Current as of April 18, 2022

Please read this Privacy Statement and the Casino-Core Online Casino Terms of Service prior to using, accessing, or downloading the Casino-Core Online Casino or any related website, application, or software.

Casino-Core Online Casino is a business product of Boyd Gaming Corporation ("Boyd Gaming"). This Privacy Statement applies to the Casino-Core Online Casino as well as any related website, application or software that links to this Privacy Statement, collectively referred to as "the Services," and does not apply to any website, mobile app, or product operated by Boyd Gaming that has a separate privacy policy, notice, or statement.

This Privacy Statement explains the information we collect, and how we collect, use and, in certain circumstances, share your information in connection with the Service(s) we provide you. If you have any questions, feel free to email us. Please note that, if you interact with Boyd Gaming in other contexts besides through the Services, such as by signing up to become a Boyd Rewards member or by using the Boyd Gaming website, Boyd Gaming's collection, use, and disclosure of your information will be subject to the Boyd Gaming Privacy Statement.

Information We Collect and How We Use It.

You may access the Services as a guest without providing any information other than your date of birth and the information described in the "Automatically Collected Information" section below. When accessing the Services as a Boyd Rewards member, we will collect your Boyd Rewards credentials (Boyd Rewards member number or username and associated Boyd Rewards online account password). We automatically collect some information when you access or use the Services and collect other information when you voluntarily provide it to us. If you elect not to provide certain information, you may be prevented from participating in some of the Services.

We may also collect information about you from other sources, such as publicly available or commercially available information.

Information You Provide.

There is no cost to access the Services.

We may collect information from you when you access or use the Services, including, for example:

• Registration information (identifiers such as your date of birth, Boyd Rewards username and Boyd Rewards password);
• Purchase and other transaction information if you make a purchase (we use a third-party service provider for these transactions, so while we receive information about the transaction, such as what you purchased, we do not receive your billing or payment information);
• Demographic information such as your gender and age;
• Social network platform user information if you access the Services through our social network community page (including information that is visible on your social network page if you have allowed this through the privacy settings on your social network account);
• Loyalty program information if you enroll in or are already enrolled in Boyd Gaming's Boyd Rewards loyalty program (identifiers such as name, email or postal address, telephone number, information about your use of the Services and any purchases you have made or rewards you have received);
• Information you provide in response to contests, surveys or other outreach (identifiers such as name, email or postal address, telephone number, eligibility information for contests which may include age, images or photographs, hobbies or interests, and occupation);
• Information that you may post on the Services through in-game play, comments, reviews, support tickets, or other posts. You control the information that you provide in this way and this information may include actions you perform with other players; all such information, excluding support tickets, can be viewed by the general public so please take that into consideration when you post;
• Inferences based on the information described above and other information described in this Privacy Statement; and
• Correspondence you send to us, including questions about the Services or communications about this Privacy Statement.

Information we collect.

We collect information about your use of the Services, such as when you play games via the Casino-Core Online Casino or interact with the Services through third-party websites or applications. The information we collect may include, without limitation, internet or other electronic network activity information, device ID, internet protocol (IP) address (we may also derive your approximate location from your IP address), browser type, referring / exit pages and URLs, other browser history, platform type, clicks and other traffic data, pages viewed, the amount of time spent on particular pages, payment events, and related date and time information. If you experience an error, we collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred. All of this information allows us to understand how the Services are used, improve the Services, and communicate with you, both for customer support and to suggest other products or services that may be of interest to you.

We may collect information about your location, including precise location information derived from GPS, WiFi, and other device information, with your consent if required by law and consistent with your mobile device or app permissions. Also consistent with your mobile device or app permissions, we may send you push notifications.

We also receive the categories of information described above from other sources, including from government entities that make information publicly available, entities that sell data, and third-party services and organizations. For example, if you access any social media or similar services through the Services to login or to share information about your experience on our Services with others, we may collect information from these third-party services.

We may aggregate or de-identify the information you provide or that we collect automatically. Aggregated or de-identified data is not subject to this Privacy Policy. Because aggregated or de-identified information does not individually identify you or any other individual, we may use and disclose such information for any purpose.

Please see the "Cookies and Tracking" section below for more information.

We do not currently response to browser "do-not-track" signals.

Use of Information.

We may use the information we collect for our general commercial or business purposes such as to improve and grow our business and to offer you our own, our affiliates', or third-party, products or services that we think you may find of interest. Our uses of the information which we collect may include:

• Providing and improving the Services, including confirming your eligibility to use the Services and verifying you, enhancing your experience on the Services, and resolving service problems and errors;
• Communicating with you, subject to your consent if required by applicable law, including communicating with you about our products, services, events, and promotions and those of our affiliates and third parties, providing you with relevant advertising on our Services and elsewhere, administering satisfaction or other surveys, responding to inquiries and resolving complaints, or notifying you that you have been invited to join Boyd Rewards or other Services;
• For business research and development, including research and development of new products or services, generating usage statistics of our Services and for other analytics purposes, and detecting and preventing fraud or misuse of the Services;
• Complying with our legal and regulatory obligations; and
• Enforcing our legal rights and protecting and defending the rights, privacy, safety, property, or operations of us, or affiliates, you, or others.

