Wynn Palace Cotai Casino Privacy & Personal Data Protection

Wynn Palace Cotai Casino Privacy and Personal Data Protection

At Wynn Palace Cotai Casino, we handle personal information in connection with our land-based casino, hotel accommodation, restaurants, entertainment, Wynn Rewards services, websites, systems and applications. We collect and use information only where it is relevant to providing services, managing reservations and payments, operating gaming and membership programmes, maintaining security or meeting legal and regulatory requirements. Personal information can also be processed when guests interact with our websites or Wynn Rewards App, participate in promotions or communicate with us. We apply administrative, physical and technical safeguards designed to keep personal data secure and retain information only for as long as reasonably required and legally permitted.

Personal Data Collected by Wynn Palace Cotai Casino

The information we collect depends on how a guest interacts with Wynn Palace Cotai Casino and the wider resort. A hotel booking, Wynn Rewards account, restaurant reservation, casino-related transaction or online enquiry can require different information. We aim to collect only the data necessary to complete the relevant service or purpose. Some information is provided directly by the guest, while other data may be generated by security systems, websites, applications or authorised third-party sources.

Identity and Personal Details

• • Name, date of birth and information contained in identification documents may be collected when identity or age needs to be verified.
• • These details can be relevant to hotel stays, membership administration, casino access, payments and other services where identification is required.

Contact Information

• • We may collect an email address, telephone number and postal address.
• • Contact details can be used to manage reservations, respond to enquiries, communicate about requested services and, where permitted, provide information about relevant offers or events.

Payment and Financial Information

• • Payment information can include payment-card details, billing information and bank-account details where required for a transaction.
• • Financial information may be processed for accommodation, dining, resort purchases, gaming-related arrangements, credit administration, payments, transfers or debt collection where applicable.

Demographic Information

• • Information such as age, gender, country and preferred language may be collected where relevant.
• • These details can assist with communication, eligibility checks, service administration and personalisation.

Reservation, Stay and Visit Information

• • We may keep information relating to hotel reservations, arrival and departure dates and previous stays.
• • Records can also include goods and services purchased or used during a visit to our resort.
• • This information supports reservations, guest service, account administration and a more consistent experience across Wynn services.

Wynn Rewards and Promotional Information

• • Participation in Wynn Rewards, promotions, prize draws and selected events can generate membership and participation records.
• • The precise information collected depends on the relevant programme, promotion or service.
• • Individual promotional terms may require additional information to verify eligibility, prevent duplicate redemptions or administer a reward.

Images, Audio and Security Information

• • Images and audio may be collected where legally permitted or required.
• • Our physical properties can use CCTV, surveillance systems, electronic key cards and other security systems to protect guests, employees, gaming operations and property.
• • Security information can be retained and reviewed where necessary for safety, investigation, legal or regulatory purposes.

Preferences and Special Requests

• • We may record interests, preferences and information required to fulfil individual requests or specific accommodation requirements.
• • These details can help us provide services that are more consistent with a guest's stated requirements.

Correspondence and Enquiries

• • When a guest contacts us, we may retain copies of emails, messages, forms or other correspondence.
• • Correspondence can be used to respond to the enquiry, administer the requested service and maintain appropriate records.

Website and Application Data

• • Our systems may record an IP address, request time, requested URL and other technical information supplied through an HTTP request.
• • When our applications are accessed through a mobile or tablet device, device identity and location information may be processed for selected functions such as application notifications.
• • Information about interactions with our websites, systems and applications can also be collected to operate and improve digital services.

Information from Other Sources

• • Where appropriate, information may be received from public databases, travel agents, airlines, payment-card partners, joint marketing partners and other third parties.
• • The information received depends on the service, relationship and permissions applicable to the particular transaction.

How Wynn Palace Cotai Casino Uses Personal Data, Identity Checks and Cookies

At Wynn Palace Cotai Casino, we use personal data to provide and administer the services requested by our guests. This can include casino and gaming programme administration, hotel accommodation, dining, transport, entertainment, ticketing, spa and salon services, retail purchases, promotions and Wynn Rewards activities. Personal information can also be processed for payments and bank transfers, permitted credit arrangements, debt collection, internal and external audits, record keeping, communications, safety and security, market research and direct marketing where the applicable permission has been provided. We may also process information when required to communicate with public authorities or comply with legal and regulatory obligations.

