TABLE OF CONTENTS

I. INTRODUCTION

II. CATEGORIES AND SOURCES OF INFORMATION WE COLLECT

III. PURPOSE FOR COLLECTING PERSONAL INFORMATION

IV. PERSONAL INFORMATION SOLD OR SHARED

• a. CATEGORIES OF THIRD PARTIES
• b. COMMERCIAL PURPOSE
• c. USER AGE

V. CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO THIRD-PARTIES FOR BUSINESS PURPOSES (NOT SERVICE PROVIDERS)

• a. PERSONAL INFORMATION CATEGORIES

VI. STATEMENT OF SENSITIVE PERSONAL INFORMATION DISCLOSURES

VII. DATA SUBJECT RIGHTS

• a. GENERAL
• b. CALIFORNIA PRIVACY RIGHTS

VIII. METHODS FOR EXERCISING DATA SUBJECT RIGHTS

IX. NOTICE OF RIGHT TO OPT-OUT OF SALE/SHARING

X. NOTICE OF RIGHT TO LIMIT

XI. OPT-OUT PREFERENCE SIGNAL

XII. REQUEST TO OPT-IN AFTER OPTING OUT

XIII. SMS/TEXT AND EMAIL MESSAGING

XIV. INTERNATIONAL ACCESS TO OUR SERVICES

XV. STATION APPS

• a. STN Sports Mobile Sportsbook
• b. STN Play by Station Casinos
• c. STN Mobile App

XVI. DATA SECURITY

XVII. DATA RETENTION

XVIII. DATA SUBPROCESSORS

XIX. SECURE SHOPPING AND PAYMENT PROCESSING

XX. CHILDREN’S PRIVACY

XXI. LINKS TO NON-STATION WEBSITES

XXII. TRANSFER OF CORPORATE ASSETS

XXIII. CHANGES TO THIS PRIVACY POLICY

XXIV. CONTACT US

I. INTRODUCTION

This Privacy Policy (“Policy”) covers any personal information Station Casinos LLC, a Nevada limited liability company, including any subsidiaries and affiliates (collectively, “Station”, “we”, or “us”) obtains when you visit any physical operations of Station and provide information in person, use our website located at https://www.stationcasinos.com and other websites and domains owned by Station (collectively, the “Websites”), or use any of our mobile applications and/or games (collectively, the “Services”). Station is committed to providing excellent service to visitors to this Website, users of the Services, customers, job applicants, and any third party from which Station collects information (each, a “User”, “you”, or “your”), including respecting our Users’ privacy rights and protecting our Users’ data. We understand that when you visit or use our Services you may have questions about whether and how our Services collect and use your information. We collect and use your personal information as described in this Policy.

PLEASE READ THIS POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR PERSONAL INFORMATION. IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT ACCESS THE WEBSITE OR USE OUR SERVICES.

This Policy is governed by our Terms of Use available at https://www.stationcasinos.com/terms-of-use/ (the “Terms of Use”). Defined terms used herein and not otherwise defined have the meanings set forth in the Terms of Use.

II. CATEGORIES AND SOURCES OF INFORMATION WE COLLECT

The following table contains the categories and sources of information that we may collect from you and that we have collected from Users over the last 12 months. References to categories of data in the rest of the Policy will also map to the categories in this table.

INFORMATION COLLECTED AUTOMATICALLY

This section provides more detail about Category F in the above table.

Web Browser Cookies

We collect information about how you use our Website by setting and accessing cookies on your computer. A cookie is a small piece of information sent by our Website that is saved on your storage drive by your computer’s browser. The cookie holds information our Website may need to personalize or enhance your experience and to gather statistical data, such as which pages are visited, the Internet provider’s domain name and the addresses of the sites visited immediately before coming to and immediately after leaving our Website. The information in the cookie lets Station trace “clickstream” activity (i.e., the paths taken by visitors to our Website as they move from page to page) to enable us to better serve our customers by revealing which portions of our Website are the most popular. We may link the anonymous visitor ID from your cookie to a user ID in our database to help us analyze web traffic and statistics. From time to time, other companies may help us with data research and analysis, but they will be prohibited from using that data for any other purpose. You may disable cookies on your browser. Please review your browser’s instructions for doing so. Note that certain features of the Website may not be available if you delete or reject cookies.

You can manage how we use cookies on your browser by clicking the “Cookies Settings” link on the banner at the bottom of our home page. Clicking on the “Cookies Settings” link will take you to a popup where you can manage your cookie preferences. There are four categories of cookies deployed on our Services:

• Strictly Necessary Cookies – Strictly necessary cookies are those that enable a website to function and are required for the website to function correctly. These cookies do not track personal information of visitors.
• Performance Cookies – Performance Cookies are used to understand how Users use our Services. These cookies also aid in determining the performance of our advertising.
• Functional Cookies – Functional Cookies are used to personalize our Services for you by capturing your preferences, choices, and settings.
• Targeting Cookies – Targeting Cookies collect data about your browser’s online activity. This data is used to present advertising to you that may be of more interest than a non-targeted advertisement. Removing Targeting Cookies will not remove ads from your Services.

