Privacy Policy

Gilley’s Park City Privacy Policy, EU GDPR & Other Notices

Gilley’s, LLC is the owner and operator of Gilley’s in Park City, Kansas, USA. In 2025, Phil Ruffin, completed the renovation and rebranding of the property. Gilley’s features approximately 200,000 square feet of gaming and entertainment space, several dining outlets, sports bar and arcade. Gilley’s’ dedicated staff is committed to providing an unsurpassed experience for guests, and fully supports responsible gaming as outlined in the American Gaming Association’s Code of Conduct for Responsible Gaming.

We hope that you enjoy our world-class facilities, exciting entertainment, and quality customer service. Because we value your patronage and respect your privacy, we are providing you with this Gilley’s, LLC (“Gilley’s”, “we”, “us”, “our”) Privacy Policy (“Privacy Policy”) so that you understand how Gilley’s collects, stores, shares and uses information from and about our website visitors, customers, and vendors. If you have any questions or concerns regarding our Privacy Policy, please contact us via email at [INSERT GENERAL EMAIL ADDRESS].

Gilley’s, LLC is a limited liability company subject to the laws of the United States of American and Sedgwick County, Kansas. However, this Privacy Policy also includes EU General Data Protection Regulation (GDPR) and/or multiple other U.S. states privacy rights where we are subject to different or more restrictive local laws if/when we operate in those jurisdictions. Except as set forth herein, we make no representation that the practices describing our collection, use and disclosure of personal and non-personal data (“Personal Information”) collected through this website or in the course of our business activities conducted elsewhere are compliant with the laws outside of Sedgwick County, Kansas, when we act as the controller of that data and when its processing is governed by the EU GDPR and/or Other States Privacy Rights. We also describe how you can opt-out of some uses of Personal Information. Please note this Privacy Policy does not apply to the information collected, stored, shared or distributed by third-party sites, and this Privacy Policy may be updated from time to time.

Please review this Privacy Policy and Notices carefully. [INSERT CLICK HERE HYPERLINK TO FAQ] to view Frequently Asked Questions or you may contact us at [INSERT GENERAL EMAIL], call [INSERT MAIN PHONE NUMBER], or write to Gilley’s Park City, Attn: General Counsel / Privacy Policy, 3300 Las Vegas Blvd S, Las Vegas, NV 89109. Users of Gilley’s Web Sites should also review the [INSERT LINK TO TERMS OF USE].

INTRODUCTION

Please note this Privacy Policy is separate, but not mutually exclusive from the EU GDPR and other U.S. states privacy rights outlined further below. Should there be any material differences between this Privacy Policy and the EU GDPR and other U.S. states privacy rights, the EU GDPR and other U.S. states privacy rights will prevail for individuals within the Territorial Scope of the EU GDPR and/or the specified State within the USA.

I. SCOPE OF PRIVACY POLICY

A. Gilley’s Web Sites & Social Media

This Privacy Policy is applicable only to the web sites and social media pages that specifically refer to this Privacy Policy (“Gilley’s Web Sites”). It does not apply to any other web sites, including other web sites that may be owned, operated, or affiliated with Gilley’s or its parent companies or subsidiaries that provide their own privacy policy.

B. Gilley’s Park City

This Privacy Policy is applicable only to Gilley’s Park City (“Gilley’s”). It does not apply to any other resorts, casinos, or other properties that are owned, operated, or affiliated with Gilley’s or its parent companies or subsidiaries.

II. VISITORS OUTSIDE OF THE UNITED STATES

The Gilley’s Web Sites are maintained on servers located in the United States, and Personal Information is also stored on computers located in the United States. The United States may not offer a level of privacy protection for Personal Information, which includes Confidential Personal Information (defined below), as great as that offered in other jurisdictions. Therefore, the disclosure of Personal Information pursuant to this Privacy Policy is at your own risk. We make no representation the practices described in this Privacy Policy are compliant with laws outside of the United States that apply to the collection, security, use and disclosure of Personal Information. Gilley’s will use commercially reasonable efforts to maintain the security of Personal Information.

III. TYPES OF INFORMATION WE COLLECT

A. Personal Information

“Personal Information” is information through which you can be identified. We collect Personal Information that you provide voluntarily at Gilley’s Web Sites and Gilley’s Park City. We also collect Personal Information that you provide voluntarily by e-mail, postal mail, telephone, and other means. Personal Information that we collect through Gilley’s Web Sites may include but is not limited to the unique number assigned to your server

or Internet connection, your geographic location, your name, date of birth, postal address, e-mail address, telephone number, gender, credit card information, gaming activity, and your purchase and reservation information. In addition to the Personal Information listed above, Personal Information that we may collect at Gilley’s Park City includes driver’s license number and state, social security number, passport information and naturalization information. When you complete a casino marker play application at any Gilley’s Web Site and/or Gilley’s Park City, we may also collect the name of your firm, your firm’s address and telephone number, your position with the firm, and banking information including the name and address of your primary and secondary banks along with your account numbers. Some Personal Information described above is considered “Confidential Personal Information.” Confidential Personal Information includes your name associated with one or more of the following: date of birth, credit card information, driver’s license number, state ID card, social security number, passport information and naturalization information.

Personal Information may also include your image in a live video feed that can be viewed on Gilley’s Web Sites if you visit Gilley’s Park City. We may combine Personal Information with other generally or publicly available information to help us identify your preferences or interests. Your Personal Information may also be merged with Personal Information available from other sources, including (a) e-mail address or postal address append services, (b) credit card verification and credit services, and/or (c) other resorts, casinos, or properties that are owned, operated, or affiliated with Gilley’s or its parent companies or subsidiaries or Partners.

B. Non-Personal Information

“Non-Personal Information” is information about you or your activities through which you cannot be personally identified. When you use the Internet, your web browser or client software may transmit certain information to the servers that host the web sites you visit. The information may include your movement within and interaction with Gilley’s Web Sites, including what pages you look at and what information you download.

When you visit Gilley’s Web Sites, our servers collect such Non-Personal Information. We use this Non-Personal Information for a variety of purposes including to generate aggregate statistics about visitors to Gilley’s Web Sites. In situations where it is possible to do so, Non-Personal Information may be linked to Personal Information.

C. Device & Browser Information

When you visit, use, and/or access Gilley’s Web Sites, we may collect information about the type of device and browser you are using, the unique number assigned to your server or Internet connection, your physical location, and your interactions with Gilley’s

Web Sites including the monitoring and recording of such interactions and reconstructing activity from a session or by a user. We may also use “cookies”, other tracking tools (such as application programming interfaces (APIs), software development kits (SDKs) and similar technologies to help us recognize and serve you better including to analyze technical data from you and for marketing purposes.

Cookies are small files that contain information sent by a website that is saved on your computer’s hard drive. Cookies also are used to put a unique identifier on your computer. We use different types of cookies with different purposes depending on where you are located when you visit, use and/or access Gilley’s Web Sites. In all jurisdictions, we use cookies that are necessary for Gilley’s Web Sites to function as you would expect. For example, necessary cookies allow you to navigate between web pages and log in to your account. Other types of cookies enable us to gather data such as web pages visited, links clicked, material downloaded, and allow us to record and/or reconstruct activity from a session or by a user. These types of cookies help us to generate statistics regarding usage of Gilley’s Web Sites and for troubleshooting, analytics, issue resolution, and other purposes. There are different methods for cookie placement, including “browser” cookies (also known as “html cookies”) and Flash cookies (also known as “local shared objects”). You can configure your browser to reject browser cookies or to notify you when browser cookies are offered so that you can accept or reject them. However, if you reject browser cookies you may not be able to conduct some transactions or use some services on Gilley’s Web Sites. In addition, blocking or deleting browser cookies may not block or delete other types of cookies including Flash cookies.

D. Social Media Information

When you use integrated social media features on Gilley’s Web Sites, mobile applications, or other social media web sites, we may obtain Personal Information such as your name and e-mail address as well as videos, recordings and images of you.

