Wynn Resorts Holdings, LLC, its subsidiaries and holding companies (“Wynn,” “Wynn Group,” “us” or “we”) is a leading developer, owner, and operator of destination casino resorts that integrate hotel accommodations and a wide range of amenities (including fine dining outlets, premium retail offerings, nightclubs, spas and salons, pools and fitness centers, distinctive entertainment theaters, and meeting and convention space), we understand and respect our customers, guests and users’ privacy.

This Privacy Notice (“Notice”) describes how we collect, use, store, share and protect personal information collected from or about visitors to our online sites, mobile applications, and facilities or properties located in the United States. For information about Wynn Rewards information practices, please see here.

1. Practices Covered by this Notice

This Notice describes our privacy practices in relation to the personal information we collect:

• Through our websites “wynnlasvegas.com”, “wynnsocial.com”, “wynnresorts.com”, “encorebostonharbor.com“, “wynnpoker.com”, and “wynninteractive.com” and any other websites owned or operated by Wynn and its affiliates (collectively the “Site” or “Sites”).
• When you visit and stay as a guest at our resorts at Wynn Las Vegas, Encore at Wynn Las Vegas, and Encore Boston Harbor or use our on-property services such as restaurants, entertainment, retail outlets, spas, salons, fitness centers, valet, concierge and customer services.
• Through our mobile applications, such as Wynn Sports – Nevada, Wynn Las Vegas and Encore, Wynn Social, Wynn Poker, and Quest for Discovery that display this privacy notice.
• Through our social media pages that we control.
• Through HTML-formatted email messages that we send to you.

Together we refer to these services as “Wynn Services.” The Notice does not apply to the following Wynn entities or services, which are governed by separate Privacy Notices:

• Wynn Rewards – Please see here our Privacy Notice which covers Wynn Rewards accounts.
• Wynn Macau and Wynn Palace – Companies that Wynn owns and operates in Macau (Wynn Macau, Limited or Macau Operations) located at wynnmacau.com and wynnpalace.com, and their related websites. Link to Privacy Policy here.
• Wynn Jobs – Including any employment and job applicant personal information collected at wynnjobs.com and encorebostonjobs.com. Link to Privacy Policies here and here.
• Wynn Gift Cards – Link to Privacy Policy here.
• Hotel Wi-Fi Services – When using WiFi services at our resorts, the personal information you provide is subject to the applicable privacy policy available through the WiFi landing page.
• Sweepstakes and other on-property Promotions – We will use personal information to allow you to participate in these activities. Some of these activities have additional rules and privacy terms attached to them. Please refer to each activity’s terms and conditions for more information.
• Online sports betting outside the State of Nevada – We may offer online sports betting through the WSI US, LLC online sports betting app. Please refer to the terms and conditions and privacy notice on the respective app for more information.

Although this Notice broadly describes Wynn’s general privacy practices, some jurisdictions may place restrictions on our personal information processing activities. Due to variances in local laws, our practices in such jurisdictions may be more restrictive than those described in this Notice, which enables us to comply with local requirements. Customers from California are directed to Appendix A which sets out additional information about information practices pursuant to the California Consumer Privacy Act (“CCPA”). Please note that if you are based in the European Economic Area (EEA) or UK, the additional information set out in Appendix B applies.

Please read this Notice carefully to understand how we collect, use and process your personal information. By visiting, accessing, or using, or providing information to us in connection with, the Wynn Services, you understand and acknowledge our collection, storage, use and sharing of your information as described in this Privacy Notice. Please note that if you disagree with anything in this Privacy Policy, you should not visit, access, or use, or provide information to us in connection with, the Wynn Services. You can contact us with questions about our information practices or policies at privacy@wynnresorts.com.

2. What (and How) Information is Collected from or About You

We collect information from or about you at many, diverse points of interaction with Wynn Services, such as when you make inquiries, book accommodations or other services, purchase tickets, apply for credit, and visit our hotel and casino. We maintain integrated profiles of our customers, in keeping with the highest industry standards for an exceptional customer service experience at our luxury hotel, restaurant, spa and other properties.

