Privacy Notice

Our Privacy Notice has recently changed. Please review our changes for 2024.

Effective January 2024

Welcome to the IGT Privacy Notice.

As the world's leading end-to-end gaming company, IGT, and its subsidiaries (“IGT”), are committed to data privacy and will comply with applicable data protection laws and regulations. This Privacy Notice describes IGT’s collection and use of your personal information or personal data when you visit this website, visit our premises or do business with us, and your rights regarding this data. We encourage you to read this Privacy Notice carefully along with the website Terms of Use before using this website.

If you are in California, the section headed “Additional information for California residents” at the end of this Privacy Notice applies to you in addition to the other sections of this notice.

If you are in the European Economic Area (“EEA”) or the UK, the section headed “Additional Information for the EEA and UK residents” at the end of this Privacy Notice applies to you in addition to the other sections of this notice.

This website may contain links to third party websites. We are not responsible for the security, privacy practices, or content of such websites. If you visit a website via a link on IGT’s website, we recommend that you read the privacy notice on that website as it, not this Privacy Notice, will apply.

You are under no obligation to provide us with your personal information or provide any consent to processing which may be described in this Privacy Notice. However, if you choose not to provide personal information, or consent to particular processing activities, this may limit your ability to receive certain services or information.

We may revise this Privacy Notice from time to time so please be sure to check back regularly. If we make material changes, we will alert you e.g., by posting a prominent notice on the website.

If you have any concern about this Privacy Notice or our privacy practices, please contact us using the details below. Certain IGT group companies have appointed a data protection officer who can also be contacted using these details.

What information we collect about you and how we use it

The personal information that we collect falls into the following categories and may differ based on how you interact with us. The tables below set out:

• What types of personal information we process.
• The sources of this personal information.
• The purposes for which we use it.
• The categories of third parties who we may share this personal information with.

We do not sell any personal information or share it with third parties for cross-contextual behavioral advertising. Nor do we knowingly collect personal information from children.

If you interact with our IGT.com website:

If you visit our premises or do business with us:

IGT uses and discloses the following categories of sensitive personal information. We do not process any sensitive personal information for the purpose of inferring characteristics about you.

In relation to all categories of personal information listed in the tables above, we may use such information for the following everyday business purposes:

• To provide the information, product or service requested by the individual or as reasonably expected given the context in which with the personal information was collected (such as customer credentialing, providing customer service, personalization and preference management, providing product updates, bug fixes or recalls, and dispute resolution).
• For identity and credential management, including identity verification and authentication, system, and technology administration.
• To protect the security and integrity of systems, networks, applications, and data, including detecting, analyzing, and resolving security threats, and collaborating with cybersecurity centers, consortia, and law enforcement about imminent threats.
• For fraud detection and prevention.
• For legal and regulatory compliance, including all uses and disclosures of personal information that are required by law or reasonably needed for compliance with company policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection programs, and corporate ethics and compliance hotlines.
• To comply with legal process e.g., sharing with law enforcement and regulatory officials in response to lawful request or order.
• For corporate audit, analysis, and reporting.
• To enforce our contracts and to protect against injury, theft, legal liability, fraud, or abuse, to protect people or property, including physical security programs.
• To de-identify the data or create aggregated datasets, such as for consolidating reporting, research, or analytics.
• To make back-up copies for business continuity and disaster recovery purposes.
• For corporate governance, including mergers, acquisitions, and divestitures.

Special Categories of Personal Data are details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). The only Special Category of Personal Data we collect is biometric data, in limited circumstances as described in the table above.

COOKIES AND OTHER WEB TECHNOLOGIES USED

With your consent where required, we use web technologies, which may include cookies and similar technologies (e.g. web beacons, plug ins, APIs, local shared objects, pixels etc.) which we use to gather information which helps us understand how you use our website. A cookie is a small text file composed of letters and numbers that is stored on your device. A cookie may be persistent to keep your profile and preferences or may expire at the end of a browser session. We use non-persistent cookies (which expire at the end of the browser session) to determine your usage of this website.

We use four types of cookies - strictly necessary cookies, functional cookies, performance cookies, and advertising cookies:

(1) Strictly necessary cookies - Some cookies are always on when you visit our website, and you cannot turn them off unless you change your browser settings. We call these “strictly necessary cookies”. We use them to make sure our digital services work correctly and are meeting audience needs and interests.

(2) Performance cookies - These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website. They help us to know which pages are the most and least popular and see how visitors move around the website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our website and will not be able to monitor aggregate usage patterns and to personalize and otherwise operate our services.

(3) Functional cookies - These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.

(4) Targeting cookies - These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

You can set your cookie preferences using the tool available on our website and adjust your settings at any time by clicking on the cookie icon on the bottom left of the webpage.

International transfer of personal information

We maintain servers around the world and your information may be stored and processed on servers in a location which may not have equivalent privacy or data protection laws to your country. We store your information in our facilities such as Reno, Nevada for support activities as well as on Amazon Web Services located in Portland, Oregon, U.S.A and Dublin, Ireland and use other third-party service providers to facilitate your connectivity in accessing our services from multiple devices.

