parent companies, subsidiaries, affiliated businesses, related entities, and commonly controlled entities for the purposes described in this Privacy Policy. Sensitive Personal Information will be shared only where appropriate for non-marketing purposes, where consent has been obtained if required, or where otherwise permitted by law.

B. Business Partners

We may share information with business partners, sponsors, promoters, performers, ticketing providers, food and beverage partners, rewards program partners, advertising partners, technology providers, analytics providers, payment processors, and other third parties for marketing and non-marketing purposes.

Even if you opt out of certain marketing uses, we may still share information for non-marketing purposes such as processing transactions, fulfilling requests, responding to inquiries, providing services, conducting analytics, complying with law, preventing fraud, and protecting safety and security.

When we provide Personal Information or Sensitive Personal Information to business partners, service providers, or other third parties, we require them to exercise reasonable care to protect the information and to use it only for the purposes for which it was provided, where required by applicable law.

C. Service Providers and Contractors

We may disclose information to service providers and contractors that perform services for us or on our behalf. These services may include website hosting, data storage, cloud services, cybersecurity, payment processing, ticketing, reservations, email delivery, text messaging, marketing, analytics, advertising, customer service, chat functionality, survey administration, employment applications, background checks, identity verification, rewards program administration, Wi-Fi service, security, surveillance, legal services, accounting, auditing, compliance, and other services.

D. Regulators, Law Enforcement, and Legal Purposes

We may disclose information to gaming regulators, racing and gaming commissions, law enforcement agencies, courts, tax authorities, auditors, payment processors, governmental agencies, and other entities when we believe disclosure is necessary or appropriate to comply with law, protect rights, prevent fraud, maintain security, comply with gaming or wagering regulations, respond to legal process, enforce our policies, or protect the safety of guests, employees, vendors, or the public.

E. Corporate Transactions

We may disclose or transfer any information we collect, including Personal Information and Sensitive Personal Information, in connection with a proposed or actual merger, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, assignment, or other disposition of all or part of our business, assets, ownership interests, property, or operations.

F. Social Media and Advertising Platforms

The Gilley’s Sites may allow you to connect with social media platforms such as Facebook, Instagram, TikTok, X, YouTube, or other platforms. These features may use cookies, pixels, plug-ins, APIs, or similar technologies. We may share information with these platforms or allow them to collect information about your use of the Gilley’s Sites, subject to their privacy policies.

We may use advertising services and networks offered by social media platforms and other advertising partners to deliver relevant advertising. This may involve disclosing or allowing the collection of identifiers, online activity, commercial information, or inferences. Depending on your jurisdiction, such disclosures may be considered “sharing,” “selling,” or “processing for targeted advertising” under applicable privacy laws, even if we do not sell Personal Information for money.

VI. Your Communication Preferences

A. Rewards and Preference Accounts

We are committed to protecting the accuracy and confidentiality of your Personal Information and encourage you to tell us how you want to receive communications from Gilley’s.

If you participate in PLAY Rewards, Players Club, or another Gilley’s preference or loyalty program, you may be able to update your contact information and communication preferences at the PLAY Rewards desk, through a rewards kiosk, through your online account if available, or by contacting us using the information listed above.

B. Email, Direct Mail, and Marketing Opt-Outs

If you wish to opt out of receiving marketing communications from Gilley’s, or if you do not want us to share your Personal Information with Gilley’s affiliates or business partners for marketing purposes, you may contact us at:

Email: privacy@playgilleys.com / info@playgilleys.com
Phone: (316) 500-2946
Mail: Gilley’s Park City, Attn: General Counsel / Privacy Policy

You may also follow opt-out or unsubscribe instructions included in promotional emails or direct mail communications where available.

Although you may opt out of marketing communications, we may continue to use and share information for non-marketing purposes and may continue to send transactional, service-related, security, account, legal, regulatory, or safety communications.

