Wynn Macau Privacy and Personal Data Protection

Wynn Macau Privacy and Personal Data Protection

At Wynn Macau, we treat privacy as an important part of our casino, hotel, dining, entertainment and Wynn Rewards services. We collect and process personal information only where it is relevant to providing services, managing guest relationships, maintaining security, administering payments and membership programmes, or meeting legal and regulatory requirements. Our privacy framework covers interactions at our physical resort as well as our websites, systems, applications and Wynn Rewards services. We apply technical, organisational and access-control measures designed to protect personal information throughout its permitted retention period. Guests can also exercise applicable data rights, manage marketing preferences and withdraw consent where processing relies on consent.

Personal Information We May Collect at Wynn Macau

The information we collect depends on the service being used and the information reasonably required to provide it. A hotel reservation, Wynn Rewards membership, restaurant booking, casino-related service, payment transaction or use of our digital services can involve different categories of personal data. We may receive information directly from guests, through our security and digital systems, or from authorised partners and other legitimate sources.

Identity and Personal Details

• • Name and date of birth: used where required to identify a guest, manage services and maintain accurate records.
• • Identification-document information: details contained in passports or other identification documents may be collected where identity, age or eligibility needs to be established.
• • Demographic information: this can include age, gender, country and preferred language where relevant to the service provided.

Contact Information

• • Email address: may be used for booking confirmations, account communications, service messages and marketing where permitted.
• • Telephone number: may be used to contact guests about reservations, Wynn Rewards, events, service requests or other relevant matters.
• • Mailing address: may be collected for correspondence, billing, membership administration or other service-related purposes.

Payment and Financial Information

• • Payment-card information: payment card numbers and related billing details may be processed where required for an eligible transaction.
• • Bank-account information: bank details may be required for certain payments, transfers, credit arrangements or financial administration.
• • Billing information: transaction-related data can be retained where necessary for payment processing, accounting, audit and record-keeping purposes.

Hotel, Resort and Visit Information

• • Reservation details: we may collect booking dates, accommodation selections and other information required to manage a stay.
• • Arrival and departure information: details relating to previous or current visits may form part of the guest record.
• • Purchases and services: information about hotel, restaurant, spa, retail, entertainment and other services used during a visit may be recorded.
• • Special requests: information voluntarily supplied to fulfil specific accommodation or service requirements may be processed where necessary.

Wynn Rewards and Casino-Related Information

• • Membership information: details required to establish, administer and communicate about a Wynn Rewards account may be collected.
• • Qualifying activity: where a member uses Wynn Rewards during eligible casino or resort activity, information needed to calculate points, tier status, rewards and benefits may form part of the membership record.
• • Promotion and event activity: participation in eligible promotions, draws, tournaments or events can generate records relating to registration, qualification and reward redemption.

Preferences and Communications

• • Interests and preferences: we may retain information about guest preferences where it assists with personalising relevant services and communications.
• • Correspondence: copies of messages, enquiries, requests or complaints can be retained when a guest contacts us.
• • Marketing preferences: information about whether a guest has agreed to or opted out of particular promotional communications may be recorded.

CCTV, Images and Security Information

• • Images and audio: audio-visual information may be collected where legally permitted or required.
• • CCTV: surveillance systems are used within managed properties to support the safety of guests, staff and assets.
• • Electronic key-card data: hotel and security systems can create records associated with access to controlled areas.
• • Other security-system data: additional information can be collected through security infrastructure used across the resort.

Website, App and Device Information

• • IP address: our servers can record the IP address supplied when a page or digital service is requested.
• • Request information: server records can contain the date and time of a request, requested URL and information contained in the relevant HTTP header.
• • Website and app activity: information about interaction with our websites, systems and applications may be processed.
• • Device identity: when relevant mobile services are used, device information may be recorded to support app functionality.
• • Location information: mobile or tablet location information may be processed in connection with certain app-notification functions where applicable.

Information Received from Other Sources

• • Travel partners: information may be supplied by a travel agent or other authorised travel provider involved in a booking.
• • Airlines and other partners: relevant information may be received where a guest uses a linked service or partnership arrangement.
• • Financial partners: certain information can be received from credit-card or payment-related partners where appropriate.
• • Public databases and joint-marketing partners: information may also come from legitimate external sources where permitted.

