Privacy Policy

Effective Date: September 23, 2026.

American Wagering, Inc. (referred to as “the Company” or “we,” “us,” or “our”) is committed to privacy and will only use personal information in accordance with the terms of this Privacy Policy (“Policy”). The purpose of this Policy is to describe how we collect, use, protect and disclose the personal information received from your use of (1) our gaming websites available for use in Alberta, Canada (collectively, the “Sites”), (2) any of our mobile betting applications available for use in Alberta (the “Betting Apps”), and (3) your use of any other services, features, functionalities, applications, browser extensions, and other services provided by us for use in Alberta (collectively, together with the Sites and the Betting Apps, the “Services”). You can access the Services in many ways, including from a computer or mobile phone, and this Policy will apply regardless of the means of access. This Policy also governs the use of personal information we may obtain about you from any third-party site or application where we post content or invite your feedback or participation. By agreeing to the terms of this Policy when you establish an account on one of the Services, you expressly consent to the collection, use and disclosure of personal information as described in this Policy.

Games of chance available through the Services are conducted and managed by the Alberta iGaming Corporation (“AiGC”). The Company operates and provides the Services as an authorized operator under its operating agreement with the AiGC. In connection with the operation of the Services, the Company collects, uses, and discloses personal information on behalf of and as agent of the AiGC in accordance with applicable law and regulatory requirements. Personal information is collected under the authority of applicable Alberta laws, including the Personal Information Protection Act (Alberta), and pursuant to the Company’s operating agreement with the AiGC and applicable AiGC policies governing the provision of the Services. Personal information may be accessed and used by AiGC for purposes relating to the conduct and management of online gaming in Alberta, including regulatory oversight, compliance, and player protection.

To the extent we provide you notice on our Services of different or additional privacy policies or practices (e.g., at the point of collection), those additional terms shall govern such data collection and use.

Please read this Policy carefully. Capitalized terms not defined in this Policy have the definitions set forth in our Terms of Service. In the event of a conflict between this Policy and the Terms of Service, the Terms of Service will control. If you have any questions about this Policy, please contact us at privacyquestions@caesars.com or by filling out this Web Form. If you do not want us to collect, use, or share your information in the ways described in this Policy, please do not use the Services.

I. Information We Collect

Our Services collect “personal information,” which means information that identiﬁes, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, including any information that constitutes “personal information” under applicable privacy laws. Where applicable, we indicate whether and why you must provide us with your personal information, as well as the consequences of failing to do so. If you do not provide personal information when requested, you may not be able to beneﬁt from our Services if that information is necessary to provide you with the applicable Services or we are legally required to collect it. We only collect personal information as disclosed in this Privacy Policy and limit collection of personal information to what is adequate, relevant, and reasonably necessary for our business purposes.

The categories of personal information that we collect from or about you are below:

Account Information. In order to use some of our Services, you must register for an account. When you register for an account, we may access and collect the information you provide including your name, postal address, e-mail address, and date of birth. We may also ask you for additional information including your mobile phone number, credit or debit card number, ﬁnancial account number, and a government-issued photo identiﬁcation such as your driver’s license or passport.

Other Information You Provide. When you use our Services, you may choose to provide certain information directly to us to request more information about our Services or for other reasons. We will collect, use, share and store this personal information consistent with this Policy. Gaming and Transaction Information. When you use our Services that require you to register for an account, we may collect information (directly or through third-party service providers) about your gaming activity and all transactions associated with your account.

Device Information (including Location Information). When you use our Services, we and our third-party service providers may use beacons and geofencing/geolocation services (“Veriﬁcation Technologies”) to collect and analyze information about you, your device, and your activity. Information collected through Veriﬁcation Technologies may include the type of device; mobile carrier you are using; your device identiﬁers; your (mobile) telephone number; your precise geographic location; and your activities within the Services including the links you click; the pages or screens you view; your session time; the number of times you click a page/screen or use a feature of the Services; the date and time you click on a page or use a feature; and the amount of time you spend on a page or using a feature. Information collected through Veriﬁcation Technologies is stored in log ﬁles.

Wi-Fi Information (including Location Information). When you use the Services, we may collect information (directly or through third-party service providers) that includes the type of device you are using, your device identiﬁcation number, session time, etc. We and our service providers utilize several current technologies, and may use future technologies, in order to (i) verify your physical location while you are wagering on the Services in order to verify your eligibility to use the Services and (ii) improve the location-based services. Veriﬁcation Technologies report your physical location from the Internet-connected device that you choose and from which you are accessing the Services. Veriﬁcation Technologies obtain your physical location by accessing your device GPS coordinates. The Veriﬁcation Technologies report to us and/or our service providers the physical and geographic location of the Internet-connected device from which you are accessing the Services. Your precise or near-precise physical location will be reported to us and/or our service providers when you use the Services. You may turn off this location reporting at any time in the location settings on your device, or you can request to turn it off by notifying us in writing. If you turn off the location reporting, you will not be able to access wagers offered via the Services. Location coordinate data is transmitted via Secure Socket Layer technology and stored in password protected servers managed by us and our geolocation and operating partners. Neither us nor our service providers will pass on or resell your location information to any third party except that we and they reserve the right to provide location information as necessary to satisfy any law, regulation or government agency request.

Tracking Technologies. As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns. This information may include details of your visits to our Sites and Betting Apps, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Sites and Betting Apps; and information about your computer or mobile device and internet connection, including your IP address, operating system and browser type. We may also use these technologies to collect information about your online activities over time and across third-party websites or other online services. The information we collect through these technologies may include personal information, or we may maintain it and associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Services to deliver a better and more personalized service, including by enabling us to: estimate our audience size and usage patterns; store information about your preferences, allowing us to customize our Services according to your individual interests; speed up your searches; and recognize you when you return to our Services. The technologies we use for this automatic data collection may include:

Log Data. When you use our Services, our servers automatically record information that your browser sends whenever you visit a website (“Log Data”). This Log Data may include information such as your IP address, browser type or the domain from which you are visiting, the webpages you visit, the search terms you use.

Cookies and Similar Technologies. Like many websites, we also use “cookie” technology to collect additional website usage data and to improve our Services. A cookie is a small data ﬁle that we transfer to your computer’s hard disk or your mobile device’s internal storage. A session cookie enables certain features of the Services and is deleted from your computer or mobile device when you disconnect from or leave the Service. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Services. Persistent cookies can be removed by following your web browser help ﬁle directions. Most internet browsers automatically accept cookies. The Company may use both session cookies and persistent cookies to better understand how you interact with our Services, to monitor aggregate usage by our users and web traffic routing on the Services, and to improve our Services.

We may also automatically record certain information from your device by using various types of technologies, including “pixels” or “web beacons.” This automatically collected information may include your IP address or other device address or ID, web browser and/or device type, the webpages or sites that you visit just before or just after you use our Services, the pages or other content you view or otherwise interact with on the Services, and the dates and times that you visit, access, or use the Services. We may also use these technologies to collect information regarding your interaction with email messages, such as whether you opened, clicked on, or forwarded a message, to the extent permitted under applicable law.

You can instruct your browser, by editing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. Please note that if you delete, or choose not to accept, cookies from the Service, you may not be able to utilize the features of the services to their fullest potential.

Affiliate and Third-Party Information. If permitted by applicable law, and provided that you have given appropriate consent to these third parties to share your personal information when required, we may obtain personal information about you from our affiliates, affiliated casinos, resorts, and properties that are owned, operated, managed by or affiliated with other gaming licensees (collectively "Gaming Affiliates") and from other third parties, including our regulators and business partners. This includes (1) gaming self-exclusion information and prohibited/sanctions lists that we may receive from our Gaming Affiliates or gaming regulators, (2) information we may receive from “Know Your Client” service providers, such as LexisNexis, and your wireless operator, which we may use to conﬁrm your identity and prevent fraud, and (3) information provided by data services vendors so we can update, correct or augment the information we have about you in our customer records (solely to the extent allowed by applicable Alberta law and applicable Canadian federal law). By using the Services and agreeing to this Privacy Policy, you authorize your wireless operator to disclose to us and our third-party service providers your mobile number, name, address, email, and other subscriber status and device details, if available, solely to verify your identity and prevent fraud for the duration of our business relationship.

II. How We Use the Information We Collect

We collect personal information for the following purposes:

Operational purposes:

to provide and administer the Services;
to comply with applicable legal and regulatory requirements, including obligations to AiGC;
to verify identity and prevent fraud;
to support responsible gaming and player protection; and

Marketing purposes:

to market and promote our Services, where permitted by applicable law.

Examples of uses of your personal information for operational purposes include (1) validating your identity; (2) sending you push notiﬁcations or e-mails to provide you with alerts and updates about your account and the Services; (3) providing the Services you request and monitoring, processing and recording gaming-related activity related thereto; (4) conducting statistical or demographic analysis to allow us to understand our customers’ preferences and use of our Services; (5) processing and tracking gaming and non-gaming transactions; (6) complying with legal and regulatory requirements, including anti-money laundering and tax requirements; (7) customizing your experience with the Services; (8) protecting and defending the Company (which includes the Company Group) and all other Gaming Affiliates against legal actions or claims; (9) preventing fraud; (10) debt collection; (11) satisfying contractual obligations; (12) cooperating with law enforcement or other government agencies for purposes of investigations, national security, public safety, or matters of public importance when we believe that disclosure of information is necessary or appropriate to protect the public interest; (13) administering our gaming self-exclusion programs; (14) evaluating, testing, validating, or conducting due diligence on prospective service providers, vendors, technologies, products, or services that may be used by the Company for identity verification, fraud prevention, account security, regulatory compliance, customer authentication, or other operational business purposes; and (15) for other business purposes permitted under applicable law.

We may also use the information we collect for our own marketing purposes including notifying you of special promotions, offers, and events via push notiﬁcations, e-mail, and other means, including SMS messaging, subject to compliance with applicable laws. We may also link personal information (including your name, mobile phone number, and e-mail address) with non-personal information (including information collected through Veriﬁcation Technologies and Wi-Fi services) and use such information for our own marketing purposes. If you do not want us to use your personal information for marketing purposes, view “Choices About How We Use and Disclose Your Information” section below for more information on opt-out choices.

The Company will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated or incompatible purposes without providing notice and obtaining your consent when required.

Use of Automated Systems, Including Artificial Intelligence

We may use automated technology, including artificial intelligence, to help us review information and better understand activity on our platform, including to support account security, fraud prevention, and responsible gaming. These tools can analyze information you provide or generate when you use our services to help us identify patterns, make predictions, or support decisions about how our services operate or how certain features are offered. We may also use automated technology to better understand your preferences and interests so we can provide more relevant offers, promotions, and communications. These tools may analyze information about your activity, interactions with our services, or responses to marketing messages to help us tailor content, make recommendations, and improve how we communicate with you.

Where personal information is used to make a decision that directly affects you, including decisions supported by automated systems, we will make reasonable efforts to ensure that such information is accurate and complete at the time of the decision. We will also retain the information for a reasonable period after it is used, to allow you an opportunity to request access to it, in accordance with applicable law and our record retention obligations.

III. Who We Share Personal Information With

Sharing with Gaming Regulators

We will share your gaming and transactional information with the AiGC and/or the Alberta Gaming, Liquor and Cannabis Commission in accordance with the terms of the Operating Agreement between the Company and the AiGC.

Sharing with Service Providers

We may share the information we collect with third parties that we engage to provide services for both operational purposes and marketing purposes. This includes sharing personal information with our “Know Your Client” provider LexisNexis to conﬁrm your identity. We require that these parties agree to process such information in compliance with this Policy and use appropriate conﬁdentiality and security measures, and we use reasonable efforts to limit their use of such information to only what is needed to perform their services.

