Privacy Policy

Last updated: October 8, 2025

By registering for an account, downloading or using the app, or otherwise accessing the Platform, You agree to be bound by this Privacy Policy, the General Terms of Service, and the Terms and Conditions for Consent to Electronic Delivery of IRS Information Tax Returns (collectively, the “Agreement”)

This Privacy Statement explains the information we collect, and how we collect, use and, in certain circumstances, share Your information in connection with the Service(s) we provide You. If You have any questions, feel free to email. Please note that, if You interact with CNDC in other contexts besides through the Services, such as by signing up to become a Club Passport member or by using the CNDC website, CNDC’s collection, use and disclosure of Your information will be subject to the applicable CNDC Privacy Policy then in force at (https://www.WinStar.com/footer/privacy-policy/).

1. Information We Collect and How We Use It.

When accessing the Services as a Club Passport member, we will collect Your Club Passport credentials (Club Passport member number or username and associated Club Passport online account password). We automatically collect some information when You access or use the Services and collect other information when You voluntarily provide it to us. If You elect not to provide certain information, You may be prevented from participating in some or all of the Services.

We may also collect information about You from other sources, such as publicly available or commercially available information.

2. Information You Provide.

There is no cost to access the Services.

We may collect information from You when You register, access or use the Services, including, for example:

Registration information (identifiers such as Your date of birth, Club Passport username and password, mailing address, email address, phone number, social security number);
Wallet funding, wager purchasing and other transaction information if You fund Your account to engage in Class II gaming, such as debit card information or banking and checking account information (we use a third-party service provider for these transactions, so while we receive information about the transactions, we do not receive Your billing or payment information);
Demographic information such as Your gender and age;
Loyalty program information if You enroll in or are already enrolled in Club Passport (identifiers such as name, email or postal address, telephone number, information about Your use of the Services, any wagers and any purchases You have made or rewards You have received);
Information You provide in response to contests, surveys or other outreach (identifiers such as name, email or postal address, telephone number, eligibility information for contests which may include age, images or photographs, hobbies or interests, and occupation);
Information that You may post on the Services through in-game play, comments, reviews, support tickets, or other posts. Be aware that You control such information provided in this way, if any, and this information may include actions You perform with other players; all such information, excluding support tickets, can be viewed by the general public so please take that into consideration when You post;
Inferences based on the information described above and other information described in this Privacy Statement; and
Correspondence You send to us, including questions about the Services or communications about this Privacy Statement.

3. Information We Collect.

We collect information about Your use of the Services, such as when You visit and interact with WinStar Reel Money Gaming or interact with the Services through third-party websites or applications. The information we collect may include, without limitation, internet or other electronic network activity information, device ID, internet protocol (IP) address (we may also derive Your approximate location from Your IP address), browser type, referring / exit pages and URLs, other browser history, platform type, clicks and other traffic data, pages viewed, the amount of time spent on particular pages, payment events, and related date and time information. If You experience an error, we collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred. All of this information allows us to understand how the Services are used, improve the Services, and communicate with You, both for customer support and to suggest other products or services that may be of interest to You.

We will collect information about Your location, including precise location information derived from GPS, WiFi, and other device information, with Your consent if required by law and consistent with Your mobile device or app permissions. Also consistent with Your mobile device or app permissions, we may send You push notifications.

We also may receive the categories of information described above from other sources, including from government entities that make information publicly available, entities that sell data, and third-party services and organizations. For example, if You access any social media or similar services through the Services to login or to share information about Your experience on our Services with others, we may collect information from these third-party services.

We may aggregate or de-identify the information You provide or that we collect automatically. Aggregated or de-identified data is not subject to this Privacy Policy. Because aggregated or de-identified information does not individually identify You or any other individual, we may use and disclose such information for any purpose.

4. Use of Information.

We may use the information we collect for our general commercial or business purposes such as to improve and grow our business and to offer You our own, our affiliates’, or third-party, products or services that we think You may find of interest. Our uses of the information which we collect may include:

Providing and improving the Services, including confirming Your eligibility to use the Services and verifying You, enhancing Your experience on the Services, and resolving service problems and errors;

Communicating with You, subject to Your consent if required by applicable law, including communicating with You about our products, services, events, and promotions and those of our affiliates and third parties, providing You with relevant advertising on our Services and elsewhere, administering satisfaction or other surveys, responding to inquiries and resolving complaints, or notifying You that You have been invited to join Club Passport or other Services;

For business research and development, including research and development of new products or services, generating usage statistics of our Services and for other analytics purposes, and detecting and preventing fraud or misuse of the Services;

Complying with our legal and regulatory obligations; and

Enforcing our legal rights and protecting and defending the rights, privacy, safety, property, or operations of us, or affiliates, You, or others.