C. Text Messages

If you consent to receive text messages from Gilley’s, message and data rates may apply. You may opt out of promotional text messages by replying STOP, following instructions in the message, or contacting us. Text messaging originator opt-in data and consent will not be sold or shared with third parties for their own marketing purposes. We may share such information with service providers as necessary to deliver messages, maintain compliance, and provide messaging services.

D. Telemarketing

Even if your telephone number appears on a federal or state do-not-call list, certain exemptions may allow us to contact you by telephone, such as communications with established customers or calls made with consent. To honor guest preferences, Gilley’s may maintain an internal Do Not Call list. To be added to our internal Do Not Call list, please contact us using the information above.

E. Cookie and Targeted Advertising Choices

Depending on your jurisdiction, you may have the right to opt out of the sale or sharing of Personal Information, targeted advertising, cross-context behavioral advertising, or certain cookie-based processing.
You may exercise cookie-related choices by using any cookie preference tool provided on the Gilley’s Sites, adjusting your browser settings, or contacting us. Cookie preferences are browser- and device-specific. If you clear cookies, change browsers, or use a different device, you may need to reset your preferences.

VII. Supplemental U.S. State Privacy Notices

This section supplements the general Privacy Policy and applies to residents of states that provide specific privacy rights, including, where applicable, California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, Washington, and other states with applicable consumer privacy laws.

The rights described below may be subject to exceptions, limitations, verification requirements, and eligibility requirements under applicable law. Some rights may not apply to all residents or all types of information.

A. Categories of Personal Information We May Collect

During the 12 months preceding the effective date of this Privacy Policy, we may have collected the following categories of Personal Information:

  1. Identifiers: name, alias, postal address, email address, telephone number, date of birth, rewards number, account name, IP address, driver’s license number, passport number, state identification number, Social Security number, payment card number, bank account number, or other similar identifiers.
  2. Personal information described in state customer records laws: signature, physical characteristics or description, state identification card number, insurance information, education information, payment information, financial information, medical information, or health insurance information.
  3. Protected classification characteristics: age, gender, sex, race, color, national origin, disability, citizenship, military or veteran status, or other legally protected characteristics where collected for employment, compliance, legal, regulatory, or operational purposes.
  4. Commercial information: records of products or services purchased, obtained, or considered; dining activity; entertainment activity; event activity; ticketing history; reservation history; transaction history; rewards program activity; gaming-related information where permitted; and other commercial activity.
  5. Biometric-related information: facial recognition templates, fingerprints, or other biometric-related information where collected for security, identity verification, fraud prevention, access control, employment, regulatory, or compliance purposes and where permitted by law.
  6. Internet or other electronic network activity: browsing history, search history, interaction with websites, applications, advertisements, emails, digital content, forms, or online services.
  7. Geolocation data: approximate or precise location data from devices, Wi-Fi, mobile devices, apps, or on-property systems.
  8. Sensory information: audio, electronic, visual, thermal, olfactory, or similar information, including video surveillance, call recordings, chat transcripts, and images.
  9. Employment information: professional or employment-related information, resumes, work history, education history, references, background check information, credentials, licenses, and application information.
  10. Education information: education history, degrees, certifications, transcripts, or similar information provided in connection with employment or vendor relationships.
  11. Inferences: inferences drawn from information we collect to create a profile reflecting preferences, characteristics, behavior, interests, or likely interests.
  12. Sensitive Personal Information: government identification numbers, Social Security number, financial account information, payment card information, precise geolocation, biometric-related information, health-related information, citizenship or immigration status, and other information treated as sensitive under applicable law.

B. Categories of Sources

We may collect Personal Information from the following categories of sources:

  1. directly from you;
  2. through the Gilley’s Sites;
  3. through your visits to Gilley’s Park City;
  4. through rewards, loyalty, VIP, or promotional programs;
  5. through ticketing, reservation, payment, event, or employment platforms;
  6. from affiliates and related entities;
  7. from service providers and contractors;
  8. from business partners and vendors;
  9. from social media platforms and advertising partners;
  10. from public databases and data providers;
  11. from government, law enforcement, or regulatory entities;
  12. from surveillance, security, Wi-Fi, access-control, and location systems;
  13. from payment processors, credit services, or identity verification providers; and
  14. from other sources described at the time of collection.

