PRIVACY POLICY

Last Updated: April 11, 2024

This Privacy Policy explains how the Corporate Commission of the Mille Lacs Band of Ojibwe Indians d/b/a Grand Casino Hinckley and Grand Casino Mille Lacs ("Grand Casino," "we," "us," "our," or "ours") collect, store, use, and disclose information about you when you use our websites https://grandcasinomn.com and https://grandondemand.com (collectively, the "Sites"), mobile applications Grand Casino MN and Grand on Demand (collectively, the "Apps"), and our other products and/or services (collectively, the "Services"). By using our Sites, Apps, or Services, you are acknowledging that you have read, understood, and accept this Privacy Policy. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY NOT ACCESS THE SITES, APPS, OR SERVICES.

This Privacy Policy does not extend to anyone whose personal information is not under our control or management, including data that is collected by other websites that you may visit before or after the Sites and which are not governed by this Privacy Policy. We are not responsible for the data protection or privacy policies of any other websites, and accept no responsibility or liability for those policies. Please carefully check the policies of other websites and services you use before you visit or submit personal information.

Our Sites, Apps, and Services are directed only to United States residents.

  1. What Personal Information Is Collected and Received.

    1. Personal Information We Collect and Receive. In order for you to use our Sites, Apps, and Services, we may collect and process certain types of information. Depending on your use of our Sites, Apps, and Services, this may include:

        • Personal identifiers that you provide to us or that others provide about you, such as your name, address, email address, phone number, username, password, gender, date of birth, username, password, Grand Rewards number, interests, and preferences (such as your room preferences for hotel reservations);

      • Financial information you provide to us, such as your bank account number, credit card number, or debit card number;

      • Commercial information you provide to us, such as information about the products you purchased, obtained, or considered or other purchasing or consuming histories or tendencies;

      • Information about your activity when using our Sites, Apps, and Services. This may include information we collect from your Internet activity or the device you use, such as your IP address, the type of device or browser you use, and information about your interaction with the Sites, Apps, and Services. We may also collect information about which games you play, how long or often you play our games, the other users you interact with, the progress or levels you achieve, the points or rewards you earn or buy, or other gameplay activities.

      • Physical characteristics or descriptions. For example, if you upload a photograph of yourself or your ID;

      • Information about your geolocation, such as physical location based on IP address, device data, or region; and

      • Inferences we draw from your personal information, such as a profile reflecting your preferences, characteristics, and behavior with our Sites, Apps, or Services.

      Within the last year, we have collected all of the above categories of personal information for the business purposes described below.

      We also allow certain third-party companies (e.g., Google) to collect information from your interactions on the Sites. Our Privacy Policy does not cover these third-party companies. Please contact these third-party companies (e.g., Google) directly for more information about their privacy policies and your choices regarding the information they collect and how they use that information.

      Please note that personal information for the purposes of this Privacy Policy does not include aggregate information from which individual identities have been removed.

    2. Personal Information from Children. Grand Casino does not knowingly solicit or collect any personal information from anyone under 18 years of age, and children under 18 are not permitted to register for or use our Sites, Apps, or Services. If we become aware that a child under the age of 18 has provided us with their personal information, we will delete it.

  2. How Personal Information Is Collected and Received. We collect personal information directly from you. In order to provide the Sites, Apps, and Services, we may also receive personal information about you from others, as further described below:

    1. Personal Information You Provide Directly. We collect your personal information that you provide to us directly when you take actions such as filling out a form on our Sites or in our Apps; registering for an account with us; contacting us by email, letter, phone, or chat; interacting with us on social media; interacting with our Sites, Apps, or Services; or engaging in a transaction with us.

    2. Personal Information Provided About You By Other People. We also collect personal information about you provided to us by others in order to enable you to use or benefit from our Services. For example, if someone makes a reservation on your behalf or invites you to play a game in the Apps, we will collect the personal information they provide about you. Please note that if you are sharing someone else's personal information with us, you must be legally authorized to share such information on that person's behalf.

    3. Personal Information From Third-Party Platforms. If you interact with us or our Services through social media, we may receive your personal information from the social media company. For example, if you post a comment to our Facebook page, we may receive your profile information and other information associated with your Facebook account from Meta. In addition, you may be able to register with or log into the Sites, Apps, or Services by choosing to automatically populate the requested data fields with information you previously provided to a third-party platform (such as Facebook, Google, or Apple). By doing this, you are asking the third-party platform to send us information, including personal information, from your profile on that platform.

