Privacy Policy
New Privacy Policy (Effective Date: July 12, 2023)
Old Privacy Policy (Effective Date: January 1, 2020)
NEW PRIVACY POLICY
Effective Date: July 12,2023
PENN Entertainment, Inc. (“PENN Entertainment”, “Us” or “We”) Privacy Policy outlines the collection, use, processing and disclosure of your personal information. This Privacy Policy applies to this website and all of the products, services, websites, mobile applications, social media services, and the properties and services owned, managed or operated by us, our subsidiaries, or our partners on our behalf in the United States that link to this Privacy Policy (the “Services”), unless otherwise indicated. Where additional information is required to explain our privacy practices, we post supplementary privacy notices.
LIST OF TOPICS COVERED
Categories of Personal Information Collected and Processed
Sources of Personal Information
Sensitive Personal Information
Legal Basis and Purposes for Processing Your Information
Disclosures of Personal Information
Cookies and Similar Technologies Policy
Consumers Under 16 Years of Age
Consent
By accessing and using the Services, including when you visit our websites, make reservations, make online purchases, request information from us, download or launch our mobile applications, or when the application is running on your device in the background, you expressly consent to the collection, use, processing, disclosure, and retention of your personal information and sensitive personal information that you and other parties provide to us as a result of such use in accordance with this Privacy Policy, the terms of use for the specific part of the Services you are accessing and using (each and collectively “Terms of Use”), and as permitted by applicable law. You may withdraw your consent at any time by contacting us at privacy@pennentertainment.com at any time, or if you disagree with the Terms of Use or this Privacy Policy, you should immediately discontinue use of the Services.
Please note that the Services may be hosted in countries other than yours. By accessing the Services, you expressly consent to the transfer of your information outside of your home country, which may provide for different data protection laws than in your country.
To provide you with all of the requested Services, we collect and process the following categories of personal information:
- Identifiers, such as first and last name, home or other physical address, which includes the name of a street and the name of a city or town, date of birth, gender identity, age, photograph, job status, employment information, unique personal identifiers or other similar identifiers.
- Messages, Comments, and other User-Generated Content that you choose to provide to us voluntarily, including comments, messages, and other content you post to the Services.
- Unique Personal Identifiers, such as social security number, driver’s license number, passport number, license plate number, telephone number, email address, Internet Protocol address, device identifiers and advertising identifiers, Cookies, beacons, pixel tags, or similar technology, player ID, or loyalty program ID.
- Player Information, such as play activity, depending on how you use the Services, which could include system-generated player identifiers.
- Commercial Information, including records of products or services purchased, obtained, or considered.
- Transaction Information, such as bank information (e.g. bank statement, void cheque), reservation information, and purchase history.
- Geolocation Data obtained and derived from your mobile device when you access the Services by or through such mobile device;
- The applicable laws of the jurisdiction in which you reside may require that we verify your physical location when engaging in placing wagers through the Services. You can only place wagers through the Services from within certain jurisdictions’ boundaries. Accordingly, we collect your Geolocation Data and verify your physical location using geolocation technology and geo-verification service providers. If you do not permit your geolocation to be known (i.e. disable GPS, Wi-Fi and/or Bluetooth), we will not be able to provide such wagering services to you. We may store a record confirming your geolocation within a jurisdiction for up to ten (10) years as required by applicable laws and regulations.
- Certain features within the Services will make use of your Geolocation Data, including geolocation verification provided by GeoComply or other similar geolocation verification service providers. Your use of the Services will require you to, and you hereby consent to us transmitting, collecting, maintaining, processing and using your Geolocation Data as described in this Privacy Policy. You may turn off the location services within your device’s settings at any time or by notifying us in writing that you would like to withdraw such consent. Turning off location services on your device will prohibit you from using certain core features and functionalities of the Service including but not limiting to wagering services.
- Internet or Other Electronic Network Activity and Other Information that are automatically obtained from the devices and/or browsers that you use to access our Services, such as your device type; IP address; device and advertising identifiers, probabilistic identifiers, and other unique online identifiers; time zone setting and location; browser type and version; browser plug in types and versions; operating system and platform information; Internet service provider; pages that you visit before and after using the Services, browsing history, and search history; the date and time of your visit; information about the links you click, pages you view, and advertising you interact with, within the Services and other information about how you interact with our Services or other services you use to connect with us, such as Facebook and Twitter information; the technology on the devices you use to access these Services; audio, electronic, visual, thermal, olfactory, or similar information; or if your device experiences an error with our Services, we collect information about the error (e.g. the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred).
- Inferences, which may be drawn from any of the categories of personal information described above to create profile(s) reflecting your preferences, characteristics, predispositions, interests, and behavior.
Out of Scope
This Privacy Policy does not apply to the following information:
- Aggregated, pseudonymized, and/or de-identified data, derived from information described above and that we do not attempt to reidentify or link back to you, may be used for research, evaluation, and/or other analytical purposes by us or third parties.
Sources of Personal Information
In addition to collecting information directly from you, we may also receive the above noted categories of personal information from other sources, including affiliates, other users of the Services, identity verification services and databases, advertising partners, internet service providers, data analytics providers, operating system providers, publicly available sources, government entities, social networks, and other entities as required by and in compliance with applicable privacy laws.
Sensitive Personal Information
Subject to your place of residency, we may collect personal information that is deemed to be sensitive personal information under applicable privacy laws. We may collect the following sensitive personal information for the purposes listed below:
- Precise Geolocation Information of Your Device consistent with your device’s permission settings, to provide you with Services available at your location, including personalized marketing. Where use of this information is for marketing purposes, you may withdraw your consent at any time, subject to applicable privacy laws.
- Biometric Information via Facial Recognition Technology or Other Technology to identify you, for the limited purpose of ensuring the security and confidentiality of our Services, physical locations, and assets, and as otherwise permitted by, and consistent with, applicable laws. We do not use facial recognition in the state of Illinois or where otherwise prohibited.
- Racial & Ethnic Origins to provide you with personalized advertisement and marketing material for and/or in the Services.
- Driver’s License and Social Security Numbers to provide you with Services, to comply with our legal obligations, including without limitation, relevant gaming regulatory requirements.
We may use the personal information we collect for the following business purposes:
- Provide you with access and use of the Services you requested, including uniquely identifying and authenticating patrons, maintaining and servicing accounts, process payments/transactions, and ensure other features of the Services are properly administered;
- Provide customer service, facilitate communication to respond to patron requests and concerns;
- Administer responsible gaming exclusion, loyalty and other similar programs;
- Deliver marketing, promotional, and advertising materials for, and/or within, the Services, including personalized advertising for the patron;
- Analyze and improve the Services for operational effectiveness and viability of current and prospective services, personalize offers, measure traffic and usage trends, and provide and analyze online surveys;
- Ensure security and integrity of the Services, including troubleshooting, debugging to identify and repair errors that impair existing functionality;
- Comply with applicable laws and regulatory obligations, including risk mitigation; and
- Any other purposes disclosed to you at the time we collect your information with your consent.
We may disclose the personal information we collect to the following parties, who may be located outside the United States, for business purposes including but not limited to:
- Affiliates, Subsidiaries and Other Business Partners: management and analytics, providing you with the Services, website and data hosting, customer service, providing your account, security and performance monitoring, and related activities.
- Service Providers & Contractors: providing you with products and service, payment processing, website and data hosting, customer service, advertising and marketing (including counting ad impressions, ensuring compliance with industry standards, personalization, and analytics), analytics services, security and performance monitoring, maintaining and servicing accounts, fulfilling orders and transactions, verifying customer identity, research, verifying customer information, and auditing.
- Those With Whom You Share Content: any information or content that you voluntarily post, submit, or otherwise disclose to the Service, becomes available to the public, except as limited by any privacy settings you select. Subject to your privacy settings, any content that you voluntarily make public may be searchable by others. If you remove information or content that you posted to the Services, copies may remain viewable in cached and archived pages of the Services, or if other users have copied or saved that information or content. Please note that such removal does not ensure complete or comprehensive removal of the content or information posted (for example, your content or information may remain visible because it was copied and posted or reposted by a third party).
- Third Parties in Compliance with Applicable Law: to respond to subpoenas, court orders, legal process, government and law enforcement requests; to fulfill regulatory or administrative authorities’ requirements; to establish, protect and/or exercise our rights to defend against legal claims; to investigate, prevent and take action against suspected illegal activities and suspected fraud; to protect the rights, reputation, safety and security of our Services, employees, users of our Services, and/or the public; and to prevent, investigate and take action against any violation of the Terms of Use, our policies or agreements, or as otherwise required by law.
- Other Corporate Entities: in the event of a corporate transaction like business merger, consolidation, acquisition, sale of assets, joint venture, or in the unlikely event of bankruptcy.
Subject to your consent, we may disclose your personal information for purposes not identified above.
Parties acting on our behalf are authorized to collect, use, disclose, and/or store personal information only to the extent described in this Privacy Policy, subject to applicable laws.
Cookies: A "Cookie" is a small text file placed on a device when a user visits a website (including our Services). Cookies can be sessional or persistent and are not programs that download on a user's system and damage files (such as, viruses or worms) or send information to third parties about websites visited (such as, spyware). A persistent Cookie remains on your device after you close your browser. Persistent Cookies may be used by your browser on subsequent visits to the Service. Persistent Cookies can be removed by following your browser's directions. A sessional Cookie is temporary and disappears after you close your browser. You can set your browser to refuse certain Cookies or to indicate when a Cookie is being sent. However, some features of the Service may not function properly if the ability to accept Cookies is limited or disabled.
We may send one or more Cookies to your device that uniquely identifies your browser and enables us to recognize repeat visitors, facilitate a visitor's ongoing access to and use of the website, track your usage of the Services over time and compile data that can allow content and speed of access improvements and targeted offers (e.g., the pages you view, the links you click and other actions you take on the Services), and enhance your navigation through the Services. Information (i.e., domain names and IP addresses) and data may be automatically collected through the standard operation of our internet servers at our discretion using Cookies.
You can opt-out of the installation of Cookies or delete Cookies previously installed by updating your settings in the internet browser you use to visit our Services. However, visitors should note that Cookies may be necessary for optimal functionality of our websites.
Other Internet Technologies: We may also use other standard internet technologies, such as flash technologies, web beacons, or pixel tags, and other similar technologies, to deliver or communicate with Cookies and track your use of our websites. For example, we may include web beacons in e-mail messages or newsletters to determine whether messages have been opened and acted upon. The information obtained with such technology enables us to customize the Services offered and measure the overall effectiveness of our online content, advertising campaigns, and our Services.
By using our Services, you consent to the installation and use of Cookies and similar technologies by or on behalf of us as described above.
Retention
Your personal information will be retained for so long as reasonably necessary and proportionate for the purposes outlined above in this Privacy Policy based on criteria such as duration required to provide services to you, including for backup, archival, fraud prevention or detection, audit, or as otherwise required by law. After the retention period has elapsed, your information will be securely deleted or removed. We may use remote backup features that will send information from your device and/or browser to be stored on servers operated by or on behalf of us and our affiliates. Except to the extent specifically prohibited by applicable law, we have no responsibility for any data transmitted to and from your device and/or computer and we recommend that you make regular back-ups of all information and data on your device and/or computer.
Security
We care about the security of your personal information and take reasonable physical, technological and administrative measures in an attempt to protect and safeguard your personal information against loss, theft, and unauthorized access, use, disclosure or modification. However, we cannot ensure or warrant the security of any information you provide to us as no system is perfect, nor can we guarantee that unauthorized access or theft of data will not occur. User discretion is advised when submitting personal information to the Services.
For features on our websites that require a login or password, you are responsible to protect against unauthorized access by signing off when finished using a shared computer or device and to safeguard the confidentiality of your username and password. We strongly encourage that you do not share this information with anyone.
Links to External Websites
We may have links to external websites in our Services. By accessing an external website from our Services, you hereby release us from any and all liability for your use of such link and third-party website. We have no control over the content of external websites, and therefore are not responsible for the security and privacy policies protocols or content that appears on these external websites. Your visit and use of such external websites is voluntary and may be subject to such third-party’s rules and policies, which you are encouraged to review. If you choose to interact third party social networking service, we may receive information about you that you have made available to the third party social networking service. Also, the third party social networking service may receive information about you from us.
Sale
Sale is defined as selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or third party for monetary or other valuable consideration.
By the definition above, we do not sell personal information of our users.
