Privacy and Cookie Policy

At Catena Media (as defined below), we process the personal data of our customers and visitors to our websites (‘you’). We make every effort to handle your personal data with care, keep it secure and comply with data protection laws.

Catena Media is engaged in performance marketing and lead generation online. Its headquarters are located in Malta, but it also has subsidiaries in several other countries.

You are only allowed to use and access our websites and services if you are over 21 (or the age of legal consent per the laws of any jurisdiction – whichever is higher).

HOW THIS POLICY WORKS

The purpose of this policy is to explain when, why and how we process information which may relate to you (‘personal data’). It also provides important information on your statutory rights. This policy is not intended to override the terms of any contract you have with us or to override any rights that you may have under data protection laws.

Click on a topic in the list below to find out more about individual topics in more detail by following the various links. We have labelled sections of the Policy to make it easy for you to navigate to the information most relevant to you.

Contents

• Who is responsible for looking after your personal data?
• What personal data do we process?
• What do we use your personal data for and when do we process your personal data?
• Who do we share your personal data with?
• International Transfers
• Direct marketing
• How long do we keep your personal data?
• What are your rights?
• Notice for California Residents
• ANNEX A – COOKIE POLICY
• We use Cookies
• What are Cookies?
• Your options
• Categories of cookies
• Technical necessity
• Storage duration
• Cookie providers
• Use of cookies for Web analytics and reach measurement
• Changes to the policy

Who is responsible for looking after your personal data?

Catena Operations Limited (‘Catena Media”, “we’, ‘us’), Quantum Place, Triq Ix Xatt Ta Xbiex, Gzira, GZR 1338, Malta is principally responsible for looking after your personal data (your ‘Data Controller’). The Data Controller is the company that determines the means and purposes of processing of personal data.

You should be aware that although we are principally responsible for looking after your personal data, information may be held in databases that can be accessed by other companies. When accessing your personal data, all companies will comply with the standards set out in this Policy. See also Section 4 below.

Catena Media is a group of companies with subsidiaries in several countries, for example in the European Union, the United Kingdom, and the USA (“Catena Media Group”). Catena Media is based in the European Union. However, if you are a resident of California, you may have additional rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). See Section 9 for more information.

What personal data do we process?

We may process the following personal data about you:

Account information:

• Name
• Date and place of birth
• Address
• Email address
• Phone number
• Username(s)
• Date of registration
• Password
• Gender
• Age
• Occupation

Content that you submit: posts, comments, personal preferences, opinions, complaints, chats

Other information:

• IP address
• Location data
• Website usage
• Cookie and other online identifiers (read more in our Cookie Policy)

You may choose to provide other information directly to us or we may require other information from you. For example, we may collect other information when you participate in some of our offers or competitions or when you use the forum, if we make one available. We may also collect other information should you decide to get in touch with us or connect with us through social media or another third-party application (your social media service provider or third-party application may allow you to share information with us. If you choose to share, your social media provider will generally tell you which information will be shared).

We do not collect personal data on people under the age of 21 (or the age of legal consent per the laws of any jurisdiction, whichever is higher). If personal data on minors is collected without our knowledge, please contact us at the address indicated in Section 8 below.

What do we use your personal data for and when do we process your personal data?

The Data Controller will collect information from you directly when you use our services or visit our websites.

We use your personal data to:

• create and manage your account and subscriptions;
• provide, maintain, enhance and personalize the services that you subscribed to;
• meet or exercise any of our legal obligations or rights;
• send you service information about your account and subscriptions. For example, we will send information about – or to make you aware of any changes to – the services that you subscribed to;
• if you gave your permission, send direct marketing messages and other types of promotional communication, for example by email, SMS, social media (e.g. on Facebook, Telegram, WhatsApp) regarding products or services offered by Catena Media Group and its advertising partners (as defined in Section 4 below). You can unsubscribe at any time. See also Section 6 for more information on direct marketing;
• improve our marketing communications, we may use a similar technology to cookies to confirm whether you have opened a marketing email or clicked on a link in the email;
• otherwise communicate with you and respond to your enquiries, for example via our customer support;
• analyze information in our systems and databases to improve the way we run our business and websites according to user preferences, to provide a better service and user experience;
• personalize, customize, target and improve the content delivered to you based on your preferences and the data we collect. Data you provide when completing forms (e.g., via pop-ups powered by OptinMonster) may also be linked to your cookie data to personalize future content and communications. We may also use data collected via cookies (if you have consented to them) and your interaction with marketing emails (e.g., whether you opened or clicked) to personalize the content and timing of the emails we send you. This profiling helps us tailor communication based on your likely interests, without producing legal or similarly significant effects. You can object to profiling at any time by contacting us, and we will stop using your data for segmentation unless we can demonstrate compelling legitimate grounds. The use of cookies for personalized marketing is based on your consent, which you may withdraw at any time by adjusting your preferences through our cookie settings or by contacting us;
• improve and target advertisements and content that you receive from us and our advertising partners;
• do audience segmentation and media campaigns;
• register you for a chat forum or community, if we make one available, where you can comment;
• if we make one available, check if you are eligible to claim our bonuses and offers;
• if we make one available, conduct contests, surveys and competitions;
• understand, diagnose, troubleshoot and fix issues with our services;
• meet or exercise any of our legal obligations or rights.

We will only process your personal data for the purposes set out in this Section 3 and where we are satisfied that:

• you have provided your consent to us using the data in that way, for example when you have requested or consented to receive direct marketing from us; or
• our use of your personal data is necessary to support ‘legitimate interests’ that we have as a business (for example, so that you can receive certain communications from us, to analyze and share the underlying personal data collected via cookies for analytics and advertising purposes, to improve our products or marketing communications or to carry out analytics across our data sets, or to respond to your enquiries via our customer support service, if we make one available), in a way that is proportionate and respects your privacy.

Where we use profiling to personalize our communications (including analyzing your interaction with our website or emails), you have the right to object to this processing at any time by contacting us (see Section 8). This profiling does not produce legal or similarly significant effects. For email tracking and website-based segmentation, we rely on your prior consent to tracking cookies. You can manage this consent through our cookie settings or banner. For more details on our use of cookies and tracking technologies, including how to manage your preferences, please refer to our Cookie Policy.

Who do we share your personal data with?

We work with many third parties to help manage our business and deliver services. From time to time, these third parties may require access to your personal data:

• mailing and SMS application providers, which process personal data on our behalf as data processors;
• plugin providers and hosts, which process personal data on our behalf as data processors;
• marketing automation platforms such as Customer.io, which we use to trigger communications based on behavioral data. These platforms act on our behalf and are subject to appropriate contractual safeguards;
• form and lead capture providers (e.g., OptinMonster), which we use to collect your details when you sign up for newsletters or offers. These platforms act on our behalf and transmit your data securely to our internal systems and marketing automation tools;
• chatbot platforms and providers, which process personal data on our behalf as data processors;
• other service providers (e.g., cloud services providers, hosting providers, authentication providers, etc.), which process personal data on our behalf as data processors;
• analytics, tracking, and cookies (and similar technologies) service providers, who also process personal data for their own purposes as Data Controllers. Please refer to our Cookie Policy if you would like to know more about how we use cookies and to identify how you may prevent these providers from accessing your personal data;
• advertising partners (e.g., ad networks such as third-party ad servers, ad agencies, ad technology suppliers and research firms, affiliate links partners) who also process personal data for their own purposes as Data Controllers. These are identified through our cookie consent management platform. Please read their privacy policies to find out how they collect and process your personal data;
• third-party applications or social media services (for example Facebook or Telegram Messenger, WhatsApp messaging), which also process personal data for their own purposes as Data Controllers. These may be integrated with the site in various ways (for example, we may integrate social media messaging or chatbots on our site, use social media accounts or groups that allow you to interact with us and the site, or send you various communications in other ways, which will involve us collecting some of your personal data, or the social media provider or third-party application receiving some of your information (see more in Section 1 above);
• our subsidiaries in the Catena Media Group, located inside or outside the EU/EEA, for internal administrative and marketing purposes. Personal data transfers will be subject to Catena Media intra-group data transfer agreements, on the basis of our legitimate interest and your consent when transferred to another Catena Media Group subsidiary for its own marketing purposes;
• law enforcement and data protection authorities, if we are under a duty to disclose to and comply with a legal obligation or protect our interests or security;
• in the event that we sell, buy or reorganize any business or assets, or if our assets are acquired by a third party, including prospective sellers or buyers.