E. Information Collected From Partners

We may obtain Personal Information from carefully selected business partners and other entities that direct you to, or are located at, Gilley’s Web Sites and/or Gilley’s Park City (collectively, “Partners”). We may use Personal Information obtained from our Partners in accordance with the terms of this Privacy Policy. We generally have no control over how our Partners use Personal Information they collect from or about you. Therefore, if you provide Personal Information and/or Confidential Personal Information to our Partners, please consult our Partners’ privacy policies for more information about their privacy protection practices.

F. Information Collected by Other Third Parties

Certain transactions and services offered while visiting Gilley’s Web Sites may be processed or provided by third parties under contract with us for fulfillment and other purposes. When your Personal Information is submitted to these third parties for such purposes, we require those third parties to exercise reasonable care to protect your Personal Information and restrict the use of your Personal Information to the purposes for which it was provided.

G. Employment Application Information

If you apply for a job with us, we might ask for certain Personal Information about you including, for example, your work and education history, and your profile/resume. If you are an employee or other representative of our vendors, business partners, or other third parties, we may obtain information about you in the course of your professional relationship with us, such as professional and employment related data and contact information.

H. Wi-Fi and Location Information

When you use Wi-Fi services we make available at Gilley’s Park City, we may collect (directly or through third parties) information about the web sites you visit, the type of device and browser you are using, your device identification number, your precise physical location, bandwidth used, session time, etc. Even if you choose not to use Wi-Fi services we make available at Gilley’s Park City, we may still collect information concerning the precise physical location of your mobile device within and around Gilley’s Park City for Non-Marketing Purposes (defined below). With notice or your consent (and regardless of whether you use Wi-Fi service we make available at Gilley’s Park City), we might also collect information about the precise physical location of your mobile device within and around Gilley’s Park City for Marketing Purposes (defined below).

I. Video Surveillance Information

When you visit Gilley’s Park City, we may use video and other surveillance systems to monitor gaming areas and other public and sensitive areas within and around the property for safety, security, fraud prevention, and other purposes. Some surveillance systems may incorporate facial recognition technologies, which may be used for additional screening.

J. Audio, electronic, or similar information

When you call Gilley’s Park City, for example, to make hotel/dining/show reservations, to inquire about your loyalty program account, or otherwise communicate with Gilley’s Park City audio, electronic and/or video channels, we may obtain information related to you and your request/inquiry and we may monitor or record such interaction.

K. Purchase and Transaction Information

When you visit, use and/or access Gilley’s Park City or Gilley’s Web Sites, we may collect information about your activities and actions including your purchases, reservations, and gaming activity (where permitted).

L. Vehicle Information

Through various ways (including when you park a vehicle at, or otherwise visit Gilley’s Park City), we may collect information about a vehicle including an image of the vehicle, the vehicle’s make, model, and license plate number. For example, we may collect license plate information by capturing images of vehicle license plates (and related information such as time/date of image capture) for various safety, security, fraud prevention, and other purposes. This information may also be collected manually (such as valet parking).

M. Sensitive Information

When you make a purchase, visit, use and/or access Gilley’s Park City or Gilley’s Web Sites (e.g., check-in to hotel (including at the front desk, a kiosk or via mobile check-in) and enter a casino), or engage in other transactions or activities, you may provide us with sensitive Personal Information, which may include your credit or debit card number, financial account number, biometric-related information including physiological or biological characteristics used to establish individual identity, such as fingerprints or facial recognition, medical/health-related information, social security number, naturalization number, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, sex life and sexual orientation, or citizenship or immigration status (“Sensitive Information”). We may collect Sensitive Information through various ways including when you complete a form, have a card/document scanned/swiped/tapped, or through camera functionality on your mobile device that you enable.

N. Other Information

We may obtain information about you from third parties, including entities that direct you to, are located at, or are accessible via Gilley’s Park City or Gilley’s Web Sites, business partners, family members, and friends.

O. Players Club

If you participate in activities with Players Club-branded gaming platforms/facilities or other sports betting or casino games platforms/facilities, we may obtain information from other parties including information related to your Players Club or other gaming account(s) including information that we need to make services available to you and/or to associate your Players Club or other gaming account(s) and your loyalty program account.

P. Chat Functions

Gilley’s Web Sites may use tools to provide chat features to connect you with chat assistance (including, but not limited to, online, via text message, mobile application, and/or telephone), which may be powered by human interaction, chatbots (which may use artificial intelligence (“AI”)), or a combination of human interaction and chatbots.

We may collect the information that you submit to us to provide, improve, and/or develop the chat functionality, so that we can, for example, better respond to your and other customers’ future interactions. We and/or our third-party service providers may record chat sessions, store data associated with those sessions, use such information for quality and training purposes and for other purposes including those contemplated by this Privacy Policy. By using our Web Sites that include chat functionality, you consent to the collection, recording, retaining, storing, and use by us and our service providers of chat sessions and information that you provide.

Q. Surveys

We may initiate surveys from time to time, including using third-party survey providers. The survey providers collect and process your survey responses on our behalf and provide us the information in response to the surveys. We use survey data to help improve and assess our services, our website, and for other business purposes.

IV. HOW WE USE THE INFORMATION WE COLLECT

A. Uses by Gilley’s

Marketing Purposes

We may use Personal Information and Non-Personal Information for our own marketing purposes, including notifying you of special promotions, offers and events via postal mail, e-mail, direct mail, social media, telephone, text messaging, in-room notifications and other means. We will not permit Confidential Personal Information to be used for marketing purposes. If you do not want us to use your Personal Information for marketing purposes, you may opt-out of such uses by notifying us (see Section V below).

Non-Marketing Purposes

We may use the information we collect for non-marketing purposes including: (1) validating your identity; (2) recording and accessing gaming-related activity (where permitted); (3) conducting research, analytics, and statistical or demographic analysis; (4) processing, fulfilling, and tracking reservations, purchases, or other transactions such as hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; (5) complying with legal and regulatory requirements; (6) customizing your experience while visiting, using and/or accessing Gilley’s Park City and/or Gilley’s Web Sites; (7) protecting and defending Gilley’s Park City and its affiliates against legal actions or claims; (8) preventing fraud and detecting security incidents; (9) collecting debt; (10) satisfying contractual obligations; (11) evaluating employment applications; (12) safety and security purposes including protecting our rights and property, cooperating with law enforcement or other government agencies for purposes of national security, public safety, or matters of public importance when we believe that disclosure of information is necessary or appropriate to protect the public interest; (13) assess and improve our products and services; (14) assess and improve Gilley’s Park City and Gilley’s Web Sites; (15) create and update customer profiles; (16) determine your eligibility for casino markers and offers; (17) responding to your inquiries; (18) performing background checks (for example, if you apply for employment with us); (19) process financial transactions; and (20) manage professional development, performance, and conduct (collectively “Non-Marketing Purposes”).

When it is possible to do so, we may link Personal Information such as your name or e-mail address with Non-Personal Information such as the unique identifier associated with your computer or mobile device. We may also link Personal Information with other generally or publicly available information to help us identify your preferences or interests. The information we collect may also be merged with information available from other sources such as (1) companies that match e-mail addresses with postal addresses and other information; (2) credit card verification and credit services; and (3) other subsidiaries, resorts, casinos, or properties that are owned, operated, or affiliated with Gilley’s Park City (“Affiliates”).

Opting-out of the use of your Personal Information for marketing purposes will not prevent your Personal Information, including Confidential Personal Information, from being used for non-marketing purposes.

B. Sharing Within Gilley’s Park City and Affiliates

We may share the information we collect for any purpose among Gilley’s Web Sites, Gilley’s Park City, and any of our Affiliates. Sensitive Information will only be shared for Non-Marketing Purposes.

C. Sharing With Business Partners

We may share the information we collect with our business partners and other third parties for Non-Marketing purposes and marketing purposes (e.g., joint marketing purposes or our business partners’ (or our own) marketing purposes). Even if you opt-out of permitting us to share your Personal Information with our business partners and other third parties for marketing purposes, we may still share the information we collect with them for Non-Marketing purposes such as processing transactions, fulfilling your requests, responding to your inquiries, analytics (such as analyzing performance and utilization metrics), etc. Sensitive Information will only be shared with our business partners and other third parties for Non-Marketing Purposes. When we provide Sensitive Information or other Personal Information to our business partners and other third parties, we require them to exercise reasonable care to protect such information and restrict the use of such information to the purposes for which it was provided to them.

