Privacy Notice

Effective January 2023

Welcome to the IGT Privacy Notice.

As the world's leading end-to-end gaming company, International Game Technology PLC, and its subsidiaries (“IGT”) are committed to data privacy and will comply with applicable data protection laws and regulations. This Privacy Notice describes IGT’s collection and use of your Personal Data when you visit this website or interact with our products, and your rights regarding this data. We encourage you to read this Privacy Notice carefully along with the website Terms of Use before using this website. By using this website, you signify your agreement to this Privacy Notice.

This Privacy Notice does not apply to information collected through others means such as by telephone or in person.

This website may contain links to third party websites. We are not responsible for the security, privacy practices, the content, etc. of such websites. If you visit a website from a link on IGT’s website, this Privacy Notice does not apply. The privacy terms of the visited website will govern the use of that website.

You are under no obligation to provide us with your personal data or consent to the processing as described in this Privacy Notice. However, by choosing not to agree with these terms or to cease your membership/subscriptions later, may limit your ability to receive certain services or information.

We may revise this Privacy Notice from time to time in accordance with the principles described in this notice, our evolving business needs, or changes in applicable laws or regulations.

If you have any concern about this Privacy Notice or our privacy practices, please contact us:

International Game Technology PLC (IGT)
66 Seymour Street
London, U.K. Wh2 5BT
Phone +44 02075353200
Email at privacy@igt.com

IGT Global Solutions Corporation
10 Memorial Boulevard
Providence, RI 02903
(401) 392-1000

Information for California and Virginia residents

IGT is providing this supplemental privacy notice to give California residents the additional information required by the California Consumer Privacy Act and any subsequent amendment (collectively, the “CCPA”).

All the companies in the IGT family are committed to respecting the privacy and security of all the personal information that is entrusted to us.

This supplemental privacy information provides information about your California privacy rights. IGT does not sell personal information or share it with third parties for cross-contextual behavioral targeting. The information required by the CCPA about the categories of personal information and sensitive personal information that we collect from California residents, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes are outlined below, and for Everyday Business Purposes as defined below. IGT also does not use or disclose sensitive personal information other than as necessary to perform the services or provide the goods as reasonably expected and for other purposes authorized by the CCPA.

Your California Privacy Rights

The CCPA provides California residents with specific privacy rights:

The right to know what personal information and sensitive personal information we collect
The right to access your personal information
The right to correct inaccurate personal information
The right to request that we delete your personal information
The right to know what categories of personal information are sold to third parties and to opt-out of that sale
The right to know what categories of personal information are shared with third parties for cross-contextual behavioral targeting and to opt-out that sharing
The right to limit the use and disclosure of sensitive personal information, and
The right not to be retaliated against for exercising your privacy rights

IGT does not sell any personal information or share it with third parties for cross-contextual behavioral targeting.

If you are a California resident, you may exercise your rights or authorize another person to act on your behalf by:

Calling our Privacy Office at (401) 392-1000
Emailing us at Privacy@IGT.com
Writing us at
IGT Privacy Office
10 Memorial Blvd
Providence, RI 02903

Your Virginia Privacy Rights

If you are a resident of Virginia, you have the following rights, subject to certain conditions, with respect to your Personal Information:

The right to confirm whether we process your Personal Information and to access your Personal Information in a portable and, to the extent technically feasible, readily usable format.
The right to correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing.
The right to delete Personal Information we have obtained about you
The right to opt out of the processing of your Personal Information for purposes of targeted advertising, the sale of Personal Information, and/or profiling in furtherance of decisions that produce legal or similarly significant effects.
If we deny your request, the right to appeal our decision.

You submit an appeal by:
Calling our Privacy Office at (401) 392-1000
Emailing us at Privacy@IGT.com
Writing us at: IGT Privacy Office
10 Memorial Blvd
Providence, RI 02903

Information We Collect About You

IGT does not sell any personal information or share it with third parties for cross-contextual behavioral targeting.

IGT does not and will not intentionally collect information, including Personal Data, from children.

Categories of Data

Personal Information is any information that can be used to identify, locate, or contact you.

The Personal Information that we collect falls into the following categories and may differ based on how you interact with us.

We use personal information for the purposes listed below, and for our everyday business purposes.