Information You Provide to Us

• Bookings, visits, and other interactions with Wynn Properties – We collect personal information about you when you make an online or offline (e.g. via phone) booking for our hotels or entertainment venues, and in the course of any stay or visit to our facilities, such as when your ID is scanned upon check-in at a Wynn property, or reserve spa, restaurant, or entertainment activities and services. This information may include your name, email and/or physical address, legal identification such as driver’s license or passport, vehicle information, date of birth, phone number, other guest names, business contact information (where relevant) and payment information. We may also use closed circuit television and other security measures at our properties that may capture or record images of guests and visitors in public areas, as well as information related to your location while on our properties (via keycards and other technologies). We may also use closed-circuit television and other technologies that record sound or video for the protection of our personnel, guests and visitors to our properties where permitted by law.
• Marketing – We collect name and contact information directly for marketing purposes, for example when you sign up for promotional messages online, at one of our properties, or via one of our Wynn mobile applications.
• Wynn Concierge and Customer Service – We collect personal information from you such as your name and contact information when you:
  • Contact us for any reason and/or request or receive services or information;
  • Submit a guest claim, report any problems, contact lost and found, and/or are in dispute with us;
  • Contact us through our call center; and
  • Contact us through social media channels.

Please note that telephone calls to our concierge, customer service and call center are recorded and actively monitored for the purposes of compliance, security and customer service.

• Travel – We collect personal information about you when you use our travel services such as your name, contact details, passport information, travel dates, flight information and other passenger details. This information may be shared with our affiliates and travel partners for purposes of providing our travel services only.
• Group Events and Meetings – We collect personal information in connection with your use of our meeting and convention space as part of group events, meetings or weddings. This information includes contact information such as guest names, guest email addresses, business contact information (where relevant) and group reservation details.
• Surveys – We collect personal information when you complete surveys about your stay at our hotels if you provided us with your email address. Information we collect through surveys include your name, email address, hotel stay location, quality of stay experience and amenities used during your stay.
• Financial Data – If you apply for credit, or in connection with other financial dealings with our casino properties, we will collect your name, contact information, and other personal information as needed to process and evaluate your application, pursuant to the specific privacy statements and disclosures you receive as part of your application and administering or servicing any such account with Wynn.
• Social Media – When you interact with us through social media (including Facebook, Instagram, Twitter, WhatsApp, and Snapchat) we collect personal information, such as your social media profile information and online behavior through this interaction consistent with your settings within the social media service. If you have provided us with your telephone number or email address, we may use this information to send targeted advertisements to you on these social media properties.
• Wynn Mobile Applications – If you download or use one of the Wynn mobile applications, we may collect and use information regarding your mobile device, and your location (if you activate / allow this functionality). The privacy practices related to the mobile applications are available through the respective device and mobile application settings.

Information We Collect Automatically

When you visit our Sites and mobile applications, we automatically collect the following information:

• Technical information, including your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
• IP address, this is identified and logged automatically in our server log files when you access our Sites. We use IP addresses to calculate usage levels, diagnose server problems and administer our Sites. We also may derive your approximate location from your IP address; and
• Website visit information, including the full Uniform Resource Locators (“URL”) clickstream to, through and from the Sites (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

When you visit our locations, we automatically collect the following information:

• If you drive an automobile onto a Wynn property, we may automatically collect vehicle information, including without limitation, license plate number and jurisdiction of registration, make and model, and vehicle condition when using valet services, if applicable; and
• Video surveillance and related security information.

Information Received from Third Parties

We also collect information about you (as relevant and appropriate to the Wynn Service you have requested) from third parties, including:

• Online travel agencies and other third-party hotel booking partners;
• Consumer reporting agencies, in connection with a credit application or financial account with Wynn, as further disclosed and described to you at the time of your application;
• Wynn event ticket sales management partners, ticket brokers, and club promoters;
• Social media channels, such as Facebook or Instagram, consistent with your settings on such services;
• Marketing and analytics providers; and
• Third party analytics services and content from third party businesses, including as described in our Cookie Notice.

This information includes contact information such as your name, email address and phone number. It also includes, where applicable, your travel details, such as booking confirmation numbers, number of rooms, arrival and departure dates, payment information, online browsing and usage behavior and social media profile information. We will also obtain email addresses and limited demographic information for our US customer accounts where we do not hold a current email address or demographic information for such customer and append this to the customer account.

3. How We Use Your Personal Information

Wynn uses your information for various purposes, including:

• To send you personalized messages, publications, news, and information about events, special offers, promotions and benefits, as well as measure and understand the effectiveness of the content we serve to you and others.
• As described in our Cookie Notice.
• To improve the Wynn Services and the content of the Sites to enhance users’ experiences when visiting the Sites or using the Wynn Services and to customize the content and layout of the Sites to each individual user.
• To administer the Sites, keep the Sites safe and secure, monitor and analyze our Sites usage and activity trends, to operate and improve our Sites, and for internal operations, to conduct troubleshooting and data analysis, including testing, research, statistical and survey analysis.
• To enforce our Sites’ terms and conditions.
• To facilitate the processing of online reservations such as facilitating payment, sending of confirmation or pre-arrival messages including information about the resort you are visiting and the amenities available to you, sending administrative messages about events or meetings you have reserved and provide you with related customer service, such as sending your receipt by email.
• To respond to your queries, and to communicate with you about your reservations, requests or transactions.
• For analytics purposes, to optimize your experience at Wynn, enhance our marketing, create customer or audience segments, enhance our business and operational efficiency and tailor promotions and offers to your preferences and habits when interacting with us.
• To offer, manage and administer the Wynn Rewards loyalty program, assess your benefits, administer offers and manage your choices regarding how you wish to use your offers.
• To maintain the accuracy of your account or profile information and to provide you with a better and more personalized service, including by pairing information collected under this privacy notice with your Wynn Rewards account profile, if you have enrolled in that program. For further information about our privacy practices relating to Wynn Rewards, please see here.
• To facilitate our hotel operations, including guest account management, hotel room reservations and requests.
• To organize events or meetings in connection with your use of our meeting and convention space and processing payments.
• To facilitate the provision of airline services to you, if these services have been made available to you, upon your request.
• To carry out appropriate compliance, security and/or financial checks, such as when we need to:
  • Confirm your identity;
  • Make a payment to you or receive payment from you; and
  • Comply with law enforcement, court, and regulatory obligations.

4. Marketing Preferences

• You may withdraw your consent for direct marketing communications at any time by contacting us at privacy@wynnresorts.com, by following the unsubscribe instructions in the marketing message, or by logging in to your Wynn Rewards account and updating your communication preferences.
• When you receive a commercial (promotional) electronic communication, we provide the choice to opt-out of receiving future messages by following the instructions provided in the message. You can change your preferences by logging into your account here. If you do not have an account you can manage your email preferences at any time here.
• You may choose whether to provide your phone number to receive text messages or advertising phone calls from us or our call center agents using an automatic telephone dialing system or an artificial or prerecorded voice. By providing your phone number and express consent, you are choosing to receive such messages until you withdraw your consent. Your consent to receive text messages or pre-recorded calls using an automatic telephone dialing system is not required to make a purchase with Wynn. You may revoke your consent at any time by contacting us at privacy@wynnresorts.com.
• You may choose whether to receive push notifications through our mobile applications. You can change your preferences for receiving push notifications through the respective device and mobile application settings.
• Although we do not currently sell, as that term has been defined by the laws of the State of Nevada, your personal information and only share it with third parties who are facilitating the delivery of Wynn Services, if you would like to opt-out of any future sale of your information in the unlikely event we change our practices you can do so by contacting us a privacy@wynnresorts.com.