If you do not pass our automated ID verification screening using the information you provided during registration, an additional review will be required. We have engaged a service provider, GeoComply (https://www.geocomply.com/), to assist us with these secondary reviews.

GeoComply may use an identity verification service performed by either (1) IDVerse, which is a trading name of OCR Labs Global (USA) Inc. (a Delaware corporation), or (2) Incode Technologies, Inc.

IDVerse identity verification: IDVerse verifies your ID is genuine and then extracts all of the data on the identity document. Data extracted includes the data written on the ID doc and your picture, and also data in any barcode, machine readable zone or in the chip (if the chip is being read). IDVerse sends that data to us. In the user flow you can correct any data extracted incorrectly. If you do correct any incorrect data, then IDVerse will take just the incorrect character (and no personal data) from the ID document to make sure it does not make that mistake again.

IDVerse uses your biometric data to check you are a real person, to extract your facial measurements from the ID document, and to compare that against your selfie to ensure you are the right person, and for anti-fraud purposes. We do not receive this biometric data. IDVerse deletes your biometric data within thirty days of initial collection. IDVerse also uses location information from your device for anti-fraud purposes.

To learn more about IDVerse’s data processing, please see IDVerse’s Privacy Policy: https://idverse.com/privacy-policy/.

Incode identity verification: To learn more about Incode’s data processing, please see Incode’s Privacy Policy: https://incode.com/privacy-policy/. Incode deletes your biometric data within 30 days of initial collection. We do not receive this biometric data.

Sharing with Affiliates

We may share your information with Caesars Enterprise Services, LLC (“CES”), which is a shared services company that provides corporate or other services for affiliates of Caesars Entertainment, Inc., our parent company. CES may use your information to provide services to us for any operational or marketing purpose described in Section II above. CES may also use your information in connection with analytics and conducting statistical or demographic analysis of the various sports betting and gaming offerings operated by American Wagering, Inc. in various jurisdictions. This will allow us to improve the Services we provide to you.

Certain Business Transactions

We may provide anonymized information to third parties for various business purposes. Any anonymized information we provide to third parties is not considered personal information and is not subject to the terms of this Policy. Further, subject to written approval of the AiGC, we may share or license all of the personal information we collect with any successor to all or part of our business in connection with a transaction involving a sale, purchase, reorganization, merger, or transfer of any our assets or the assets of any Company Group company.

Compliance with Laws, Legal Claims, and Law Enforcement

The Company cooperates with government and law enforcement officials or private parties to enforce and comply with the law. To the extent permitted under applicable law, we may disclose any information about you to government or law enforcement officials or private parties as we believe is necessary or appropriate to (1) allow the AiGC to comply with the Access to Information Act (Alberta); (2) investigate, respond to, and defend against legal claims; (3) comply with any legal process (including subpoenas); (4) protect the property and rights of the Company or a third party; (5) protect the Company against liability, (6) provide for the safety of the public or any person; (7) prevent or stop any illegal, unethical, fraudulent, abusive, or legally actionable activity; (8) protect the security or integrity of the Services and any equipment used to make the Services available; or (9) otherwise comply with the law.

IV. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. For more information about cookies including how to set your internet browser to reject cookies please go to www.allaboutcookies.org. If you disable or refuse cookies, please note that some Services may be inaccessible or not function properly.

Marketing Communications. If you do not wish to receive marketing communications outside of the app or website, you can stop all marketing communications by adjusting the “Notification Preferences” in your account. You can also opt-out by contacting us by using this Web Form or by calling us at the appropriate number below:

Caesars Sportsbook & Casino: +1 855-700-0123

Caesars Palace Online Casino: +1 855-605-6850

Horseshoe Online Casino: +1 855-605-6945

To stop marketing emails, you may click the “unsubscribe” link in the footer of any marketing email you receive, or you can adjust the “Notification Preferences” in your account.

Please note, even if you opt out of marketing communications, we may still use and share personal information for operational purposes described in Section II.

Targeted Advertising. See www.caesars.com/privacyrequests for more information regarding any rights you may have to opt out of targeted advertising.