Our Services are intended for consumers over the age of 21, subject to exceptions where age of majority is 18. We do not intentionally collect the personal information of consumers under the age of 16, nor do we intentionally share or sell the personal information of such consumers. If you have reasons to believe that we may have accidentally received personal information of an individual under the age of 16, please contact us immediately at privacy@pennentertainment.com
Consumer Rights
Subject to your place of residence, you may be entitled to exercise certain rights with respect to your personal information, as described below:
- Right to Access and Confirm Processing: You may request access and or confirm processing of your personal information once in a calendar year. You may have the right to know what personal information the business has collected about you, including the categories of personal information, the categories of sources from which it is collected, the business or commercial purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.
- Portability: Subject to exceptions, you may obtain a copy of your personal information we collected during the preceding twelve (12) months of your request, in a readily useable format where processing is done via automated means.
- Deletion: Subject to certain exceptions, you may request deletion of your personal information in our control.
- Correct Inaccuracies in your Personal Information: You can also update or correct your account information and electronic message preferences at any time by logging in to your account and changing your profile settings.
- Opt-out of Sale and Sharing for Targeted Advertising: We do not sell your personal information for monetary or other valuable consideration. However, you may request opt-out of having your personal information processed for purposes of targeted advertising by visiting the NAI Opt-Out Page: http://www.networkadvertising.org/choices. Please note that even if you choose to remove your information (opt-out), you will still see advertisements while you are browsing online. However, the advertisements you see may be less relevant to you and your interests. Additionally, many network advertising programs allow you to view and manage the interest categories they have compiled from your online browsing activities. These interest categories help determine the types of targeted advertisements you may receive. The NAI Opt-Out Page provides a tool that identifies its member companies that have Cookies on your browser and provides links to those companies.
- Universal Opt-Out Mechanism (California, Connecticut and Colorado Residents Only): This mechanism, also known as “Global Privacy Control” (GPC) signals, affords consumers the ability to communicate a request to opt-out of the processing of their personal information, for the purposes of sale or sharing for targeted advertisement, across multiple websites at once by your browser sending a signal to websites you visit, rather than having to make individual opt-out requests through different websites. Currently our systems are unable to receive and honor these signals. If you prefer to not receive targeted advertising, please follow the above-noted steps.
- Limit Use and Disclosure of Sensitive Personal Information (California and Utah Residents Only): Subject to exceptions, you may limit the use and disclosure of your sensitive personal information for purposes necessary to provide you with the Services you requested by clicking the “Limit the Use and Disclosure of My Sensitive Personal Information” link. Similarly, you may withdraw your consent to have your sensitive personal information be used, processed, or shared at any time unless required for business purposes.
- Designate Authorized Agent: You may be entitled, in accordance with applicable law, to submit a request through an authorized agent.
- Shine the Light (California Residents Only): California residents who provide certain personal information in connection with obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year.
We reserve the right to amend this Privacy Policy at any time. We advise you to periodically review this policy for any updates, which will be accompanied by a new “effective date” indicated above.
To submit a request to exercise your rights, designate an authorized agent to exercise your rights on your behalf, and/or for any questions, you may contact us by calling 1 (866) 978-5118, by emailing our Privacy Compliance Officer at privacy@pennentertainment.com, and/or by mail at:
Privacy Compliance Officer
PENN Entertainment, Inc.
825 Berkshire Blvd.
Wyomissing, PA 19610
We will process your request upon receipt after verifying your identity. You also may be entitled, in accordance with applicable law, to appeal our refusal to take action on your request by contacting our Privacy Compliance Officer.
OLD PRIVACY POLICY
Effective Date: January 1, 2020
Last Updated: August 4, 2022
PENN Entertainment, Inc. (“PENN Entertainment”, “Us” or “We”) has produced this Privacy Policy to explain our practices regarding the gathering, use, and sharing of personal information. This Privacy Policy applies to this website and all of the products, services, websites, mobile applications, social media services, of the properties and services owned, managed or operated by us, our subsidiaries, or our partners on our behalf in the United States, unless otherwise indicated. Where additional detailed information is needed to explain our privacy practices, we post supplementary privacy notices to describe how personal information is processed.
We value your trust and respect your confidentiality. As a general practice, we do not provide any online information, or any information gathered through forms, applications or other means to outside third parties, except as otherwise designated in this policy. We do not sell or rent any information gathered online, or in individual property players’ clubs, to any outside organization.
