Privacy Policy

Privacy Policy

SquareKick LLC, a TX limited liability company, operates the SquareKick platform accessible via https://squarekick.org and through our mobile applications.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, contest rooms, Skill Card features, wallet features, payout setup features, notifications, live chat/support features, and related mobile app functionality.

1. Information We Collect

• Account Information: name, username, email address, login details, and records of required policy consent at signup
• Contest Participation Information: room entries, square selections, half-square or full-square participation, Skill Card-1 and Skill Card-2 answers, tiebreaker answers, square/digit scoring records, matchup activity, results, notifications, and related support or audit records
• Financial Information: transaction details related to deposits, entry payments, winner awards, refunds, withdrawals, payout setup status, and tax-reporting status (processed through trusted payment and tax services such as Stripe; we do not store full payment card details or raw taxpayer identification numbers inside standard SquareKick app records)
• Device and Usage Information: IP address, browser type, device type, operating system, app version, basic activity records, and similar information used to operate and secure the platform
• Mobile and Notification Data: app usage information and, where available, notification information used to deliver account and contest-related alerts
• Location and Eligibility Data: Current Physical Location State declarations, secure location-verification signals, browser/device permission signals, trusted location-verification decisions when configured, state-level eligibility results, VPN/proxy/spoofing risk flags, verification reference IDs, audit records, and related checkout decision logs

2. How We Use Your Information

We use your information to:

• Create and manage user accounts
• Support participation in matchups, rooms, board selection, reservations, checkout, two-stage Skill Card submission, score prediction, combined-score ranking, scoring/tiebreaker calculations, and results display
• Process payments, deposits, winner awards, refunds, withdrawals, payout account setup workflows, tax-reporting status checks, and year-end 1099-MISC review records
• Provide customer support and resolve account, scoring, payout, or transaction issues
• Send notifications related to account activity, contest participation, shuffle or room updates, winner awards, and payout status
• Maintain platform security, investigate fraud or abuse, enforce our terms and rules, conduct compliance review, monitor for suspicious activity, and keep service records
• Verify that paid room entry starts only when the user is physically located in an allowed state at checkout time, and keep audit records for allowed or blocked location decisions

3. Payments, Payouts, Tax Reporting, and Third-Party Services

Payments, payout setup, and 1099-MISC tax-reporting setup may be processed through trusted third-party services such as Stripe. Those services may collect, verify, and process payment, payout, identity, taxpayer, or tax-reporting information under their own terms and privacy policies.

SquareKick is configured for U.S. skill-based contest award reporting using Form 1099-MISC only. The platform tax setup is not configured for W-2G reporting/withholding logic.

SquareKick may track gross winner awards by calendar year, maintain internal 1099-MISC review records, and use payout/tax status information to support tax reporting, professional review, dispute handling, fraud prevention, and compliance obligations.

SquareKick may delay or hold winner payouts, wallet award credits, withdrawals, or related payout activity when required payout or tax-reporting information is missing, incomplete, expired, unverifiable, or otherwise requires review.

Winners remain responsible for reporting award income on their own tax returns and paying any taxes owed. SquareKick does not store full payment card details, raw Social Security numbers, or full taxpayer identification numbers inside standard SquareKick app records.

We may also use secure infrastructure, analytics, messaging, and support services to operate the platform and its mobile features.

When configured, SquareKick may use a trusted location-verification service to verify a user’s physical location, detect VPN/proxy/spoofing risks, and return an auditable decision before paid checkout begins.

4. Contest Rooms, Contests, and Compliance Restrictions

SquareKick is a skill-predominant sports knowledge and matchup-analysis contest platform. In Skill Card rooms, Skill Card performance is the primary determinant and square/digit position is a limited secondary scoring component under the room’s locked configuration. It does not operate as a sportsbook, house-banked casino, slot machine, lottery, or house-banked product.

Certain contests, contest rooms, square selections, payout features, winner awards, withdrawals, promotional contest features, or similar platform functionality may be subject to state or local eligibility restrictions.

SquareKick may restrict, delay, decline, review, or reverse participation, payments, payouts, withdrawals, or account activity where required by law, platform rules, payment or payout service requirements, fraud monitoring, AML-related review, dispute handling, or compliance review.

Paid-entry eligibility is based on the user’s physical location state at the time they start room-entry checkout. Residency, billing address, tax address, profile state, and payout state do not determine paid-entry eligibility. If eligibility cannot be verified, checkout is blocked before payment confirmation.

5. Data Sharing

We do not sell your personal data. We may share data only:

• With payment, payout, or support services as needed to complete transactions and operate the platform
• With trusted services supporting notifications, analytics, fraud prevention, customer support, or platform operations
• When required by law, legal process, regulation, compliance review, dispute resolution, or to protect rights, security, users, or the platform

6. Cookies, Analytics, Tracking, and Do Not Track

We may use cookies, session tools, pixels, analytics tools, mobile analytics tools, Meta Pixel, Google Analytics, and similar browser or app storage technologies to keep you signed in, preserve preferences, support security features, measure platform performance, improve the user experience, and understand how users interact with the website and mobile app.

