Moolah Play by Rivers Casino Philadelphia Privacy Documents

Revision Date: 1/2026

Sugarhouse HSP Gaming Privacy Policy for Moolah Play by Rivers Casino Philadelphia

Thank you for reviewing the Sugarhouse HSP Gaming L.P. dba Rivers Casino Philadelphia (“OPERATOR or Rivers Casino”) Privacy Policy For Moolah Play (“OPERATOR Privacy Policy”). Operator is committed to maintaining your privacy and gaining your trust by disclosing its policies concerning your personal information. OPERATOR is hopeful after reviewing the OPERATOR Privacy Policy, you will feel your personal information is secure and will be comfortable using OPERATOR’s website at www.riversphiladelphia.moolahplay.com and any other OPERATOR website (collectively, the “Website”) or downloading and activating the Moolah Play by Rivers Casino Philadelphia mobile application (“App”), and allowing OPERATOR or its Service Providers (defined below) to review and process your Operator cashless advance (“Marker”) application and service any applicable account you may have with OPERATOR (“Services”). If you do not agree to the terms and conditions of the OPERATOR Privacy Policy, please do not use this Website, App or Services. By accessing the Website, App or Services, you confirm that you are over the age of twenty-one (21), and you agree to and will be bound by OPERATOR’s Privacy Policy.

PERSONAL INFORMATION

OPERATOR will collect the following personal information should you voluntarily submit it to OPERATOR through the Website, the App or Services (for example, by registering for an account) either directly or through a third-party that is a Service Provider of OPERATOR. OPERATOR may share this personal information as permitted by law and as stated herein. Types of personal information collected may include but are not limited to:

Your first and last name;
Your home and other physical address (which may include your business address(es));
Information that you provide to us about other people;
Your email address;
Your telephone number(s);
Your social security number;
Your date of birth;
Your social media accounts;
Your financial institution(s) information;
Your financial transaction history;
Your employment information, including number of years employed at each business and salary and financial compensation amount(s);
Other financial information;
Your past gaming activity; and
All ancillary Player Club data shared.

The information OPERATOR collects is referred to as your “Personal Information.”

While providing Services, OPERATOR also collects Personal Information from the following sources, including, but not limited to: Marker applications and other standard forms related to customer accounts, including without limitation name, address, social security number, asset information, bank account balances, and financial transactions; customer transactions and other interactions directly with OPERATOR and the Website, App or Services; and information obtained from third-parties, such as credit reporting agencies and financial institutions, when verifying Marker applications or other forms or receiving information about your Marker history. This information may also be obtained from other third-parties or institutions with which you conduct non-financial transactions.

SERVICE PROVIDERS

From time to time, OPERATOR may establish business relationships with other businesses that OPERATOR believes to be trustworthy to assist with providing services and who have confirmed that their privacy practices are consistent with OPERATOR’s specifically including but not limited to Marker Trax, LLC and its affiliates (“Service Providers”). For example, OPERATOR does and may contract with Service Providers to provide certain services, such as software providers, underwriting assistance, data storage and management, and marketing and promotions. OPERATOR provides its Service Providers with the information necessary for them to perform these services on OPERATOR’s behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your Personal Information from unauthorized access, use or disclosure. Service Providers are prohibited from using Personal Information other than as specified by OPERATOR. Since these Service Providers routinely change, it is not feasible for OPERATOR to list every Service Provider. Notwithstanding, OPERATOR specifically utilizes certain banking services provided by Service Provider, which shall be provided in strict accordance with that party’s privacy policy terms and conditions. Furthermore, by your continued use of this Website, App or Services and accepting this OPERATOR Privacy Policy you also acknowledge you have read and agree to be bound by the applicable Service Providers’ privacy policy as referenced herein and you release OPERATOR from liability relative to a Service Provider’s use of your Personal Information.

OPERATOR USE AND SHARING OF PERSONAL INFORMATION

OPERATOR does not sell, share or disclose your Personal Information to non-affiliated third-party companies other than as disclosed in the OPERATOR Privacy Policy and privacy notice posted on the website. OPERATOR restricts access to your Personal Information at OPERATOR to those members of OPERATOR who require it to provide Services to you.

OPERATOR will disclose your Personal Information in the following circumstances:

To evaluate OPERATOR Marker applications;
To communicate with financial institutions, including banks, credit unions, brokerage firms, and savings and loans;
Other third-parties as necessary to make a full financial reporting on OPERATOR Marker applications;
To communicate with OPERATOR’s Service Providers as consented to by you and otherwise allowed by law;
To communicate directly with you in connection with your specific requests;
To validate your identity;
To record your gaming-related activity;
To conduct statistical or demographic analysis;
To comply with legal and regulatory requirements;
To prevent fraud;
To satisfy contractual obligations;
To cooperate with law enforcement or other government agencies for purposes of national security, public safety, or matters of public importance when OPERATOR believes that disclosure of information is necessary or appropriate to protect the public interest; and
To provide you with products or services you have requested either directly or through a third-party that is a client of OPERATOR.