International Transfers

International Transfers mean that personal data is transferred to a country outside the European Union.

As set out in Section 4 above, we may grant third parties who may be located outside the European Union access to your personal data. In such instances, we shall ensure that the transfer of your personal data is carried out in accordance with applicable data protection laws and, in particular, that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the EU Commission.

We may also disclose your personal data if we receive a legal or regulatory request from a foreign law enforcement body outside the European Union.

We will always take steps to ensure that any international transfer of information is managed to protect your rights and interests. Any requests for information that we receive from law enforcement or regulators will be carefully checked before personal data is disclosed.

You have the right to ask us for more information about the safeguards we have put in place, as mentioned above. For further information, contact us (see Section 8).

Direct marketing

We may use your personal data to send you direct marketing communications regarding products and services offered by the Catena Media Group and its advertising partners, for example in relation to online casino and sports betting. This may be in the form of emails, SMS, WhatsApp, Facebook or Telegram messenger, or targeted online advertisements. By subscribing to our marketing communications, you agree to receive promotional material from this website and from Catena Media associated brands, including but not limited to PlayUSA, Bonus.com, Legal Sports Report, Lineups, Gaming Today, PlayMichigan, PlayNJ, PlayPennsylvania, PlayCA, PlayFL, PlayNY, and PlayTexas.

Where you have subscribed to receive marketing communications, we may use marketing automation platforms (e.g., Customer.io) to create behavioral segments and trigger automated campaigns based on your interactions with our website or emails.

We may also use tracking technologies (such as tracking pixels) in our marketing emails to determine whether emails are opened, or links are clicked. This helps us personalize follow-up content, improve relevance, and measure engagement. This tracking is only used if you have provided consent.

The use and processing of your personal data for the purpose of sending you electronic marketing messages will be based on your consent to receive such messages. When permitted by law, it will be based on our legitimate interest (see Section 3 above). Provided that we have received your consent, we will use third parties to help us to process your personal data for marketing purposes (see Section 4 above).

You retain the right to unsubscribe from any further electronic marketing communications at any time after giving us your consent to send such messages. You can use the opt-out link included in all direct electronic marketing communications or contact us (see Section 8).

We take steps to limit direct marketing to a reasonable and proportionate level and to send you communications that we believe may be of interest or relevance to you, based on the information we have about you.

From time to time, Catena Media may restructure or consolidate its websites, services, or communication channels across its group brands. If this involves transferring a newsletter subscription or other marketing communication from one brand to another (for example, due to a site closure or consolidation), we will notify you in advance and give you the opportunity to opt out. This is done in line with Catena Media’s legitimate interest in ensuring service continuity and providing users with consistent and relevant content. Your data will continue to be processed in accordance with this policy and applicable data protection laws.

For more information on our use of cookies and tracking technologies, including how to manage your preferences, please refer to our Cookie Policy.

How long do we keep your personal data?

We will retain your personal data for as long as reasonably necessary for the purposes listed in Section 3 of this Policy.

In some circumstances, we keep your personal data for a certain period of time in order to meet legal, tax or accounting requirements for example. Otherwise, we keep it for as long as we have a contractual obligation with you (e.g., if you are a registered user).

In terms of our marketing and targeting activities, we will collect and process your data until you have withdrawn your consent for collection. See also Section 8 below.

We maintain a data retention policy for personal data in our care. Where your personal data is no longer required, we will ensure that it is either securely deleted or made anonymous.

What are your rights?

You have a number of rights in relation to your personal data. More information on each of these rights can be found by referring to the table set out further below.

To exercise your rights, you may contact us by sending an email to privacy@catenamedia.com or writing to Catena Media at the address set out in Section 1 above.

Please note the following if you wish to exercise your rights:

Access

You can ask us to:

• confirm whether we are processing your personal data;
• give you a copy of that data;
• provide you with other information on your personal data, for example, what data we have, what we use it for, who we disclose it to, whether we transfer it outside the EU and how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your data from, and whether we have carried out any Automated Decision Making or Profiling, to the extent that information has not already been provided to you in this Policy.

Rectification

You can ask us to rectify inaccurate personal data. We may seek to verify the accuracy of the data before rectifying it.