D. Service Providers and Contractors

We may engage service providers and contractors to provide certain services to us or to perform certain services on our behalf including analytics, marketing, fulfillment, etc. In some cases, service providers or contractors may collect or be provided with access to your information as reasonably necessary to perform such services on the condition that they not use or disclose your Personal Information (including Sensitive Information) for other purposes.

E. Certain Business Transactions

We may share any or all of the information we collect (including Sensitive Information) with any successor to all or part of our business in connection with a transaction involving a sale, purchase, reorganization, or transfer of any asset of Gilley’s, LLC and/or Gilley’s Park City or Gilley’s Web Sites.

F. Social Media Information

Gilley’s Web Sites, or other social media websites or mobile applications, may allow you to connect and share information with various social media platforms, such as Facebook, X, and other similar platforms. These features may require us to implement

cookies, plug-ins, and/or APIs provided by such social media platforms to facilitate communications and features. We may share information that you provide us or that we may collect about your use of Gilley’s Web Sites with these various platforms, and such information becomes subject to their privacy and data policies when we do so.

We may also use the advertising services and networks offered by social media platforms, such as Facebook, X, and other similar platforms, to deliver ad content. We may disclose personal information to these social media platforms to allow such platforms to identify similar platform users that may be interested in our ad content. Use of these services requires the social media platform to implement cookies and/or pixels and similar technologies to deliver ads to you while online with such platforms. If you are a resident of a jurisdiction with different privacy laws, please review the applicable state-specific sections for more information about your choices with respect to your personal information and online targeted advertising (also known as cross-context behavioral advertising) through the use of cookies and similar technologies.

V. YOUR COMMUNICATION PREFERENCES

A. Establishing a Preference Account

We are committed to protecting the accuracy and confidentiality of your Personal Information and encourage you to tell us how you want us to communicate with you and let you know about special offers. By creating a Gilley’s Preference Account, you can view and update your Personal Information and chose your communication preferences. Your Preference Account gives you the ability to select from communications preference options including direct mail, e-mail, telemarketing, and text messaging.

To create a Preference Account, or to update your preferences at any time after you have created your Preference Account, please visit the PLAY Rewards center or PLAY Rewards kiosk to update your preferences.

If you are a casino member of the Players Club, you may update your communications preferences by logging in to your online account, and selecting “Update” on your Member Home Page. Information regarding opt-out procedures is also provided within every Gilley’s promotional e-mail or direct mail communication sent to you.

B. How to Opt-Out

If you wish to opt-out of receiving solicitations from us, or do not want us to share your Personal Information with Gilley’s Park City or Affiliates and/or Gilley’s Web Sites for marketing purposes, you can record your preferences by emailing us at INFO@PLAYGILLEYS.COM, call (316) 500-2WIN or write to:

Gilley’s Park City

Attn: General Counsel / Privacy Policy

3300 Las Vegas Boulevard South

Las Vegas, Nevada 89109

Although you may opt-out of the use and sharing of Personal Information for marketing purposes, we may still use and share information we collect for Non-Marketing Purposes. For example, even if you choose to opt-out from marketing-related communications, we will continue to send you transactional messages about your reservations or stays.

C. Telemarketing

Although you may have registered your telephone number on a Federal or State do not call list, certain exemptions (for example, for communicating with established customers) may allow us to contact you via telephone. However, to ensure our customer’s preferences are honored, we also maintain our own internal “Do Not Call” list. If you would like to opt-out of receiving telemarketing sales calls from us by adding your telephone number to our internal Do Not Call list, you may email us at info@playgilleys.com, or call (316) 500-2WIN

D. Other U.S. States Privacy Rights

To fulfill the intent of other U.S. states’ laws requiring web sites to conspicuously post their privacy policies, we have included the following links as well as the following summaries for each:

California Shine the Light Law & Consumer Privacy

Regardless of the U.S. state privacy policy, the purpose is to identify the Personal Information we collect, describe how you can review and make changes to that Personal Information, describe how you can learn about changes to the Privacy Policy,

and provide you with a mechanism to opt-out of certain marketing activities. If you wish to opt-out of receiving solicitations from us, or do not want us to share your Personal Information among Gilley’s Park City and Gilley’s Web Sites, Affiliates or Partners for marketing purposes, you may email us at INFO@PLAYGILLEYS.COM, call (316) 500-2WIN or write to:

Gilley’s Park City

Attn: General Counsel / Privacy Policy

3300 Las Vegas Boulevard South

Las Vegas, Nevada 89109

California Residents

California Shine the Light Law: California law requires certain businesses to respond to requests from California residents asking about the disclosure of Personal Information to third parties for third party marketing purposes. Alternatively, such businesses may adopt a policy of not disclosing Personal Information to third parties for marketing purposes if a California resident has opted-out of such information sharing. We have adopted an opt-out policy. If you wish to opt-out of our sharing your Personal Information with third parties for marketing purposes, please follow the instructions noted above.

California Consumer Privacy Act and Privacy Rights Act: If you are a California consumer, please see the “California Consumer Privacy Statement” for more information about your privacy rights under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (such laws/regulations are collectively, “CCPA” and such privacy rights are, collectively, “California Privacy Rights”).

Notice of Collection and Use of Personal Information

Categories of Personal Information Collected: We may collect (and may have collected during the 12-month period prior to the last updated date of this Privacy Policy) the following categories of Personal Information about you:

Identifiers: Identifiers such as name, e-mail address, postal mail address, telephone number, date of birth, credit card number, passport number, driver’s license number, bank account number, social security number, and internet protocol address.
Additional Data Subject to Cal. Civ. Code § 1798.80(e): Including signature, physical characteristics or description, state identification card number, insurance

policy number, education, debit card number, and other financial information, medical information, and health insurance information.

Protected Classifications: Characteristics of protected classifications under California or federal law, such as race, color, national origin, age, sex, gender, gender identity, sexual orientation, and military and veteran status.
Commercial Information: Including your gaming-related information, entertainment, travel, dining, lodging, purchase history, and business transactions.
Biometric Information: Biometric-related information including physiological or biological characteristics used to establish individual identity, such as fingerprints or facial recognition.
Online Activity: Internet or other similar electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements.
Geolocation Data.
Sensory Information: Audio, electronic, visual, thermal, olfactory, or similar information.
Employment Information: Professional or employment-related information; union membership.
Education Information: Defined by CCPA as education information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act.
Inferences: Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Business or Commercial Purposes for Which Information was Collected: We may use (and may have used during the 12-month period prior to the Last Updated date of this Privacy Policy) the categories of personal information listed above for the purposes described in our Privacy Policy. In addition, we may use these categories of personal information for certain business or commercial purposes, as follows:

Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes.
Debugging to identify and repair errors that impair existing intended functionality.
Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with our business.
Performing services on behalf of our business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of our business.
Providing advertising and marketing services to the consumer.
Undertaking internal research for technological development and demonstration.
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by our business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by our business.

Categories of Sources from Which Information was Collected: During the 12-month period prior to the Last Updated date of this Privacy Policy, we may have obtained personal information about you from the following categories of sources:

Information you provide directly to us and that is collected at Gilley’s Park City and/or Gilley’s Web Sites.
Information automatically collected through Gilley’s Web Sites, social media platforms, and online advertising services.
Information obtained from other sources, including service providers, contractors, third-party services, data analytics providers, other vendors, joint marketing and business partners, recruiting and talent agencies, job references, such as your employers or teachers, data brokers, such as public databases, credit bureaus,

credit reporting service providers and background check services, and government-related entities.

Information we automatically collect through the Gilley’s mobile apps, including location information.
Information we automatically collect when you use our Wi-Fi services. ● Information we automatically collect from mobile devices at Gilley’s Park City.
Other information we collect related to your gaming and purchase history and interactions with us.

Sale or Sharing of Personal Information: We do not sell your personal information in exchange for monetary compensation. We may sell or share your personal information for non-monetary compensation by allowing certain third parties (such as online advertising services and marketing partners) to collect personal information (i) via automated technologies on our websites and apps for cross-context behavioral advertising purposes and/or (ii) for marketing-related purposes. This kind of sharing may be considered a “sale or sharing” under California law when the personal information is exchanged for non-monetary compensation. You have the right to opt out of these types of disclosures of your information.