5. How We Share Your Information

We share your personal information only with selected recipients which include the following:

• Wynn Group – We share personal information with any corporate affiliate of the Wynn Group for the purposes described in this Notice such as providing the Wynn Services (e.g. when you book travel with us, we will share your personal information with our affiliated companies, Wynn Las Vegas, LLC and Wynn MA, LLC, the operators of our resorts), facilitating the Wynn Rewards program, to personalize an exceptional customer experience across the Wynn Sites and Services, and to fulfill your requests, such as responding to applications for a line of credit, advance, or other financial services or administering our self-exclusion or loyalty programs.
• Venue Partners – We may disclose your personal information to our restaurant and venue partners, including, without limitation, Cipriani Las Vegas, LLC, Urth Caffe Associates X, LLC, and ATM Las Vegas, LLC, and other third parties operating restaurants or retail outlets on our premises (“Venue Partners”) to provide certain services and offers, and to enhance your experience at Wynn, such as when you make reservations or choose to room-charge while using the services of the Venue Partners or requesting that Wynn assist in making such arrangements on your behalf. The use of your personal information by the Venue Partners will be subject to the terms and polices of such Venue Partner.
• Marketing Partners – We share aggregated or de-identified information with our marketing partners to provide certain services, offers and enhance your experience at Wynn. This information cannot reasonably be used to identify you.
• Service Providers – We disclose your personal information to vendors, consultants and other service providers such as credit or background check companies, payment processors, marketing companies, email service providers, advertising networks and advertisers, information technology services, location services providers, and those who need access to such information to provide services on our behalf. These companies are prohibited from retaining, using, or disclosing your personal information except as necessary to provide the services on our behalf.
• Analytics and Search Engine Providers – We share personal information with these providers to assist us in the improvement and optimization of our guest records, Sites and Wynn Services. For more information please see our Cookie Notice.
• Compliance and regulatory purposes – We share your personal information with law enforcement agencies, public authorities or other third parties if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:
• Comply with a legal obligation, process or request, such as a subpoena, court order, search warrant or other valid legal process, or to comply with legal, administrative, or administrative requirements of any governmental authorities, including gaming regulators, tax authorities, and law enforcement authorities;
• Enforce our terms and conditions and other agreements, including investigation of any potential violation thereof;
• Detect, prevent or otherwise address security, fraud or technical issues; or
• protect the rights, property or safety of the Wynn Group, or any of its corporate affiliates or workforce members, our users and guests, a third party or the public as required or permitted by law (including without limitation, exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction such as requesting and sharing your information with credit bureaus), which may be exercised in our sole discretion.
• Sale or Merger – We will also disclose your information to third parties in connection with business transfers or bankruptcy proceedings, as permitted by law:
• In the event we sell any business or assets, in which case we will disclose your data to the buyer of such business or assets; or
• If Wynn or substantially all Wynn assets are acquired by a third party, in which case information held by us about our users will be one of the transferred assets.
• Other than to the extent ordered by a court of competent jurisdiction, the use and disclosure of all transferred user information will be subject to this Notice. However, any information you submit or that is collected after this type of transfer may be subject to a new privacy notice adopted by the successor entity.

6. Cookies and Tracking Technologies

We use cookies, tags and other similar technologies to collect information about your browsing activities over time and across different websites or online services following your use of Wynn Services or Sites, including our mobile applications. These technologies allow us to recognize your preference information, keep track of your purchases, remember your Wynn Rewards account number details and facilitate effective site administration. We use the information we collect to enhance your visit to our various Sites and to provide you with information tailored to your needs. For more information about how we use cookies and to learn how to manage cookies and other tracking technologies related to interest-based advertising, please see our Cookie Notice.

7. How We Protect Your Information

We take appropriate technical and organizational measures to safeguard your personal information against loss, theft and unauthorized use, access or modification. We maintain information security policies, routinely test our security controls through internal and external audits, and maintain compliance with the Payment Card Industry Standard (“PCI DSS”) and other applicable regulatory compliance requirements. We also require third party service providers acting on our behalf or with whom we share your information to provide security measures in accordance with industry standards.