5. International Transfer of Your Information.

The Services are controlled and operated by us from the United States. The information we collect may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Services, You understand that we may transfer information to countries outside of Your country of residence, including the United States, which may have different data protection rules than those of Your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access Your personal information.

6. Access to Your Personal Information.

You may request that we provide You with a copy of Your Personal Information; and update, correct, or delete Your Personal Information. If You would like to make a request, please use contact: info@WinStarWorldCasino.com .

In Your request, please make clear what Personal Information You would like a copy of, or if You would like to update, correct, or delete the Personal Information. For Your protection, we take reasonable steps to verify Your identity before implementing Your request. We will comply with Your request(s) as soon as reasonably practicable and consistent with applicable law.

7. Account Termination and Data Retention

You can terminate Your account at any time. We may, however, keep information about You following termination of Your account. In some cases, we may be legally required to maintain certain records of Your personal information, in which case we may not be permitted to delete Your information. We retain Your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with our legal obligations, resolve disputes enforce our agreements, and support legitimate business operations in accordance with the Chickasaw Nation record retention policy.. When we no longer need to process your personal information for these purposes, we will securely delete or anonymize it.

If You wish to terminate Your account or if You have any other questions or concerns about Your personal information, please email Club Passport at info@WinStarWorldCasino.com.

You can also directly unsubscribe from receiving marketing emails from us by accessing Your account profile and opting out of marketing emails or by emailing Your request to opt out to info@WinStarWorldCasino.com. Please note that if You opt out of receiving marketing emails from us, we may still send You important administrative messages.

Some of our third-party partners may be members of the Network Advertising Initiative, which offers a single location to opt out of ad targeting from member companies. For additional information on how Google Analytics processes Your information and what choices You may have, visit their site at analytics.google.com. Due to differences between websites and mobile apps, You may need to take additional steps to opt out of interest- based advertising for mobile applications. Please check Your device settings and mobile app permissions for additional information on how to opt out. You also may stop further data collection from a mobile application by removing it from Your mobile device.

If You have previously allowed us to access Your location data, You can stop making location information available to us by visiting Your mobile device’s “settings” for the WinStar Reel Money Gaming application, but this will impact Your ability to access and use the Services.

When You install our Services on a mobile device, You can choose to receive push notifications, which are messages an application sends You on Your mobile device even when the application is not active. You can turn off notifications by visiting Your mobile device’s “settings” page for external applications.

If You have registered to receive SMS messages, You can opt out of receiving SMS messages (text messages for example) by texting back STOP to the number we send the text from for that particular SMS Message program. When we receive an opt-out message from You for SMS messages, we may send a message confirming our receipt of Your opt-out.

If You have been invited to join WinStar Reel Money Gaming, You are provided with the option not to receive further invitations from WinStar Reel Money Gaming. If You choose to opt-out at any time You can email us at info@WinStarWorldCasino.com.

8. Sharing Your Information.

We may share the categories of information listed here to unaffiliated third parties:

If You request or authorize it;
If the information is provided to help complete a transaction for You;
If the information is required to be provided by You in order for You to lawfully use any aspect of the Services,
If the information is provided to comply with the law, applicable regulations, governmental and quasi- governmental requests, court orders or subpoenas, to enforce our Terms of Service or other agreements, or to protect our or our affiliates’ rights, property or safety or the rights, property or safety of our users or others (e.g., to a consumer reporting agency for fraud protection);
If the disclosure is done in connection with a purchase, transfer, sale, or other disposition of our business, services, or assets (e.g., in the event that substantially all of our assets are acquired by another party, customer information may be one of the transferred assets);
If the information is provided to our agents, outside vendors or service providers to perform functions on our behalf (e.g., billing, email deployment, advertising and marketing, including counting ad impressions, verifying positioning and quality of ad impressions, ensuring compliance with industry standards and specifications, ad delivery, reporting, personalization, audience segmentation, and analytics), including but not limited to security and performance monitoring, maintaining or servicing accounts, research, and auditing, providing customer service, processing orders); or as otherwise described in this Privacy Statement.