C. Business or Commercial Purposes

We may collect, use, disclose, sell, or share Personal Information for the purposes described in this Privacy Policy, including:

  1. providing and improving products, services, facilities, events, and websites;
  2. processing transactions, reservations, purchases, registrations, and rewards activity;
  3. operating gaming, wagering, rewards, and promotional programs where permitted by law;
  4. verifying identity, age, eligibility, and compliance;
  5. marketing, advertising, analytics, personalization, and guest communications;
  6. preventing fraud, cheating, theft, cyber incidents, and unlawful activity;
  7. protecting safety, security, and property;
  8. complying with legal, regulatory, tax, gaming, employment, and contractual obligations;
  9. responding to inquiries, requests, claims, investigations, subpoenas, and audits;
  10. evaluating employment applications and managing professional relationships;
  11. conducting research, internal analytics, statistical studies, and quality assurance;
  12. debugging, maintaining, and improving systems and functionality;
  13. completing corporate transactions; and
  14. other purposes disclosed at the time of collection or permitted by law.

D. Categories of Third Parties to Whom We May Disclose Personal Information

We may disclose Personal Information to:

  1. affiliates, parent companies, subsidiaries, and related entities;
  2. service providers and contractors;
  3. business partners;
  4. payment processors and financial institutions;
  5. ticketing, reservation, and event providers;
  6. rewards program providers;
  7. advertising networks and social media platforms;
  8. analytics providers;
  9. internet service providers, operating systems, and platform providers;
  10. data brokers or data providers, where permitted and disclosed;
  11. credit reporting, identity verification, and background check providers;
  12. cybersecurity and fraud prevention providers;
  13. government, law enforcement, courts, tax authorities, and regulatory entities;
  14. professional advisors such as attorneys, accountants, auditors, and insurers;
  15. successors or counterparties in corporate transactions; and
  16. other third parties with your consent or as permitted by law.

E. Sale or Sharing of Personal Information

We do not sell Personal Information in exchange for money.

We may disclose or make available certain categories of Personal Information to advertising networks, analytics providers, social media platforms, and marketing partners in a way that may be considered a “sale,” “sharing,” or “processing for targeted advertising” under certain state privacy laws. This may include identifiers, commercial information, online activity, geolocation data, and inferences.

We do not knowingly sell or share Personal Information of individuals under 16 years of age.

F. Sensitive Personal Information

We may use Sensitive Personal Information for purposes permitted by law, including providing requested services, verifying identity, maintaining security, complying with gaming and tax laws, preventing fraud, processing payments, employment purposes, and responding to legal or regulatory requirements.

We do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about a consumer except as permitted by applicable law.

G. Retention

We retain Personal Information for as long as reasonably necessary to achieve the purposes described in this Privacy Policy, comply with legal and regulatory obligations, satisfy gaming and tax recordkeeping requirements, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business purposes.

Retention periods may vary depending on the type of information, the purpose of collection, applicable statutes of limitation, legal holds, regulatory requirements, and operational needs.

H. Deidentified Information

To the extent we process deidentified information, we will maintain and use such information in deidentified form and will not attempt to reidentify it except as permitted by applicable law.

I. State Privacy Rights

Depending on your state of residence, you may have the right to:

  1. confirm whether we process your Personal Information;
  2. access Personal Information we maintain about you;
  3. request a copy of your Personal Information in a portable format;
  4. request correction of inaccurate Personal Information;
  5. request deletion of Personal Information;
  6. opt out of the sale of Personal Information;
  7. opt out of sharing Personal Information for cross-context behavioral advertising;
  8. opt out of processing for targeted advertising;
  9. opt out of certain profiling that produces legal or similarly significant effects;
  10. request a list of categories of third parties to whom we disclose Personal Information, where required by law;
  11. limit certain uses or disclosures of Sensitive Personal Information, where applicable;
  12. appeal our decision regarding a privacy request, where required by law; and
  13. not be discriminated against for exercising privacy rights.