V. How You Can Protect the Privacy and Security of Your Personal Information

For your privacy and security, we encourage you to select a complex and unique password for your account. Do not share this password with others or use the same password for other accounts. We recommend that you change your password frequently, and we also encourage you to use any multifactor authentication service that may be available.

Review your account’s ﬁnancial transactions frequently for any suspicious transactions that you don’t recognize. If you have any security-related concerns with your account, fill out this Web Form or call us at the appropriate number below:

Caesars Sportsbook & Casino: +1 855-700-0123

Caesars Palace Online Casino: +1 855-605-6850

Horseshoe Online Casino: +1 855-605-6945.

Never include any sensitive personal information, like your password or Social Insurance Number, in any electronic communications (email, chat, etc.) with us. If you no longer wish to receive direct advertising and marketing materials from us, you can adjust your communication preferences in your account.

VI. Security and Breach Management

We will always take reasonable steps to protect your personal information from misuse, loss, and unauthorized access or disclosure. Our servers are protected by ﬁrewalls and other industry standard security measures. These security measures are intended to protect our servers from unauthorized access. However, no security system is impenetrable, and these systems could become accessible in the event of a security breach. We have controls in place that are designed to detect potential data breaches, contain and minimize the loss of data, and conduct forensic investigations of a breach.

Our staff is required to take reasonable measures to ensure that unauthorized persons cannot view or access your personal information. Employees who violate our policies and procedures are subject to disciplinary action, up to and including termination of employment.

Please be aware that while we have safeguards in place, there are inherent security risks associated with transmitting information, including personal information, across the Internet. You accept the inherent security risks of providing information over the Internet and will not hold us responsible for any breach of security. We cannot enforce or control the security of the computers, electronic devices, or electronic communication method that you may use to send e-mails and submit information to us over the Internet. You are responsible for ensuring that the computers, electronic devices and electronic communication methods you use will provide adequate security for communicating with us. We are not responsible for the disclosure or interception of information that you send us before we receive it.

As a standard security practice, we will take reasonable steps which are generally recognized in the industry to ensure that the communication methods used to support the Services do not permit connection or communication by methods that have known security weaknesses or vulnerabilities. As such, if you experience trouble using the Services, it may be an indication that you need to upgrade to a newer version that supports more secure communication methods.

In situations where your personal information is collected by third parties under contract with us for performance of their contractual duties and other purposes, we require such third parties to exercise reasonable care to protect that information and restrict the use of your personal information to the purposes for which it was provided. When we share your personal information with third parties in accordance with this Policy, we require them to exercise reasonable care to protect such information and restrict the use of such information to the purposes for which it was provided to them.

In the event of any potential security incident or breach involving the Services or resulting in unauthorized disclosure of personal information, we will activate our incident response plan to promptly investigate and remediate the security incident or breach. As part of our incident response plan, we will notify the AiGC as soon as feasible, and no later than 24 hours after becoming aware of any breach, and will cooperate fully with the AiGC and any related authorities in managing the breach and addressing any resulting impacts as required by our Operating Agreement with the AiGC. To the extent required by applicable law or as directed by the AiGC, we will notify any customers whose personal information is impacted by any security incident or breach.

VII. Access, Correction and Deletion of Personal Information

You may request to access, update, correct inaccuracies in, and, where applicable, request the deletion of your personal information that is within our control.

These rights are subject to applicable legal and contractual restrictions, including our obligations under applicable law, the Personal Information Protection Act (Alberta), and our operating agreement with the AiGC. In certain circumstances, we may be required to retain personal information in order to comply with regulatory, legal, audit, or security requirements.

While we strive to ensure that the information that we collect about you is accurate, it is your responsibility to inform us of any changes to your personal information. You may update your account information by calling us at the appropriate number below:

Caesars Sportsbook & Casino: +1 855-700-0123

Caesars Palace Online Casino: +1 855-605-6850

Horseshoe Online Casino: +1 855-605-6945.

You may also request to access, update, correct inaccuracies in, and delete your personal information that is within our control by filling out the request form available at www.caesars.com/privacyrequests .