Identity verification is particularly important where a service has an age requirement, financial element or membership condition. We may therefore request identification information to establish who a guest is, confirm age, administer an account, check eligibility for a service or promotion, process certain financial transactions or satisfy security and regulatory requirements. Wynn Palace is a land-based casino and entry to gaming areas is restricted to guests aged 21 or above, so identity documents may be requested when age or identity needs to be confirmed. Refusing to provide information that is essential for a particular service can mean that we are unable to complete the relevant reservation, payment, membership request, casino-related process or other transaction.

Our websites and applications use cookies to support digital functionality and understand how individual pages are used. A cookie is a small file stored on a computer, smartphone or tablet, and it can help us make information easier to access and provide website functions that are relevant to users. Cookies can be blocked through browser settings, although blocking them may prevent certain transactions, functions or content from working correctly. Our published policy states that website cookies are not themselves linked to personally identifiable information while a visitor is browsing the Wynn websites.

Technical information can also be generated when a guest browses our digital services. Our servers may log an IP address, the time of a request, the URL being requested and other information supplied in the HTTP request header. When a Wynn application is used on a mobile or tablet device, device identity and location information may be logged where necessary to provide features such as promotional or event notifications. Where the relevant digital controls allow it, users can block selected location or device logging, but doing so may make some application functions unavailable. Technical tracking is separate from the CCTV, electronic key-card and other security systems used at our physical resort.

Who Wynn Palace Cotai Casino May Share Personal Data With

We treat personal information as confidential, but certain data may need to be shared where this is necessary to operate our services, administer transactions, protect guests and property or comply with legal obligations. Information may also be processed across different Wynn Group locations and systems. Where external contractors process information on our behalf, our privacy framework requires appropriate contractual and security controls. Separate consent may be requested for particular third-party arrangements where required.

Other Wynn Group Companies

• • Personal data may be shared with other companies within the Wynn Group where this supports hotel, gaming, rewards, dining, entertainment, marketing or other authorised services.
• • Group companies are expected to apply data-protection measures appropriate to the information being handled.

Technology and System Providers

• • Contractors can include website, application and system-development providers, platform operators and organisations that provide technical support.
• • These companies can process information where it is required to operate or maintain our digital infrastructure.

Data Management Providers

• • Specialist providers may assist us with storing, organising or managing information used by our systems and services.
• • Contractors working under our authority are subject to restrictions on using personal data for purposes outside those we specify.

Email and Communications Providers

• • External communication platforms can assist us with emails, notifications and other communications.
• • A service provider engaged to distribute Wynn communications is not authorised to use the relevant email information for an unrelated purpose.

Marketing and Event Service Providers

• • Contractors may help to administer marketing campaigns, special events, promotions or related systems.
• • Personal information is shared only where relevant to the authorised activity and subject to applicable privacy requirements.

Auditors and Professional Advisers

• • Information may be made available to internal or external auditors where required for audit and compliance purposes.
• • Particular activities can also involve authorised legal, financial or other professional advisers where their services are necessary.

Business and Promotional Partners

• • We may work with selected third parties to provide services, benefits or programmes that may be relevant to our guests.
• • Where personal information must be shared with such a partner, notice and separate consent may be requested where required.
• • An external company's own privacy practices may apply once information is provided directly to that company.

Public Authorities and Courts

• • Personal information may be disclosed where required by law, a court order, regulatory requirement or another lawful request from an authority with jurisdiction over the Wynn Group.
• • Disclosure can also occur where necessary to protect the rights or property of Wynn Group companies in circumstances permitted by law.

International Data Transfers

• • Information collected through our systems, websites and applications may be transferred, processed or stored in different countries and territories in which Wynn Group operations or service infrastructure are located.
• • Our published privacy framework identifies locations including Macau, Hong Kong and the United States, as well as other jurisdictions in which Wynn Group companies operate.
• • Security and privacy requirements can differ between jurisdictions, so the safeguards applied may reflect the legal requirements relevant to the processing location.