We may share information about You with our affiliated companies for the purposes set forth in this Privacy Statement.

If You access third-party services such as social media services or mobile game centers through the Services, these third-party services may be able to collect information about You, including information about Your activity on the Services, and they may notify Your connections on the third- party services about Your use of the Services, in accordance with their own privacy policies.

We do not sell Your personal information to third parties. We do permit third parties to collect the information described here through our Services and disclose such information to third parties for business purposes as described in this Privacy Statement, including but not limited to providing advertising on our Services and elsewhere based on users’ online activities over time and across different sites, services, and devices (so- called “interest-based advertising”). The information practices of these third parties are not covered by this Privacy Statement.

We engage the following service providers to provide certain services to us or to perform certain services on our behalf including analytics, marketing, fulfillment, and to meet our other business needs. In some cases, these service providers may collect and be provided with access to Your information to perform such services.

AirShip 6601 Bermuda Rd., Las Vegas, NV 89119 (702) 896-8000

Bloomreach 700 E. El Camino Real, Mountain View, CA 94040 (888) 263-3917

Freshworks 2950 S. Delaware St. Suite 201, San Mateo, CA 94403 (844) 373-7443

IDology 2300 Windy Ridge Pkwy SE, Atlanta, GA 30339 (866) 520-1234

LnW 6601 Bermuda Rd., Las Vegas, NV 89119 (702) 584-7700

ATI Bldg A, Pinnacle Office Park, 85 Epping Road, North Ryde

NSW 2113 Austraila (616) 425-8110

We may also disclose Your information to regulatory authorities as required by applicable laws and regulations.

We take reasonable measures to ensure fairness, security and safety of the Services. We may disclose information to our affiliates, service providers, state regulators and other governmental agencies, sports governing bodies, credit bureaus and related entities, and other similar third parties, vendors, and service providers to detect, prevent, investigate, and report suspicious activity, fraud, unsafe gambling, identity theft, and other potentially unethical, illegal or malicious activity. We use certain providers, such as LexisNexis, to provide threat detection, user authentication, and fraud prevention services. These service providers may automatically collect certain information about You and Your device information and may use that information, along with other information we provide to them about You, to monitor for potential threats and bad actors. You can learn more about LexisNexis’ data privacy practices and exercise Your privacy rights regarding the personal information LexisNexis processes at the LexisNexis ThreatMetrix Processing Notice [risk.lexisnexis.com] and the Emailage Processing Notice [risk.lexisnexis.com].

9. Security

We are committed to providing security for personal and business information. We use reasonable methods to protect information – unfortunately, no security measure can be guaranteed 100% secure.

Email and instant messaging are not recognized as secure communications, so we request that You not send Sensitive Information to us by email or instant messaging services.
Individuals who are granted password access to restricted information on CNDC websites are prohibited from sharing those passwords with anyone. By accepting password access to a CNDC website, You agree to protect the password from discovery by anyone else. We will not be responsible for any damages caused by the unauthorized use of Your account. You are responsible for all activities that occur under Your account. To protect against anyone acquiring Your password, we suggest the following security measures:
- Never give out Your User ID or password.
If You suspect that someone may have figured out Your password, or even if You think it might have gotten lost, stolen, copied, or in any other way, compromised, please change it immediately and let us know.

If You need to contact CNDC to report any security related issues, please email us: info@WinStarWorldCasino.com.

10. Links to Other Sites.

We may permit others to link to our Services or to post a link to their site or services on our Services. We are not responsible for third-party sites or their privacy or security practices. Please read their privacy statement before submitting information.

11. Children’s Privacy.

The Services are designed and intended for users who are eighteen (18) years of age and older only. Children and teens are not permitted to use the Services and we do not knowingly collect or solicit personal information from anyone under the age of 18, or knowingly allow such persons to register for use of the Services. If You are under 18, please do not attempt to register for or otherwise use the Services or send or submit any information about Yourself to us and / or through the Services, including Your name, address, telephone number, or email address.

If You are a parent or guardian of a child under 13 who has sent or submitted their personal information to us and or through the Services, whether or not such information has been submitted in a fully accurate manner, please email us at info@WinStarWorldCasino.com to request deletion of Your child’s information, making sure to include the name and password that Your child submitted.