Although we do our best to protect your personal information, we cannot guarantee the security of the information stored or handled by Wynn or its authorized service providers. The transmission of information via the internet or email is not completely secure and any transmission is at your own risk.

For your own online security, please do not send payment card numbers or any other confidential personal information to us via email.

8. Minimum Age Requirements

We do not knowingly or intentionally collect any personally identifiable information from, or market to, individuals under the age of 21. Pursuant to law, persons under the age of 21 are not permitted to gamble at our properties or loiter in casino areas. Our online services are not intended for persons under the age of 13. Persons under the age of 13 are not allowed to use our online services in any fashion, so the provisions of the Children’s Online Privacy Protection Act do not apply to Wynn online services. If you learn that a child under the age of 13 has provided us with personal information contrary to these rules, please contact us at the address listed in the “Contact Us” section below.

9. Use of Third-Party Internet Sites

Certain third-party services, websites, or applications you use, or navigate to and from our Sites may have separate user terms and privacy policies that are independent of this Notice. This includes, for example, websites owned and operated by our customers or partners. We are not responsible for the privacy practices of these third-party services or applications. We recommend carefully reviewing the user terms and privacy statement of each third-party service, website, and/or application prior to use.

10. Changes to this Notice

We may change this Privacy Notice from time to time to reflect updates to the information that we collect from you, how we use that information and how we share that information with third parties. You can determine when this Privacy Notice was last revised by referring to the “Effective Date” at the bottom of this Notice. In some cases, we may provide you with additional notice of our privacy practices (such as adding a statement to the homepages of our Site or sending you an email notification). We encourage you to review the Privacy Notice whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy.

11. Contact Us

To submit questions regarding this Privacy Notice or updating or requesting changes to your information, please contact our Privacy Team (see details below). Depending on the state you reside in, you may have the right to request information from a company that shares certain categories of personal information with unaffiliated third parties for their direct marketing purposes. Wynn does not share personal information with third parties for their direct marketing purposes, as these activities are defined in state law. However, if you feel you have such rights, you may send a request to the email address below and Wynn will respond promptly to your request.

Email us at: privacy@wynnresorts.com or

Write to us at:

Privacy Team

Wynn Las Vegas

3131 Las Vegas Blvd. South
Las Vegas, NV 89109
Attn: Legal Department

You can also change your preferences by logging into your account here. If you do not have an account you can manage your email preferences at any time here.

If you are an individual based in the EEA or UK, please see Appendix B for additional means of contact.

Effective Date: 12/21/2020

APPENDIX A: ADDITIONAL PROVISIONS APPLICABLE TO PROCESSING OF PERSONAL INFORMATION OF RESIDENTS OF CALIFORNIA

The terms of this Appendix apply where you are a resident of California and sets out the rights you have with respect to the processing of your personal information, pursuant to the California Consumer Privacy Act (“CCPA”) and its implementing regulations (when finalized) and other applicable laws. Under these laws and regulations, California residents have certain legal rights such as to access, deletion, disclosure, or “do not sell.” These rights are not absolute and are subject to certain exceptions. This Appendix controls to the extent it conflicts with any provision in the main body of the Notice.

For questions specifically about this Privacy Notice, or our use of your personal information, cookies or similar technologies, please contact our Privacy Team by email at privacy@wynnresorts.com.

How We Collect and Share Personal Information of California Residents

Over the last 12 months, personal information we have collected and shared includes the following:

• Identifiers, including name, email and/or physical address, telephone number, legal identification such as driver’s license or passport, vehicle information, date of birth, phone number, other guest names, IP address. We collect this information from you directly, automatically from your browser or device, or from other companies. We use this information for the purposes described in Section 3. We share this information with our corporate affiliates; marketing partners; service providers; analytics and search engine providers; regulators, judicial authorities and law enforcement agencies; and entities that acquire all or substantially all of our business or assets.
• Commercial information including payment information, and information associated with applications for a line of credit, advance, or other financial services. We collect this information from you directly or from other companies. We use this information for the purposes described in Section 3. We share this information with our corporate affiliates; marketing partners; service providers; analytics and search engine providers; regulators, judicial authorities and law enforcement agencies; and entities that acquire all or substantially all of our business or assets.
• Internet or other electronic network activity information including your login information; browser type and version; time zone setting; browser plug-in types and versions; operating system and platform; website visit information; products you viewed or searched for; page response times, download errors, length of visits to certain pages’ page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page; social media profile information; information provided in surveys. We collect this information automatically from your browser or device, or from other companies. We use this information for the purposes described in Section 3. We share this information with our corporate affiliates; marketing partners; service providers; analytics and search engine providers; regulators, judicial authorities and law enforcement agencies; and entities that acquire all or substantially all of our business or assets.
• Geolocation data, including precise GPS location information; location within the properties; and approximate location derived from IP address. We collect this information automatically from your browser or device or from your key card. We use this information for the purposes described in Section 3. We share this information with our corporate affiliates; marketing partners; service providers; analytics and search engine providers; regulators, judicial authorities and law enforcement agencies; and entities that acquire all or substantially all of our business or assets.
• Audio, electronic, visual, thermal, olfactory or similar information, including images and audio recordings of guests and visitors in public areas or as otherwise permitted by law; and audio recordings of calls placed to the concierge or customer service. We collect this information from closed circuit television, from your browser or device, or from other companies. We use this information for the purposes described in Section 3. We share this information with our corporate affiliates; service providers; regulators, judicial authorities and law enforcement agencies; and entities that acquire all or substantially all of our business or assets.

Sales of Personal Information

Over the past 12 months, we and our third-party partners have used cookies and other tracking technologies on our Sites and Wynn Services to serve advertisements about our products when you visit other websites and applications. We offer controls and options related to information collected via cookies and other tracking technologies. You can exercise such controls and opt-out of interest-based advertising by clicking [here – link to Cookies Policy.

Data Subject Rights

Where the CCPA applies, you have certain rights in relation to the personal information we hold about you if an exemption does not apply to your or your personal information. We also set out how to exercise those rights. Please note that we require you to verify your identity before we respond to any of your requests. Under the CCPA, you have the right to:

• Request we disclose to you free of charge the following information covering the 12 months preceding your request:
  • the categories of personal information about you that we collected;
  • the categories of sources from which the personal information was collected;
  • the purpose for collecting personal information about you;
  • the categories of third parties to whom we disclosed personal information about you and the categories of personal information that was disclosed (if applicable) and the purpose for disclosing the personal information about you; and
  • the specific pieces of personal information we collected about you;
• Request we delete personal information we collected from you, unless CCPA recognizes an exception; and
• Be free from unlawful discrimination for exercising your rights including providing a different level or quality of services or deny goods or services to you when you exercise your rights under the CCPA.

We aim to fulfill all verified requests within 45 days pursuant to the CCPA. If necessary, extensions for an additional 45 days will be accompanied by an explanation for the delay.

Exercising your Rights

To exercise any of these rights above, please contact us at privacy@wynnresorts.com or by calling Wynn at 1-888-320-7123. You can also log in to your account to see certain information we hold about you and to update your account information. If you would like to designate an authorized agent to make a request on your behalf, please provide Wynn a copy of documentation establishing the authority of the agent (which may include without limitation, a signed letter of authority, power of attorney documents, or similar legal authorization), and verify that you are the Data Subject about which the request is being submitted.

Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals or company trade secrets or intellectual property, or where we are not required by law to comply with the request.

APPENDIX B: ADDITIONAL PROVISIONS APPLICABLE TO PROCESSING OF PERSONAL INFORMATION OF INDIVIDUALS BASED IN THE EEA AND UK

The terms of this Appendix applies where you are an individual based in the EEA or UK and sets out the rights you have with respect to the processing of your personal information, pursuant to the General Data Protection Regulation (“GDPR”) and other applicable laws. This Appendix controls to the extent it conflicts with any provision in the main body of the Notice.