If you interact with our IGT.com website:

Category and Sources of Personal Information	Representative Data Elements	Purpose for Collecting and Disclosing the Personal Information	Categories of Third Parties to whom this type of Personal Information is Disclosed
Online & Technical Information We collect this type of information from: You and from your computer or devices when you interact with our websites. For example, when you visit our websites, our server logs record your IP address and other information. Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites. Third parties, including computer security services and advertising partners We also associate information with you using unique identifiers collected from your devices or browsers.	Data elements in this category include: IP Address MAC Address, SSIDs or other device identifiers or persistent identifiers Online user ID Password Device characteristics (such as browser information) Web Server Logs Application Logs Browsing Data Viewing Data (TV, Streaming) First Party Cookies Third Party Cookies Flash Cookies Silverlight Cookies Web beacons, clear gifs, and pixel tags	We use this type of information: For system administration, technology management, including optimizing our websites and applications, For information security and cybersecurity purposes, including detecting threats For recordkeeping, including logs and records maintained as part of transaction information To better understand our customers and prospective customers and to enhance our Relationship Information, including by associating you with different devices and browsers that they may use For online targeting and advertising purposes	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected Third parties who assist with fraud prevention, detection, and mitigation. Third party network advertising partners Our lawyers, auditors, and consultants, Other third parties as required by law

If you interact with IGT’s products, platforms, or other services:

Category and Sources of Personal Information	Representative Data Elements	Purpose for Collecting and Disclosing the Personal Information	Categories of Third Parties to whom this type of Personal Information is Disclosed
Contact Information We collect this type of information from: You Third parties, such as companies that help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records We may obtain business contact information from data aggregators and third-party services, such as LinkedIn, event and trade shows, and our commercial customers.	Data elements in this category include Full name, nicknames, or previous names (such as maiden names) Honorifics and titles, preferred form of address Mailing address Country Email address Telephone number Mobile number Contact information for related persons, such as authorized users of your account	We use this type of information to identify you and communicate with you, including: To send transactional messages (such as account statements or confirmations) To send marketing communications, survey, and invitations To personalize our communications and provide customer service	We may disclose this type of information to our Affiliates, and Contractors and to: Service Providers, such as operators or maintenance providers to service our products Third parties who deliver our communications, such as the postal service and couriers Third parties who assist us with address hygiene and fulfillment Other third parties (including government agencies) as required by law, such as pursuant to legally binding subpoenas, court orders, and similar instruments).
Government-issued Identification Numbers We collect this type of information from: You Third parties, such as consumer reporting agencies, which verify the information you provided	Data elements in this category include: Social security number Driver’s license number Passport number or national identity card Green card	We use this type of information: To identify you To maintain the integrity of our records For customer verification, credit and reference checks For security and risk management, fraud prevention and similar purposes	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Consumer reporting agencies Our lawyers, auditors, consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Biometric identifiers We collect this type of information from: Visitors to our facilities, automatically using some access controls in our facilities	Data elements in this category include: Biometric identifier including facial recognition, photos and fingerprints.	We use this type of information: To identify and authenticate visitors For security and similar purposes (such as tracking access in our facilities). For compliance and security purposes as directed by and where required by regulation in our industry.	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Unique Identifiers We assign a customer ID number to you when you create an account with us. We collect this type of information from: You, when you interact with us using your customer number Third parties, such as when you redeem rewards or participate in a joint promotion Third parties, such as ad delivery companies who place cookies containing advertising IDs on your devices for us	Data elements in this category include: Company ID number, customer number, account number, subscription number, rewards program number etc. System identifiers (e.g., usernames or online credentials) Device identifier Advertising ID	We use this type of information: To identify you or your device, including to associate you with different devices that you may use For record-keeping and reporting, including for data matching For metrics and analytics, To track your use of products, services, websites, including for ad delivery and personalization	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Account Access Information We collect this type of information from: You, when establish an account or change your password We may create this information for you, such as if we assign you a username or account number or issue you a temporary password.	Data elements in this category include: Usernames and/or Account names/numbers associated with Passwords Account recovery information (such as security questions and answers) Or other information that permits access to your account.	We use this type of information: To identify and authenticate you To enable you to engage in transactions with us (such as interacting with us online) For security and similar purposes	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation Third party network advertising partners Our lawyers, auditors, and consultantsOther third parties as required by law, such as gaming regulators and licensing entities.
Relationship Information We collect this type of information from: You Third parties that provide access to information you make publicly available, such as social media Third parties that provide information that helps us understand our customers, including data aggregators and public records providers. We may also infer information about you based on information that you have given us and your past interactions with us and other companies.	Data elements in this category include: Personal characteristic and preferences, such as your age range, demographic, marital and family status, shopping preferences, languages spoken, etc. Loyalty and rewards program data Household demographic data, including from real estate records and census data Data from social media profiles, such as Facebook, Twitter, LinkedIn, and similar platforms Education information Professional information Hobbies and interests	We use this type of information: To better understand you and to understand our customers generally To design products, services and programs that delight our customers, including loyalty programs To identify prospective customers For internal business purposes, such as quality control, training, and analytics	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties with whom we have joint marketing and similar arrangements Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Transaction and Interaction Information We collect this type of information from: You Third parties that process transactions for us	Data elements in this category include: Customer account information, qualification data, purchase history and related records (returns, product service records, records of payments, credits etc.) Records related to downloads and purchases of products applications, including website and app usage and records relating to in-app purchases Records regarding the amount, frequency, and duration of wagering activities. Non-biometric data collected for consumer authentication (passwords, account security questions, data of birth,) Customer service records Visitor logs	We use this type of information: To fulfill our business relationship with you and/or your company (if you engage with us in a B2B relationship), including customer service For recordkeeping and compliance, including dispute resolution For internal business purposes, such as finance, quality control, training, reporting and analytics For risk management, fraud prevention and similar purpose. For Corporate Social Responsibility in the Gaming industry, and Responsible Gaming purposes. For compliance and security purposes as directed by and where required by regulation in our industry.	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties with whom we have joint marketing and similar arrangements Third parties as needed to complete the transaction, including delivery companies, agents, and manufacturers. Our lawyers, auditors, and consultants Customers, in connection with their audits of IGT Other third parties as required by law, such as gaming regulators and licensing entities.
Inferred and Derived Information We create inferred and derived data elements by analyzing our relationship and transactional information.	Data elements in this category include: Propensities, attributes and/or scores generated by internal analytics programs and used for information security and fraud purposes	We combine inferred data with other relationship information and use this type of information: To better understand you and to understand our customers generally To design products, services and programs that delight our customers, including loyalty programs To identify prospective customers For internal business purposes, such as quality control, training, and analytics	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties with whom we have joint marketing and similar arrangements Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Online & Technical Information We collect this type of information from: You and from your computer or devices when you interact with our platforms, websites, and applications. For example, when you visit our websites, our server logs record your IP address and other information. Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites. Third parties, including computer security services and advertising partners We also associate information with you using unique identifiers collected from your devices or browsers.	Data elements in this category include: IP Address MAC Address, SSIDs or other device identifiers or persistent identifiers Online user ID Password Device characteristics (such as browser information) Web Server Logs Application Logs Browsing Data Viewing Data (TV, Streaming) First Party Cookies Third Party Cookies Flash Cookies Silverlight Cookies Web beacons, clear gifs, and pixel tags	We use this type of information: For system administration, technology management, including optimizing our websites and applications, For information security and cybersecurity purposes, including detecting threats For recordkeeping, including logs and records maintained as part of Transaction Information To better understand our customers and prospective customers and to enhance our Relationship Information, including by associating you with different devices and browsers that they may use For online targeting and advertising purposes	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected Third parties who assist with fraud prevention, detection, and mitigation. Third party network advertising partners Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Financial Account Information We collect this type of information from: You Payment processors and other financial institutions Consumer reporting agencies Third parties that provide security and fraud prevention services We may infer financial information (such as credit risk) about you based on your existing account status and lifestyle factors.	Data elements in this category include: Bank account number and details (if you use automated payments) Payment card information Credit reports, credit scores Other financial information as directed and as required by regulation in our industry.	Financial information is maintained in our transaction data. We use this type of information: To fulfill our business relationship with you, including processing payments, issuing refunds and collections For recordkeeping and compliance, including dispute resolution For internal business purposes, such as finance, audits, training, reporting and analytics For risk management, fraud prevention and similar purpose For compliance and security purposes as directed by and where required by regulation in our industry.	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Payment processors, financial institutions and others as needed to complete the transactions and for authentication, security, and fraud prevention Our lawyers, auditors, and consultants Customers, in connection with their audits of Acme Consumer reporting agencies Other third parties as required by law, such as gaming regulators and licensing entities.
Geolocation Data We collect this type of information automatically from your mobile device	Data elements in this category include: Geolocation IP addresses and/or GPS coordinates	We use this type of information: Provide the information, products or services requested To comply with legal obligations (geo fencing and prevent a wager outside the state or country of residence) For information security and fraud prevention	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Third parties who assist with our information technology and security programs Third parties who assist with fraud prevention, detection, and mitigation. Customers, in connection with their audits of Acme Our lawyers, auditors, and consultants Other third parties as required by law, such as gaming regulators and licensing entities.
Business Customer Data We collect personal information about business professionals associated with our commercial customers, suppliers, and partners in the context of our relationships with the companies with whom we do business. We collect this type of information from: You	Data elements in this category include: Product usage, customer service, training, and related records Communications and marketing preferences Customer/supplier qualification details Other data you share with us in connection with the relationship	We use this type of information: To fulfill our business relationship with you and/or your company To develop and maintain our relationship with you and with your company For recordkeeping and compliance, including dispute resolution For internal business purposes, such as finance, quality control, training, reporting and analytics For risk management, fraud prevention and similar purpose	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Your company and other companies (such as your company’s affiliates and service providers), as needed for the commercial relationship (such as including your information on purchase documents that you authorize) Other third parties as required by law, such as gaming regulators and licensing entities.
Compliance data We collect this type of information from: You Third parties, including companies that help us conduct internal investigations Third parties, such as consumer reporting agencies and data aggregators who conduct background screening for us	Data elements in this category include: Compliance program data, including customer screening records, and other record maintained to demonstrate compliance with applicable laws and regulation such as tax laws, local regulations, gaming licensing and regulation, ADA, et al. Occupational and environmental safety records Records relating to complaints and investigations Records of privacy and security incidents, including any security breach notifications	We use this type of information: To comply with and demonstrate compliance with applicable laws For legal matters, including litigation and regulatory matters, including for use in connection with civil, criminal, administrative, or arbitral proceedings, or before regulatory, licensing, or self-regulatory bodies, including service of process, investigations in anticipation of litigation, execution or enforcement of judgments and orders For internal business purposes, such as risk management, audit, internal investigations, reporting, analytics	We may disclose this type of information to our Affiliates, Service Providers and Contractors and to: Our lawyers, auditors, and consultants. Customers, in connection with their audits of IGT Other third parties (including government agencies, regulatory agencies, courts and opposing law firms, consultants, process servers and parties to litigation) in connection with legal matters