12. Territorial Restrictions and Consent by North American Users.

The Services are designed and intended for users only utilizing the Services within Chickasaw Nation Indian Lands within the State of Oklahoma, as the term Indian Lands is defined by the Indian Gaming Regulatory Act within North America, excluding those users within the State of Washington. Players outside North America or inside the State of Washington are not permitted to use the Services and we do not knowingly collect or solicit personal information from anyone outside of North America or inside the State of Washington or knowingly allow such persons to register for use of the Services. If You are located outside of North America or in the State of Washington, please do not attempt to register for, or otherwise use, the Services or send or submit any information about Yourself to us and / or through the Services, including Your name, address, telephone number, or email address. We may update this Privacy Statement to exclude users in additional jurisdictions at any time, in our sole discretion, in accordance with the “Changes to the Privacy Statement” section below.

13. Changes to the Privacy Statement.

We may modify this Privacy Statement from time to time. When we update the Privacy Statement, we will revise the “Current as of” date above and post the new Privacy Statement. We recommend that You review the Privacy Statement each time You visit the Services to stay informed of our privacy practices. By continuing to use the Platform, You agree to the terms of the then-current Privacy Statement.

14. Additional Jurisdictional Rights.

California Residents: Your California Privacy Rights.

California residents may choose to opt out of our disclosure of personal information about them to third parties for direct marketing purposes

You can also directly unsubscribe from receiving marketing emails from us by: (1) clicking on unsubscribe links in marketing emails, (2) visiting https://optout.networkadvertising.org/?c=1 or, (3) if You are a Club Passport member, visiting https://winstar.com to sign in and update Your profile. Please note that if You opt out of receiving marketing emails from us, we may still send You important administrative messages.

If You choose to opt-out at any time after granting approval You can do so by contacting us:

Email: info@WinstarWorldCasino.com

Toll-free telephone: 866-946-7787

Mailing address: WinStarWorld Casino

Attn. Player Analysis

777 Casino Ave.

Thackerville, OK 73459

We allow third parties to access information about Your use of the Services. Some of these companies are members of the Network Advertising Initiative, which offers a single location to opt out of ad targeting from participating companies. To learn more, please click https://www.networkadvertising.org or http://www.Youronlinechoices.eu. California consumers may also use the Digital Advertising Alliance’s tool, accessible https://www.privacyrights.info, to send requests to opt out of the sale of personal information by some or all of the participating companies.

We do not knowingly sell the personal information of individuals under the age of 16.

15. Disclosures of Personal Information.

We disclose the following Personal Information to third parties, as described in Section 8 above, and as set forth below, for our operational business purposes:

Name, Contact Information, and Social Media Information

Service providers.
Third-party marketers. With third parties to permit them to send You marketing communications, consistent with Your choices.
Social media account providers.
Public, government, or public safety authorities, or other legal-matter entities.

Government issued Identification

Public, government or public safety authorities, or other legal-matter entities.

Pictures and recordings of individuals

Service providers. Promotion sponsors.
Social media account providers.
Financial information
Service providers.
Third-party marketers. With third parties to permit them to send You marketing communications, consistent with Your choices.
Public, government, or public safety authorities or other legal-matter entities.

Sensitive Personal Information

Service providers.
Public, government, or public safety authorities or other legal-matter entities.

Biometric data

Service providers.

Geolocation information

Service providers.
Social media account providers.
Public, government, or public safety authorities or other legal-matter entities.

Internet activity

Service providers.
Social media account providers.

Inferences about individuals

Social media account providers.

16. Complaints to the Chickasaw Naton Office of Gaming Commission

You have a right to file a complaint with the CNOGC by visiting or writing to the following address:

Chickasaw Nation Office of Gaming Commission

1921 Cradduck Rd., Suite 120

Ada, Oklahoma 74820

We reserve the right to provide a copy of Your complaints and relevant documentation to any applicable regulatory authority.

17. How To Contact Us.

If You have any questions about this Privacy Statement or how Your Personal Information is handled, please contact us:

Email: info@WinStarWorldCasino.com

Toll-free telephone: 866-946-7787

Mailing address: WinStar World Casino

Attn. Player Analysis

777 Casino Ave.

Thackerville, OK 73459

PLEASE NOTE THAT EMAIL COMMUNICATIONS ARE NOT ALWAYS SECURE. PLEASE DO NOT INCLUDE CREDIT CARD OR OTHER SENSITIVE INFORMATION IN YOUR EMAILS TO US.