Privacy Policy

1. Introduction and Scope

Welcome to Penn Play Casino. We value your trust and are fully committed to protecting your personal information and privacy rights. This comprehensive Privacy Policy ("Policy") explains how Penn Entertainment, Inc., its subsidiaries, and affiliated social gaming platforms (collectively referred to as "PENN," "we," "us," or "our") collect, use, share, and safeguard your personal data when you visit our website, download and use our mobile application, or interact with our virtual coin and rewards ecosystem (collectively, the "Services").

As a leading social casino platform offering free-to-play entertainment across the United States, we adhere strictly to established data privacy standards and applicable state and federal laws. By accessing, registering for, or using our Services, you acknowledge that you have read, understood, and agree to be bound by the data practices described in this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Services. This Policy may change from time to time, and your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

2. Categories of Information We Collect

To provide a seamless, secure, and rewarding social gaming experience, we collect various types of information from and about users of our Services. We group this information into several broad categories:

A. Information You Provide to Us Directly

When you interact with Penn Play Casino, you may provide us with certain personal information directly. This typically occurs during account registration, when updating your profile, making virtual coin purchases, linking external loyalty accounts, or contacting customer support.

• Account Registration Data: To create an account, we collect your first and last name, email address, chosen username, password, date of birth (to verify you meet our minimum age requirements), and optionally, your mobile phone number.
• Profile Information: You may choose to add additional details to your user profile, such as an avatar or profile picture, location details, and gaming preferences.
• Loyalty and Rewards Data: If you choose to link your physical PENN Play loyalty account to your social casino profile to earn digital and physical rewards, we collect your PENN Play membership number, tier status, points balances, and connected resort visit data.
• Financial and Transaction Information: While our games are free to play, you may choose to purchase optional virtual coin packages. We collect records of the products or services purchased or considered, and your purchasing history. Payments are processed by secure, third-party payment processors (such as Apple Pay, Google Pay, or designated credit card processors). We do not store full raw credit card numbers or bank account details directly on our servers; we only retain transaction confirmation tokens and partial payment details (e.g., the last four digits of a card) for receipt and customer support purposes.
• Communications: When you communicate with us via customer support, email, social media, or participate in surveys, contests, or sweepstakes, we collect the contents of those communications and any contact information you provide.

B. Information Collected Automatically

As you navigate through and interact with our Services, we use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns. This helps us optimize performance and deliver a personalized experience.

• Device and Technical Data: We automatically log your IP address, browser type and version, operating system, unique device identifiers (such as IDFA or Android Ad ID), mobile network information, hardware model, and device settings.
• Usage Details and Session Analytics: We collect details of your visits to our Services, including traffic data, location data, logs, the resources that you access and use on the platform, game session lengths, your virtual coin balances, games played, bets placed with virtual currency, features used, and specific pages viewed.
• Geolocation Data: Depending on your device settings and app permissions, we may collect information about your precise or approximate location using GPS, Wi-Fi, wireless network triangulation, or other methods to ensure compliance with geographic gaming restrictions and to tailor localized content.

C. Information from Third Parties

We may receive information about you from external sources and combine that with information we collect through our Services.

• Social Media Platforms: If you register or log in using a third-party social media account (e.g., Facebook, Google, or Apple), we may access basic public profile information, your name, email address, and friend lists in accordance with the authorization procedures determined by such social media platform.
• Data Partners and Analytics Providers: We may receive aggregated demographic data, marketing analytics, and fraud-prevention data from third-party service providers to help us better understand our user base, prevent multi-accounting abuse, and deliver relevant advertising.