Using the slide bar, you can choose which cookies to allow, except for the “Strictly Necessary Cookies” that are necessary for the operation of the Service. In addition to using our cookie manager, you can also adjust your cookies through your browser settings. You can learn more about cookies at the following link: All About Cookies | Online Privacy and Digital Security. Please note that removing cookies may affect how the Services work.

Pixel Tags
We may use pixel tags (also called web beacons or clear gifs) on our Website. They can help us analyze what our customers like to do on our Website and the effectiveness of our features and advertising. They can also help us customize your browsing experience. We may use information collected through pixel tags or tracked links in combination with your personal information. We may also combine personal information you provide to Station with other personal information (such as purchase history and demographic information). If we work with other companies to help us track, collect and analyze this information, they will be prohibited from using this information for any other purpose.

The Services, including our service providers, may also use other technologies such as JavaScript. We may use local storage (HTML5). We may also permit third parties to use cookies, web beacons, JavaScript and eTags on our Website.

INTEREST-BASED ADVERTISEMENTS

Some of advertisements presented on our Services are provided by third-parties based on the activity of your browser or app. The information, which may contain personal information, may be provided to Station by you or it may be derived by our advertising service providers from your browser’s activity over time and across non-related websites. Such tracking can be accomplished with targeting cookies and/or pixels/web beacons. More information on interest-based advertising is available at the following Network Advertising Initiative link: https://thenai.org/about-online-advertising/.

III. PURPOSE FOR COLLECTING PERSONAL INFORMATION

Your personal information is collected for specified, legitimate purposes and not processed further in ways incompatible with those purposes. Collected personal information is relevant to and not excessive for the purposes for which they are collected and used. We may collect your personal information when you:

• visit our Website;
• use our Services;
• create an account;
• apply for a job;
• apply for a credit card;
• make a purchase;
• make a reservation;
• subscribe to the newsletter;
• download and activate an application;
• respond to a survey; and/or
• fill out a form.

We may also collect your personal information in connection with other activities, services, features, or resources we make available on our Website.

Station also uses your personal information for the following purposes:

• To personalize User experience;
• To facilitate purchases, transactions, and reservations;
• To provide software and Services updates;
• To verify your eligibility for a credit card;
• To improve our Services;
• To improve customer service and Services support;
• To administer a content, promotion, survey or other Website features;
• To send you information you agreed to receive about topics we think will be of interest to you; and/or
• To send periodic opted-in to emails or mobile/SMS messages.

We may also use aggregated personal information for the purpose of understanding how our Users as a group use the Services and resources provided on our Website.

If you apply for a job through our Website, we may also use the information to:

• assess qualifications and personal experience to determine if it meets specific job requirements; and/or
• help us inform candidates of future openings at Station.

We may collect precise physical location along with your gaming activity. We may track all transactions associated with your account for the purpose of determining if you are located within the state of Nevada and in order to meet regulatory requirements.

IV. PERSONAL INFORMATION SOLD OR SHARED

• a. CATEGORIES OF THIRD PARTIES
• i. Ad tech
• b. COMMERCIAL PURPOSE
• i. To sell advertising through the use of ad tech.
• c. USER AGE: Station has no actual knowledge of selling or sharing the personal information of customers under the age of 21.

V. CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO THIRD PARTIES FOR BUSINESS PURPOSES (NOT SERVICE PROVIDERS)

We disclose your personal information with the following categories of third parties:

(1) Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business.

(2) Undertaking internal research for technological development and demonstration.

• a. PERSONAL INFORMATION CATEGORIES
• i. Category A. Personal identifiers
• ii. Category B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
• iii. Category D. Commercial information
• iv. Category F. Internet or other similar network activity
• v. Category G. Geolocation data
• vi. Category L. Age or data of birth

VI. STATEMENT OF SENSITIVE PERSONAL INFORMATION DISCLOSURES

• a. Precise geolocation data is used only for internal purposes in order to determine if users are within a permitted area for use of our Services.

VII. DATA SUBJECT RIGHTS

a. In general, if you believe that your information is inaccurate or incomplete, you may request that the data be amended. It is your responsibility to provide us with accurate personal information about yourself and to inform us of any changes. (e.g., new home address or change of name). If you desire to have your data deleted from our Services, please submit your request through our online data subject access request page found at DSAR – Station Casinos or email us at privacy@StationCasinos.com. Please note, that we must have enough information to verify that the request is valid. We may contact you as part of the verification process. Also, please note that applicable law may require us to keep certain data for a predetermined amount of time.