Data Controller
For the purposes of the GDPR:

• If you are a customer of Wynn properties in Las Vegas, the Data Controller is:
  

  Wynn Las Vegas, LLC
  3131 Las Vegas Blvd. South
  Las Vegas, NV 89109

• If you are a customer of Wynn properties in Boston, the Data Controller is:
  

  Wynn MA, LLC
  One Broadway
  Everett, MA 02149

Our representative in the EEA and UK is DPR Group. To contact us about any queries you may have about this Notice or your rights, please see the address listed in the “Contact Us” section above or through our representative at:

DPR Group
Tower Business Centre
2nd floor
Tower Street, Swatar
BKR4013, Malta

PLEASE NOTE: when mailing inquiries, mark your letters for ‘DPR Group’ and not ‘Wynn Resorts Group’, or your inquiry may not reach us. In your correspondence, please refer clearly to Wynn Resorts Group.

Purposes and Legal Bases for Processing
We process personal information for the purposes set out in this Notice. We collect and process your personal information only where we have legal basis for doing so under applicable data protection laws. The legal basis depends on the Services you use and how you use them. Our legal bases for processing include processing of personal information which is (i) necessary for the performance of a contract with you; (ii) compliance with a legal obligation; (iii) pursuant to your consent; and (iv) pursuant to our legitimate interests to run an effective operation and administer the Wynn Services you have requested.

• Wynn Rewards Loyalty Program – We process personal information about you to fulfill our contractual obligations to you and to further our legitimate business interests. Specifically, to facilitate membership to our loyalty programs, provide you with access to member-only rates and promotions and allow you to manage your information and communications preferences. The terms and data practices associated with the Wynn Rewards program are available here.
• Hotel Reservations – We process personal information about you to fulfill our contractual obligations to you and to further our legitimate business interests. Specifically, to process reservations for hotel rooms.
• Hotel Check-in and Stay – We process personal information about you to operate our business, including to improve and develop our hotel operations, for fraud prevention purposes, improve user experience or other legitimate interests.
• Group Events and Meetings – We process personal information about you to fulfill our contractual obligations to you and to further our legitimate business interests. Specifically, to provide you with access to use our meeting and convention space and facilitate reservations for group events, meetings or weddings.
• Provision of Services – We process personal information about you to operate our business, including to improve and develop our Services and amenities, for fraud prevention purposes, improve user experience or other legitimate interests.
• Wynn Concierge and Customer Service – We process personal information about you to further our legitimate business interests. Specifically, to respond to your comments, questions, requests, and communicate with you to provide customer service through our call center or social media channels.
• Marketing and Communications – We process personal information about you for marketing purposes where we have your consent. Specifically, to inform you of promotions, and periodically send you marketing communications about services and events that are relevant to your interests and for related purposes. You can opt-out at any time by contacting us at privacy@wynnresorts.com or by following the unsubscribe instructions in the marketing message, or by logging in to your Wynn Rewards account here and updating your communication preferences. If you do not have an account you can manage your email preferences at any time here. For push notifications within our mobile application, you can manage your push notification preferences through the respective device and mobile application settings.
• Social Media – We process personal information about you obtained via social media based on our legitimate interests. Specifically, to respond to your queries and for analytics purposes to better understand our customers and their preferences.
• Surveys – We process personal information about you to further our legitimate business interests. Specifically, to conduct statistical analysis, research and development, customer surveys and customer profiling.
• Analytics and Profiling – We process personal information about you for our legitimate business interests, including for data analytics purposes and data accuracy, such as linking to or combining information we collect to help maintain the accuracy of your account or profile information and to provide you with a better and more personalized service and offers.
• Regulatory and Corporate Compliance – We process personal information about you to carry out appropriate compliance, security and/or financial checks, further to our legitimate business interests such as when we need to:
  • Confirm your identity;
  • Make a payment to you or receive payment from you;
  • Comply with law enforcement, court, tax authorities and regulatory obligations; and
  • Otherwise in compliance with law.
• Sale, Merger or similar – We may also disclose your information further to our legitimate business interests to third parties in connection with sale, merger, business transfers or bankruptcy proceedings.