    4. Automatically Collected Personal Information - Browsers and Devices. We collect information that is sent to us automatically by your device or web browser, such as your IP address and information about your device and browsing history.

    5. Automatically Collected Personal Information - Cookies and Tracers. We or our partners may use cookies and similar technologies (e.g., web beacons, pixels, ad tags and device identifiers) to recognize you and/or your device(s) on, off, and across the Sites and different Services and devices. A cookie is a small file that is placed onto your device (e.g., computer, smartphone or other electronic device) that stores information when you visit a website. Cookies are also used to enable certain website features and functionalities. You can control certain cookies through your browser settings and other tools. Depending on your mobile device and operating system, you may not be able to delete or block all cookies.

      A. Types of Cookies: The cookies fall into one of the following two categories:

        • Session cookies: these allow our Sites to link your actions during a particular browser session. These expire each time you close your browser and do not remain on your device afterwards.

      • Persistent cookies: these are stored on your device in between browser sessions. These allow your preferences or actions across our Sites to be remembered. These will remain on your device until they expire, or you delete them from your cache.

      B. The cookies may also be:

        • Strictly necessary cookies: these cookies are essential for you to be able to navigate our Sites and use their features. Without these cookies, we could not provide you with the Sites.

      • Performance cookies: these cookies collect information about how you use our Sites, for example, which pages you go to most often and are used to improve how our Sites work.

      • Functionality cookies: these cookies allow our Sites to remember the choices you make (such as your user name, language, last action, and search preferences) and provide enhanced, more personal features. The information collected by these cookies is anonymous and cannot track your browsing activity on other websites.

      • Marketing cookies: also known as advertising cookies, these cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement on our Sites, Apps, and Services and help measure the effectiveness of our and our partners' advertising campaigns. This is sometimes referred to as online behavioral advertising. In some cases, our partners may use cookies to provide us with information about your interactions with their services or we may allow our partners to put cookies on our Sites, Apps, or Services, and your information may be shared with other organizations such as advertisers. Those third party cookies would be subject to the third party service's policies.

      C. Your browser may give you the ability to control some types of cookies. If you do not want to accept the kinds of cookies you can control, you can change your browser settings so that certain types of cookies are not accepted. If you turn off any cookies, please be aware that you may lose some of the functionality of the Sites or Services.

      D. To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative's online resources, at http://www.networkadvertising.org/choices, and/or the Digital Advertising Alliance's ("DAA") resources at www.aboutads.info/choices. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting "limit ad tracking" (iOS) or "opt-out of interest-based ads" (Android). You may also be able to opt-out of some - but not all - interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app.

      E. Please note that if you opt out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services. It means that the online ads that you do see from DAA program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third-parties' opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA's self-regulatory principles for online behavioral advertising.

  3. How We Use Personal Information.

    We may use the personal information we collect for the following purposes:

     

    • To meet any contractual obligations with you;

    • To provide and deliver our Apps, Services, and Sites and related support;

    • To allow you to log into and access your account;

    • To process any purchases, transactions, or payments made on our Apps, Services, or Sites;

    • To keep your information and our systems secure such as by detecting security incidents and fraud, and to be able to verify your identity and contact information;

    • To alert you about updates, special offers, games, promotions, events, and other news, services, and information from us, our partners, or others, including through targeted advertising;

    • For testing, research, analysis, and product development, including to develop and improve our content, Sites, Apps, and Services;

    • To ensure our content, Sites, Apps, and Services are functional, efficient, and relevant to you and your interests;

    • To respond to your inquiries and requests;

    • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;

    • To enforce this Privacy Policy, our Terms of Use, and our rights; and to protect our business interests and the interests and rights of third parties; and

    • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

  4. How Personal Information May Be Disclosed.

    We do not sell or rent any of your personal information, and we do not share your personal information publicly without your consent. However, we may "share" the categories of personal information described above, as that term is defined by California law. We disclose your personal information to the following categories of recipients:

    1. To our service providers: We rely on certain trusted third party service providers to provide, process, improve, promote, or protect our Sites, Apps, and Services. These service providers do things like help us store your data, process your payments, deliver the Sites, Apps, and/or Services to you, improve our advertising, and secure our systems.

    2. To other entities related to Grand Casino: We may disclose personal information to our related companies, such as affiliates, subsidiaries, or other companies that control or that are under common control with us.

    3. To our business partners: We may disclose personal information to our third party business partners or allow those partners to collect information from you directly for their own business or marketing purposes, including to promote their products or services through cross-context behavioral advertising. Please note that the practices of third parties delivering advertisements on or via our Sites, Apps, or Services are subject to those companies' own privacy policies.