OPERATOR will also provide your Personal Information to a third-party vendor or Service Providers, which will include, but is not limited to: Marker Trax, LLC and its subsidiary, affiliates, consultants and contracted third parties (see Marker Trax’s Privacy Policy and Notice at https://www.markertrax.com/privacy-patents. Marker Trax is a technology company that assists OPERATOR with analyzing and assisting with the development of OPERATOR’s cashless advance analysis software for determining a player’s OPERATOR Marker. This information is important for OPERATOR to continue the development of its advanced analysis software.

Marker Trax, LLC’s and its subsidiary, affiliates, consultants and contracted third parties (“Marker Trax”) use of your Personal Information is subject to their respective Privacy Policies, and you hereby release OPERATOR from all liability regarding Marker Trax use of your Personal Information and hereby expressly agree to be bound by the respective Marker Trax Privacy Policy concerning its access of and use of your Personal Information.

DISCLAIMER

Marker Trax does not make any direct, indirect, manual or automated determinations regarding approval of financial transactions for you. If applicable, Marker Trax may verify application information and submitted Personal Information, apply OPERATOR criteria and return such information to OPERATOR who ultimately determines and approves all OPERATOR Markers and transactions. Marker Trax may also access your traditional consumer report through OPERATOR, to which you hereby expressly agree and consent by using the Website, App and/or Services. The name on your consumer report from a Marker related credit pull may be the OPERATOR (lender) or Marker Trax.

MOREOVER, BY PROVIDING A MOBILE TELEPHONE NUMBER TO OPERATOR, YOU ARE EXPRESSLY AUTHORIZING AND CONSENTING TO RECEIVING CALLS AND MESSAGES, INCLUDING AUTOMATED MESSAGES, AUTODIALED MESSAGES AND TEXT MESSAGES FOR ACCOUNT MANAGEMENT PURPOSES ONLY (NOT MARKETING MESSAGES), FROM OPERATOR ON THE MOBILE TELEPHONE NUMBER YOU PROVIDED. This includes the use of automated telephone calls and messages. You may revoke your consent and “opt out” of receiving messages by contacting OPERATOR at support_riversphiladelphia@moolahplay.com, during regular business hours, or by email at info@markertrax.com.

COLLECTION OF PASSIVE INFORMATION

When you visit the Website, OPERATOR will collect passive information about your visit. Passive information is any form of aggregate data, navigational data, tracking data, click-stream data, or historical data, which does not necessarily personally identify you (“Usage Data”). For example, each time you use the Website, OPERATOR automatically collects the type of web browser you use, your operating system, your internet service provider, your IP address, the pages you view, and the time and duration of your visits to the Website. OPERATOR uses this information to help OPERATOR understand how Operator players use the Website and Services, and to enhance the services OPERATOR offers.

USE OF COOKIES

OPERATOR uses “cookies” (small text files placed on your computer to identify your computer and browser) and may use anonymous identifiers (a random string of characters that is used for the same purposes as a cookie) to enhance your experience with the Website and Services. If enabled in your browser, cookies may store small amounts of data that enable OPERATOR to customize the content according to your preferences. OPERATOR may use cookies or anonymous identifiers to: (1) keep count of your return visits to the Website; (2) accumulate anonymous, aggregate, statistical information on Website usage; and (3) save your password so you don’t have to re-enter it each time you visit the Website. Cookies tell OPERATOR nothing about you personally, unless you specifically provide OPERATOR additional information. Most web browsers are initially set up to accept cookies. You may reset your web browser to refuse all cookies or to indicate when a cookie is being sent, however, certain features of the Website or Services may not work if you delete or disable cookies. Some of OPERATOR’s Service Providers may use their own cookies in connection with the services they perform on OPERATOR’s behalf, specifically including but not limited to Google analytics see this link for more information.

THIRD-PARTY WEBSITE(S)

OPERATOR Privacy Policy applies solely to the Website, App and the Services, which may contain links to third-party websites that are not owned or controlled by OPERATOR. OPERATOR has no control over, and assumes no responsibility for the content, privacy policies or practices of any third-party websites. OPERATOR will not and cannot control, prevent, censor or edit the content of any third-party websites or information. ACCESSING THIRD-PARTY WEBSITES OR CONTENT IS AT YOUR OWN RISK. You should always read the privacy policy of third-party websites before providing any information to the website, and you assume all risk by entering and using any third-party websites. BY USING THE WEBSITE, APP OR THE SERVICES, YOU SPECIFICALLY ACKNOWLEDGE AND AGREE TO RELEASE OPERATOR FROM ALL LIABILITY ARISING FROM YOUR USE OF ANY THIRD-PARTY WEBSITES.