We may sell or share for cross-context behavioral advertising purposes and/or marketing-related purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this Privacy Policy) the following categories of personal information about you to online advertising services and/or marketing partners:

Identifiers
Commercial Information
Online Activity
Inferences

You have the right to opt-out of this disclosure of your information, as detailed above. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Disclosure of Personal Information: During the 12-month period prior to the Last Updated date of this Privacy Policy, we may have disclosed your personal information to certain categories of third parties, as described below.

We may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:

Category of Personal

Category of Personal Information	Category of Third Party
Identifiers	Third party service providers; third party business partners; credit reporting agencies; data analytics providers; digital advertising providers; internet service providers; operating system and platform providers.
Additional Data Subject to Cal. Civ. Code § 1798.80(e)	Third party service providers; third party business partners; credit reporting agencies; data analytics providers.
Protected Classifications	Third party service providers; third party business partners; credit reporting agencies; data analytics providers.
Commercial Information	Third party service providers; third party business partners; credit reporting agencies; data analytics providers.
Biometric Information	Third party service providers; third party business partners.
Online Activity	Third party service providers; third party business partners; digital advertising providers; internet service providers; operating system and platform providers; data analytics providers.
Geolocation Data	Third party service providers; third party business partners; digital advertising providers; internet service providers; operating system and platform providers.
Sensory Information	Third party service providers; third party business partners; credit reporting agencies; data analytics providers; digital advertising providers.
Employment Information	Third party service providers (e.g., employers of consultants); third party business partners; credit reporting agencies; data analytics providers.
Education Information	Third party service providers; third party business partners.
Inferences	Third party service providers; third party business partners; digital advertising providers.
Sensitive Personal Information	Third party service providers; third party business partners; credit reporting agencies.

In addition to the categories of third parties identified above, during the 12-month period prior to the Last Updated date of this Privacy Policy, we may have disclosed personal information about you to government, law enforcement, or regulatory entities (e.g., in response to subpoenas or gaming regulator requests) and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions, such as mergers, acquisitions or divestitures.

Retention of Personal Information: We will retain your personal information for the time period reasonably necessary to achieve the purposes described in this Privacy Policy and this California Consumer Privacy Statement, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.

Deidentified Information: To the extent we process deidentified information (as defined under CCPA), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

California Consumer Privacy Rights

If you are a California resident, you may have certain rights, as described below. These rights, which are discussed more fully below, are subject to some important exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. You have the right not to be discriminated against for exercising your California Privacy Rights. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. You also have the right to designate an authorized agent to exercise your California Privacy Rights on your behalf.

If you need this Policy in an alternative, accessible format due to a disability, please send an email with your name and contact information to info@playgilleys.com.

Requests To Know About Your Personal Information: You may have the right to request that we disclose to you, for the relevant time period as required by applicable law, the following: (1) the categories of Personal Information we have collected about you, (2) the categories of sources from which Personal Information was collected about you, (3) the business or commercial purpose for which your Personal Information was collected, sold, or shared, and (4) the categories of third parties to whom we have disclosed your Personal Information. In addition, you may have the right to request that we disclose to

you the specific pieces of Personal Information we have about you for the relevant time period required by applicable law. We are required to fulfill these requests no more than twice within a 12-month period.

Requests To Delete Your Personal Information: You may have the right to request that we delete your Personal Information, subject to certain exceptions such as our need to comply with legal obligations, fulfill orders, and complete transactions.

Requests To Opt-Out Of Sale Or Sharing Of Your Personal Information: You have the right to opt-out of having your Personal Information sold to or shared with third parties. The use of certain cookies (such as certain cookies placed by third parties) on our sites may constitute a sale or sharing of personal information under CCPA. You may request to fully exercise your California Privacy Rights opt-out rights via email to info@playgilleys.com. Please note that cookie preference tools are device and browser specific. If you delete or clear cookies or change devices or browsers, you will need to reset your cookie preferences using online tools. Please note that even if you opt-out of the sale or sharing of your Personal Information, we may still (a) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with CCPA, and (b) disclose your Personal Information in connection with certain business transactions consistent with the “How We Use The Information We Collect” above.

With respect to cookies and similar technologies, we disclose the categories of Personal Information listed below for online advertising purposes, and/or marketing-related purposes, and to provide third party social network features and functionality on our websites. During the 12-month period from the Last Updated date of this Privacy Policy, we may have sold or shared (as defined under CCPA) the following categories of Personal Information about you to online advertising services, social networks, and/or marketing partners: Identifiers, Commercial Information, Online Activity, and Inferences.

Requests To Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions.

Use And Disclosure Of Sensitive Personal Information: We do not use or disclose Sensitive Personal Information (as defined under CCPA) for purposes of inferring characteristics about a consumer.

How To Submit A Request: If you are a California resident, and wish to submit a Request to Know, Request to Delete, Request to Opt-out of Sale or Sharing, or Request to Correct Inaccurate Personal Information as described above, please email info@playgilleys.com with the identifying information requested. All Requests to Know,

Delete, and Correct are subject to verification of your identity to protect the privacy and security of your Personal Information.

Verification Procedures: In order to verify requests made pursuant to the CCPA, we may require at least two (2) pieces of identifying information (e.g., email address, street address, etc.) that match information maintained by us. In some cases, we may require additional identifying information and a signed declaration attesting to your identity. If you do not respond to our emails or other communications, or fail to timely provide information we request, we may be unable to fulfill your request.

A Request to Opt-out of Sale or Sharing need not be verified. However, if we have a good-faith, reasonable basis to believe that an opt-out request is fraudulent, we may deny the request and provide an explanation of the reason for the denial.

In certain circumstances, we may decline a request to exercise the Right to Know, Right to Delete, or Right to Correct Inaccurate Personal Information as described above, particularly where we are unable to verify your identity.

Authorized Agent: If you would like an authorized agent to submit a privacy request on your behalf, please have the authorized agent email info@playgilleys.com and provide the requested identifying information of both you and your authorized agent. We may

need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, we may: (a) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (b) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Notice of Financial Incentive: Based on your commercial activity and other factors, we may offer you various financial incentives such as discounts and special offers when you provide us with Personal Information (such as your name, email address, phone number, postal address, and date of birth) to sign-up for our loyalty program(s). When you sign-up for our loyalty program(s), you opt-in to receive financial incentives.

Under our loyalty program(s), you can receive financial incentives (benefits) based on certain purchases and other activities related to gaming, dining, hotel, entertainment, and more. You can join (opt-in to) the loyalty program(s) and find program details, terms and conditions at Gilley’s Web Sites. You may withdraw (opt-out) from receiving such financial incentives at any time by deactivating your loyalty program(s) account(s). To deactivate your loyalty program(s) account(s), visit the corresponding Gilley’s Web Sites and provide your identifying information as requested. The financial incentives offered in connection with the loyalty program(s) are reasonably related to the value of a

consumer’s data including the commercial activities of such consumer. We calculate the value of a consumer’s data based on various factors, including the consumer’s commercial activities and the expenses related to the offer, provision, or imposition of the financial incentives (benefits) to such consumer.

Other U.S. States Residents

If you are a consumer located in one of the U.S. states listed below, please review the “[State] Residents” information below about your privacy opt-out rights under the [State] Privacy Act as amended and its implementing rules (such law/rules are collectively, “[State] Privacy Law” and such privacy rights are, collectively, “[State] Privacy Rights”).

Colorado Residents

If you are a Colorado resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information (see Section 6.A. below); (B) request that we correct your inaccurate Personal Information (see Section 6.B. below); (C) request that we delete your Personal Information (see Section 6.C. below); (D) obtain a portable copy of your Personal Information (see Section 6.D. below); and (E) opt-out of the sale of your Personal Information and processing of your Personal Information for purposes of online targeted advertising (see Section 6.E. below). These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. If you need this Policy in an alternative, accessible format due to a disability, please send an email with your name and contact information to info@playgilleys.com

We may collect, use and share personal data for certain processing purposes, including those described in the chart below. For more information on the categories of personal data we may collect and how we may use such personal data, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Colorado Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law. We do not sell your personal information in exchange for monetary compensation. We may disclose your personal information for non-monetary compensation by allowing certain third parties (such as online advertising services and marketing partners) to collect personal information (i) via automated technologies on our websites and apps for online targeted advertising purposes and/or (ii) for marketing-related purposes. This kind of sharing may be considered a “sale” under Colorado Privacy Law when the personal information is exchanged for non-monetary compensation.