This Privacy Policy will tell you what information we collect about you, when we may disclose such information to third parties, and about your use of the websites and services. We urge you to read this Privacy Policy carefully.
LIST OF TOPICS COVERED
Collection of Personal Information
Collection of Aggregated Information
Sharing of Personal Information with Our Third Party Business Partners and Alliances
Targeted Advertising; How To Opt-Out
Age Policy & Legal Disclaimers
Access to Your Personal Information
California Privacy Rights: California Consumer Privacy Act
California Privacy Rights: Shine the Light
Collection of Personal Information
We do not collect personally identifiable information about visitors except when visitors specifically provide such information on a voluntary basis. Such personally identifiable information may be gathered in registrations, applications, mobile applications, information requests, reservations, RSVPs, online purchases, online surveys, social media services and in some instances in the process of utilizing offers from our third party strategic partners and alliances.
We collect the following categories of personal information:
- Identifiers: First and last name, home or other physical address which includes the name of a street and the name of a city or town, email address, telephone number, social security number, driver’s licenses number, passport number, license plate number, age, and identifiers that allows a specific person to be contacted either physically or online;
- Player Information: Account number, Universal Player ID, and DAP Info;
- Device Information: System information, usage, and location data;
- Transaction Information: Bank account information, reservation information, and purchases;
- Social Media Information: Facebook and Twitter information;
- Information concerning a person collected from the person through our website and maintained by us in combination with an identifier in a form that makes the information personally identifiable.
We may use personally identifiable information for the following general purposes:
- Contacting an account holder regarding account status,
- Make changes to the account agreement, discounts, promotions, and
- Offer products and other matters relevant to the service and/or the information collected.
Additionally, we may share your information, whether individually or in the aggregate, with our subsidiaries and affiliates, and in certain cases with selected outside third party partners and alliances for marketing or promotional purposes or to improve the products or services offered by us and our subsidiaries and affiliates.
We value opinions and comments from our visitors and we may conduct online surveys or issue invitations for such. We also offer an online Guest Comment form. These surveys are entirely optional for all website visitors. Usually the information from such surveys is aggregated and used for improving our products, services and operations and those of our subsidiaries and affiliates. In other cases, we will use the identifying information as a vehicle for responding to an individual question or comment.
Biometric Information
PENN Entertainment may collect personally identifiable information about you that includes biometric data, such as digital photographs, facial recognition data, and other biometric information (collectively, “Biometric Data”). We may collect this Biometric Data using technological means, such as identification document scanners, digital cameras, and facial recognition scanners, either in person or via your device.
In each case, we only use these technologies as permitted by applicable law. PENN Entertainment manages the security and confidentiality of Biometric Data to protect it from unauthorized access, use, disclosure or alteration. PENN Entertainment will not use your Biometric Data for marketing purposes or share your Biometric Data with third parties for such third parties’ own marketing purposes. PENN Entertainment complies with all local privacy laws in the collection and processing of Biometric Data.
Collection of Aggregated Information
Survey participants are anonymous unless otherwise stated in the survey. We reserve the right to perform statistical analyses of visitors’ behavior and characteristics in order to measure interest in and use of the various areas of the website. We may provide aggregated data from these sources to third parties for purposes of research and evaluation.
Sharing of Personal Information with Our Third-Party Business Partners and Alliances
We may share your personal information with our business partners and alliances related to specific marketing efforts and purposes.
When we provide personal information to our third-party business partners and alliances, we require them to exercise reasonable care to protect your personal information and restrict the use of your personal information to the purposes for which it was provided to them. If you do not want us to share your personal information with third parties for marketing purposes, you may opt-out of such sharing by notifying us in accordance with the “Opt-Out” section located below.
We also share information with our service and analytics providers to provide you with our services.