Erasure

You can ask us to erase your personal data but only where:

• it is no longer required for the purposes for which it was collected; or
• you have withdrawn your consent (where processing was based on consent); or
• following a successful right to object (see ‘Objection’ below); or
• it has been processed unlawfully; or
• to comply with a legal obligation.

We are not required to comply with your request to erase your personal data if the processing of your personal data is necessary:

• for compliance with a legal obligation; or
• for the establishment, exercise or defense of legal claims.

Restriction

You can ask us to restrict (i.e., keep but not use) your personal data but only where:

• its accuracy is contested (see Rectification), to allow us to verify its accuracy; or
• the processing is unlawful but you do not want it to be erased; or
• it is no longer required for the purposes for which it was collected but we still need it to establish, exercise or defend legal claims; or
• you have exercised the right to object, and verification of overriding grounds is pending.

Portability

You can ask us to provide your personal data to you in a structured, commonly used, machine-readable format or you can ask to have it ‘ported’ directly to another Data Controller – but in each case, only where:

• the processing is based on your consent or on the performance of a contract with you; and
• the processing is carried out by automated means.

Objection

You can object to any processing of your personal data which has our ‘legitimate interests’ as its legal basis, if you believe that your fundamental rights and freedoms outweigh our legitimate interests.

We have an opportunity to demonstrate that we have compelling legitimate interests that override your rights and freedoms.

International Transfers

You can ask to obtain a copy of – or reference to – the safeguards under which your personal data is transferred outside of the European Economic Area.

We may redact data transfer agreements or related documents (i.e., obscure certain information contained within these documents) for commercial sensitivity reasons.

Supervisory Authority

You have a right to lodge a complaint with the responsible local supervisory authority about our processing of your personal data.

We kindly ask that you attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

Notice for California Residents

If you are a resident of California, you have additional rights under the CCPA, as amended by the CPRA. These include:

• The right to know what categories of personal information we collect and how we use them;
• The right to opt out of the sale or sharing of your personal information;
• The right to limit the use and disclosure of sensitive personal information;
• The right not to be discriminated against for exercising these rights.

We do not sell your personal information for monetary consideration. However, we may share your data with advertising or analytics partners for targeted advertising purposes, which may be considered “sharing” under California law.

You may opt out by clicking the “Do Not Sell or Share My Personal Information” link on our website or by contacting us at privacy@catenamedia.com.

July 2025

ANNEX A – COOKIE POLICY

We use Cookies

To remember your preferences, provide you with a complete range of functions on our website, and make our website more enjoyable and convenient to use, we use “cookies.”

What are Cookies?

When you visit the website, a small file or information known as a cookie, pixel or similar technology is saved on your computer or device. This means the website can remember your preferences (such as login, language, font size and other display settings) and actions over a period of time, so you don’t have to enter them again whenever you return to the site or move from one page to another.

Your options

We will only use non-essential cookies (e.g., analytics, advertising, personalization) if you provide your prior consent. You can adjust or withdraw your cookie preferences at any time through our cookie banner or settings.

If you are a California resident, you may opt out of the use of cookies that result in the “sharing” of your personal information under California law. You can do this via our “Do Not Sell or Share My Personal Information” link or by using our cookie preference tool.

In general, you can view our website without cookies, but certain parts may be slower to navigate or may not work properly.

At any time, you can go to the system settings of your browser and delete stored cookies or, if you do not want cookies to be stored on your computer or device, deactivate the relevant option in the system settings of your browser.

More information on how to delete or deactivate cookies is available here: https://www.aboutcookies.org/cookie-faq/. However, please bear in mind that rejecting any cookies may restrict the functionality of our offerings.

Categories of cookies

We use cookies for different purposes and functions. Some cookies are:

• necessary in technical terms (technical necessity)
• stored and used for a certain period of time (storage duration)
• placed and stored by us or a third party (cookie provider)

Technical necessity

Cookies that are technically:

Necessary: Unless you have set your browser to reject cookies, these cookies are automatically placed on your computer or device when you access the website or a certain function. We use these cookies because they are strictly necessary for the website and its functions to operate properly.

Not necessary: Cookies placed on your computer or device to improve the performance and convenience of our website or retain your settings are not strictly necessary. We also use cookies that are not technically necessary in order to obtain information on how frequently certain areas of our website are used, so that we can adapt to suit your needs and requirements on a more targeted basis.