3. How We Use Your Information

The information we collect is utilized strictly to enhance your gaming experience, maintain the security and integrity of our platform, and deliver relevant perks. Specifically, we use your personal information for the following business and commercial purposes:

• Providing and Improving the Services: To present our platform and its contents to you; to manage your virtual coin balance, daily login bonuses, and leaderboard scores; to process virtual currency purchases; and to notify you about changes to our platform.
• Loyalty Integration: To synchronize your online social casino gameplay with physical PENN resort rewards, tier credits, and loyalty points, providing a cohesive cross-channel entertainment experience.
• Customer Support: To provide responsive customer service, address technical issues, process account recovery requests, and resolve any disputes or inquiries.
• Personalization and Marketing: To understand your gaming preferences and tailor the games, features, and offers presented to you; to deliver promotional communications, special bonus notifications, newsletters, and community event updates. We may use your information to serve targeted advertising both on our platform and across the internet.
• Analytics and Research: To monitor and analyze trends, usage, and activities in connection with our Services; to conduct research and measure the effectiveness of our marketing campaigns; and to develop new games, products, and features.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, unauthorized access, and other illegal activities; to enforce our Terms of Service; and to protect the rights, property, and safety of PENN Entertainment, our users, and others.
• Legal Compliance: To comply with applicable legal obligations, resolve disputes, and enforce our agreements.

4. Cookies and Similar Tracking Technologies

Penn Play Casino uses cookies, web beacons (also known as "tracking pixels" or "clear GIFs"), local storage, and other tracking technologies to automatically collect information, remember your user preferences, analyze website traffic patterns, and optimize game load speeds.

• Strictly Necessary Cookies: These are required for the operation of our platform. They include, for example, cookies that enable you to log into secure areas or use a shopping cart for virtual purchases.
• Analytical/Performance Cookies: These allow us to recognize and count the number of visitors and to see how visitors move around our platform when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
• Functionality Cookies: These are used to recognize you when you return to our platform. This enables us to personalize our content for you, greet you by name, and remember your preferences (e.g., your choice of language or region, or turning sound on/off in games).
• Targeting/Advertising Cookies: These cookies record your visit to our platform, the pages you have visited, and the links you have followed. We use this information to make our platform and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of this site—such as automatic logins, customized game lobbies, and certain interactive game features—may become inaccessible or not function properly. Currently, our systems do not recognize browser "Do Not Track" signals, but we offer other choices to manage your data as described in the "Your Rights and Choices" section below.

5. Data Sharing and Disclosure

We respect your privacy and consider your personal data to be confidential. We do not sell your personal identifying data to third-party data brokers for their own independent use. We may share or disclose your personal information under the following specific, restricted circumstances:

• Corporate Affiliates: We may share your information with PENN Entertainment properties, subsidiaries, and joint ventures to coordinate loyalty perks, tier benefits, resort offers, and to provide integrated operational support.
• Service Providers and Vendors: We disclose personal information to trusted third-party service providers, contractors, and agents who assist us in operating our business. This includes vendors who provide cloud hosting (e.g., AWS, Google Cloud), payment processing, customer service software, email delivery, data analytics, fraud detection, and marketing assistance. These providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than providing the contracted services.
• Business Transfers: If PENN Entertainment or Penn Play Casino is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our platform of any change in ownership or uses of your personal information.
• Legal Compliance and Protection: We may access, preserve, and disclose your personal information if we believe doing so is required or appropriate to: (i) comply with law enforcement requests and legal process, such as a court order or subpoena; (ii) enforce our Terms of Service, Privacy Policy, or other agreements; (iii) respond to your requests; or (iv) protect the rights, property, or safety of PENN Entertainment, our users, or the public.
• Aggregated or De-Identified Data: We may share aggregated, anonymized, or de-identified information—which cannot reasonably be used to identify you—with partners, researchers, or the public for statistical analysis, marketing, or other business purposes.

6. State-Specific Privacy Rights

Depending on where you reside in the United States, you may have specific rights regarding your personal information under applicable state comprehensive privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Utah Consumer Privacy Act (UCPA).

A. California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights regarding your personal information:

• Right to Know and Access: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. This includes the categories of personal information we collected, the sources of that information, our business or commercial purpose for collecting it, the categories of third parties with whom we shared it, and the specific pieces of personal information we collected about you.
• Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (such as if we need to retain the data to complete a transaction, detect fraud, or comply with a legal obligation).
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: While we do not "sell" personal information for monetary value, the CCPA's definition of "sale" and "sharing" is broad and may include sharing data with third-party advertising networks for targeted advertising purposes. You have the right to opt-out of the sharing of your personal information for cross-context behavioral advertising. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link in our website footer or adjusting your account privacy settings.
• Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those strictly necessary to provide the Services (e.g., processing payments or verifying your identity).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of services.