Category of Personal Data	Processing Purpose(s)	Used for Online Targeted Advertising?	Sold or Shared
Personal Information	Notify you of special promotions, offers, and events via e-mail, direct mail, social media, telephone, text message, push notifications, in-room notifications, and other means; Validate your identity; Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and/or Gilley’s Web Sites; Create and update customer profiles; Determine your eligibility for casino markers and offers; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to your inquiries; Perform background checks (for example, if you apply for employment with us); Process financial transactions; Manage professional development, performance, and conduct; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	Yes	Sold To: Digital advertising providers and third party business partners. Shared With: Third party service providers; third party business partners; credit reporting agencies; data analytics providers; digital advertising providers; internet service providers; operating system and platform providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Employment Application Information	Perform background checks (for example, if you apply for employment with us); Manage professional development, performance, and conduct; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions, such as mergers, acquisitions or divestitures.	No	Sold To: N/A Shared With: Third party service providers (e.g., employers of consultants); third party business partners; credit reporting agencies; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Vehicle Information	Security and safety; Protect our rights or property; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions, such as mergers, acquisitions or divestitures.	No	Sold To: N/A Shared With: Third party service providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Purchase and Transaction Information	Notify you of special promotions, offers, and events; Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and Gilley’s Web Sites; Create and update customer profiles; Determine your eligibility for casino markers and offers; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to your inquiries; Process financial transactions; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	Yes	Sold To: N/A Shared With: Third party service providers; third party business partners; credit reporting agencies; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Sensitive Personal Information (as defined by applicable Colorado privacy law)	Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Internal market research and analytics; Generate statistical studies; Determine your eligibility for casino markers and offers; Respond to your inquiries; Perform background checks (for example, if you apply for employment with us); Process financial transactions; Manage professional development, performance, and conduct; Process biometric-related information including physiological or biological characteristics used to establish individual identity, such as fingerprints or facial recognition; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	No	Sold To: N/A Shared With: Third party service providers; third party business partners; credit reporting agencies); government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Wi-Fi and Location Information	Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and Gilley’s Web Sites; Create and update customer profiles; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	Yes	Sold to: N/A Shared With: Third party service providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Device and Browser Information	Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and Gilley’s Web Sites; Create and update customer profiles; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to your inquiries; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	Yes	Sold To: Digital advertising providers and third party business partners. Shared With: Third party service providers; third party business partners; digital advertising providers; internet service providers; operating system and platform providers; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Social Media Information	Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and Gilley’s Web Sites; Create and update customer profiles; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to your inquiries; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions.	Yes	Sold To: Digital advertising providers and third party business partners. Shared With: Third party service providers; third party business partners; digital advertising providers; internet service providers; operating system and platform providers; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Video Surveillance Information	Security and safety; Protect our rights or property; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries requests, audits, or corporate transactions.	No	Sold To: N/A Shared With: Third party service providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Audio, electronic, or similar information	Notify you of special promotions, offers, and events; Operate loyalty program(s); Provide the services and products you request including hotel accommodations, gaming activities, spa services, food and beverage services, retail, and entertainment; Assess and improve our products and services; Assess and improve Gilley’s Park City and Gilley’s Web Sites; Assess your use of Gilley’s Park City and Gilley’s Web Sites; Create and update customer profiles; Determine your eligibility for casino markers and offers; Internal market research and analytics; Generate statistical studies; Security and safety; Protect our rights or property; Respond to your inquiries; Perform background checks (for example, if you apply for employment with us); Process financial transactions; Manage professional development, performance, and conduct; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries requests, audits, or corporate transactions.	No	Sold To: N/A Shared With: Third party service providers; third party business partners; credit reporting agencies; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).
Other Gaming Information	Notify you of special promotions, offers, and events; Operate loyalty program(s); Provide the services and products you request; Process financial transactions; Create and update customer profiles; Internal market research and analytics; Generate statistical studies; Respond to your inquiries; Respond to government, law enforcement, or regulatory entities and third parties in connection with litigation, investigations, inquiries requests, audits, or corporate transactions, such as mergers, acquisitions or divestitures.	Yes	Sold To: N/A Shared With: Third party service providers; third party business partners; credit reporting agencies; data analytics providers; government, law enforcement, or regulatory entities and third parties (e.g., in response to subpoenas or gaming regulator requests).

In addition to the categories of third parties identified above, we may have disclosed personal information about you to government, law enforcement, or regulatory entities (e.g., in response to subpoenas or gaming regulator requests) and third parties in connection with litigation, investigations, inquiries, requests, audits, or corporate transactions, such as mergers, acquisitions or divestitures.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Colorado resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Colorado resident and wish to request correction of your inaccurate Personal information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Colorado Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Colorado resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies, or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Colorado Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as defined by Colorado Privacy Law.

Authentication Procedures: In order to verify requests made pursuant to Colorado Privacy Law, we may require at least two (2) pieces of identifying information (e.g., email address, street address, etc.) that match information maintained by us. In some cases, we may require additional identifying information and a signed declaration attesting to your identity. If you do not respond to our emails or other communications, or fail to timely provide information we request, we may be unable to fulfill your request.

In certain circumstances, we may decline a request to exercise a right described above, particularly where we are unable to verify your identity.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent contact us at info@playgilleys.com for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Colorado resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM.

Bona Fide Loyalty Program: Based on your commercial activity and other factors, we may offer you various financial incentives such as discounts and special offers when you provide us with Personal Information (such as your name, email address, phone

number, postal address, and date of birth) to sign-up for our loyalty program(s). When you sign-up for our loyalty program(s), you opt-in to receive financial incentives.

Under our loyalty program(s), you can receive financial incentives (benefits) based on certain purchases and other activities related to gaming, dining, hotel, entertainment, and more. You can join (opt-in to) the loyalty program(s) and find program details, terms and conditions at Gilley’s Web Sites. You may withdraw (opt-out) from receiving such financial incentives at any time by deactivating your loyalty program(s) account(s). To deactivate your loyalty program(s) account(s), visit the applicable Gilley’s Web Sites and provide your identifying information as requested.

If you exercise your right to request deletion of your Personal Information, it will be impossible for us to continue providing loyalty program(s) benefits to you because we will no longer have the information required to provide you with certain benefits.

Sensitive Personal Information (as defined by Colorado Privacy Law), such as your citizenship information, may be provided to us if you provide your passport for identity verification purposes during the sign-up process. Although you are required to provide government-issued identification to receive loyalty program benefits due to legal obligations (including gaming regulations), you are not required to provide a passport containing such information.

The categories of Personal Information or Sensitive Personal Information collected through our loyalty program that may be sold or processed for online targeted advertising through the use of cookies and similar technologies include identifiers (such as your name, email address, phone number, postal address, and date of birth) and commercial information (such as your purchases and other activities related to gaming, dining, hotel, and entertainment).

The categories of Third Parties that may receive the Personal Information or Sensitive Personal Information collected through our loyalty program include, third party service providers; third party business partners; credit reporting agencies; data analytics providers; digital advertising providers; internet service providers; operating system and platform providers. The Personal Information or Sensitive Personal Information collected through our loyalty program will not be provided to Data Brokers, as defined by Colorado Privacy Law.