SECURITY OF PERSONAL INFORMATION

Keeping your information secure is a priority for OPERATOR. OPERATOR restricts access to your Personal Information to those employees and agents who need the information to assist in providing the Services. OPERATOR maintains physical, electronic and procedural safeguards that comply with applicable laws to protect your Personal Information. OPERATOR trains its employees in the proper handling of your Personal Information.

Some pages of the Website may use security measures to protect against the loss, misuse or alteration of information that is transmitted through the Website. These pages use Secure Socket Layer (“SSL”) connections with at least 128-bit encryption for certain transactions and confidential data. Unfortunately, no data transmission over the Internet or any other network can be guaranteed to be one hundred percent (100%) secure. AS A RESULT, WHILE OPERATOR STRIVES TO PROTECT YOUR PERSONAL INFORMATION, OPERATOR CANNOT ENSURE OR WARRANT THE SECURITY OF ANY INFORMATION YOU TRANSMIT, AS THERE IS ALWAYS A RISK. THEREFORE, PROVIDING INFORMATION TO OPERATOR ON ITS WEBSITE (OR A CLIENT OF OPERATOR’S), IS AT YOUR OWN RISK.

RETENTION OF PERSONAL INFORMATION

OPERATOR retains Personal Information for as long as necessary in accordance with applicable state and federal laws regarding use, storage and disclosure of Personal Information, including, but not limited to, the Equal Credit Opportunity Act (“ECOA”), the Fair Credit Reporting Act, 15 U.S.C. § 1681 et. seq. (“FCRA”) and the Gramm-Leach-Bliley Act of 1999 (“GLBA”).

All Personal Information voluntarily submitted by you or provided by your accounts pursuant to the access you permit, becomes the property of OPERATOR for its limited use as provided in the OPERATOR Privacy Policy.

You agree that OPERATOR may use, retain and/or disclose such Personal Information, subject to the OPERATOR Privacy Policy, without financial consideration to you.

CHILDREN’S ONLINE PRIVACY PROTECTION

The Website, App and the Services comply with the Children’s Online Privacy Protection Act of 1998 (“COPPA”). OPERATOR does not knowingly collect personally identifiable information from children under thirteen (13) (or anyone under twenty-one (21) years of age). If OPERATOR becomes aware that OPERATOR has inadvertently received Personal Information from a child under the age of thirteen (13), OPERATOR will immediately (as soon as OPERATOR verifies the information) delete the information from OPERATOR’s servers. If you want to notify OPERATOR that it received information by a child/children under the age of thirteen (13), please do so by contacting OPERATOR at 702-847-5005 Press 2, during regular business hours, or by email at support_riversphiladelphia@moolahplay.com.

PERSONAL INFORMATION SHARED WITH OTHER OPERATOR COMPANIES AND ENTITIES

OPERATOR may share Personal Information and Usage Data with businesses controlling, controlled by or under common control with OPERATOR and as otherwise allowed by law. If OPERATOR is merged, acquired or sold or in the event of a transfer of some or all of OPERATOR’s assets, OPERATOR may disclose or transfer Personal Information and Usage Data in connection with that transaction. You will have the opportunity to opt out of any such transfer if, in OPERATOR’s discretion, the new entity plans to handle your information in a way that differs materially from the OPERATOR Privacy Policy.

COMPLIANCE WITH UNITED STATES LAW ENFORCEMENT AND LAWS

OPERATOR cooperates with government and law enforcement officials to enforce and comply with applicable law, including the applicable state gaming commissions. OPERATOR may disclose Personal Information and any other information about you to government or law enforcement officials if, in OPERATOR’s discretion, it believes it is necessary or appropriate under applicable laws and regulations, in order to respond to legal requests (including court orders and subpoenas), to protect the safety, property or rights of OPERATOR or of any third-party, to prevent or stop any illegal, unethical or legally actionable activity or to comply with the law.

PERSONAL INFORMATION STORED IN THE UNITED STATES

Please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. If you are located outside of the United States, please be advised that OPERATOR processes and stores all information in the United States or if applicable on tribal land of the OPERATOR. The laws in the United States may not be as protective of your privacy as those in your location. By using the Website, App or Services, you agree that the collection, use, transfer, and disclosure of your Personal Information and communications will be governed by the applicable laws in the United States.