Exercising Your Rights: To exercise the rights described above, please submit a verifiable consumer request to us by either contacting our customer support through the Penn Play Casino app or emailing us at [email protected]. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. We must verify your identity before processing your request, which may require us to ask you for additional information matching the records we hold.

B. Virginia, Colorado, Connecticut, and Utah Residents

Residents of Virginia, Colorado, Connecticut, and Utah possess similar rights, including the right to confirm whether we process their personal data, the right to access that data, the right to correct inaccuracies, the right to delete their data, and the right to obtain a copy of their data in a portable format. Residents of these states also have the right to opt-out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, please contact us at [email protected].

If we refuse to take action on your request, you may have the right to appeal our decision within a reasonable period after you receive notice of our refusal. Details on how to file an appeal will be provided in our response to your initial request.

C. Nevada Residents

Under Nevada law (NRS 603A), certain Nevada consumers may opt out of the sale of "personally identifiable information" for monetary consideration to a person for that person to license or sell such information to additional persons. We do not engage in such activity; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of any potential future sales under Nevada law by emailing [email protected].

7. Data Security Measures

We take the security of your data very seriously. We have implemented a robust, multi-layered security program incorporating industry-standard administrative, physical, and technical safeguards to protect your personal information against accidental loss and from unauthorized access, use, alteration, and disclosure.

All information you provide to us is stored on our secure servers behind enterprise-grade firewalls. Any payment transactions and transmission of highly sensitive data are encrypted using 256-bit Secure Socket Layer (SSL) technology. We restrict access to personal information to PENN employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our platform, you are responsible for keeping this password confidential. We strongly advise against sharing your password with anyone. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security, and any transmission of personal information is at your own risk.

8. Data Retention

Because Penn Play Casino operates strictly as a free-to-play social platform without real-money gambling payouts, data retention is managed in accordance with standard consumer entertainment platforms. We retain your personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy. This includes retaining data to provide you with the Services, maintain your virtual balances, manage your loyalty integration, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

When we have no ongoing legitimate business need to process your personal information, we will either securely delete it, anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. Children's Privacy

Our platform is strictly intended for a mature audience. You must be at least 21 years of age, or the legal age of majority in your jurisdiction, to create an account and use the Services. Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

If we discover that a child under 13 (or an individual under our strict 21+ age requirement) has registered an account and provided us with personal information, we will take immediate steps to terminate that account and purge all associated records from our servers. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take necessary corrective action.

10. Third-Party Websites and Social Media

Our platform may contain links to third-party websites, applications, and services that are not operated by PENN Entertainment. This Privacy Policy does not apply to the practices of those third parties. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, data collection practices, or terms of service of any third-party sites or services.

Additionally, our Services may include social media features, such as the Facebook Like button, widgets, or interactive mini-programs. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the company providing them.

11. International Data Transfers

Penn Play Casino is based in the United States, and the Services are hosted within the United States. If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in the United States and other countries.

The data protection laws in the United States may not be as comprehensive as those in your country of residence. By using the Services or providing us with your personal information, you consent to the transfer, processing, and storage of your information in the United States and other jurisdictions as outlined in this Privacy Policy.

12. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our operational practices, new technology, or shifting regulatory requirements. When we make material changes to this Policy, we will notify you by updating the "Last Updated" date at the top of this page, and we may also provide more prominent notice, such as posting a notification in the app, sending an email to the address associated with your account, or displaying a banner upon your next login.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of the Services following the posting of changes constitutes your acceptance of such changes.

13. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy, our data handling procedures, or if you wish to exercise your privacy rights, please do not hesitate to reach out to our dedicated privacy support team. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.

You can contact us through the following channels:

• By Email: [email protected]
• Through Support: Visit the Penn Play Casino Support Portal within the app or on our website.
• By Mail:
  PENN Entertainment, Inc.
  Attn: Privacy Office / Penn Play Casino
  825 Berkshire Blvd, Suite 200
  Wyomissing, PA 19610
  United States