Connecticut Residents

If you are a Connecticut resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Connecticut Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Connecticut resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Connecticut resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a Connecticut resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a Connecticut resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Connecticut Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Connecticut resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Connecticut Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, as defined by Connecticut Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Connecticut resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Delaware Residents

If you are a Delaware resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; (E) request a list of categories of third parties; and (F) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of

Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Delaware Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Delaware resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Delaware resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a Delaware resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a Delaware resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests for List of Categories of Third Parties: You have the right to request a list of the categories of third parties to which we have disclosed your Personal Information, subject to certain exceptions. If you are a Delaware resident and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Delaware Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Delaware resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Delaware Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, as defined by Delaware Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Delaware resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Iowa Residents

If you are an Iowa resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we delete your Personal Information; (C) obtain a portable copy of your Personal Information; and (D) opt-out of processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are an Iowa resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us, subject to certain exceptions. If you are an Iowa resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that you provided to us, subject to certain exceptions. If you are an Iowa resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes: You have the right to opt-out of the processing of your Personal Information for purposes of online targeted advertising (which involves the use of cookies and similar technologies). If you are an Iowa resident and wish to opt-out of such processing of your Personal Information, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences using the above tools. We do not “sell” Personal Information, as defined by Iowa Privacy Law.

Montana Residents

If you are a Montana resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Montana Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Montana resident, and wish to request this information, then please visit email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Montana resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us, subject to certain exceptions. If you are a Montana resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that you provided to us, subject to certain exceptions. If you are a Montana resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Montana Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Montana resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Montana Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, as defined by Montana Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the

authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Montana resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Nebraska Residents

If you are a Nebraska resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Nebraska Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Nebraska resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Nebraska resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a Nebraska resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a Nebraska resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Nebraska Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Nebraska resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Nebraska Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as defined by Nebraska Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Nebraska resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

New Hampshire Residents

If you are a New Hampshire resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under New Hampshire Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a New Hampshire resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a New Hampshire resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a New Hampshire resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a New Hampshire resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under New Hampshire Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a New Hampshire resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with New Hampshire Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with “How We Use The Information We Collect” above.

We do not engage in profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, as defined by New Hampshire Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a New Hampshire resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

New Jersey Residents

If you are a New Jersey resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under New Jersey Privacy Law), we will maintain and use the

information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a New Jersey resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a New Jersey resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete your Personal Information, subject to certain exceptions. If you are a New Jersey resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a New Jersey resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under New Jersey Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a New Jersey resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies; or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with New Jersey Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with Section 3 (“How We Use The Information We Collect”) above.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as defined by New Jersey Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a New Jersey resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Oregon Residents

If you are an Oregon resident, you have the right to (A) confirm whether or not we are processing your Personal Information and the categories of Personal Information we are processing; (B) request a list of third parties to which we have disclosed any Personal Information; (C) obtain a copy of your Personal Information; (D) request that we correct your inaccurate Personal Information; and (E) request that we delete your Personal Information; and (F) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect, please see “Information We Collect” above. For more information on how we use Personal Information and the types of third parties with whom we may share Personal Information, please see “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Oregon Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and the Categories of Personal Information Processed: You have the right to request that we confirm whether or not we are processing your Personal Information and the categories of Personal Information we are processing, subject to certain exceptions. If you are an Oregon resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests for List of Third Parties: You have the right to request a list of third parties (as defined under Oregon Privacy Law) to which we have disclosed any Personal Information, subject to certain exceptions. If you are an Oregon resident and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are an Oregon resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All such requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are an Oregon resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are an Oregon resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All deletion requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Oregon Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are an Oregon resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies, or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Oregon Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with Section 3 (“How We Use The Information We Collect”) above.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as defined by Oregon Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are an Oregon resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Texas Residents

If you are a Texas resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Texas Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Texas resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Texas resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a Texas resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that we have processed, subject to certain exceptions. If you are a Texas resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes (Sale and Online Targeted Advertising): Under Texas Privacy Law, you have the right to opt-out of the sale of your Personal Information and the processing of your Personal Information for purposes of online targeted advertising (which involves the use of certain cookies placed on our sites by us or third parties). If you are a Texas resident, and: (1) wish to opt-out of the sale of your Personal Information not involving the use of cookies and similar technologies, or (2) wish to opt-out of online targeted advertising or the sale of your Personal Information involving the use of cookies and similar technologies, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences. Please note that even if you opt-out of the sale of your Personal Information, we may still (i) disclose your Personal Information to service providers, contractors, and other entities for business or commercial purposes consistent with Texas Privacy Law, and (ii) disclose your Personal Information in connection with certain business transactions consistent with Section 3 (“How We Use The Information We Collect”) above.

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as defined by Texas Privacy Law.

Authorized Agent: If you would like an authorized agent to submit a request on your behalf to opt-out of the sale of your Personal Information, then please have the authorized agent email INFO@PLAYGILLEYS.COM and provide the requested identifying information of both you and your authorized agent. If you would like an authorized agent to submit a request on your behalf to opt-out of online targeted advertising involving the use of cookies and similar technologies, then please have the authorized agent email INFO@PLAYGILLEYS.COM for instructions. We may need to contact you as these requests may include additional validation steps depending on the nature of the request. If we receive a request from an authorized agent on your behalf, then we may: (1) require authorization signed by you to verify that the agent is, in fact, authorized to act on your behalf; and (2) take steps to verify your identity. These steps are intended to protect the privacy and security of your Personal Information.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Texas resident, then you may appeal our decision with respect to a request you have submitted by emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Utah Residents

If you are a Utah resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we delete your Personal Information; (C) obtain a portable copy of your Personal Information; and (D) opt-out of processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Utah Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Utah resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us, subject to certain exceptions. If you are a Utah resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that you provided to us, subject to certain exceptions. If you are a Utah resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes: You have the right to opt-out of the processing of your Personal Information for purposes of online targeted advertising (which involves the use of cookies and similar technologies). If you are a Utah resident and wish to opt-out of such processing of your Personal Information, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences using the above tools. We do not “sell” Personal Information, as defined by Utah Privacy Law.

Virginia Residents

If you are a Virginia resident, you have the right to (A) confirm whether or not we are processing your Personal Information and to access such Personal Information; (B) request that we correct your inaccurate Personal Information; (C) request that we delete your Personal Information; (D) obtain a portable copy of your Personal Information; and (E) opt-out of processing of your Personal Information for purposes of online targeted advertising. These rights, which are discussed more fully below, are subject to certain exceptions, which are intended, among other things, to protect the integrity and privacy of your Personal Information. For more information on the categories of Personal Information we may collect and how we may use such Personal Information, please see “Information We Collect” and “How We Use the Information We Collect” above. To the extent we process deidentified information (as defined under Virginia Privacy Law), we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Requests to Confirm Processing of Your Personal Information and to Access Such Personal Information: You have the right to request that we confirm whether or not we are processing your Personal Information and to access such Personal Information, subject to certain exceptions. If you are a Virginia resident, and wish to request this information, then please visit email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Correct Inaccurate Personal Information: You have the right to request that we correct your inaccurate Personal Information, subject to certain exceptions. If you are a Virginia resident and wish to request correction of your inaccurate Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request correction of your inaccurate Personal Information and provide the identifying information requested. All correction requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Delete Your Personal Information: You have the right to request that we delete the Personal Information you provided to us or that we obtained about you, subject to certain exceptions. If you are a Virginia resident, and wish to request deletion of your Personal Information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request deletion of your Personal Information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Obtain a Portable Copy of Your Personal Information: You have the right to obtain a portable copy of your Personal Information that you provided to us, subject to certain exceptions. If you are a Virginia resident, and wish to request this information, then please email INFO@PLAYGILLEYS.COM and indicate that you wish to request this information and provide the identifying information requested. All requests are subject to authentication of your identity to protect the privacy and security of your Personal Information.

Requests to Opt-Out of Processing for Specified Purposes: You have the right to opt-out of the processing of your Personal Information for purposes of online targeted advertising (which involves the use of cookies and similar technologies). If you are a Virginia resident and wish to opt-out of such processing of your Personal Information, then please email INFO@PLAYGILLEYS.COM. If you delete or clear cookies or change devices or browsers, then you will need to reset your cookie preferences.

We do not “sell” Personal Information or engage in profiling in furtherance of decisions that produce legal or similarly significant effects, as those terms are defined by Virginia Privacy Law.

Right to Appeal Our Decisions Regarding Your Requests: If you are a Virginia resident, then you may appeal our decision with respect to a request you have submitted by

emailing INFO@PLAYGILLEYS.COM and indicating that you wish to appeal our decision.

Other Jurisdictions

If you reside in a jurisdiction outside of those listed above, you may submit certain privacy-related requests to us. If you wish to submit such a request, then please email INFO@PLAYGILLEYS.COM. We reserve the right to authenticate your identity to protect the privacy and security of your Personal Information.