International Transfer of Your Information.

The Services are controlled and operated by us from the United States. The information we collect may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Services, you understand that we may transfer information to countries outside of your country of residence, including the United States, which may have different data protection rules than those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your personal information.

Access to Your Personal Information and Your Rights and Choices.

You may request that we provide you with a copy of your Personal Information; and update, correct, or delete your Personal Information.

In your request, please make clear what Personal Information you would like a copy of, or if you would like to update, correct, or delete the Personal Information. For your protection, we take reasonable steps to verify your identity before implementing your request. We will comply with your request(s) as soon as reasonably practicable and consistent with applicable law.

HOW TO CONTACT US

If you have any questions about this Privacy Statement or how the Casino-Core Online Casino handles Personal Information, please contact us:

1. Email: info@casino-core.com

PLEASE NOTE THAT EMAIL COMMUNICATIONS ARE NOT ALWAYS SECURE. PLEASE DO NOT INCLUDE CREDIT CARD OR OTHER SENSITIVE INFORMATION IN YOUR EMAILS TO US.

You can terminate your account at any time. We may, however, keep information about you following termination of your account. In some cases, we may be legally required to maintain certain records of your personal information, in which case we may not be permitted to delete your information. If you wish to terminate your account or if you have any other questions or concerns about your personal information, please email Casino-Core Online Casino at info@casino-core.com.

You can choose to delete or block certain Cookies by setting your browser to either reject all Cookies or to allow Cookies only from selected websites. You may need to take additional steps to refuse or disable other types of technologies. If you block Cookies, performance of the Services may be impaired and certain features may not function at all. Deleting cookies may in some cases cancel the opt out selection in your browser.

Some of our third-party partners may be members of the Network Advertising Initiative, which offers a single location to opt out of ad targeting from member companies. To learn more and to opt out of having your information used for ad targeting purposes, please click here or here. For additional information on how Google Analytics processes your information and what choices you may have, visit their site here. Due to differences between websites and mobile apps, you may need to take additional steps to opt out of interest-based advertising for mobile applications. Please check your device settings and mobile app permissions for additional information on how to opt out. You also may stop further data collection from a mobile application by removing it from your mobile device.

If you have previously allowed us to access your location data, you can stop making location information available to us by visiting your mobile device's "settings" for the Casino-Core Online Casino application, but this may impact your ability to access and use the Services.

When you install our Services on a mobile device, you can choose to receive push notifications, which are messages an application sends you on your mobile device even when the application is not active. You can turn off notifications by visiting your mobile device's "settings" page for external applications.

If you have registered to receive SMS messages, you can opt out of receiving SMS messages (text messages for example) by texting back STOP to the number we send the text from for that particular SMS Message program. When we receive an opt-out message from you for SMS messages, we may send a message confirming our receipt of your opt-out.

If you have been invited to join Casino-Core Online Casino, you are provided with the option not to receive further invitations from Casino-Core Online Casino. If you choose to opt-out at any time you can email us at info@casino-core.com.

Sharing Your Information.

We may share the categories of information listed here to unaffiliated third parties:

• If you request or authorize it;
• If the information is provided to help complete a transaction for you;
• If the information is provided to comply with the law, applicable regulations, governmental and quasi-governmental requests, court orders or subpoenas, to enforce our Terms of Service or other agreements, or to protect our or our affiliates' rights, property or safety or the rights, property or safety of our users or others (e.g., to a consumer reporting agency for fraud protection);
• If the disclosure is done in connection with a purchase, transfer, sale, or other disposition of our business, services, or assets (e.g., in the event that substantially all of our assets are acquired by another party, customer information may be one of the transferred assets);
• If the information is provided to our agents, outside vendors or service providers to perform functions on our behalf (e.g., billing, email deployment, advertising and marketing (including counting ad impressions, verifying positioning and quality of ad impressions, ensuring compliance with industry standards and specifications, ad delivery, reporting, personalization, audience segmentation, and analytics), security and performance monitoring, maintaining or servicing accounts, research, and auditing, providing customer service, processing orders); or as otherwise described in this Privacy Statement.

We may share information about you with our affiliated companies for the purposes set forth in this Privacy Statement.

If you access third-party services such as social media services or mobile game centers for high scores and leaderboards through the Services, these third-party services may be able to collect information about you, including information about your activity on the Services, and they may notify your connections on the third-party services about your use of the Services, in accordance with their own privacy policies.