    4. To other players in the Apps: We may disclose or allow access to some of your personal information to your friends or other players in the Apps to facilitate your gaming interactions with them.

    5. In the event of a change in control: We may disclose personal information to other companies for the purpose of evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

    6. As necessary or otherwise required by law: We also reserve the right to disclose personal information when it is reasonably necessary to conduct our business, protect our legal rights and property, and to comply with the law.

    7. At your direction, request or consent: We may disclose or allow access to your personal information if you otherwise consent, request, or direct us to do so.

  5. Protection of Your Personal Information.

    We take the security of your personal information seriously. We have therefore put in place commercially reasonable physical, electronic, and managerial procedures to safeguard and secure the personal information that we collect.

    Please remember, however, that the safety and security of your personal information also depend on you. Where you have chosen, or where we have given you, a user name and password for access to certain parts of the Sites, Apps, and Services, you are responsible for keeping the user name and password confidential and for using secure connections. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee its absolute security.

  6. Data Transfers.

    Because Grand Casino is a US based company, your personal information may be collected and processed in the United States. Additionally, as part of the Sites, Apps, and Services offered to you, information that we receive about you may be transferred to and stored in one or more countries other than where you currently reside. For example, this may occur if any of our servers or third party service providers are located in a country other than yours. These countries may have different data protection laws than your current residence. However, if we transfer your personal information in this way, we will put in place appropriate protection to make sure it is treated in line with this Privacy Policy.

  7. Mobile and Email Notifications.

    We try to give you the ability to opt out of the marketing communications we may send. For example, we may send you marketing email relating to the Sites, Apps, or Services we offer. You may also elect to receive certain marketing communications in accordance with your preferences. If you wish to opt out of these marketing communications click the link at the bottom of any of our marketing emails to unsubscribe, there is also an option inside the app in the settings to unsubscribe, you may also email us at support@grandondemand.com.

    Regardless of your marketing communication preferences, we may still contact you for transactional, operational, or informational purposes, such as for customer service, reminders, or information regarding the Sites, Apps, or Services you are using.

  8. Retention.

    We will keep your personal information for as long as is necessary to perform the processing activity for that information, as long as is set out in any relevant contract you hold with us, or as required or allowed by law. The relevant retention period is determined on a case by case basis because it depends on things like the nature of the data, why it is collected, why it is processed, and any legal or operational retention needs. For example, we may retain your data for as long as you use our Apps or Services. When the relevant processing activity has been completed, we may destroy your data, or alternatively anonymize the data such that the data is not personally identifiable. We do not have any obligation or liability to you or any other party with respect to personal information that is deleted or destroyed.

  9. Personal Information Rights and Requests by California Residents.

    Individuals residing in California have certain additional rights regarding their personal information. Except where an exception or exemption applies, these rights include:

     

    (1) The ability to request that we provide the categories and specific pieces of personal information we have collected about you;
    (2) The ability to request deletion of your personal information, subject to certain exceptions;
    (3) The ability to request correction of inaccurate personal information;
    (4) The ability to request that we opt you out of the sharing of your personal information for cross-context behavioral advertising; and
    (5) The right not to be discriminated against due to your exercise of any of the preceding rights.

    California residents may submit a request by emailing grandondemandapp@gmail.com or calling 1-800-626-5825 and providing your name, your address, your email address, and the details of your request. You may also opt-out of having your personal information shared for purposes of targeted advertising by clicking on "Do No Share My Personal Information" . You may also designate an authorized agent to make a request on your behalf.

    To protect your privacy and security, we may take additional reasonable steps to verify your identity before processing or fulfilling your request. We will generally respond to your request within 45 days, unless a longer response time is necessary, in which case you will be advised accordingly. Please note that we may retain certain personal information as required or allowed by law or as necessary for our legitimate business purposes.

  10. Special Notice to Nevada Residents. We do not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at grandondemandapp@gmail.com.

  11. Questions, Comments, or Complaints. If you have questions or comments about this Privacy Policy, we invite you to contact us at support@grandondemand.com or 1-800-626-5825. If you have an applicable disability, you may also contact us to request access to this Privacy Policy in an alternative format.

  12. Updates and Changes to this Privacy Policy. This Privacy Policy is effective as of April 11, 2024. We may update this Privacy Policy from time to time. Any updates to this Privacy Policy will not apply retroactively. By continuing to use our Sites, Apps, and/or Services and/or submitting your personal information after a change, you are accepting the terms of this Privacy Policy.