PRIVACY POLICY

1. Overview & Scope

This Privacy Policy explains how Soaring Eagle Casino & Resort ("we," "our," or "the Casino") collects, utilizes, processes, and protects personal data gathered through our primary website at play-soaringeaglecasino.com, the dedicated member login gateway at login/index.html, interactive mobile gaming applications, and our in-person Eagle Access loyalty program at Mount Pleasant, Michigan.

By accessing our website, creating a registered player account, utilizing our real-money gaming software, or linking your Eagle Access rewards card, you acknowledge having read, understood, and consented to the practices described herein.

2. Information We Collect

We gather several distinct categories of information necessary to deliver compliant, secure gaming services:

• Identification Information: Full legal name, date of birth, residential address, email address, telephone number, and government identification numbers (such as SSN or passport details) collected during identity verification (KYC).
• Account Credentials: Usernames, encrypted password hashes, security challenge responses, and biometric identifiers (WebAuthn credentials used locally on user devices).
• Financial & Transaction Data: Banking credentials, credit/debit card tokens, cryptocurrency wallet identifiers, deposit records, withdrawal logs, and cumulative wagering activity.
• Technical & Geolocation Metrics: IP addresses, browser specifications, operating system versions, device hardware fingerprints, and Wi-Fi/GPS coordinates required to certify authorized gaming location.

3. How We Use Your Information

Your information is processed strictly for legitimate operational, regulatory, and customer service purposes:

• Facilitating member sign-in and real-time casino wallet synchronization across slots and live dealer streams.
• Administering welcome match bonuses, promotional free spins, reload credits, and Eagle Access Tier Points.
• Enforcing strict compliance with Michigan tribal gaming codes, the Indian Gaming Regulatory Act (IGRA), and federal Anti-Money Laundering (AML) requirements.
• Detecting, preventing, and prosecuting fraudulent activity, unauthorized account takeovers, collusion, and automated botting.
• Communicating transactional notices, balance updates, and opted-in VIP tournament alerts.

4. Automated KYC & Geolocation Verification

In accordance with legal mandates governing real-money iGaming, all players must undergo automated Know-Your-Customer (KYC) identity checks prior to placing cash bets or requesting payouts. These checks match submitted records against certified domestic identity databases.

Additionally, our platform implements automated geolocation verification. When participating in real-money slots or table games, your device transmits location signals to ensure you are physically situated within permissible gaming boundaries. Geolocation coordinates are captured solely during active gaming sessions and are never sold to external advertisers.

5. Information Sharing & Third Parties

We do not sell, rent, or trade player personal information to commercial third-party brokers. Information is disclosed only under strictly delineated circumstances:

• Certified Technology Partners: Game software providers (e.g., live dealer studios, RNG slot developers) and payment gateways operating under strict non-disclosure terms.
• Regulatory & Legal Authorities: The Saginaw Chippewa Tribal Gaming Commission, federal law enforcement agencies, or state bodies responding to lawful subpoenas, warrants, or mandatory reporting requirements.
• Player Safety Services: Licensed credit reporting bodies and self-exclusion databases to support responsible gaming and problem gambling prevention.

6. Security Architecture & Encryption

Soaring Eagle Casino deploys institutional-grade security safeguards. All data transmitted between your browser and our servers is shielded with 256-bit TLS/SSL encryption. Account passwords are encrypted utilizing salted Bcrypt hashing algorithms, preventing plain-text recovery even by authorized personnel.

Financial transactions route exclusively through tokenized PCI-DSS Level 1 payment environments. Server facilities are monitored 24/7/365 with intrusion detection systems and Cloudflare enterprise DDoS protection.

7. Your Privacy Rights

Depending on your jurisdiction, you possess specific statutory rights regarding your personal information, including:

• The right to request access to and receive copies of the personal records we maintain.
• The right to request correction of inaccurate, outdated, or incomplete details.
• The right to request closure of your account and deletion of non-mandatory historical records (subject to statutory audit retention obligations under tribal gaming law).
• The right to opt out of promotional communications at any time via your account settings.

8. Contact the Privacy & Compliance Officer

For inquiries, formal data access requests, or regulatory questions regarding this Privacy Policy, please contact our Compliance Department: