Privacy Policy

Last Updated: January 1, 2026

This Privacy Policy (“Policy”) describes the data practices of Snoqualmie Casino & Hotel, which is wholly-owned and operated by the Snoqualmie Indian Tribe, a federally recognized sovereign Indian tribe (“Snoqualmie,” “we,” “us,” or “our”). This Policy explains how we collect, use, disclose, and protect personal information when you interact with our properties, websites, mobile apps, kiosks, and other services (collectively, the “Services”). Our Sportsbook app is governed by a separate privacy policy linked in the Sportsbook app; this Policy does not apply to Sportsbook data collection or processing.

Types of Information We Collect

We collect the following categories of personal information as needed to provide, secure, and improve our Services and to meet legal and regulatory obligations:

• Identity and verification data: name; date of birth; government-issued identification number; driver’s license number; photo ID scans; biometric identifiers used for identification and security (including facial recognition).
• Contact data: residential or mailing address; email address; phone number.
• Financial and transactional data: credit card, debit card, bank account information; transaction and purchase history; reservation and check-in details.
• Gaming and loyalty data: Crescent Club (loyalty) account number; play activity; rewards and offers; entries in drawings and promotions.
• Device and technical data: IP address; browser and device information; mobile advertising identifiers; cookies; Google Analytics, Google Tag Manager, pixels, web beacons, and other tracking technologies used by our vendors.
• Location data: approximate geolocation derived from devices or access logs, and on premises location data collected to operate and secure our facilities.
• Surveillance and security data: video and audio captured by security cameras; outputs from threat-detection systems; facial recognition or other biometric processing used for safety, age verification, loss prevention, and regulatory compliance.
• Health and wellness data (limited, for service delivery): information collected by MoonRise Spa or other wellness providers as part of appointment intake (e.g., pre-existing conditions or injuries) where necessary to provide services and obtain consents and waivers.
• Other categories: information you submit in forms, surveys, win/loss or tax requests (e.g., W-2G, 1099), or when you communicate with us.

How We Collect Information

We may collect personal information from various sources, including:

• Directly from you when you provide it in person, by phone, by email, via hard-copy or online forms, at check in, or when signing up for Crescent Club.
• Automatically when you use our websites, WiFi, apps, or connected devices through cookies and similar technologies and through vendor analytics.
• From third party service providers and partners such as payment processors, marketing platforms, analytics providers, ad networks, or others.
• From in property systems such as surveillance cameras, access control, slot and table systems, kiosks, on premise servers and from our CRM and loyalty systems.
• We may also obtain information from third parties, public records, or partners to confirm contact details, verify identity, or enrich our understanding of guest interests.

Note on ID scanning and biometrics: When you present photo ID to verify age, identity, or eligibility (for entry, check-in, or Crescent Club enrollment), we may scan and retain the ID image and its data. Facial recognition and other biometric security systems are used on our premises for safety, fraud prevention, and regulatory compliance. These operations are conducted as part of our security functions.

How We Use Personal Information

We use personal information for business, operational, and compliance purposes, including to:

• Provide, operate, and improve our Services, facilities, website, and mobile apps.
• Verify identity and age, process check ins and reservations, and perform security screening and surveillance for safety and loss prevention.
• Enroll and operate the Crescent Club loyalty program, deliver rewards and promotions, and operate drawings and sweepstakes (including promotional entry allocations and rewards).
• Process payments from you, make payments to you, refunds, and tax related requests (e.g., Form W 2G, 1099).
• Communicate with you about reservations, transactions, promotions, account activity, surveys, and customer service requests.
• Send transactional and non marketing notices required by law or necessary for the operation of the Services.
• Personalize offers and targeted marketing based on your activity, subject to your rights and choices under applicable law.
• Maintain and secure our facilities and networks; detect, investigate, and prevent fraud and other illegal activity; and comply with legal, regulatory, and tribal obligations.
• Aggregate or de identify information for analytics, product development, marketing analysis, and business intelligence.

We may combine data collected across channels and devices to provide a consistent guest experience and to operate our security and CRM systems.

Cookies, Tracking, and Advertising

We and our vendors may use cookies, web beacons, pixels, Google Analytics, Google Tag Manager, and similar technologies to collect device and usage information. Some third party advertising and analytics providers may use cookies and identifiers to deliver targeted advertising across the web. You can manage cookie preferences through your browser settings and via vendor opt out controls; disabling cookies may degrade website functionality.

How We Share Personal Information

We may disclose personal information to:

• Affiliates and subsidiaries for business operations and guest services.
• Service providers who perform services on our behalf (e.g., IT and hosting providers, payment processors, CRM and marketing platforms, analytics and advertising vendors, background check and tax processors, security and surveillance system vendors).
• Law enforcement, regulators, or government authorities when required by law, regulation, or to respond to legal process or investigations.
• Successors in interest in the event of a sale, merger, reorganization, or transfer of assets.
• Other parties as necessary to protect the safety, rights, property, or security of our guests, employees, or the public.

We do not “sell” personal data for monetary consideration. To the extent applicable law defines certain data disclosures as a “sale,” you may exercise opt out rights as described in this Policy.

Loyalty Program and Promotional Offers

When you enroll in the Crescent Club, we require government issued ID verification (photo ID scan) and date of birth; email is optional but recommended for digital communications. Enrollment enables tracking of play and rewards, targeted offers, and participation in promotional drawings.

Text Messaging and SMS

We may send operational text messages for Services rendered while you are on our premises (e.g., food/ beverage order status). Message and data rates may apply.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, as required or permitted by law, or to support business operations (including security, fraud prevention, tax and accounting obligations, and legal claims). When no longer required, we securely delete or anonymize the information.

Cross Border Transfers

Our Services are operated from the United States. By providing personal information, you consent to its transfer, storage, and processing in the United States and in other jurisdictions where our service providers operate.

Sensitive Data

Where we process “sensitive data”, as that term may be used or defined under applicable law, (including biometrics, health related information collected for spa services or safety screening, or SSN or TIN), we do so only where necessary to provide requested services, to meet legal or regulatory obligations, or to protect safety and security. You may request limits on certain uses of sensitive data as permitted by applicable law.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. While we use commercially reasonable measures, no security system is impenetrable, and we cannot guarantee absolute security.

Persons Under 21 and Minors

Pursuant to applicable law, persons under the age of 21 are not permitted to play at our casino, loiter in gaming areas or consume alcoholic beverages. As such, most of the Services are not intended for individuals under the age of 21. We do not knowingly solicit our Services to or collect personal data from persons under the age of 21. If you believe we have inadvertently collected information about a person under the age of 21, please notify us using the “Contact Us” information below.

Your Rights and Choices

Depending on your jurisdiction, you may have rights including:

• Access, correction, and portability: right to access, correct, or obtain a copy of certain personal information we hold about you.
• Deletion: right to request deletion of personal information (subject to legal and business exceptions).
• Opt out: right to opt out of certain sharing or “sale” of personal information where applicable.
• Limit use of Sensitive Data: right to limit use of sensitive data for inference or profiling in certain circumstances.

We will verify your identity before responding to privacy requests and may require reasonable supporting documentation. Requests may be denied in whole or in part where permitted by law (e.g., for compliance, fraud prevention, legal retention requirements, or safety). To exercise rights, please use the methods in the Contact Us section below.

Non Discrimination

We will not discriminate against you for exercising your privacy rights, including changes in price or quality of Services, except as permitted by applicable law.

However, we need your information, and may require your signup, for you to participate in certain rewards programs or similar marketing promotions. Deleting or refusing to provide your information may make you ineligible for such promotions.

Third Party Links and Content

Our Services may contain links or functionality that connect you to third party websites or services. This Policy does not apply to those third parties. Review any third party’s privacy policy before providing personal information.

Changes to This Policy

We may update this Policy periodically. When we make changes, we will post a revised Policy on this page and indicate the date this Policy was last revised. Any change, modification, or update to the Policy will be effective as of such date.

Exclusions

This Policy does not govern the Sportsbook app and related Sportsbook data processing; the Sportsbook is governed by a separate privacy policy available through the Sportsbook application.

Contact Us; Privacy Choices

To submit privacy requests, opt out choices, or questions about this Policy, please contact us onsite so that we may verify your identity. You may also access and delete certain of your personal information by logging into your Crescent Club account.

If you no longer wish to receive our newsletters or promotional emails, you may opt-out of receiving these communications by clicking the unsubscribe link at the bottom of the email.

You may also contact us at:

• Email: info@snocasino.com
• Address: 37500 SE North Bend Way, Snoqualmie, WA 98065

Please provide sufficient information so we can verify your identity and locate your records. We will respond to verified requests in accordance with applicable law.