J. How to Submit a Privacy Request

To submit a privacy request, please contact us at:
Email: privacy@playgilleys.com / info@playgilleys.com
Mail: Gilley’s Park City, Attn: General Counsel / Privacy Policy
Phone:

Please include your full name, contact information, state of residence, the right you wish to exercise, and enough information for us to reasonably verify your identity and process your request.

K. Verification

For requests to access, delete, correct, or obtain a copy of Personal Information, we may require information sufficient to verify your identity. We may require at least two pieces of identifying information that match information we maintain, and in some cases we may require additional information or a signed declaration.

We may deny or limit a request if we cannot verify your identity, if an exception applies, or if fulfilling the request would conflict with legal, regulatory, security, gaming, tax, employment, or fraud prevention obligations.

A request to opt out of sale, sharing, or targeted advertising may not require identity verification, but we may deny a request if we have a good-faith, reasonable basis to believe it is fraudulent.

L. Authorized Agents

Where permitted by law, you may designate an authorized agent to submit a privacy request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

M. Appeals

If your state provides an appeal right and we deny your privacy request, you may appeal our decision by contacting us at the email address above and stating that you wish to appeal. We will respond as required by applicable law.

N. Notice of Financial Incentive / Bona Fide Loyalty Program

Gilley’s may offer rewards, discounts, special offers, invitations, benefits, or other financial incentives in connection with PLAY Rewards, Players Club, loyalty programs, promotional programs, VIP programs, or similar offerings.

When you enroll in or participate in a rewards or loyalty program, you may provide Personal Information such as name, email address, phone number, postal address, date of birth, transaction information, rewards activity, and gaming-related information where permitted by law. The value of the benefits offered through these programs is reasonably related to the value of the information provided, including the value of your commercial activity, guest relationship, and the expenses associated with providing benefits.

You may withdraw from a rewards or loyalty program by contacting Gilley’s or following program instructions. If you request deletion of Personal Information needed to administer a rewards or loyalty program, we may be unable to continue providing benefits.

VIII. California Consumer Privacy Statement

This section applies to California residents and supplements the general Privacy Policy.

A. Notice at Collection

We may collect the categories of Personal Information listed in Section VII.A above. We collect and use those categories for the business and commercial purposes listed in Section VII.C above. We disclose Personal Information to the categories of third parties listed in Section VII.D above.

B. California Rights

California residents may have the right to:

  1. request disclosure of the categories of Personal Information we collect, use, disclose, sell, or share;
  2. request disclosure of the specific pieces of Personal Information we maintain about you;
  3. request deletion of Personal Information;
  4. request correction of inaccurate Personal Information;
  5. opt out of the sale or sharing of Personal Information;
  6. limit certain uses and disclosures of Sensitive Personal Information where applicable;
  7. designate an authorized agent;
  8. receive notice of financial incentives; and
  9. not be discriminated against for exercising California privacy rights.

C. Sale or Sharing

We do not sell Personal Information in exchange for money. We may share or make available identifiers, commercial information, online activity, geolocation data, and inferences to advertising networks, social media platforms, analytics providers, and marketing partners for cross-context behavioral advertising or marketing-related purposes. This may be considered “sale” or “sharing” under California law.

D. Requests

California residents may submit requests using the contact information listed in Section VII.J.

E. Sensitive Personal Information

We do not use or disclose Sensitive Personal Information for purposes of inferring characteristics about a consumer except as permitted by California law.

F. Minors

We do not knowingly sell or share Personal Information of minors under 16 years of age.

IX. Other U.S. State Resident Notices

Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, Washington, and other states with applicable privacy laws may have some or all of the rights described in Section VII.I.

