LAST UPDATED: 6-29-20

Churchill Downs Incorporated and its subsidiary companies (“CDI”, “we” or “us”) have adopted this Privacy Policy to explain how we collect, use, disclose, and otherwise process personal information in connection with our Services.

Our Services: When we use the term “Services”, we are referring to:

• Websites owned or operated by CDI (the “websites”)
• Digital applications made available by us (the “apps”)
• Our social media pages that we control (our “social media pages”)
• HTML-formatted e-mail messages that we send to you(our “emails”)
• Our interactions with you, including, but not limited to, at our gaming, racing and hotel establishments, as part of our loyalty programs and through any communications with you.

This Privacy Policy does not cover or address personal information and privacy practices relating to job applicants, employees and other personnel.

I. What Is Personal Information

When we use the term “personal information” in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or deidentified information that is maintained in a form that is not reasonably capable of being associated with or linked to you.

II. What Information We Collect

We collect personal information in several ways. Sometimes we collect personal information directly from you and sometimes we collect the personal information automatically when you interact with our Services. At times, we may collect personal information about you from other sources and third parties, and combine that information with other information we collect from you.

A. Personal Information You Provide To Us

We collect the following personal information you provide in connection with our Services.

• Registration, Account Funding and Wagering. You may register or open an account with CDI on any CDI Services if you are at least eighteen (18) years old, or older in some jurisdictions.  Similarly, you may place wagers at our casinos if you are twenty-one (21) years old.  If you do, we may collect your:
  • Your Name, address (including billing and shipping addresses), date of birth, phone number and email address
  • Your Social Security Number
  • Your bank account and/or credit card information
  • Profile picture
  • Social media account ID
  • Loyalty/reward program account number
  • Driver’s license or other state ID number
  • Wagering activity

• Communications. If you communicate with us through any paper or electronic form, we may collect your name, email address, mailing address, phone number, date of birth, information about your inquiry, comments and feedback, and any other personal information you choose to provide to us.  If you register for our newsletters or updates, we will communicate with you using your email, phone number and by using in-app or push notifications from our websites and apps.
• Surveys, Forms and Events. If you choose to participate in any surveys or events, or complete any forms on our websites, including entering into any sweepstakes, we will collect your name, contact information, payment information (where applicable) and any other information you choose to provide to us.
• Transactions. If you inquire about purchasing or purchase tickets or packages directly through us for any of our live events, or donate to any of our charity fundraisers, we will collect your name, email address, mailing address, phone number, date of birth, payment information, demographic information, and in some cases your Social Security Number and information about your employment, such as where you are purchasing sponsorships.

B. Information We Collect About You Automatically

We use various technologies to automatically collect information about the device or browser you use to navigate our website, apps or from your use of our other Services, including:

• Web Logs. Like many websites, apps and email communications, we automatically collect certain information about your device automatically and store it in log files.  This information may include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp and/or clickstream data.
• Geolocation Information. When you download our app or use some of our online Services, you will be prompted to give permission for CDI to access your device’s precise geolocation.  Giving permission is voluntary, although the denial of permission to access geolocation information may result in your inability to take full advantage of CDI’s Services.  For more information on how to withdraw your permission, please see the Online Privacy Choices section below.
• Cookies and Other Data Collection Technologies. We and our service providers use cookies, scripts and similar technologies to manage the Services and to collect information about you and your use of the Services.  These technologies help us to recognize you, customize or personalize your experience, advertise products or Services to you and analyze the use of our Services to make them more useful to you.  These technologies may also allow us to collect demographic and statistical data and provide this information to our service providers to help deliver their services.  Most internet browsers allow you to remove or manage cookie functions and adjust your privacy and security preferences.  For information on how to do this, access the “help” menu on your internet browser, or access http://www.aboutcookies.org/how-to-control-cookies.  Please note, however, that disabling our cookies may mean that you will not be able to take full advantage of our Services.
• Google Analytics. We use “Google Analytics” to collect information about your use of the Services.  Google Analytics collects information such as how often users access the Services, what pages they access when they do so and what other websites they used prior to using the Services.  Google uses the data collected to track and examine the use of the Services, to prepare reports on its activities and share them with other Google services.  To learn more about the use of data collection technologies by Google for analytics and to exercise choice regarding those technologies, please visit the Google Analytics Opt-Out browser add-on page.
• Adobe’s Analytics Service. We use “Adobe Analytics” to collect information about your use of the Services, which uses cookies and web beacons to help us understand more about the effectiveness of our advertising campaigns. To learn more, please visit the Adobe Analytics Opt-Out

C. Information We Collect About You From Third Parties

We may receive personal information about you from other users or our business partners and service providers and combine this information with other information we have.