We do not sell your personal information to third parties. We do permit third parties to collect the information described here through our Services and disclose such information to third parties for business purposes as described in this Privacy Statement, including but not limited to providing advertising on our Services and elsewhere based on users' online activities over time and across different sites, services, and devices (so-called "interest-based advertising"). The information practices of these third parties are not covered by this Privacy Statement.

Cookies and Tracking.

We may automatically collect information from you when you access or use the Services. This information is collected by us or by third party service providers such as Google and Apple, by placing certain data files on your computer or mobile device. These data files may be cookies, other local storage technologies, or other technologies (collectively, "Cookies"). The Services use Cookies to improve the quality of our Services, make recommendations, and make the Services easier to use for our users. A cookie is a small text file recorded on your device that identifies you as a unique user and contains certain information about your particular login session and / or your use of the Services. There are other local storage and similar technologies that allow us to collect similar information. We use Cookies to collect information about Service usage by all of our visitors and to help us remember you and your preferences when you revisit the Services. These Cookies may persist until they expire or you delete them. We may also use Cookies to allow the Services to function properly. These Cookies usually are erased when you close your browser window. Further general information about Cookies and how they work is available at www.allaboutcookies.org.

We allow selected third parties to place Cookies through our Services to provide us with better insights into the use of our Services. These third parties may collect information about a consumer's online activities over time and across different websites and devices when they use our Services. You consent to third party service providers placing Cookies through our Services to perform analytic or marketing functions.

In addition, advertisers and / or ad networks may use other third-party advertising technology including single and multiple tracking technologies to target advertising on the Services and on third-party sites and services. These technologies may also recognize you across the devices you use. In the course of advertisements being served to you, a unique third-party Cookie or other Cookies may be placed on your device. Similarly, third-party advertising companies may provide us with pixel tags (also called "clear gifs" or "beacons") to help manage and optimize our online advertising. Beacons enable us to recognize a browser's Cookie when a browser visits the website on which the beacon is located, and to learn which banner ads bring users to a given website. Please see "Access to Your Information and Your Rights and Choices," above, for information about how to opt out of receiving targeted advertisements from companies that participate in industry self-regulatory programs.

To learn about how Google Analytics processes your information and what choices you may have, visit their site https://policies.google.com/technologies/partner-sites.

Data Retention, Security, and Integrity.

We use reasonable technical, administrative, and physical measures designed to protect information contained in our Services against misuse, loss, or alteration.

Do not share your log-in information with others.

Email and instant messaging are not recognized as secure communications, so we request that you not send personal information to us by email or instant messaging services. Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal information, you should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure, accurate, complete, or current. We cannot guarantee that unauthorized access, hacking, data loss, or other breaches, will never occur.

Links to Other Sites.

We may permit others to link to our Services or to post a link to their site or services on our Services. We are not responsible for third-party sites or their privacy or security practices. Please read their privacy statement before submitting information.

Children's Privacy.

The Services are designed and intended for users who are 21 and older only. Children and teens are not permitted to use the Services and we do not knowingly collect or solicit personal information from anyone under the age of 21, or knowingly allow such persons to register for use of the Services. If you are under 21, please do not attempt to register for or otherwise use the Services or send or submit any information about yourself to us and / or through the Services, including your name, address, telephone number, or email address.

If you are a parent or guardian of a child under 13 who has sent or submitted their personal information to us and / or through the Services, please email us at info@casino-core.com to request deletion of your child's information, making sure to include the name and password that your child submitted.

Territorial Restrictions and Consent by North American Users.

The Services are designed and intended for users within North America, excluding those users within the State of Washington. Players outside North America or inside the State of Washington are not permitted to use the Services and we do not knowingly collect or solicit personal information from anyone outside of North America or inside the State of Washington or knowingly allow such persons to register for use of the Services. If you are located outside of North America or in the State of Washington, please do not attempt to register for, or otherwise use, the Services or send or submit any information about yourself to us and / or through the Services, including your name, address, telephone number, or email address. We may update this Privacy Statement to exclude users in additional jurisdictions at any time, in our sole discretion, in accordance with the "Changes to the Privacy Statement" section below.

Changes to the Privacy Statement.

We may modify this Privacy Statement from time to time. When we update the Privacy Statement, we will revise the "Current as of" date above and post the new Privacy Statement. We recommend that you review the Privacy Statement each time you visit the Services to stay informed of our privacy practices.

Additional Jurisdictional Rights

Disclosures of Personal Information

We disclosed the following Personal Information to third parties, as set forth below, for our operational business purposes:

Nevada Residents:

Additional Information Regarding Nevada – We do not sell Covered Information as defined under Nevada law. If you are a Nevada resident and have any questions about this, please contact us at info@casino-core.com.