Certain states provide additional rights or variations, including:

  1. Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and Virginia residents may have rights to access, correct, delete, obtain a copy of Personal Information, opt out of sale or targeted advertising, and appeal certain decisions.
  2. Iowa and Utah residents may have rights to access, delete certain information, obtain a portable copy, and opt out of targeted advertising, subject to applicable law.
  3. Oregon and Delaware residents may have the right to request information about categories of third parties to whom Personal Information has been disclosed, subject to applicable law.
  4. Washington residents may have specific rights regarding certain health-related consumer information if applicable to information we collect.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects unless disclosed otherwise and permitted by law.

X. EU, UK, and International Privacy Notice

This section applies where the European Union General Data Protection Regulation, United Kingdom data protection law, or similar international privacy law applies.

A. Controller

For purposes of applicable data protection laws, Gilley’s, LLC is the controller of Personal Information collected from you through the Gilley’s Sites or otherwise in connection with our business, unless otherwise stated.

B. Information You Provide

You may provide Personal Information when you:

  1. fill out forms on the Gilley’s Sites;
  2. enroll in rewards, loyalty, VIP, or promotional programs;
  3. make purchases, reservations, or event registrations;
  4. participate in gaming or wagering activity where permitted by law;
  5. subscribe to newsletters or communications;
  6. correspond with us by phone, email, text, chat, social media, or postal mail;
  7. apply for employment;
  8. participate in surveys, contests, promotions, or events;
  9. use Wi-Fi or on-property services;
  10. provide information to authorized third parties or business partners; or
  11. otherwise interact with Gilley’s.

C. Information Collected Automatically

When you visit the Gilley’s Sites or use certain services, we may automatically collect browser, device, and usage information such as domain, IP address, date and time of visit, duration of visit, geographic location, browser type, operating system, page visits, referring URLs, device information, and internet traffic information.

D. Cookies

We use cookies and similar technologies to facilitate navigation, display information effectively, collect statistical data, personalize your experience, track responses to online advertisements and marketing emails, deliver relevant advertising, and improve the Gilley’s Sites. You may adjust your browser settings to reject cookies, but some features may not work properly.

E. Why We Use Personal Data

We process Personal Information where one or more of the following legal bases apply:

  1. Contract: processing is necessary to perform a contract with you or take steps at your request before entering into a contract, such as fulfilling purchases, reservations, event registrations, rewards program benefits, or requested services.
  2. Legal obligation: processing is necessary to comply with legal, gaming, tax, employment, payment, security, regulatory, or recordkeeping obligations.
  3. Legitimate interests: processing is necessary for our legitimate business interests, such as operating and improving Gilley’s, providing customer service, conducting analytics, protecting safety and security, preventing fraud, managing business relationships, marketing our services where permitted, responding to inquiries, and defending legal claims.
  4. Consent: processing is based on your consent, such as certain marketing communications, cookies, location processing, or other activities where consent is required by law.

F. Direct Marketing

We may use Personal Information to send direct marketing communications about Gilley’s products, services, events, promotions, rewards programs, dining, entertainment, and related offerings. Marketing may be sent by email, postal mail, SMS, social media, online advertising, telephone, or other channels.

Where opt-in consent is required by law, we will seek consent. Where permitted by law, we may rely on legitimate interests for direct marketing. You may opt out of direct marketing at any time by using unsubscribe links, replying STOP to SMS messages, updating preferences, or contacting us.

G. Disclosure of Personal Data

We may share Personal Information with affiliates, service providers, contractors, business partners, payment processors, ticketing providers, reservation providers, analytics providers, advertising partners, social media platforms, regulators, law enforcement, courts, professional advisors, and successors in corporate transactions as described in this Privacy Policy.

H. International Transfers

We may transfer Personal Information to the United States and other jurisdictions. Where required by applicable law, we will use appropriate safeguards for international transfers, such as standard contractual clauses or other approved mechanisms.

I. Data Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, use, disclosure, alteration, or destruction. However, no transmission over the internet, electronic communication, storage system, or security system is completely secure. We cannot guarantee absolute security.

J. Retention

We retain Personal Information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods may vary based on legal, tax, accounting, gaming, employment, regulatory, security, fraud prevention, dispute resolution, and operational needs.