VI. SECURITY

Non-Personal Information and Personal Information, including Confidential Personal Information, collected by the Gilley’s Web Sites and Gilley’s Park City is stored on secure servers. The secure servers are protected by firewalls and a multitude of other industry standard security measures. These security measures are instituted to ensure the protection of these secure servers from unauthorized access. However, no security system is impenetrable, and these systems could become accessible in the event of a security breach. We have controls in place that are designed to detect potential data breaches, contain and minimize the loss of data, and conduct forensic investigations of a breach.

Our staff is required to take reasonable measures to ensure that unauthorized persons cannot view or access your Personal Information. Employees who violate our privacy policies are subject to disciplinary action, up to and including termination.

We cannot enforce or control the security of the computers, electronic devices, or electronic communication method(s) you may utilize to send e-mails and submit information to us. You are responsible for ensuring that the computers, electronic devices and electronic communication methods you utilize will provide adequate security for communicating with us. We are not responsible for the disclosure or interception of your information before we receive it.

As a standard security practice, we will take reasonable steps, which are standard in the industry to ensure that the communication methods used to support the Gilley’s Web Sites do not permit connection or communication by methods that have known security weaknesses or vulnerabilities. As such, if you experience trouble using a Gilley’s Web Site, it may be an indication that you need to upgrade your software or application to a newer version that supports more secure communication methods.

In situations where your Personal Information is collected by third parties under contract with us for performance of their contractual duties and other purposes, we require such

third parties to exercise reasonable care to protect that information and restrict the use of your Personal Information to the purposes for which it was provided.

VII. RESPONSIBLE GAMING PROGRAM

We believe that gaming should always be handled responsibly. That is why Gilley’s adheres to the American Gaming Association Code of Conduct for Responsible Gaming. As part of our Responsible Gaming Program, we will not use the Personal Information of members of the PLAY Rewards exclusion program as applicable, for any marketing purposes, including direct mail marketing, telemarketing, promotional mail, and player recognition programs.

VIII. CONNECTIONS (LINKS) TO THIRD PARTY WEB SITES

When you connect (link) to unaffiliated third-party sites, including sites operated by our Partners, through the Gilley’s Web Sites, we are not responsible for, and cannot control the information collection or privacy practices of those sites.

It is important that you review and understand the privacy policies posted on any linked sites you visit, before providing any Personal Information. These sites may also collect cookies, or allow third-party advertisers on their sites to collect cookies. You can often find information regarding a site and its privacy policy (if one exists) on the site’s home page. If you cannot find a site’s privacy policy or do not like a site’s privacy policy, you may prefer not to conduct business with, nor provide information through, that site.

IX. PERSONS UNDER AGES 18 AND 21

Certain areas and activities at Gilley’s Park City and Gilley’s Web Sites are intended for use only by persons 21 years of age or older.

If you are under the age of 21, we ask that you do not access or attempt to access any portions of the Web Sites that are restricted to persons age 21 or older, including but not limited to any Web Sites containing password-restricted information (see TI [INSERT TERMS OF USE LINK] https://treasureisland.com/terms for more information).

We reserve the right to verify your age at any time for any reason and may refuse admittance or service to a person who does not have valid age identification at any time.

Gilley’s abides by the Children’s Online Privacy Protection Act (COPPA). Therefore, we do not knowingly collect or allow the collection of Personal Information from persons under the age of 18. If the parent or guardian of a person under 18 believes that the person has provided us with Personal Information, the parent or guardian of that person should contact us at INFO@PLAYGILLEYS.COM and request that such Personal Information be deleted from our files. If a person under the age of 18 submits Personal Information, we delete the information as soon as we discover the source of the submission, and we do not use the information for any purpose.

X. CHANGES TO THIS PRIVACY POLICY

We reserve the right to revise this Privacy Policy at any time without notice. When this Privacy Policy is revised the revised Privacy Policy will be available at Gilley’s Park City and will be posted on the Gilley’s Web Sites. Any revised Privacy Policy will only apply prospectively to Personal Information or Non Personal Information collected or modified after the effective date of the revised policy. You should periodically review the Privacy Policy available at Gilley’s Park City and the Gilley’s Web Sites for revisions. You are encouraged to bookmark the Web Sites to check for updates and take or print out copies of the Privacy Policy for your records. Use of a Gilley’s Web Site after revision of the Privacy Policy signifies your consent to the revised Privacy Policy.

If you have any questions regarding this Privacy Policy, please contact us at INFO@PLAYGILLEYS.COM.

Updated: 19 Sept 2025

EU GDPR / CPPA / VDCPA PRIVACY NOTICE

Gilley’s, LLC (Gilley’s, we, us) believes it is important that you understand how Gilley’s collects, stores, shares and uses information from and about our website visitors, customers and vendors. This Privacy Notice (Notice) and our cookie policy describe our collection, use and disclosure of personal and non-personal data collected through this website or in the course of our business activities conducted elsewhere, such as at Gilley’s Park City, when we act as the controller of that data and when its processing is governed by the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CPPA), and/or the Virginia Data Consumer Protection Act (VDCPA). This Notice does not apply to the information collected, stored, shared, or distributed by third-party sites. This Notice may be updated from time to time.

For the purposes of GDPR, CPPA, and/or VDCPA, Gilley’s is the controller of any personal data collected from you on this website or otherwise for the purpose of conducting or developing our business with you. For the purposes of this Notice, personal data means any information relating to an identified or identifiable person.

[INSERT TABLE OF CONTENTS FOR NEXT SECTION]

Information You Provide

In order to access or use certain portions of this website or enjoy the full functionality of this website, or otherwise in conducting business with us or seeking to conduct business with us, you may be prompted to provide certain personal data to us in the following ways:

by filling in forms on this website, our casino players club, employment applications, a trade show or marketing event, or anywhere else we conduct business;
by subscribing to newsletters or other communications;
by corresponding with us by phone, e-mail or otherwise using our contact details; ● by clicking on our online banner advertisements;
by visiting our social media (e.g. Facebook, Twitter, etc.) pages; ● by making purchases or engage in other transactions or activities; ● by using WiFi services provided by us;
by using text messaging services provided by us;
by providing information to authorized third parties or business partners; or ● other activities that my require personal data

Typically, the personal data you give us may include name, business affiliation, business address, telephone number, street address and email address, birth date, credit card or banking information, gaming activity information, and any personal details required by law and/or to resolve any enquiries or complaints.

This personal data is required to enter into a contract with you (such as in anticipation of a services agreement) or to perform a contract with you (such as to provide services at your request), and failure to provide any information may result in our inability to provide requested services or products.

Information We Collect Automatically

When you visit this website, our server automatically collects certain browser or device generated information, which may in some cases constitute personal data, including but not limited to:

your domain;
your IP address;
the date, time and duration of your visit;
your geographical location;
your browser type;
your operating system;
your page visits;
information from third parties;
other information about your computer or device;
Internet traffic

Information From Other Sources

When you use integrated social media features on this website, mobile applications or other social media websites, we may obtain personal data such as your name and email address.

Cookies

This website uses cookies to learn what is most relevant to you and ensure you have a personalized experience. We collect certain data from cookies, which are pieces of data stored directly on the computer or mobile device that you are using. Cookies allow us to

collect data such as browser type, pages visited, referring URL, and other aggregated traffic data. We use the data to facilitate navigation, to display data more effectively, to collect statistical data, and to personalize your experience. We also use cookies to track responses to online advertisements and marketing emails. You can choose whether to accept cookies by changing the settings on your browser. If you do not accept cookies, you may experience some performance issues with our website, and/or you may not receive advertising or other offers from us that are relevant to your interests. You will find more details on how to manage cookies here.

Why We Use Personal Data

All processing and use of your personal data is justified. The following is an overview of the justifications for processing personal data, and why we use your personal data. Additional details on how we process your personal data may be provided to you in a separate notice or contract.