Disclosure of Information
Although you may request to Opt-Out of sharing personal information with third parties for marketing purposes (see Opt Out section below), we may still disclose personal information to third parties in our sole discretion in the following situations:
- if you enroll in any of our Responsible Gaming exclusion programs;
- for non-marketing purposes, such as processing and fulfilling reservations or purchases;
- to the extent such disclosure is mandated to comply with a court order or with a subpoena, search warrant or other valid legal process;
- to comply with requests of government or law enforcement entities or legal, regulatory or administrative requirements of other governmental authorities;
- to protect and defend us, or our subsidiaries and affiliates, and all of their or our officers, directors, team members and agents in connection with any legal action, claim or dispute;
- to satisfy any contractual obligation to indemnify our contractors, business partners or alliances, or other third parties in connection with any legal action, claim or dispute;
- to enforce the Terms of Service or Use of any of our websites, applications or services;
- to prevent imminent physical harm or threats to public safety;
- to third-party vendors that perform functions such as credit card transactions;
- to prevent fraud;
- to engage in debt collection;
- to keep your credit card on file for future purchases, unless you tell us not to;
- otherwise with consent or in our discretion if we believe in good faith that disclosure is necessary or advisable.
Non-Personal Information
Even if you do not provide information to us, we may collect non-personal information about your use of our website, special promotions and other services.
Cookies and Web Beacons
Non-personal information (for example, domain names and IP addresses) and data may be automatically collected through the standard operation of our internet servers or at our discretion through the use of "cookies." "Cookies" are small text files we can use to recognize repeat visitors, facilitate a visitor's ongoing access to and use of the website, track usage behavior and compile aggregate data that can allow content and speed of access improvements and targeted offers. We do not link non-personal information from cookies to personally identifiable information without your permission and do not use cookies to collect or store personal information about you.
Cookies are not programs that download onto a visitor's system and damage files (such as, viruses or worms) or send information to third parties about websites visited (such as, spyware). Generally, cookies work by assigning a unique number to the visitor that has no meaning outside the assigning website.
If a visitor does not want information collected through the use of cookies, there is a simple procedure in most browsers that allows the visitor to deny or accept the cookie feature. However, visitors should note that cookies may be necessary to provide them with certain features (e.g., customized delivery of information) available on our websites.
We may also use other standard Internet technologies, such as flash technologies, web beacons or pixel tags, and other similar technologies, to deliver or communicate with cookies and track your use of our websites. For example, we may include web beacons in e-mail messages or newsletters to determine whether messages have been opened and acted upon. The information obtained with such technology enables us to customize the services offered and measure the overall effectiveness of our online content, advertising campaigns, and the products and services we offer through the websites.
Targeted Advertising: How To Opt-Out
We may license technology to serve advertisements on our websites, mobile apps or related digital services, and within their content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements and third-party analytics vendors to evaluate and provide us with information about the use of our websites and related digital services and viewing of our content. We do not share personally identifiable information with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, pixel tags and similar technologies on your device and they may otherwise collect or have access to information about you, including usage information. We and our network advertisers may target advertisements for products and services in which you might be interested based on your visits to both our digital offerings and other web sites or digital services. We may use a variety of companies to serve advertisements.
If you prefer to not receive targeted advertising, you can opt-out of some network advertising programs that use your information. To do so please visit the NAI Opt-Out Page: http://www.networkadvertising.org/choices. Please note that even if you choose to remove your information (opt-out), you will still see advertisements while you are browsing online. However, the advertisements you see may be less relevant to you and your interests. Additionally, many network advertising programs allow you to view and manage the interest categories they have compiled from your online browsing activities. These interest categories help determine the types of targeted advertisements you may receive. The NAI Opt-Out Page provides a tool that identifies its member companies that have cookies on your browser and provides links to those companies.
While we take reasonable steps to protect the privacy of our online users, we cannot promise that the current limitations of our online applications or programming will address every browser setting or honor every personal browser preference. In particular, our systems do not at this time have the necessary programming to honor “Do Not Track” or “DNT” browser signals. Please return to this privacy policy in future for further updates on this topic.
Security
We have in place certain commercially measurable technological and procedural security measures in an attempt to protect and safeguard the security of the personal information provided by our visitors. Strict measures will be taken to protect against unauthorized access, alteration, or dissemination of personal information. Despite these efforts, please understand that no system is perfect or can guarantee that unauthorized access or theft of data might not occur.
For features on our websites that require a login or password, it is important for you to protect against unauthorized access to your password and your computer. Be sure to sign off when finished using a shared computer.