• Ticketing and Online Purchases. If you purchase tickets or products through our online store, you are interacting with our third-party partners.  You may also book our hotel rooms through third-party partners.  When you submit information through these third parties, we receive the name, email and information about your payment methods and the transaction from these third-party partners.  If you make purchases on behalf of your company or organization, we will receive the information about your employer that you provide to the third-party partners.  Our third-party partners may also estimate demographic information about our customers, such as age, education level and marital status, and send this information with information about each purchase.  To learn more about the data collection practices of these third-parties, please visit each site’s privacy policy.
• Other Users. We may obtain information about you from other users who think you may be interested in the Services or who wish to take part in bet sharing. If so, we will collect your name and contact information, which we will use to reach out to you with information about our Services.
• Service Providers and Public Databases. We obtain information about users from our service providers in some contexts, such as from our payment processors when you deposit money, or from background check providers where we are legally obligated to do so.  We may also obtain information from public databases, such as for identity verification checks.
• Social Media Providers. If you choose to connect to our Services through a social network such as Facebook or Twitter, we will collect your profile information.  Additionally, if you interact with our social media pages, we will collect information about your profile and the relevant content from your interaction.

III. How We Use Your Information

• To fulfill the purpose for which you provide it to us and improve our Services and customer support.  This includes but is not limited to, feature usage, verifying your identity, to fulfill your wagering activity or process purchases made on our websites.
• To fund your account and place and settle your wager and to ensure that wagering and gaming activity meets various state and federal laws and other statutory requirements.
• To contact you regarding promotions and marketing offers that we believe may be of interest to you, including through email, direct mail, phone, text message, in-app message and push message.
• To respond to your inquiries and fulfill your requests and subscriptions, such as to send you newsletters and our magazine.
• To send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies, or information regarding your wagering or gaming activity and player loyalty/reward account.
• To complete and fulfill your purchase, for example, to process your payments, confirm your reservation, communicate with you regarding a reservation or purchase and provide you with related customer service.
• To personalize your experience with us by presenting products and offers tailored to you, and to recognize you and remember your information when you return to our Services.
• To allow you to participate in sweepstakes, contests and similar promotions, and events, such as our philanthropic or promotional events, and to administer these activities.  Some of these activities have additional rules, terms and conditions, which could contain additional information about how we use and disclose your personal information.  Read these rules carefully.
• To allow you to send messages to a friend through the Services.  By using this functionality, you are telling us that you are entitled to use and provide us with your friend’s name and email address.
• For our business purposes, such as data analysis, audits, security, crime and fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Services, enhancing our marketing efforts, identifying usage trends, determining the effectiveness of our promotional campaigns and operating, managing and expanding our operations and business activities.
• As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and governmental authorities; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates (including through surveillance); (f) to protect our rights, privacy, safety or property, and that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

IV. How Personal Information May Be Shared Or Disclosed

Your personal information may be used and disclosed:

• Within CDI and our Affiliates. We may share personal information with other affiliates or subsidiaries in the Churchill Downs Incorporated family of companies (i.e., any organization we own or control).
• Service Providers. We engage a number of third-party service providers that process personal information for us or on our behalf and as needed to perform business or operational services needed to provide the Services, such as website hosting, infrastructure provisioning, IT services, customer service, email and text message delivery services, analytics, ticketing, merchandising, marketing and advertising services, security providers, payment processors, background check providers, credit check services, facilitating wagers and other similar services.
• Third Parties At Your Request. At your request, we will send your personal information to third parties to permit them to send you marketing communications, to third-party sponsors of sweepstakes, contents and similar joint promotion activities or co-branded or co-sponsored services, and to other users to whom you send messages through the Services.
• Ad Networks and Advertising Partners. We work with third-party ad networks and advertising partners to deliver advertising and personalized content to you on our Services, on other sites and services you may use, and across other devices you may use. These parties may collect information directly from your browser or device when you visit the Services through cookies or other tracking technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics and market research.
• Publicly. Where you post information and materials on message boards, chat, profile pages, blogs and other services, including, without limitation, our social media pages, your personal information is available to other users.  Please note that information you post in a chat room, a message board, a forum or another public posting area on our websites or social media can be viewed by anyone with internet access. Use extreme caution prior to disclosing your personal information, or any other information, in these areas.
• Social Networks. By connecting your social media account to the Services, you authorize us to share information with your social media account provider, and you understand that the use of the information we share will be governed by the social media sites’ privacy policies.  If you don’t want this information shared, do not connect your social media account to the Services.
  Regulatory or Legal Requirements, Safety and Terms Enforcement. We may disclose personal information to governmental regulatory authorities as required by law, including for tax or accounting purposes, in response to their requests for such information or to assist in investigations.  We may also disclose personal information to third-parties in connection with claims, disputes or litigation, when otherwise required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, or to enforce our legal rights and the contractual commitments that you have made, and to pursue available remedies and limit the damages that we may sustain.
• Business Transfers. To a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

V. Online Privacy Choices

A. Online Advertising.

We support the self-regulatory principles of the Digital Advertising Alliance (“DAA”). We work with advertisers, advertising networks, advertising servers, and analytics companies (“Ad Partners”) that use data collection technologies to understand how our Services are being used and to analyze your browsing history in order to deliver advertising relevant to your interests, as well as to provide advertising-related insights.  These advertisements may appear on other websites or services, including through social media networks.  These Ad Partners may be able to associate devices across third party websites or services over time and link various devices used by the same individual.

For more information about how Ad Partners use the information collected by these technologies and your options for restricting cookies placed by some of these Ad Partners, please visit the DAA’s opt-out page.  The DAA’s opt-outs are device- and browser-specific and may not work on all devices.  If you choose to opt-out through the DAA’s tools it does not mean you will cease to see advertising. Rather, the ads you see will be based on the website or app you are visiting and not your interests.

B. Privacy Preferences.

You have some choices regarding how we use your personal information, including the following:

• How to Control Your Email Communications Preferences. You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in the email.  You can also email us at [email protected] and asking to be unsubscribed from out marketing emails.  You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the websites and apps, technical and security notices).
• How to Control Your SMS Text Messaging Preferences. If you no longer want to receive SMS marketing text messages at a telephone number that you have provided to us for purposes of receiving such offers, text the word “STOP” to the short code from the phone number you want to have removed from any future marketing alerts or offers.
• Modifying Your Device Settings. You can restrict our websites and apps from accessing certain device information, such as precise geolocation, by changing your permissions in your mobile device’s settings menu.  Please note that the withdrawal of permission to access some device information may result in an inability to take full advantage of our Services.
• How to Control Your Affiliates Marketing Preferences. If you would prefer that we do not share your personal information on a going-forward basis with our affiliates for their direct marketing purposes, you may opt-out of this sharing by contacting us at [email protected] and specifying that you want to opt-out of affiliate sharing.
• Modifying or Deleting Your Information. If you have questions about reviewing, changing, or deleting your information, you can contact us directly at [email protected], or in person by visiting any Churchill Downs Incorporated casino and speaking to a customer service representative.  In your request, please make clear what personal information you would like to have changed or updated.  For your protection, we may need to verify your identify before implementing your request.  Subject to applicable laws, including but not limited to our obligations regarding anti-money laundering laws, we may not be able to change or delete your information in all circumstances.

VI. Region-Specific Notices

We may provide different or additional privacy policies relating to the processing of personal information about residents of certain countries, regions or states.  Please refer below for notices that may be applicable to you:

A. California

If you are a resident of the State of California, please click scroll to the end of this Privacy Policy for a supplemental California Privacy Notice.

B. Nevada

Under Nevada law, Nevada residents may opt out of the “sale” of their personal information, where the information is exchanged for monetary consideration.  We do not engage in such activity; however, if you are a Nevada resident, you may submit a request to opt out of potential future sales under Nevada law by emailing us at [email protected].  Please note we will take reasonable steps to verify your identity and the authenticity of the request.