Transfer of Personal Information to Other Countries
Where you provide personal information to us, in order to fulfill your request or provide the Wynn Services, please note that such data is transferred to and stored in the United States (“US”), where Wynn’s corporate headquarters is located and where our IT systems (including email) are located.

Your personal information is also transferred to the third parties set out in the “How we share your information” section of the Notice who are located outside of the European Economic Area (EEA) (in most cases in the US). We transfer your personal data from the EEA to other countries in accordance with the European Commission’s standard contractual clauses.

Although the data protection laws of various countries may differ from those in your own country, we take appropriate steps to ensure that your personal information is handled as described in this Notice and in accordance with the law.

We transfer your information to third parties located outside the EEA where we have adequate measures in place to provide appropriate safeguards.

Data Subject Rights
Where the GDPR applies, you have certain rights in relation to the personal information we hold about you. Some of these only apply in certain circumstances as set out below. We also set out how to exercise those rights. Please note that we require you to verify your identity before we respond to any of your requests. The GDPR provides the following rights:

• Right of Access
  You have the right to ask us to access the personal information we hold about you and be provided with certain information about how we use your personal information and who we share it with.

• Right to Rectification
  You have the right to ask us to correct your personal information where it is inaccurate or incomplete and we endeavor to do so without undue delay.

• Right to Data Portability
  In certain circumstances, you have the right to ask us for a copy of your data in a structured, machine readable format and to ask us to share (port) this information to another entity.

• Right to Erasure
  In certain circumstances, you have the right to ask us to delete the personal information we hold about you:
  • Where you believe that it is no longer necessary for us to hold your personal information;
  • Where we are processing your personal information on the basis of legitimate interests and you object to such processing and we cannot demonstrate an overriding legitimate ground for the processing;
  • Where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; or
  • Where you believe the personal information we hold about you is being unlawfully processed by us.
• Right to Restriction of Processing
  In certain circumstances, you have the right to ask us to restrict (stop any active) processing of your personal information:
  • Where you believe the personal information we hold about you is inaccurate and while we verify accuracy;
  • Where we want to erase your personal information as the processing is unlawful, but you want us to continue to store it;
  • Where we no longer need your personal information for the purposes of our processing, but you require us to retain the data for the establishment, exercise or defence of legal claims; or
  • Where you have objected to us processing your personal information based on our legitimate interests and we are considering your objection.
• Right to Object
  You can object to our processing of your personal information based on our legitimate interests. We will no longer process your personal information unless we can demonstrate an overriding legitimate ground.

• Objection to Marketing and Profiling
  At any time you have the right to object to our processing of personal information about you in order to send you promotions and special offers and other marketing, including where we build profiles for such purposes and we will stop processing the data for that purpose.
  
• Withdrawal of Consent
  Where you have provided your consent for us to process your personal information, you can withdraw your consent at any time by emailing privacy@wynnresorts.com.

Exercising your Rights
To exercise any of these rights above, please contact us at privacy@wynnresorts.com.

Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals or company trade secrets or intellectual property, where there are overriding public interest reasons or where we are required by law to retain your personal information.

Complaints
We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to address any grievance directly to the relevant Supervisory Authority.

How Long We Retain Your Information

We retain your information for as long as needed to fulfill our legitimate business purposes outlined in this Notice, support our business operations, develop our Services, resolve disputes and enforce our rights. The criteria used to determine our retention periods include:

• The duration of our relationship with you and the ongoing provision of Wynn Services to you (for example as long as you have a Wynn Rewards account with us).
• Whether there is a legal or regulatory obligation which require us to retain certain records for a specific period of time (such as reporting to gaming and other regulatory authorities).
• Whether retention of personal information is legitimate based on statute of limitations, litigation or other regulatory investigations.

We may store your information in an aggregated and anonymized format following the retention periods noted above.