Links
We may have links to outside websites. By accessing another website from our website, you hereby release us from any and all liability for your use of such link and website. We are not responsible for the content that appears on these other websites. We have no control over the content of outside websites. Once you access another website, be aware that we are not responsible for the privacy practices of such other websites. You should always use extreme caution when disclosing private information to such websites. We encourage you to look for and review the privacy policy of each and every website that you visit through a link or advertisement. This Privacy Policy applies only to information collected by us and our subsidiaries and affiliates, unless otherwise indicated. In the case of any digital “play for fun” social gaming opportunities we offer, this privacy policy will apply regardless of the platform or site where the games actually are hosted or played.
Age Policy & Legal Disclaimers
This website is intended only for users over the age of 21. Please leave this website if you are under the age of 21. Exception is made in the case of racing and pari-mutuel operations, where wagering may be permissible by law to those 18 years old and older. By continuing, you hereby release us, our subsidiaries and affiliates, and the creators of the website from any and all liability for your use or access to the website.
Under penalty of law, persons under 21 years of age will not be allowed to loiter on casino or slots property or participate in any gaming activity and persons under the permissible age will not be allowed to loiter on the property or participate in any racing or pari-mutuel activity. We have the right to ask for proper ID from individuals while they are on the property.
We will not rent hotel rooms to persons under the age of 21. Any contests, activities, or programs promoted are strictly limited to people over 21, unless otherwise indicated.
We strongly support parental control of the internet and, if you are a parent and do not want your children viewing this website, consult the following filtering software companies, such as: Net Nanny and Cybersitter. Net Nanny and Cybersitter are third-party service providers that are not affiliated with us or any of our subsidiaries or affiliates and we do not assume any obligation with respect to the services provided by such providers.
Except as provided above with respect to legal racing and pari-mutuel operations for persons 18 years or older, we do not knowingly or intentionally collect any personally identifiable information from, or market to or target, individuals under the age of 21.
We reserve the right to amend this Privacy Statement at any time, so please review it frequently. We may make non-significant changes to the Privacy Policy, not affecting how your personally identifiable information is collected, used or disclosed, of which we may not notify users. If we decide to change our Privacy Policy materially, we will post those changes to this Privacy Policy at least 30 days prior to the effective date of the change so that you are aware of what information we collect, how we use it and under what circumstances, if any, we disclose it. Continued use after the new Privacy Policy has taken effect constitutes acceptance of and consent to the new Privacy Policy. If you do not agree to the new terms, you should stop using our websites and related services, in which case we may continue to use your personal information in a manner consistent with the policy in effect at the time the information was gathered.
This Privacy Statement and the policies outlined herein are not intended to and do not create any contractual or other legal rights in or on behalf of any other person or entity.
Business Transitions
If we or one of our subsidiaries, affiliates or partners is acquired by or merges with another company, the assets of the respective website(s), including personal information, will likely be transferred to the new company.
Access to your Personal Information
If you are a Nevada resident or a resident of another state with similar privacy rights, you have the right to review and request changes to the personal information we have collected about you through our websites or online services.
You can access the personal information you submit to our website via a Players’ Club Player Profile account at any time. If you wish to update the personal information you have submitted to us, you may do so by signing into your account on the applicable website or app, or by sending an email to corporate@pennentertainment.com with your request.
You can access the personal information you submit through our website on your online “play for fun” account at any time. If you wish to update the personal information you have submitted to your online “play for fun” account, you may do so by signing into your “play for fun” account or by sending an email to support@play4funnetwork.com with your request.
California Privacy Rights: California Consumer Privacy Act
If you are a California Consumer, you have certain rights with respect to the collection, use, transfer, and processing of your “Personal Information”, as defined by the California Consumer Privacy Act (CCPA). We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others. To exercise any of the rights below, please contact us via the contact information below. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.
Collection of Personal Information
When California Consumers access the PENN Entertainment websites, purchase PENN Entertainment products, contact PENN Entertainment, or visit one of our physical locations, we collect the following Personal Information.
| Categories of consumer’s Personal Information collected | Business or commercial purposes for which the information was collected | Categories of sources from which that information was collected | Categories of third parties with whom the business shares personal information |
Identifiers
|
|
This information is collected directly from you. | Affiliates, gaming partners, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). |
Other Personal Information (Financial Information)
|
|
This information is collected directly from you. | Affiliates, gaming partners, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). |
Commercial Information
|
|
This information is collected directly from you or by logging our interactions with you. | Affiliates, gaming partners, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). |
Biometric Data
|
|
We collect this information from you directly or through our interactions with you. | Service providers and law enforcement (if necessary). |
Internet or Electronic Network Activity Information
|
|
We collect your internet or other electronic network activity information from your interactions with our website. | Affiliates, gaming partners, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). |
Geolocation Data
|
|
We collect your geolocation information from your interactions with our website. | Affiliates, gaming partners, analytics providers, service providers, transactions processors, IT vendors, and law enforcement (if necessary). |
In the preceding 12 months, we have not sold Personal Information about consumers.
In the preceding 12 months, we have not sold Personal Information about minors.
Individual Rights
Right to Know About Personal Information Collected, Disclosed, or Sold
You have the right to request that PENN Entertainment disclose the Personal Information it collects, uses, and discloses about you to third parties. There are two types of Right to Know requests you can make:
1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you:
a. Category of personal information collected,
b. Categories of sources from which that information was collected,
c. The business or commercial purpose(s) for which the information was collected,
d. The categories of third parties to whom PENN Entertainment sold or disclosed the category of personal information for a business purpose, and
e. The business or commercial purpose for which PENN Entertainment sold or disclosed the category of personal information.
Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:
a. Specific pieces of Personal Information collected about you.
PENN Entertainment does not sell any Personal Information of California consumers. This information will be provided to you free of charge, unless PENN Entertainment determines that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period.
Right of Deletion
You have the right to request that PENN Entertainment and our service providers delete any Personal Information about yourself that PENN Entertainment has collected from you upon receipt of a verifiable request. This right is subject to exceptions.
Submitting Requests
You can submit your request by calling us at 866-978-5118. You may also submit a request through a webform available by emailing us at CCPA@pennentertainment.com.
Verifying Requests
PENN Entertainment provides California Consumers with the ability to submit requests through our request website, our telephone number, and our email address. PENN Entertainment must verify that the person requesting information or deletion is the California Consumer about whom the request relates in order to process the request. To verify a California Consumer’s identity, we may request up to up to three pieces of Personal Information about you when you make a request to compare against our records. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in your request to verify your identity and will delete any information you provide after processing the request. PENN Entertainment reserves the right to take additional steps as necessary to verify the identity of California Consumers where we have reason to believe a request is fraudulent.
Authorized Agent
You may choose a person registered with the California Secretary of State that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, PENN Entertainment requires that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with PENN Entertainment. Failure to do so may result in PENN Entertainment denying your request.
Right to Equal Service
PENN Entertainment will not discriminate against you because you exercised any of your rights, including, but not limited to, by:
- Denying goods or services to you.
- Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
- Providing a different level or quality of goods or services to you.
- Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
California Privacy Rights: Shine the Light
Under California’s “Shine the Light” law, California residents who provide certain personal information in connection with obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year.
To obtain this information please contact us at the information provided below. We will provide the requested information to you pursuant to the contact information provided to us.
Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.
Nevada Opt-Out
Nevada residents have the right to opt-out of the sale of their data. While we do not currently sell personal information to third parties, you can submit an opt-out request to prevent any future sales of your personal information in the event we begin selling data in the future. To submit your opt-out request, please email us at corporate@pennentertainment.com. Please note that we will need to verify your identity in order to process this request.
If you wish to opt-out of continuing to receive solicitations from us, or do not want us to continue to share your personal information with our third-party business partners and alliances for marketing purposes, please email us with your instructions at corporate@pennentertainment.com. Please note that any information previously shared with third parties prior to receipt of your request may result in continued communications from those parties pursuant to their own privacy policies.
Even if you registered your telephone number on a do-not-call list, certain exemptions may allow us to contact you by telephone. However, to ensure our customers' preferences are honored, we also maintain our own internal do-not-call list. If you would like to opt-out of receiving telemarketing sales calls from us by adding your telephone number to our internal do-not-call list, please email us at corporate@pennentertainment.com.
Contacting PENN Entertainment
If you have a privacy concern or question regarding us or this Privacy Policy and you cannot satisfactorily resolve it through the use of our website, you should contact us through one of the following methods:
Send an email to corporate@pennentertainment.com
By Mail:
PENN Entertainment, Inc.
825 Berkshire Blvd.
Wyomissing, PA 19610
Attn: Legal