VII. Use Of Services By Individuals Under Appropriate Age

A. Legal Gaming Age.

Any offer made or contests we conduct, unless otherwise noted, are not open to persons younger than the legal wagering or gaming age in the application jurisdiction (usually 18 or 21 years of age depending on the jurisdiction).  Persons younger than this legal age are not allowed to use our Services, accept offers or win contests, and we do not knowingly collect information from such persons for gaming related offers.  We reserve the right to verify age at any time for any reason and may decline to provide products, Services or access rights to any person who does not have valid age identification.  Please note that for some of our properties, users may access limited aspects of the Services in compliance with applicable local laws.

B. Use of Services by Individuals Under 13.

None of the Services are directed towards children under the age of thirteen (13) and we will not knowingly collect or use any information from any person identified as being under the age of thirteen (13).

VIII. Third Party Websites

Our websites, apps and Services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Policy, this Privacy Policy does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy policies.

IX. Contacting Use

If you have any questions about this Privacy Policy, you may contact:
Webmaster
Churchill Downs Incorporated
600 N. Hurstbourne Parkway, Suite 400
Louisville, KY 40222
Telephone: 502/636-4400, or toll free 800/283-3729
Email:  [email protected]

X. Changes/Updates To This Privacy Policy

We may change this Privacy Policy from time to time.  When we make changes to this Privacy Policy, we will change the “Last Updated” date at the top of this page.  Any changes will become effective when we post the revised Privacy Policy on the Services.  Your use of the Services following these changes means that you accept the revised Privacy Policy.

CALIFORNIA PRIVACY NOTICE

LAST UPDATED: 6-29-20

Scope of Disclosures

This California Privacy Notice (the “CA Privacy Notice”) applies to information the websites and mobile applications owned by Churchill Downs Incorporated and its subsidiary companies (collectively, “CDI,” “we”, “us,” or “our,”) collect in connection with their websites and services, including information collected both online and offline. This CA Privacy Notice supplements the information contained in our Privacy Policy and applies solely to individual residents of the State of California (“consumers” or “you”).

This CA Privacy Notice provides additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).

When we use the term “Services” in this CA Privacy Notice, we are referring to:

• Websites owned or operated by CDI (the “websites”)
• Digital applications made available by us (the “apps”)
• Our social media pages that we control (our “social media pages”)
• HTML-formatted e-mail messages that we send to you (our “emails”)
• Our interactions with you, including, but not limited to, at our gaming, racing and hotel establishments, as part of our loyalty programs and through any communications with you.

Unless otherwise expressly stated, all terms in this CA Privacy Notice have the same meaning as defined in our Privacy Policy or as otherwise defined under the CCPA.

Personal Information Disclosures

When we use the term “personal information” in this CA Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

For the purposes of this CA Privacy Notice, personal information does not include:

• Publicly available information from government records.
• Deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
• Information excluded from the CCPA’s scope, such as:
  • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
• Information relating to our job applicants, employees, contractors and other personnel.

Collection of Personal Information

In the last 12 months, we have collected the following categories of personal information from the categories of sources and for the purposes set forth below, which reference the categories of personal information, sources and purposes described in the What Information We Collect, How We May Collect Personal Information and How Personal Information May Be Used and Disclosed sections of our Privacy Policy:

• Category of Personal Information Collected Identifiers, such as name, email address, billing address, shipping address, zip code, telephone number, email address, date of birth, account name and password, or other similar identifiers.
• California Customer Records (Cal. Civ. Code § 1798.80(e)), such as driver’s license number, bank account information, credit or debit card information, or any other financial information.
• Protected Classification Characteristics, such as Social Security number and age.
• Commercial Information, such as your wagering activity, purchasing history and ordering behavior.
• Biometric Information, such as facial geometry used for identity verification purposes.
• Internet/Network Information, such as IP address, device information, log and analytics data.
• Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address and GPS (e.g., latitude and/or longitude).
• Sensory Information, such as pictures of you for your profile and recordings of phone calls between you and us, where permitted by law.
• Professional/Employment Information, such as current occupation and income, job history and experience.
• Non-Public Education Information (20 U.S.C. § 1232g, 34 C.F.R. Part 99), such as academic record.
• Other Personal Information, such as survey information, and information post on our applications or on social media pages, including pictures or videos of you, or other information you submit to us. We also collect information from the profile you create, such as your profile picture and loyalty program account number.
• Inferences, including information generated from your profile, as well as any of the information above and your use of our Services.