Where you make a request in respect of your rights, we may take reasonable steps to verify your identity before honouring your request, which may require you to provide additional personal information. We may also ask that you clarify your request. If we receive repeated requests or have reason to believe requests are being made unreasonably, we reserve the right not to respond.

VIII. Other Web Sites

This Policy applies only to the Company. It does not apply to the practices of companies we do not control, or to people we do not employ. We are not responsible for the information collection or privacy practices of other web sites, including web sites accessible through the Services. You should review and understand the privacy policies posted on any linked sites you visit before using those sites or providing any personal information on them.

IX. International Transfers

Information collected on the Services may be stored and processed in any country in which we or our affiliates, suppliers, third-party electronic payment processors and/or ﬁnancial institutions or agents maintain facilities, including in Alberta and in the United States. By using the Services, you acknowledge that your information may be transferred to the U.S. For all processing of personal information that occurs in the U.S., whether performed by the Company or our service providers, we will provide or ensure the same privacy and security protections as required for personal information located and processed in Alberta. However, personal information transferred to the U.S. is subject to U.S. laws and accessible to U.S. courts, law enforcement authorities, or national security authorities in accordance with applicable U.S. laws.

X. Non-Alberta Users

At this time, our Services are based in and solely intended for persons located in Alberta at the time they access the Services. If you are not located in Alberta at the time you access the Services, please do not provide any personal information to us through the Services. If you have any questions or requests, you may contact us using this Web Form.

XI. Underage Persons

The Services are for use by persons who are of 21 years of age or older. If you are under 21 years of age you may not access, attempt to access, or use the Services. We do not knowingly collect or allow the collection of personal information via the Services from persons underage, pursuant to applicable law and regulations. If you are a parent or guardian and discover that your child has submitted personal information, you may alert us using this Web Form, and your child’s personal information will be promptly deleted.

XII. Assignment

In the event that we are acquired by or merge with a third-party entity, we reserve the right, with the written consent of the AiGC, in any of these circumstances, to transfer or assign the information we have collected from our users as part of such merger, acquisition, sale, or other change of control so that our Services can continue operations. In the unlikely event of a bankruptcy, insolvency, reorganization, receivership, or assignment for the beneﬁt of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used.

XIII. Retention of Personal Information

We retain personal information for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal and regulatory requirements. In particular, we may be required to retain certain personal information for a minimum of seven years in accordance with our operating agreement with the AiGC and applicable AiGC policies. Where these requirements do not apply, personal information is typically retained for the duration of your account relationship and for a reasonable period thereafter.

XIV. Changes to this Policy

We may revise this Policy from time to time in our sole discretion, subject to the AiGC’s approval when required. We will notify you of any material revisions by sending you an e-mail and/or by placing notice of the revised Policy on the Services or any place through which you access the Services. For material changes to the Policy, you may be required to acknowledge acceptance of such change. For non-material changes where an acknowledgement is not required, your continued access or use of the Services following any amendments to the Policy constitutes your acceptance of the Policy as amended. It is your sole responsibility to review the Policy and any revisions each time you use the Services.

XV. Governing Law

This Policy and all related matters are governed by the laws of Alberta and the applicable federal laws of Canada.

XVI. Freedom of Information Requests

We operate as an agent of the AiGC. As a result, certain records and information collected or retained in connection with the Services may be under the custody or control of AiGC and subject to Alberta’s Access to Information Act (“ATIA”). Requests for access to such information may be submitted to AiGC in accordance with ATIA. AiGC will coordinate with us, as necessary, to respond to any such requests in accordance with applicable law.

XVII. Contact Us / Complaints and Disputes

If you have a question or concern about how we manage your personal information or believe that we have not complied with applicable privacy laws, you may contact us at privacyquestions@caesars.com, and we will investigate the matter in accordance with our complaint process as set forth in the “Complaints and Dispute Resolution” section of the Terms of Service. If you are not satisfied with our response, or you prefer not to contact us, you may submit a complaint to the Office of the Information and Privacy Commissioner of Alberta.