How and Why Wynn Macau Uses Personal Data

At Wynn Macau, we use personal information to operate our land-based casino resort and provide the services a guest requests. This can include hotel accommodation, restaurant and bar services, transportation, ticketing, spa and salon services, retail, entertainment, eligible casino gaming programmes, Wynn Rewards membership and promotional events. We may also use relevant information to administer payments, bank transfers, credit arrangements and debt collection where those services apply. Records can be processed for internal and external audits, guest communications, market research, direct marketing where permitted, protection of guests and assets, regulatory record keeping and communications with competent public authorities.

Identity verification is particularly important where a service requires confirmation of a guest's identity, age, payment details, membership account or other eligibility criteria. We may therefore process names, dates of birth and information contained in identification documents where this is necessary for the relevant transaction or service. Within our land-based casino environment, identification and security information can also support legal access requirements, accurate membership administration, financial controls and compliance obligations. Providing information is voluntary in many circumstances, but declining to provide information that is necessary for a particular service may mean that we cannot complete that booking, payment, membership process or other request.

Our websites and applications can use cookies. A cookie is a small file stored on a computer, phone or tablet and can be used to support website functionality and understand how different pages are used. This information helps us make digital content easier to access and more relevant to the way visitors use our services. Browser settings can normally be used to block cookies, although disabling them may prevent certain transactions, functions or content from operating correctly.

Ordinary browsing does not by itself mean that we know a visitor's name or email address unless that person voluntarily provides identifiable information. Our servers can, however, record technical data supplied with a digital request, including an IP address, the time of the request, the requested URL and other HTTP-header information. When certain mobile or tablet functions are used, device identity and location information may also be logged to support app notifications relating to Wynn Group promotions or events. Where the relevant settings allow it, logging associated with these mobile functions can be restricted, although doing so can prevent the associated notifications from being delivered.

Personal information can also be used to communicate with guests through channels such as email, post, SMS, instant messaging, app notifications or telephone. Where direct marketing requires consent, the relevant personal information is used in accordance with that consent and the applicable privacy rules. Guests can withdraw consent or opt out of eligible marketing communications, although withdrawal of consent can affect a service where the information concerned is necessary for that service to operate.

Who Wynn Macau May Share Personal Information With

We keep personal information confidential but may disclose or transfer it where this is necessary for the purposes described in our privacy framework, where an appropriate service provider acts on our behalf, where the guest has given the required consent, or where disclosure is required by law. Data can also move between jurisdictions because Wynn Group companies and service providers operate internationally. The category of recipient and the amount of information shared depend on the service and purpose involved.

Other Wynn Group Companies

• • Personal information may be shared with other Wynn Group companies where necessary to provide services, administer membership programmes, support resort operations or perform other permitted functions.
• • Wynn Group companies receiving information are expected to maintain appropriate measures for protecting the data provided to them.

Technology and System Providers

• • Website, application and system-development providers may process information where required to build, maintain or support our digital services.
• • Platform providers and companies supplying technical or logistical support can receive data required to perform their contracted functions.
• • Data-management providers may process information on our behalf for authorised operational purposes.

Communication Providers

• • Third-party email or messaging providers may process contact information when delivering authorised communications on our behalf.
• • A contracted email provider is not permitted to use an email address for unrelated purposes simply because it has been provided to deliver a Wynn communication.

Marketing and Event Service Providers

• • Marketing companies may assist with approved campaigns, market research, events and related communications.
• • Contractors acting under our authority are restricted to using personal information for the purposes specified by us and permitted under the applicable arrangements.

Commercial Partners

• • We may enter partnerships that provide services or benefits considered relevant to guests or members.
• • Where personal information must be shared with such an independent partner and separate consent is required, the guest is informed and the relevant consent is requested.
• • Independent third parties can have their own privacy practices once information is lawfully transferred to them.

Agents, Contractors and Professional Advisers

• • Agents and contractors engaged to perform authorised functions may receive the information reasonably necessary for those functions.
• • Internal and external auditors can process relevant records as part of financial, operational or compliance audits.

Courts, Regulators and Public Authorities

• • Personal information may be disclosed where required by a valid court order, legal process or applicable law.
• • Relevant records may be supplied to public authorities that have lawful jurisdiction over Wynn Group companies or our activities.
• • Information can also be disclosed where legally appropriate to protect Wynn Group rights, property, guests, staff or other legitimate interests.

