Specific Notice for Residents of the United States

1. ADDITIONAL DISCLOSURES FOR RESIDENTS OF CALIFORNIA, USA

‍

This section applies to the personal information of residents of California and supplements the other sections of Mistplay’s Global Privacy Policy, which continue to apply

Collection and Use of Personal Information: We have collected the following categories of personal information about you in the past 12 months:

Please note that we use and disclose sensitive personal information only for purposes expressly permitted under California law. For your information, personal data does not include publicly available information from government records and de-identified or aggregated consumer information.

‍

Disclosure of Personal Information: We may disclose your personal information to third parties for the business purposes outlined in the chart above.  In the past 12 months, we may have disclosed your personal information for a business purpose or at your direction.  For more details on third parties we share data with see the How We Share Personal Information About You section of this Policy. Although we do not “sell” personal information in exchange for money, some of our sharing of personal information as part of our Services may be classified as a “sale” under applicable California laws. We do not knowingly sell or share the personal information of anyone under the age of 16.

‍

Retention of Your Data: Mistplay will only retain personal data for as long as you use the Services, as required by law or for as long as it is required to meet the purposes for which it was collected.  For example, Mistplay account balances or rewards earned as of termination must be preserved for some period to allow for such matters as billing and tax reporting. Note, under the Terms, if a user does not use the Service for at least one hundred eighty days, the user’s inactive account may be terminated, units earned may automatically expire, subject to the Terms of Use and the user’s personal data may be destroyed.

‍

Notice of Financial Incentive: Under California law, the Rewards Program enables you to earn Units and may be considered a financial incentive provided in exchange for the collection and retention of personal information. While Mistplay does not assign a monetary value to the data that we collect, based on our reasonable estimate, the value received from the insights and the Rewards Program is reasonably equal to or greater than the value Mistplay receives from the use of this information. Mistplay uses the information to better understand how you use our Services, to improve our products and Services and to further enhance our user analytics. Note that participation in the Rewards Program is completely voluntary and you can withdraw at any time.  For further details of the Rewards Programs and its terms, including how to withdraw or terminate your participation, please refer to Terms.

‍

Your CCPA Rights: The California Consumer Privacy Act (CCPA) grants California consumers the following rights with respect to their personal information:

• Right to Know. You have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information that we have collected about you.
• Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
• Right to Correct. You have the right request that we correct inaccurate personal information that we maintain about you.
• Right to Opt Out of Sales and Sharing. You have the right to opt out of sales of your personal information to third parties and to opt out of the disclosure of your personal information to third parties for cross-context behavioral advertising, if applicable.
• Right to Limit Use or Disclosure of Sensitive Personal Information. You have the right to limit the use and disclosure of your sensitive personal information to certain specific business purposes.
• Right to Non-discrimination. You have the right not to receive discriminatory treatment for exercising any of your CCPA rights.

Exercising Your Rights:

You may opt out of sales and/or sharing or  exercise your right to limit the use/disclosure of your sensitive personal information by sending a request to Privacy@Mistplay.Com. We also honor requests to opt-out submitted via privacy preference signals, such as the Global Privacy Control (GPC). (For more information on the GPC and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/) 

‍

You may submit requests to know, delete, or correct by contacting us as directed in the Policy. To make such a request, please include the phrase “Personal Information Privacy Request” in the subject line, the Service you are inquiring about, along with your name, address, and email address. If we receive a request to delete your data, we will ask you if you want your personal information to be removed entirely or if you want to be kept on a list of individuals who do not want to be contacted in the future (for a specified period or otherwise). We cannot keep a record of individuals whose personal information we have deleted so you may be contacted again by us, should we come into possession of your personal information at a later date. Requests to know and requests to delete will be honored within 45 days; if more time is needed to respond, Mistplay will notify you.

‍

The CCPA enables California users to appoint an authorized agent to act on their behalf to submit disclosure requests and or deletion requests under the CCPA. We will honor a request from an authorized agent provided that: i) you provide written authorization to the authorized agent to act on your behalf and we can verify your identity, and ii) the agent submits proof of authorization.

‍

Browser “Do Not Track” Signals.  Most browsers contain a “do-not-track” setting.  In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their personal information and online behavior to be tracked and used, for example, for interest-based advertising.  As required by California law, we are required to inform you that, as is the case with most websites, we do not honor or alter our behavior when a user to one of our Websites has activated the “do-not-track” setting on her/his browser.

‍

2. ADDITIONAL DISCLOSURES FOR RESIDENTS OF COLORADO, CONNECTICUT AND VIRGINIA, USA

‍

This section applies to the personal data of residents of Colorado, Connecticut and Virginia and supplements the other sections of this Policy.

‍

For information on the categories of personal data that we collect, the purposes for which we process that personal data, and how we disclose that personal data, please refer to the Information We Collect About You, Use of Personal Data and Legal Basis for Processing, and How We Share Personal Information About You sections above, as well as Annex B: Table for Legal Processing Activities below. For an explanation of the types of information we share with third parties, please refer to the Disclosures of Personal Information section in the Additional Disclosures for Residents of California notice above.

‍

In some cases we may share your information with third parties who may use your information for their own purposes, including for purposes of marketing and advertising. These disclosures may be considered “sales” or “targeted advertising” under applicable privacy laws. For more information about the categories of personal data that we may sell to or share with third parties, and the categories of such third parties, see the Disclosure of Personal Information subsection in the Additional Disclosures for Residents of California, USA section above.

‍

Depending on where you reside, and subject to certain exceptions, you may have the following rights with respect to your personal data:

‍

• Access. You may have the right to request that we confirm whether we process your personal data and that we provide you access to such personal data. 
• Data Portability. You may have the right to request that we provide a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.
• Correction. You may have the right to request that we correct inaccuracies in the personal data that we process.
• Deletion. You may have the right to request deletion of your personal data.
• Opt Out of Sales and Targeted Advertising. You may have the right to request that we not process your personal data for the purposes of targeted advertising, sales, or profiling in furtherance of decisions that produce legal or similarly significant effects, as those terms are defined by applicable state law. 
• Opt Out of Profiling. You may have the right to request that we not process your personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects.

‍

You may opt out of sales and/or targeted advertising using information as directed in the Policy. Where required, we also honor requests to opt-out submitted via privacy preference signals recognized under applicable local law, such as the GPC.

‍

You may submit requests to exercise your other rights as directed in the Policy. Please include the phrase “Personal Information Privacy Request” in the subject line, the Service you are inquiring about, along with your name, address, and email address. If we receive a request to delete your personal data, we will ask you if you want your personal data to be removed entirely or if you want to be kept on a list of individuals who do not want to be contacted in the future (for a specified period or otherwise). We cannot keep a record of individuals whose personal data we have deleted, so you may be contacted again by us, should we come into possession of your personal data at a later date. 

‍

You may also have the right to appeal a refusal to take action on your request as directed in the Policy.

Depending on where you reside, you may also use an authorized agent to act on your behalf to submit requests to exercise your rights. We will honor a request from an authorized agent provided that: i) you provide written authorization to the authorized agent to act on your behalf and we can verify your identity, and ii) the agent submits proof of authorization.