Storage duration

Session cookies: Some cookies are erased or become invalid as soon as you leave our website or your current session expires. These so-called “session cookies” are only needed for the duration of your website session and are used, for example, to retain certain information during your session.

Permanent cookies: Some cookies are stored for a longer period so you can access webpages faster or with greater convenience, for example so you do not need to set certain options such as your chosen language again. For example, this allows our website to recognize you when you access it again at a later time and access saved settings. As a result, Permanent cookies are automatically deleted after a predefined period.

Flow cookies: These cookies are placed on your computer or device when you start navigating the website and deleted when you leave the website. They are used for communication between internal servers within our company group. Flow cookies do not allow us to make any conclusions about the relevant customer or user, but are given a unique identification number.

Cookie providers

Provider cookies: These are cookies placed by us or the operator of our website, who we have commissioned.

Third-party cookies: Other organizations or websites, for example Web analytics tools, store and use “Third-party cookies”. External providers may also use cookies to show advertising or to integrate social networking content, such as social plugins. Please see below in this cookie policy for more information on Web analytics tools and reach measurement. We may also use lead capture tools, such as OptinMonster, which may place cookies or similar technologies to support registration flows and optimize the experience of pop-ups or embedded sign-up forms. These cookies may store identifiers that help us associate form submissions with user sessions, but are only active where consent has been provided.

Use of cookies for Web analytics and reach measurement

We use Google Analytics, a Web analytics service from Google Inc. (“Google”). Google Analytics uses cookies to identify how frequently certain areas of our website are used and to identify preferences and transmits this information about your use of this website (including your truncated IP address) to a Google server in the United States and stores it there. Google will use this data to analyze your use of the website, create reports on website activity for us, and carry out further services regarding website and Internet usage. Google may also send this information to third parties where required by law or to the extent third parties process these data on behalf of Google.

If you do not want website analysis to be performed, you can deactivate Google Analytics using a browser add-on that you can download here: https://tools.google.com/dlpage/gaoptout?hl=. This add-on saves “opt-out” information on your device that can record your deactivation of Google Analytics. Please note that this “opt out” only deactivates Google Analytics for the device and browser you activated it from. You may also need to reactivate it if you delete cookies from your device.

Our most common cookies

• analytics.google.com – Google: This Cookie comes from Google. It lets our website learn information about how our users use our site, such as when and what they view, whether the user has visited before, and the websites visited prior to visiting ours. This allows us to improve our site and your experience.
• Facebook Pixel – Facebook: This Cookie is placed by Facebook. It allows our website to measure, optimize and build audiences for Facebook advertising campaigns by tracking users’ interactions with our site after viewing or clicking on a Facebook ad.
• Reddit Pixel – Reddit: This Cookie is placed by Reddit. It allows our website to track how users interact with our content after seeing or clicking on a Reddit ad. This helps us measure the effectiveness of Reddit advertising and reach users who may be interested in similar content.
• X Pixel – X/Twitter (t.co, twitter.com): These Cookies are placed by X (formerly Twitter). They help us track when users visit our website after engaging with an ad on X, and allow us to improve future ads by understanding what content performs best.
• Customer.io – Customer.io: This Cookie is placed by Customer.io. It allows us to personalize our emails and messages based on how users interact with our website and previous communications.
• OptinMonster – OptinMonster: This Cookie is placed by OptinMonster. It supports pop-ups and sign-up forms, helping us track which offers or messages users see and engage with on our site.
• app.convertflow.com – ConvertFlow: These Cookies are placed by ConvertFlow. They help us display relevant messages or forms based on your site behavior and remember what you have interacted with.
• Nexus (linkengine.io) – Catena Media: This Cookie is placed by our internal tool LinkEngine.io. It tracks which affiliate links are clicked so we can monitor performance and make sure links are working correctly.
• Bing Ads – Microsoft Bing: This Cookie is placed by Bing. It helps us understand whether users found our site through a Bing ad and lets us track the performance of our Bing advertising campaigns.
• AdWords – AdWords: AdWords is used to enable Google PPC (pay per click) campaigns.
• Double Click – Double Click: Double Click is used for advertisers and to advertise on multiple ad servers.
• Cloudflare – Cloudflare: Cloudflare cookies are used on the website to apply security settings on a per-client basis.

Changes to the cookie policy

Any changes to our cookie policy, which may occur from time to time, will be posted on this page.