K. Your International Privacy Rights

Depending on where you are located, you may have the right to:

  1. request access to your Personal Information;
  2. request correction of inaccurate Personal Information;
  3. request deletion of Personal Information;
  4. request restriction of processing;
  5. request portability of Personal Information;
  6. object to processing based on legitimate interests;
  7. object to direct marketing;
  8. withdraw consent where processing is based on consent; and
  9. lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact us using the information listed at the beginning of this Privacy Policy.

XI. Security

Personal Information collected by Gilley’s is stored using systems and safeguards designed to protect against unauthorized access, disclosure, alteration, or destruction. We use commercially reasonable administrative, technical, and physical security measures, which may include firewalls, access controls, encryption, monitoring, vendor controls, employee training, and incident response procedures.

No security system is impenetrable. We cannot guarantee that unauthorized access, hacking, data loss, misuse, or other events will never occur. You are responsible for maintaining the security of your own devices, passwords, accounts, browsers, and communication methods.

When Personal Information is collected by third parties under contract with us, we require such third parties to exercise reasonable care to protect the information and restrict its use to the purposes for which it was provided, where required by applicable law.

XII. Responsible Gaming

Gilley’s supports responsible gaming. We may use Personal Information for responsible gaming purposes, including age verification, eligibility verification, self-exclusion compliance, exclusion-list screening, responsible gaming communications, regulatory compliance, and fraud prevention.

Where required by law or Gilley’s policy, we will not knowingly use Personal Information of self-excluded individuals or individuals enrolled in applicable exclusion programs for marketing purposes. We may retain and use information about self-excluded or excluded individuals for non-marketing purposes, including compliance, safety, security, responsible gaming, and regulatory obligations.

If you or someone you know has a gambling problem, please call 1-800-GAMBLER or consult the responsible gaming resources made available at Gilley’s Park City or through applicable Kansas responsible gaming programs.

XIII. Links to Third-Party Websites

The Gilley’s Sites may contain links to third-party websites, platforms, applications, ticketing services, reservation services, payment processors, employment portals, social media platforms, advertisers, sponsors, vendors, performers, promoters, and other third-party resources.

We are not responsible for the privacy practices, content, security, or policies of third-party sites or services. Before providing Personal Information to a third party, you should review that third party’s privacy policy and terms.

XIV. Persons Under Ages 13, 18, and 21

The Gilley’s Sites are not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If a parent or guardian believes that a child under 13 has provided Personal Information to us, the parent or guardian should contact us and request deletion.

Certain areas, activities, and portions of Gilley’s Park City and the Gilley’s Sites may be restricted to persons 18 years of age or older, 21 years of age or older, or another minimum age required by law. Gaming, wagering, alcohol-related activities, certain promotions, certain entertainment areas, and password-restricted portions of the Gilley’s Sites may be limited to persons who satisfy applicable age requirements.

We reserve the right to verify age and identity at any time and may refuse admission, service, access, participation, or account privileges to any person who does not provide valid identification or does not satisfy applicable age requirements.

XV. Changes to This Privacy Policy

We reserve the right to revise this Privacy Policy at any time. When this Privacy Policy is revised, the updated version will be posted on the Gilley’s Sites with a new “Last Updated” date.

Any revised Privacy Policy will apply prospectively to Personal Information collected or modified after the effective date of the revised policy, unless otherwise permitted by law. You should periodically review this Privacy Policy for updates. Your continued use of the Gilley’s Sites or services after a revised Privacy Policy is posted signifies your acceptance of the revised Privacy Policy to the extent permitted by law.

XVI. Contact Us

If you have any questions about this Privacy Policy, wish to submit a privacy request, or wish to exercise any applicable privacy rights, please contact us at:
Gilley’s Park City

Attn: General Counsel / Privacy Policy
1500 E. 77th Street North
Park City, Kansas 67147
Email: privacy@playgilleys.com / info@playgilleys.com
Phone: (316) 500-2946
Last Updated: August 3, 2026