How Wynn Palace Cotai Casino Protects Data, Retention Periods and Privacy Rights

At Wynn Palace Cotai Casino, information reaching our systems is stored on secure servers protected by measures designed to prevent unauthorised access. Our safeguards include firewalls, restricted electronic and physical access, controls intended to prevent unauthorised changes or transfers and measures designed to encrypt authorised data transfers both in transit and at rest. We also maintain information-security policies and conduct periodic audits of our information technology systems. Contractors processing information on our behalf can be required to implement technical and organisational safeguards appropriate to the nature of the data and risks involved.

We do not publish one fixed retention period covering every category of personal information. Instead, information is kept only for as long as reasonably required and legally permitted. Different records may therefore be retained for different periods depending on why the information was collected, the services involved, financial or audit requirements, security needs, legal obligations and whether an ongoing relationship exists. Where sufficient justification for continued retention no longer exists, data is securely deleted, disposed of or otherwise handled in accordance with the applicable requirements.

Guests can request access to personal data and, where applicable, ask for information to be corrected, supplemented, copied, transferred or deleted. Requests are handled to the extent possible, commercially reasonable and permitted by the applicable rules, and reasonable administrative costs may apply to certain requests. Consent previously provided to us can also be withdrawn, although withdrawal may prevent us from providing a service where the information is necessary to complete that service. Direct-marketing consent can be withdrawn without charge, including through the opt-out process provided with relevant marketing communications.

Privacy requests are handled through the Wynn data-protection process and can be directed in writing to our Legal Department. Identity verification may be necessary before we provide copies of personal information or make significant changes to a record, as this helps prevent another person from obtaining or altering a guest's data without authority. Privacy rights are not necessarily absolute: certain information may still need to be retained where there is a lawful, regulatory, security, financial or other valid reason for doing so.

Wynn Palace Cotai Casino Privacy and Guest Responsibility

Protecting personal information is a shared process. We apply security controls to the information processed through Wynn Palace Cotai Casino, our resort services, Wynn Rewards and our digital systems, while guests can reduce privacy risks by keeping account credentials and booking details secure. Personal information provided to us should be accurate and should only include another person's details where the person providing them is authorised to do so. Guests should also review the privacy practices of external websites or services before providing information directly to a third party, because those services can operate under independent privacy policies.

Privacy area	What we do	Guest re­spon­si­bil­ity
Per­son­al de­tails	Collect in­for­ma­tion needed for rel­e­vant ser­vices	Provide ac­cu­rate and cur­rent de­tails
Iden­ti­fi­ca­tion	Use ID data where iden­ti­ty, age or el­i­gi­bil­i­ty must be checked	Present valid doc­u­ments when re­quired
Pay­ment data	Apply se­cu­ri­ty con­trols to fi­nan­cial in­for­ma­tion	Use au­thor­ised pay­ment meth­ods and protect card or bank de­tails
Wynn Re­wards	Process mem­ber data for ac­count and ben­e­fit ad­min­is­tra­tion	Keep log-in cre­den­tials pri­vate and do not share an ac­count
Web­site cookies	Use cookies for func­tion­al­i­ty and page-usage in­for­ma­tion	Manage cookie set­tings through the brows­er where de­sired
Mo­bile data	May process de­vice or lo­ca­tion data for se­lec­ted App func­tions	Review de­vice per­mis­sions and dig­i­tal set­tings
Se­cu­ri­ty sys­tems	Use CCTV, key-card and oth­er se­cu­ri­ty sys­tems where per­mit­ted	Follow prop­er­ty se­cu­ri­ty and pri­va­cy rules
Mar­ket­ing	Use con­tact data for di­rect mar­ket­ing where the ap­pli­ca­ble per­mis­sion exists	Use the free opt-out op­tion when mar­ket­ing is no longer wanted
Data re­ten­tion	Keep data only as long as rea­son­ably re­quired and le­gal­ly per­mit­ted	Request ac­cess or cor­rec­tion where ap­pro­pri­ate
Third-party data	Process an­oth­er per­son's data where it is validly sub­mit­ted for a ser­vice	Obtain the per­son's au­thor­i­sa­tion be­fore pro­vid­ing their de­tails