Sources of Personal Information 
We collect personal information about you from one or more of the following sources:

• Directly from you (through the Services or via our service providers)
• Our business partners and other CDI affiliates
• Third parties, such as third-party social networks, ticketing and e-commerce providers, and third parties who purchase our Services for you or otherwise direct our Services to you
• Offline sources, including out casinos, racetracks and hotels
• Your browser, device, your use of the Services or through cookies or other data collection technologies on our Services
• Generated or derived from other personal information

Please note: In addition to the categories of sources identified above, we may collect information from publicly available sources and other third-party information providers in order to supplement the information we have otherwise collected.

Purposes for Collecting Personal Information 
We collect, use, sell or disclose personal information about you for one or more of the purposes:

• To fulfill the purpose for which you provided the information, and to improve our Services and customer support.  This includes, but is not limited to, using the features of the Services, verifying your identity and to fulfill your wagering activity.
• To fund your account, to place and settle your wager and to ensure that wagering and gaming activity on our websites meets various state and federal laws and other statutory requirements.
• To contact you regarding promotions and marketing offers that we believe may be of interest to you, including through email, direct mail, phone, text message, in-app message and push message.
• To respond to your inquiries and fulfill your requests, such as to send you newsletters and our magazine.
• To send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies, or information regarding your wagering and gaming activity and play loyalty/reward account.
• To complete and fulfill your purchase, including processing purchases made on CDI’s or our partners’ websites, such as for ticketing and purchases in the online store.  For purchases made directly with CDI, we will process your payments, confirm your reservation, communicate with you regarding a reservation or purchase and provide you with related customer service.
• To personalize your experience with us by presenting products and offers tailored to you, and to recognize you and remember your information when you return to our Services.
• To recognize you and remember your information when you return to our websites, mobile applications and Services.
• To allow you to participate in sweepstakes, contests and similar promotions, and events, such as our philanthropic or promotional events, and to administer these activities.  Some of these activities have additional rules, terms and conditions, which could contain additional information about how we use and disclose your personal information.  Read these rules carefully.
• To allow you to send messages to a friend through the Services.  By using this functionality, you are telling us that you are entitled to use and provide us with your friend’s name and email address.
• For our business purposes, such as data analysis, audits, crime and fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Services, enhancing our marketing efforts, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
• As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and governmental authorities; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates (including through surveillance); (f) to protect our rights, privacy, safety or property, and that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

Disclosure of Personal Information
As described in our Privacy Policy, we share personal information with a variety of third parties for business purposes or we may sell your personal information to third parties, subject to your right to opt out of those “Sales” (see The Right to Opt-Out of Personal Information Sales below). We disclose personal information to the following categories of third parties:

• Within CDI and our affiliates. We may share personal information with other companies owned or controlled by our parent company, Churchill Downs Incorporated, and other affiliates within CDI, which also includes our subsidiaries (i.e., any organization we own or control).
• Service providers. We engage a number of third-party service providers that process personal information for us or on our behalf and as needed to perform business or operational services needed to provide the Services, such as website hosting, infrastructure provisioning, IT services, customer service, email and text message delivery services, analytics, ticketing, merchandising, marketing and advertising services, security services, payment processors, background check providers, credit check services, facilitating wagers and other similar services.
• Promotional partners. We may disclose personal information to third parties with whom we partner to provide contests, surveys, joint promotion activities or co-branded or co-sponsored services, and such disclosure is necessary to fulfill your request or application.
• Ad networks and advertising partners. We work with third party ad networks and advertising partners to deliver advertising and personalized content to you on our Services, on other sites and services you may use, and across other devices you may use. These parties may collect information directly from your browser or device when you visit the Services through cookies or other tracking technologies. This information is used to provide and inform targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics and market research.
• Social networks. We may disclose personal information, such as a unique identifier, hashed email address, or information automatically collected through tracking technologies, to social networks for the purpose of displaying personalized advertising and content on those social networks.
• Other users. Consistent with expectations set on the Services, we may share your personal information with other users and potential users of our Service in order to facilitate the general operations of our Services.
• Third parties or the public at your request. We share your personal information with third parties with your consent or at your direction.
• Law enforcement and third parties pursuant to legal request. From time to time, we may disclose personal information as reasonably necessary to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• Third parties in the context of a corporate transaction. We may disclose personal information as reasonably necessary to evaluate, negotiate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all CDI’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CDI about consumers is among the assets transferred or is otherwise relevant to the evaluation, negotiation or conduct of the transaction.
• Publicly.  Where you post on message boards, chat, profile pages, blogs and other services to which you are able to post information and materials (including, without limitation, our social media pages), we will make your personal information available to other users.  Please note that information you post in a chat room, a message board, a forum or another public posting area on our websites or social media can be viewed by anyone with internet access. Use extreme caution prior to disclosing your Personal Information, or any other information, in these areas.

We do not “sell” personal information as most people would typically understand that term. However, we do allow certain advertising networks, social media companies and other third-party businesses to collect and disclose your personal information directly from your browser or device through cookies and related technologies when you visit or interact with our websites and otherwise engage with us online. Please see the Third-Party Tracking and Online Advertising section below for more information about how third parties use cookies and related technologies to collect information automatically on our websites and other online services, and the choices you may have in relation to those practices.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the personal information about you that we have collected (subject to certain limitations at law):

The Right to Know
You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:

·       The specific pieces of personal information we have collected about you;
·       The categories of personal information we have collected about you;
·       The categories of sources of the personal information;
·       The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
·       The categories of personal information we have sold (if any) and the categories of third parties to whom the information was sold; and
·       The business or commercial purposes for collecting or selling the personal information.

The Right to Request Deletion
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.

The Right to Opt Out of Personal Information Sales
You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future.

If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.

The Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising these rights.
However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our Services or engage with you in the same manner.

“Shine the Light”
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).

How to Exercise Your California Consumer Rights

Please note that when you submit a request to us, please identify the specific CDI entity to which you have interacted with and provided your personal information.

To Exercise Your Right to Know or Right to Deletion
To exercise the right to know and/or the right to deletion, please submit a request by:

• Emailing [email protected] with the subject line “California Rights Request,” or
• Calling us at 1 (800) 283-3729, or if you are a Twinspires customer, calling us at 1 (877) 774-7371.

We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. Although we try to limit the personal information collected in connection with requests to exercise the rights to know and delete, certain requests may require us to obtain additional personal information from you for added certainty. In certain circumstances, we may decline a request to exercise the right to know and delete, particularly where we are unable to verify your identity.

Third-Party Tracking and Online Advertising
We utilize third-party partners to engage in online advertising. These ad networks, social media companies and other third-party businesses collect your personal information directly from your browser or device through cookies or similar tracking technology when you visit or interact with our website, use our apps or otherwise engage with us online. For example, they may collect Internet/Network information, such as a cookie or device ID, browsing history and website usage, Geolocation Data, and Inferences generated from your browsing history and interactions with our Services as well as other sites and services. These third-party businesses use your personal information to serve relevant ads on our site, on other websites or mobile apps, or on other devices you may use, or to personalize content and perform other advertising-related services such as reporting, attribution, analytics and market research. These third-party businesses may use such personal information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties, including other advertising networks.

Please see our Privacy Policy for more information about how third parties use cookies and related technologies to collect information automatically on our websites and other online services, and the choices you may have in relation to those practices.

Minors Under Age 16
We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”).  Please contact us at [email protected] to inform us if you, or your minor child, would like to opt-in to sales.

Updates to This CA Privacy Notice

We will update this CA Privacy Notice from time to time. When we make changes to this CA Privacy Notice, we will change the “Last Updated” date at the beginning of this CA Privacy Notice. If we make material changes to this CA Privacy Notice, we will notify you by email to your registered email address, by prominently posting on our online Services, or through other communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

Contact Us

If you have any questions or requests in connection with this Notice or other privacy-related matters, please send an email to [email protected].

Alternatively, inquiries may be addressed to:
Churchill Downs Incorporated
600 N. Hurstbourne Parkway, Suite 400
Louisville, KY 40222
Telephone: (502) 636-4400 or toll-free: (800) 283-3729