IGT uses and discloses the following categories of sensitive personal information. We do not process any sensitive personal information for the purpose of inferring characteristics about you.

Category of Sensitive Personal Information	Does IGT collect this information?	Purposes for Use and Disclosure	Can I limit Use and Disclosure?
Government-issued Identification Numbers	Yes	We only use and disclose Government-issued Identification Numbers for the purposes described above and as otherwise authorized by CCPA.	No
Account log-in credentials (usernames with password, access code or other credential that permits access to a financial account)	Yes	We only use and disclose Account Access Information as needed to allow you to access your account, for related account security purposes as described above, and as otherwise authorized by CCPA.	No
Financial account number or payment card number with any password, access code or other credential that permits access to an account	Yes	We only use and disclose financial account numbers and account access credentials for the purposes described under Financial Account Information above as needed to allow you to access your account and process transactions with us as described in the Financial Information section above and as otherwise authorized by CCPA.	No
Precise Geolocation Data	Yes	We only use and disclose precise geolocation data to comply with legal obligations (geo fencing and prevent a wager outside the state or country of residence and for information to enable security and fraud prevention.	No
Contents of Mail, Email or Text Messages	No	We only use and disclose contents of messages as needed to service your account or to comply with regulations, investigate complaints, or comply with legal subpoenas, fraud, or security investigations.	No
Biometric Identifiers	Yes	We only use and disclose Biometric Identifiers for the purposes described above and as otherwise authorized by CCPA.	No

COOKIES AND OTHER WEB TECHNOLOGIES USED

We use web technologies, which may include “cookies” to gather, with your consent, information which helps us understand how you use our website. A cookie is a small text file composed of letters and numbers that is stored on your device. A cookie may be persistent to keep your profile and preferences or may expire at the end of a browser session. We use non-persistent cookies (which expire at the end of the browser session) to determine your usage of this website. We track the activities of our logged-in account members. We may also track click events on certain graphics and data attributes.

Your device may allow you to disable cookies and similar web artifacts by setting your browser preferences.

International Transfer of Personal Data

We maintain servers around the world and your information may be stored and processed on servers in a location which may not have equivalent privacy or data protection laws to your country. We store your information in our facilities such as Reno, Nevada for support activities as well as on Amazon Web Services located in Portland, Oregon, U.S.A and Dublin, Ireland and other third-party service providers to facilitate your connectivity in accessing our services from multiple devices.