RIGHT TO ACCESS AND CORRECT INFORMATION

You may contact OPERATOR with any questions you may have about your Personal Information using the information below. If you think the Personal Information that OPERATOR has in its files is incomplete or incorrect, you may request that OPERATOR complete or correct the disputed Personal Information. You may also have additional rights to your data such as a right to know, delete, opt out or limit data. OPERATOR will review your request and if required by applicable law will either correct your information, take the action requested or explain why OPERATOR made no changes. OPERATOR uses your data as a financial institution processing an application for credit and that data is protected by the GLBA already, therefore you may not have additional rights under your state’s privacy laws. To exercise these rights, please send OPERATOR a written request by mail or email as stated below. Please include your name, address, account number, daytime phone number, and the Personal Information that you would like access to or that you believe needs correction. OPERATOR may charge a small fee to collect, copy, and send the Personal Information to you. To protect your Personal Information, OPERATOR may ask you to verify your identity and to provide other details to respond to your request.

Sugarhouse HSP Gaming d/b/a Rivers Casino Philadelphia

Address: 1001 N. Delaware Avenue, Philadelphia, PA 19125

Email: support_riversphiladelphia@moolahplay.com

Telephone: 702-847-5005 Press 2

If you experience difficulties accessing or changing your Personal Information or have questions or concerns regarding OPERATOR Privacy Policy, please e-mail or call OPERATOR at the above telephone or email address.

RESPONSIBLE GAMING

OPERATOR encourages you to gamble responsibly. OPERATOR strongly supports and promotes responsible gaming practices. If you or someone you know has a gambling problem, OPERATOR encourages you to gamble responsibly. For problem gambling information and assistance, call the 24-hour confidential Problem Gamblers Help Line at 1-800-522-4700, or visit www.WhenTheFunStops.org. Please also see other organizations below for help.

National Problem Gambling Helpline

Call: 1-800-GAMBLER
Text: 800GAM
Chat: www.1800gamblerchat.org

Gamblers Anonymous
https://gamblersanonymous.org/

Delaware Valley Intergroup Hotline Number: 855-2CALLGA (855-222-5542)
Pittsburgh Hotline Number: 855-2CALLGA (855-222-5542)

Gam-Anon International

Western Pennsylvania Hotline Number: 412-281-7484

Philadelphia Hotline Number: (888) 213-3945
www.gam-anon.org

National Center for Responsible Gaming (NCRG)

1-800-522-4700

www.ncrg.org

MOOLAH PLAY BY RIVERS CASINO PHILADELPHIA® PRIVACY POLICY CHANGES

From time to time, OPERATOR may change this Privacy Policy. If OPERATOR decides to change this Privacy Policy, OPERATOR will inform you by posting the revised Privacy Policy on the Website. Those changes will go into effect on the Revision Date shown in the revised OPERATOR Privacy Policy. Your continued use of the Website, App or Services constitutes your consent to the revised OPERATOR Privacy Policy, when applicable.

Privacy Notice Rev 1/2026

FACTS	What does Sugarhouse HSP Gaming dba Rivers Casino Philadelphia for Moolah Play by Rivers Casino Philadelphia (“Rivers”) do with your personal information?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income Account balances and payment history Credit history and credit scores Apply for a loan, marker or cashless advance and give us your income information Provide account information Give us your contact information sharing for affiliates’ everyday business purposes—information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you Our nonaffiliates include financial and nonfinancial companies such as technology companies, such as Marker Trax, LLC, and their affiliates and with other nonaffiliates. Rivers doesn’t jointly market. When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Rivers chooses to share; and whether you can limit this sharing.
Reasons we can share your personal information		Does Rivers share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus		YES	NO
For our marketing purposes— to offer our products and services to you		YES	NO
For joint marketing with other financial companies		NO	We don’t share
For our affiliates’ everyday business purposes— information about your transactions and experiences		YES	NO
For our affiliates’ everyday business purposes— information about your creditworthiness		NO	We don’t share
For our affiliates to market to you		YES	YES
For nonaffiliates to market to you		YES	YES
To limit our sharing	Call 702-847-5005 Press 2, or visit us online at www.riversphiladelphia.moolahplay.com Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.
Questions?	Call toll-free 702-847-5005 Press 2 or go to www.riversphiladelphia.moolahplay.com

Page 2

Who we are
Who is providing this notice?		Sugarhouse HSP Gaming L.P. dba Rivers Casino For Moolah Play by Rivers Casino Philadelphia (“Rivers”) is a Delaware limited partnership.
What we do
How does Rivers protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does Rivers collect my personal information?	We collect your personal information, for example, when you We also collect your personal information from others, such as credit bureaus, affiliates or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only State laws and individual companies may give you additional rights to limit sharing. [See below for more rights under state law.]
What happens when I limit sharing for an account I hold jointly with someone else?	We don’t offer joint accounts
Definitions
Affiliates		Companies related by common ownership or control. They can be financial and nonfinancial companies. Our affiliates include financial and nonfinancial companies such as Rivers’ companies and other affiliates.
Nonaffiliates		Companies not related by common ownership or control. They can be financial and nonfinancial companies.
Joint marketing		A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
Other important information
For Vermont Residents only: We will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.