Please note that when you are visiting an IGT website from a country other than the country in which our servers are located, the exchange of information between your location and this website will necessarily result in a cross-border transfer of that information.

Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the protections described in this Privacy Notice. We may also use certain legal frameworks relating to international data transfer, such as the European Union’s Standard Contractual Clauses.

Retention and security

We take necessary steps to implement appropriate and effective measures to comply with this Privacy Notice and our obligations under applicable laws.

We have security measures in place to protect against unauthorized access, use, and disclosure of your personal information.

To protect the confidentiality, integrity, and availability of your personal information in our custody, we maintain physical, logical, and procedural safeguards in compliance with internationally recognized standards and other industry specific security best practices.

The retention periods for data elements within each category vary depending on the nature of the business records in which the data elements are maintained, but the retention period for our business records are set based on the following criteria and specified in our document retention policy: (1) the length of time that the record is needed for the purposes for which it was created, (2) the time the record is needed for other operational purposes, such as audits and reporting, (3) the length of time the record is needed for legal compliance, including maintenance of opt-out/in lists, legal defense and legal holds.

Your Rights

Depending on where you live, you may have the following rights. Please note that some of these rights are not absolute and only apply in certain circumstances. They may also be subject to exemptions:

• Information about our processing of your personal information: You may ask us to provide you with details on the information that has been collected about you and how such information is being processed by us.
• Access to your personal information: You may ask us to provide you with a copy of your personal information that we have.
• Opt-out, object to, or restrict, use of your personal information: If at any point you believe that your personal information is being processed unlawfully, you may contact us to stop or cease any such processing including for automated-decision making, profiling used for the purpose of making decisions which produce legal or similarly significant effects, and marketing.
• Change or correct your personal information: By accessing your profile or account, or by contacting us on the details below, you have the right to change or correct your personal information if it is inaccurate or incomplete.
• Transfer your personal information: You may request that we transfer your personal information to another organization.
• Erase your personal information: You may ask us to erase or delete all or some of your personal information. 
  
• Withdraw your consent: At any time, you may withdraw the consent that you have previously given in relation to the processing. If you withdraw your consent, then we will stop all associated processing activities and, where relevant, may close your account. Withdrawal of consent does not impact the lawfulness of processing prior to withdrawal.
• Appeal: If we deny your request to exercise your rights, you may be able to appeal to us for a review of that decision.
• Non-discrimination: You have the right not to be discriminated against for exercising one of your rights.
• Give instructions on the use of your information upon death: You or your heirs may contact us to give instructions on the use of your information upon your death.

To request access to your personal information, please complete the online form provided here. To exercise all other rights, or if you have any questions or concerns about our processing of your personal information, please contact the Privacy Office at privacy.notices@igt.com.

In addition, in some countries, you have the right to make a complaint to the applicable Data Protection Authority, however we ask that you please raise any issues with us first to allow us the opportunity to address your concerns.

Additional information for California residents

This additional information is required by the California Consumer Privacy Act, the California Privacy Rights Act, and their implementing regulations (together the “CCPA”).

IGT does not sell personal information or share it with third parties for cross-contextual behavioral targeting. Nor do we use or disclose sensitive personal information other than as necessary to perform the services or provide the goods as reasonably expected and for other purposes authorized by the CCPA.

The information required by the CCPA about the categories of personal information and sensitive personal information that we collect from California residents, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes can be found in the relevant sections of this notice above.

The CCPA provides California residents with specific privacy rights:

• The right to know what personal information and sensitive personal information we collect.
• The right to access your personal information.
• The right to correct inaccurate personal information.
• The right to request that we delete your personal information.
• The right to know what categories of personal information are sold to third parties and to opt-out of that sale.
• The right to know what categories of personal information are shared with third parties for cross-contextual behavioral targeting and to opt-out of that sharing.
• The right to limit the use and disclosure of sensitive personal information.
• The right not to be retaliated against for exercising your privacy rights.

Additional information for EEA & UK residents

EEA/UK data protection laws require us to identify specific legal bases for processing. We process your personal information on the following legal bases:

• The processing is necessary to perform a contract with you or to take steps requested by you before entering into a contract.
• The processing is in IGT’s or someone else’s legitimate interests, and these interests are not overridden by your interests or rights in the protection of your personal information. This may include processing your data for identification or prevention of fraudulent activity, internal research and analytics assessments, communicating with you, and informing you about new products and services we are offering.
• You have given your consent to the processing.
• The processing is necessary to meet a legal obligation which applies to IGT.

Your rights under the General Data Protection Regulation:

Some of the rights below are only available in certain circumstances and may be subject to exemptions. You can contact us for more details.

• The right to be informed about how we are processing your personal information.
• The right to receive a copy of your personal information.
• The right to object to our processing of personal information, including an absolute right to object to the processing of personal information for direct marketing purposes.
• The right to restrict our processing in certain circumstances.
• The right to correct inaccurate personal information.
• The right to request that we transfer your personal information to another organization in a structured, commonly used, and machine-readable format.
• The right to delete your personal information.
• The right to withdraw any consent which you previously provided to processing.
• The right to complain to the Data Protection Authority in your country.