Please note that when you are visiting an IGT website from a country other than the country in which our servers are located, the exchange of information between your location and this website will necessarily result in a cross-border transfer of that information.

Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the protections described in this Privacy Notice. We may also use certain legal frameworks relating to international data transfer, such as the European Union Model Clauses.

Retention and Security

We take necessary steps to implement appropriate and effective measures to comply with this Privacy Notice and our obligations under applicable laws.

We have security measures in place to protect against unauthorized access, use, and disclosure of your Personal Data

To protect the confidentiality, integrity, and availability of your Personal Data in our custody, we maintain physical, logical, and procedural safeguards in compliance with internationally recognized standards and other industry specific security best practices.

The retention periods for data elements within each category vary depending on the nature of the business records in which the data elements are maintained, but the retention period for our business records are set based on the following criteria: (1) the length of time that the record is needed for the purposes for which it was created, (2) the time the record is needed for other operational purposes, such as audits and reporting, (3) the length of time the record is needed for legal compliance, including maintenance of opt-out/in lists, legal defense and legal holds.

Your Rights

Depending on where you live, you may have the right to:

Access to your Personal Data: You may contact us to provide you with details on the data that has been collected about you and how such data is being processed by us
Receive your Personal Data: You may contact us to provide you with a copy of your Personal Data that we have.
Object to, or Restrict, use of your Personal Data: If at any point you believe that your Personal Data is being processed unlawfully, you may contact us to stop or cease any such processing including for automated-decision making, profiling and marketing.
Change or Correct your Personal Data: By accessing your profile or account, you have the right to change or correct your Personal Data if it is inaccurate or incomplete. You may also contact us to update or correct your information.
Erase your Personal Data: You may contact us to erase or delete all or some of your Personal Data.
Withdraw your consent: At any time, you may contact us to withdraw the consent that you have previously given in relation to the processing. If you withdraw your consent, then we will stop all associated processing activities and may close your account and/or delete any data we are not legally obligated to keep.
Give instructions on the use of your information upon death: You or your heirs may contact us to give instructions on the use of your information upon your death.

If we receive from you a formal written complaint regarding your personal data, we respond by contacting you. We will work with the appropriate regulatory authorities to resolve any complaints regarding the processing of your information that we cannot resolve with you directly.

In addition, in some jurisdictions, you can complain to the applicable Data Protection Authority if you are unsatisfied with our response to your concerns.

Glossary

Definitions

IGT, we, our and us means International Game Technology PLC and its subsidiaries.

Adequacy Decision refers to a legally binding act of the European Commission binding on the members of the European Union concerning the adequacy of protection of personal data provided by local legislation in countries outside the European Economic Area (EEA) and allowing the cross-border transfer of personal data from the EEA to these countries.

Personal Data means data relating to a living individual who can be identified from that data (or from that data and other information in our possession). Personal Data can be factual (e.g., a name, address/location, or date of birth) or it can be an opinion held by or about that person, their actions and behavior.

Process and Processing refers to any activity involving the use of Personal Data. It includes obtaining, recording, or holding the Personal Data, or carrying out any operation or set of operations on the Personal Data including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring or making Personal Data available to another party.

Everyday Business Purposes encompasses the Business Purposes (as defined in the CCPA) and following related purposes for which personal information may be used:

To provide the information, product or service requested by the individual or as reasonably expected given the context in which with the personal information was collected (such as customer credentialing, providing customer service, personalization and preference management, providing product updates, bug fixes or recalls, and dispute resolution)
For identity and credential management, including identity verification and authentication, system, and technology administration
To protect the security and integrity of systems, networks, applications, and data, including detecting, analyzing, and resolving security threats, and collaborating with cybersecurity centers, consortia, and law enforcement about imminent threats
For fraud detection and prevention
For legal and regulatory compliance, including all uses and disclosures of personal information that are required by law or for reasonably needed for compliance with company policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection programs, and corporate ethics and compliance hotlines,
For corporate audit, analysis, and reporting,
To enforce our contracts and to protect against injury, theft, legal liability, fraud, or abuse, to protect people or property, including physical security programs
To de-identify the data or create aggregated datasets, such as for consolidating reporting, research, or analytics,
To make back-up copies for business continuity and disaster recovery purposes, and
For corporate governance, including mergers, acquisitions, and divestitures.