Justification – The processing is necessary to perform a contract with you or take steps to enter into a contract at your request: To provide you with documentation or communications which you have requested; to fulfil an order; to contact you for confirmation and provide after-sales support; to process and complete certain transactions involving the website, and more generally transactions involving Gilley’s’ products and services; or to provide product information you have requested;
Justification – The processing is necessary for us to comply with a relevant legal obligation: To keep accounting records and evidence of on-line sales;
Justification – The processing is in our legitimate interests, which are not overridden by your interests and fundamental rights: To track reservations and corresponding hotel stays generated through our affiliate program and to calculate and/or audit commissions that may be paid in relation to a hotel stay; to send you materials about our products and services; to evaluate transactions involving this website or our products and services; to operate, evaluate, maintain, improve and develop this website (including by monitoring and analyzing trends, access to, and use of this website for advertising and marketing, including statistical or demographic analysis); to engage you about events, promotions, this website and Gilley’s’ products and services; to send you

marketing communications; to correspond with users to resolve their queries or complaints; to protect and ensure safety of this website, Gilley’s confidential and proprietary information, and Gilley’s employees; to manage, protect against and investigate fraud, risk exposure, claims and other liabilities, including but not limited to violation of our contract terms or laws or regulations; to share your personal data with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case personal data held by us about our users may be one of the transferred assets; or

Justification – You have consented to the processing: To cite you on this website as a satisfied customer.

When the justification for processing is our legitimate interests, those interests are to use supplier, customer and this website user data to conduct and develop our business activities with them and with others, while limiting the use of their personal data to those purposes that strictly support the conduct and development of our business within the reasonable expectation of the individuals concerned.

Gilley’s will not sell or rent your personal data to third parties.

Disclosure of Personal Data

From time to time it will be necessary to share your personal data among the Gilley’s and this website, as well as with our affiliated businesses for the purposes described above. We may also appoint third party service providers (who will operate under our instructions) to assist us in providing information, products or services to you, in conducting and managing our business, or in managing and improving our products, services or this website. Gilley’s may share your personal data with these affiliates and third parties to perform services that the third parties have been engaged by Gilley’s to perform on Gilley’s’ behalf, subject to appropriate contractual restrictions and security measures, or if we believe it is reasonably necessary to prevent harm or loss, or if we believe that the disclosure will further an investigation of suspected or actual illegal activities.

We do not intentionally store any personal data within the EU. Should there ever be a situation in which we store your personal data in the EU, and transfer it outside the EU to other Gilley’s affiliates or to third party service providers, we will take steps to ensure that your personal data receives the same level of protection as if it remained within the EU, including by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU – US Privacy Shield. For transfers of personal data among Gilley’s affiliates we will put in place European Commission approved Standard Contractual Clauses. The list of all the countries to which your personal data is transferred, and whether each country benefits from a decision of the European Commission determining that the country provides adequate protection to personal data, is set forth here. Should it ever occur, you have a right to obtain details of the mechanism under which your personal data is transferred outside of the EU by contacting info@playgilleys.com

Gilley’s reserves the right to share any information that you provide which is not deemed personal data or is not otherwise subject to contractual restrictions.

Minors

This website is not intended for use by children under the age of 18 or 21 years depending on the functionalities used and Gilley’s does not knowingly collect, store, share or use the personal data of children under 18 years. If you are under the age of 18 years, please do not provide any personal data, even if prompted by this website to do so. If you are under the age of 18 years and you have provided personal data, please ask your parent(s) or guardian(s) to notify Gilley’s and Gilley’s will delete all such personal data.

Direct Marketing

We may use your personal data to send you direct marketing communications about products or our related services. This will be in the form of email, post, SMS or targeted online advertisements. We limit direct marketing to a reasonable and proportionate level, based on the information we have about you.

Where opt-in consent is required by applicable law, we will ask for your consent, and we will be relying on consent under GDPR and/or CPPA. Where we do not use electronic media or where we rely on soft-opt in exemption under applicable law, for the purposes of GDPR and/or CPPA, our processing of your personal data for direct marketing purposes will be based on our legitimate interests to promote our business. You have a right to stop receiving direct marketing at any time – you can do this by following the opt-out or unsubscribe links in electronic communications (such as emails), by changing your account privacy settings, or by emailing us at INFO@PLAYGILLEYS.COM.

We also use your personal data for customizing or personalizing advertisements, offers and content made available to you based on your use of our platform or other mobile applications, platforms or services, and analyzing the performance of those advertisements, offers and content, as well as your interaction with them. We may also recommend content to you based on information we have collected about you and your viewing habits. This constitutes ‘profiling’.

Security

Gilley’s aims to safeguard and protect your personal data from unauthorized access, improper use or disclosure, unauthorized modification or unlawful destruction or accidental loss, and Gilley’s utilizes and maintains certain reasonable processes, systems, and technologies to do so. However, you acknowledge that no transmission over the Internet is completely secure or error-free, and that these processes, systems, and technologies utilized and maintained by Gilley’s are subject to compromise. Accordingly, we cannot be held responsible for unauthorized or unintended access that is beyond our control.

Retention of Your Personal Data

We apply a general rule of keeping personal data only for as long as required to fulfil the purposes for which it was collected. In general, we retain your personal data for a period of time corresponding to a statute of limitation setting out the period during which legal claims may be filed in court. For example, we’ll retain your personal data during the statute of limitation period, to maintain an accurate record of your dealings with us. However, in some circumstances we may retain personal data for other periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements, or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required. With respect to marketing, we retain your personal data for up to ten years (or less when required by law) after your last request for service or other contact you initiate.

External Links

This website may contain links to third party sites. Since Gilley’s does not control nor is responsible for the privacy practices of those websites, we encourage you to review the privacy policies of these third party sites. This Notice applies solely to personal data collected by this website or in the course of our business activities.

Your Rights

Right to withdraw consent: Where applicable, you have the right to withdraw your consent at any time. For example, if you wish to opt-out of receiving electronic marketing communications, you can use the ‘unsubscribe’ link provided in our emails or text the STOP number in our SMS, or otherwise contact us directly and we will stop sending you communications.

Right of access, rectification and erasure: You have the right to request access to and obtain a copy of any of your personal data that we may hold, to request correction of any inaccurate data relating to you and to request the deletion of your personal data under certain circumstances. You can see and update most of this data yourself online, or by contacting us directly at INFO@PLAYGILLEYS.COM.

Data portability: Where we are relying (as the justification for processing) upon your consent, or the fact that the processing is necessary to perform a contract to which you are party or to take steps at your request prior to entering a contract, and the personal data is processed by automatic means, you have the right to receive all such personal data which you have provided us in a structured, commonly used and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.

Right to restriction of processing: You have the right to restrict our processing of your personal data (that is, allow only its storage) where:

you contest the accuracy of the personal data, until we have taken sufficient steps to correct or verify its accuracy;
where the processing is unlawful but you do not want us to erase the personal data;
where we no longer need your personal data for the purposes of the processing, but you require such personal data for the establishment, exercise or defense of legal claims; or
where you have objected to processing justified on legitimate interest grounds (see below), pending verification as to whether we have compelling legitimate grounds to continue processing.

Where your personal data is subject to restriction, we will only process it with your consent or for the establishment, exercise or defense of legal claims.

You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal data infringes applicable law. A list of data protection supervisory authorities is available here.

Right to object to processing (including profiling) based on legitimate interest grounds: Where we are relying upon legitimate interests to process personal data, you have the right to object to that processing. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing that override your

interests, rights and freedoms, or we need to process the personal data for the establishment, exercise or defense of legal claims. Where we rely upon legitimate interest as a basis for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.

Right to object to direct marketing (including profiling): You have the right to object to our use of your personal data (including profiling) for direct marketing purposes, such as when we use your personal data to invite you to our promotional events.

Please contact us at [INSERT IT MANAGER EMAIL ADDRESS] if you wish to exercise any of your rights, or if you have any enquiries or complaints regarding the processing of your personal data.

Contact

Any changes or updates we may make to this Notice will be posted on this page in advance. If we have your contact details on file we will notify you in advance of any changes to this Notice that are material or may impact you. For other changes, please check back frequently to see any updates or changes to this Notice.

If you have any questions in relation to this Notice or you wish to exercise any of your rights, please contact us at INFO@PLAYGILLEYS.COM.

Updated: [DATE]