If at any time, you believe that your personal information has been processed in violation of this Policy, you may report the concern to the designated Station official. If you have any inquires or complaints about the use or limitation of use of your personal information, you may contact our corporate headquarters:

Attn: Privacy
Station Casinos LLC
1505 S Pavilion Center Drive
Las Vegas, NV 89135
or email us at Privacy@StationCasinos.com.

b. CALIFORNIA PRIVACY RIGHTS
California residents have the following data subject rights:

i. Right to Know What Personal Information is Being Collected (Right to Access)
You have the right to request the following information:

(1) Categories of personal information collected about you.
(2) Categories of sources from which the personal information is collected.
(3) The business or commercial purpose for collecting, selling, or sharing your personal information.
(4) Categories of third parties to whom Station discloses your personal information.
(5) The specific pieces of personal information we have collected about you.

ii. Right to Delete Personal Information
You have the right to request that Station delete any personal information about you that Station has collected from you.

iii. Right to Correct Inaccurate Personal Information
You have the right to request that Station correct your inaccurate personal information if we maintain inaccurate personal information about you.

iv. Right to Know What Personal Information is Sold or Shared and to Whom
You have the right, if Station sells, shares your information, to request that Station disclose to you the following:

(1) The categories of personal information that Station collected from you.
(2) The categories of personal information that Station sold or shared about you and the categories of personal information for each category of third parties to whom the personal information was sold or shared.
(3) The categories of personal information that Station disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

v. Right to Opt Out of Sale or Sharing of Personal Information
You have the right to direct Station, if we sell or share your personal information to third parties not to sell or share your personal information.

vi. Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right to direct Station to limit the use of your sensitive personal information to the use which is necessary to perform the Services.

vii. Right of No Retaliation Following Opt Out or Exercise of Other Rights
Station may not discriminate against you if you exercise any of your rights as described above.

VIII. METHODS FOR EXERCISING CALIFORNIA DATA SUBJECT RIGHTS

You can submit a request to exercise one or more of the California data subject rights stated above using the following methods:

– Using our online request form found at DSAR – Station Casinos
– Emailing us at Privacy@StationCasinos.com
– Calling our toll-free number 1.800.678.2846

After we receive your request, we take steps to determine if the request is a verifiable customer request before taking action. It is important that you provide enough information so that we can verify that it is you making the request. We have 45 days in which to take action on your request. If we run into difficulties in honoring your request, we will notify you within those 45 days. The original 45-day period will be extended by 45 days if reasonably necessary. If we do not take action on your request, we will inform you, without delay, of the reasons for not taking action and any rights you may have to appeal our decision, if any.

If you use an authorized agent to submit a request to delete, correct, or know, and the authorized agent does not provide a proper power of attorney under probate code, we may require you to either: (1) verify their own identity directly with us, or (2) directly confirm with us that you provided the authorized agent permission to submit the request.

IX. NOTICE OF RIGHT TO OPT-OUT OF SALE/SHARING

As noted above, one of your California data subject rights is the Right to Opt Out of Sale or Sharing of Personal Information. You can submit a request to opt-out of sale/sharing of your personal information using the form available at the following link: DSAR – Station Casinos.

X. NOTICE OF RIGHT TO LIMIT

Station does collect your sensitive personal information in the form of your precise geolocation. Your precise geolocation is necessary for the operation of the Services and cannot be limited. Station also does not use your precise geolocation for the purpose of inferring characteristics about you. Because of these reasons, Station’s collection and use of precise geolocation is not subject to limit.

XI. OPT-OUT PREFERENCE SIGNAL

If your browser supports an opt-out preference signal, you may opt out of the sharing or sale of your personal information by properly configuring the opt-out preference signal. If you subsequently delete cookies, change your browser settings, or use a different browser, you will need to turn the opt-out signal on again.

XII. REQUEST TO OPT-IN AFTER OPTING OUT

Some transactions or Services may require Station to sell or share your data. For example, if you have opted out of Station selling or sharing your information and now want to opt-in to the selling or sharing of your information in order to complete a transaction or use a Station Service. If you attempt to complete such a transaction or use such a Service and you are opted out, we will inform you that the transaction or Service requires the sale or sharing of your personal information and provide instructions on how you can provide consent to opt-in to the sale or sharing or your personal information.

XIII. SMS/TEXT AND EMAIL MESSAGING

Please see our Terms of Use for information about receiving alerts and promotional messages from Station on your mobile device and/or via email.