International Data Transfers

• • Information collected through our systems, websites and applications may be transferred, processed or stored outside the place where it was originally collected.
• • Depending on the relevant Wynn Group operation or service provider, processing can take place in jurisdictions where Wynn Group companies maintain operations or offices.
• • The privacy and security requirements applied to a transfer depend on the applicable legal framework and circumstances of the processing.

Wynn Macau Data Security, Retention and Privacy Rights

At Wynn Macau, personal and general information reaching our systems is stored on secure servers protected by firewalls designed to prevent unauthorised access. We use additional safeguards that include restricted electronic and physical access, measures intended to prevent unauthorised alteration or transfer of data, and encryption designed to protect authorised data transfers both in transit and at rest. Security policies form part of our information-management framework, and periodic audits of information-technology systems are carried out. Where third-party service providers process personal information for us, contractual requirements require appropriate technical and organisational security measures and restrict the purposes for which those providers can use the information.

We retain personal data only for as long as it is reasonably required for the relevant purpose and as long as retention remains legally permitted. There is therefore no single retention period that applies to every type of record: hotel records, Wynn Rewards information, payment records, security material and regulatory documentation can each be subject to different operational or legal requirements. Where there is no sufficient reason to continue retaining information, it is securely deleted, disposed of or otherwise handled in accordance with applicable law. Information may need to remain on record for longer where a legal obligation, dispute, audit, financial requirement, regulatory obligation or other legitimate justification requires continued retention.

Depending on the applicable data-protection rules and the circumstances of the request, guests can request access to personal information and may be able to ask for correction, supplementation, a copy, transfer or deletion of eligible data. Certain requests may be limited where retention or processing is required by law, necessary to provide a service, or otherwise permitted under the applicable legal framework. Reasonable administrative costs can apply to certain requests where permitted. Identity verification may also be required before personal information is disclosed or changed so that data is not provided to an unauthorised person.

Where processing is based on consent, consent may be withdrawn by contacting us. Withdrawal does not automatically invalidate processing that was lawful before consent was withdrawn, and it may prevent us from continuing to provide a service where the information is necessary for that service. Guests can also opt out of eligible direct-marketing emails or SMS communications using the instructions supplied with those messages or through the relevant privacy contact process. Data-protection requests can be directed to our Legal Department using the official Wynn Macau data-protection contact details.

No security environment can be treated as entirely risk-free, so responsible data handling also depends on guests protecting their own account credentials, devices and personal information. Wynn Rewards passwords and other account-access details should not be shared with other people, and suspected unauthorised account use should be reported promptly. Guests should also ensure that information supplied to us is accurate and that they are authorised to provide personal information relating to another person.

Wynn Macau Privacy and Player Responsibility

Privacy at Wynn Macau involves both the safeguards we apply to personal information and sensible steps guests can take when using casino, hotel, Wynn Rewards and digital services. We protect data through access controls, secure systems, contractual safeguards and defined retention practices, while guests remain responsible for providing accurate information and protecting personal account credentials. Privacy choices such as cookie settings and marketing preferences can be managed by the individual, although restricting information that is essential to a service may affect whether that service can be provided. The summary below highlights the main responsibilities on both sides.

Privacy area	Our approach	Guest role
Data col­lection	Collect data needed for the relevant service or lawful purpose.	Provide ac­curate details and only submit another person's data with auth­ority.
Identity data	Use ID details when needed for eli­gibility, service or legal checks.	Present valid details when a service law­fully re­quires them.
Account se­curity	Use access con­trols and secure system mea­sures.	Keep pass­words and member details private.
Pay­ment data	Protect card and bank data under ap­plicable se­curity con­trols.	Use trusted de­vices and report sus­picious ac­tivity promptly.
CCTV	Use sur­veil­lance where per­mitted for people and asset safety.	Follow casino and resort se­curity rules.
Cookies	Use cookies for site func­tions and usage in­formation.	Manage cookie set­tings in the browser where pre­ferred.
Mar­keting	Send eli­gible pro­motions under ap­plicable consent rules.	Use opt-out choices when com­muni­cations are no longer wanted.
Data sharing	Share data only for per­mitted pur­poses and legal re­quirements.	Review consent choices when a se­parate third-party share is pro­posed.
Re­tention	Keep data only while rea­sonably needed and legally per­mitted.	Submit an eli­gible data request if old in­formation should be re­viewed.
Data rights	Handle eli­gible access, cor­rection and de­letion re­quests.	Provide enough in­formation to verify identity and process the request.