XIV. INTERNATIONAL ACCESS TO OUR SERVICES

To access the majority of our Services, you must be physically present within the state of Nevada in the United States of America (“USA”). For those Services that are accessible outside the state of Nevada in the USA, such as our Website, we do not apply geofencing to prohibit access to those Services. Please note that if you do access any of our Services that are available outside the state of Nevada in the USA, any data collected will be stored in the USA. Data subjects from the European Economic Area, the United Kingdom, and Switzerland will be asked to provide their clear and unequivocal consent for the collection and processing of their personal information.

XV. STATION APPS

Station Apps are covered by this Policy. Specifically:

1. STN Sports Mobile Sportsbook
   This gaming app is only available to Users physically located within the state of Nevada. We will use your precise geolocation to verify that you are present within the state of Nevada during use of the app.
2. STN Play by Station Casinos
   This app is not limited to Nevada.
3. STN Mobile App
   This is a non-gambling app that allows a user to add money into a wallet.

XVI. DATA SECURITY

We apply commercially reasonable and appropriate administrative, technical, and physical safeguards to protect the confidentiality, integrity, and availability of your personal information. Such safeguards protect against unauthorized access, alteration, disclosure, unlawful processing and accidental loss, destruction or damage. Please note that such safeguards reduce the risk of adverse effects to the confidentiality, integrity, and availability of your personal information but cannot ensure or guarantee against the possibility of a security incident. Our websites and apps use a secured communication channel that is encrypted and protected with digital signatures.

XVII. DATA RETENTION

Your personal information is retained for as long as reasonably necessary and proportionate to achieve:
(1) The purpose(s) for which your personal information was collected or processed.
(2) Another disclosed purpose that is compatible with the context in which your personal information was collected.

XVIII. DATA SUBPROCESSORS

We may contract with third-party service providers as data subprocessors to collect or process your personal information under our instruction. Service providers can perform many processing activities including but not limited to:

• helping us operate our business and the Services or administer activities on our behalf, such as sending out newsletters or surveys;
• verifying your eligibility for a credit card or other services; or
• protecting payment transactions against fraud or identity theft.

XIX. SECURE SHOPPING AND PAYMENT PROCESSING

We offer multiple options for processing credit card payments. We use SSL for transferring information to process your orders. All credit card transactions occur in a secure area of our Website, to protect you from loss, misuse or alteration of your personal information. You acknowledge, however, that no transmission of data over the Internet or mobile phone devices can be guaranteed to be 100% secure, despite our efforts.

XX. CHILDREN’S PRIVACY AND AGE-RELATED INFORMATION COLLECTION POLICIES

Children’s Privacy. Our Services are not directed to persons under the age of 21 (please see “Legal Gamily Age Policy” below for age-related disclosure for gaming Services. We do not knowingly collect or allow the collection of personal information with our Services from Users under the age of 21. If we have actual knowledge that we have collected personal information from someone under the age of 21 we will delete that personal information. If you believe that we have collected information from a child under the age of 21, please contact us at privacy@StationCasinos.com or toll free at 1-800-678-2846, and ask us to close the account and remove that account holder’s information from our systems. We will address your request in accordance with our account verification process.

Legal Gaming Age Policy. Persons under the age of 21 are not permitted to loiter or gamble at any casino at one of our properties or gamble online or through our Website, mobile app, or any of our Services. Any offers we make or any promotions we conduct, unless otherwise noted, are not open to persons younger than the legal gaming age in the applicable jurisdiction. Persons younger than this legal age are not allowed to accept gaming-related offers, or win promotions, and we do not knowingly collect information from such persons for gaming-related offers. We reserve the right to verify age at any time for any reason and may decline to provide products, Services or access rights to any person who does not have valid age identification.

XXI. LINKS TO NON-STATION WEBSITES

Our Services may contain links to third-party websites, services, or resources that are not covered under this Policy, our terms and conditions, or our terms of use. Upon visiting or using those third-party websites, services, or resources, we recommend that you review their privacy policy, terms and conditions, and terms of use before providing your personal information.

XXII. TRANSFER OF CORPORATE ASSETS

If Station is acquired by or merged with a third-party entity, Station reserves the right to transfer or assign the personal information you provided to us as part of such merger, acquisition, sale, or other change of control to the new entity. In the event of bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditor’s rights generally, we may not be able to control how your personal information is processed. If such a situation arises, Station would request that all applicable privacy laws and protection standards at least as stringent as Station’s be applied to your personal information originally in our possession. In the event of a transfer of corporate assets, the information regarding the transfer will be posted on our Website.

XXIII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Policy to accurately disclose changes as necessitated by applicable laws and other events. If those changes are material in nature, we will notify you by a notice placed on our public facing Website, a notification within our Services, and/or by electronic mail.

XXIV. CONTACT US

If you have any questions or concerns about your privacy rights or this privacy policy, you may contact us at:

Attn: Privacy
Station Casinos LLC
1505 S Pavilion Center Drive
Las Vegas, NV 89135
or email us at Privacy@StationCasinos.com.