Some browsers offer a Do Not Track signal. Because there is no consistent industry standard for responding to Do Not Track signals, SquareKick does not currently change its data practices in response to those signals. You may still control cookies and tracking choices through your browser, device, and available privacy settings.

7. Data Security and Retention

We implement reasonable security measures, including secure connections and operational safeguards, to protect your information. Payment and payout data is handled securely through trusted payment and payout services.

We retain information for as long as reasonably necessary to operate the platform, complete transactions, maintain records, enforce our policies, comply with law, and resolve disputes.

We may retain account, transaction, and fraud prevention records after account closure where required for legal, regulatory, tax, anti-money laundering, fraud prevention, or dispute resolution purposes.

8. Texas Consumer Privacy Notice

This Texas Consumer Privacy Notice is provided for Texas residents and supplements the rest of this Privacy Policy. This notice addresses the Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq., the Texas Identity Theft Enforcement and Protection Act, Tex. Bus. & Com. Code § 521.001 et seq., and related Texas privacy, security, geolocation, biometric, automated-profiling, consumer-rights, and data-security requirements that may apply to SquareKick.

Texas consumer privacy rights. Subject to applicable law, verification, and exceptions, Texas residents may request confirmation of whether SquareKick is processing their personal data; access to personal data maintained by SquareKick; correction of inaccurate personal data; deletion of personal data; and a portable digital copy of personal data, game-room logs, Skill Card records, matchmaking or room-participation records, transaction records, payout records, support records, and other account records that SquareKick can reasonably provide.

Sensitive data opt-in consent. Where Texas law applies, SquareKick will not intentionally process sensitive data without the affirmative consent required by applicable law. Sensitive data may include precise geolocation used to verify legal boundaries and restricted-jurisdiction compliance, biometric data if a supported identity or account-security workflow requires it, and other data treated as sensitive by applicable law. Where Face ID, Touch ID, or similar biometric authentication is handled locally by a user’s device or operating system, SquareKick does not intend to receive or store raw biometric templates in standard app records.

Geolocation, biometric, and eligibility data. SquareKick may collect or process location signals, IP addresses, GPS or browser-location permission signals, device signals, payment or payout location indicators, identity-verification data, and fraud-prevention data only as reasonably necessary and proportionate to operate the platform, verify eligibility, enforce restricted-jurisdiction rules, prevent fraud, protect accounts, process payments and payouts, comply with tax and legal obligations, and administer contest rooms requested by the user.

Automated profiling and targeted-advertising opt-out. SquareKick may use automated fraud-detection, account-security, eligibility, location, payment, payout, room-integrity, or data-matching tools to protect the platform, pair or manage players in rooms, detect abuse, or enforce rules. Texas residents may contact SquareKick to opt out of profiling or targeted advertising where applicable law requires an opt-out right. If SquareKick denies a privacy request or appeal, the user may have the right to submit an escalation complaint to the Office of the Texas Attorney General.

Financial-data safeguards and breach notice. Because SquareKick may handle user names, payment records, payout records, debit card or bank-account tokens handled by payment services, transaction histories, and identity or tax-related verification status, SquareKick uses reasonable administrative, technical, and organizational safeguards, including encryption and trusted payment/payout trusted services where appropriate. Under Texas law, any unauthorized security breach exposing unencrypted Texas resident records will be reviewed and, where legally required, affected residents will be notified within the applicable legal timeframe, including strictly within 60 days of discovery where required by the Texas Identity Theft Enforcement and Protection Act.

Minor-data safeguards. SquareKick is for users aged 18 or older. SquareKick does not knowingly allow minors to enter paid rooms, deposit funds, receive winner awards, or maintain paid prize accounts. Where Texas law, the TDPSA, COPPA, or other applicable law imposes additional requirements for known children or minors, SquareKick will restrict participation, suspend accounts, delete or limit data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, dispute, tax, payment, payout, or compliance purposes.

Texas TDPSA categories, purposes, disclosures, and opt-outs. Texas residents are given notice that SquareKick may process identifiers and account contact details; payment, wallet, payout, tax, and transaction records; contest-room, Skill Card, square-selection, scoring, winner-award, refund, chargeback, and support records; device, browser, IP, cookie, analytics, diagnostic, fraud-prevention, and security records; and location or identity-verification records where needed for eligibility, restricted-jurisdiction, payment, payout, tax, fraud-prevention, or platform-security purposes. SquareKick uses these records only for the purposes described in this Privacy Policy and does not sell personal data for monetary or other valuable consideration. Texas residents may opt out of any sale of personal data, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects where those rights apply under the Texas Data Privacy and Security Act.

Children’s privacy under Texas law. SquareKick is designed exclusively for adults and does not knowingly collect, retain, sell, share, or use personal data from individuals under 18. SquareKick does not knowingly provide targeted advertising to minors or knowingly collect precise geolocation from minors. If SquareKick discovers that a minor has bypassed age controls or provided personal data, SquareKick may deactivate the account, block paid participation, delete or limit the minor’s data where legally permitted, and retain only records reasonably necessary for legal, security, fraud-prevention, tax, payment, payout, chargeback, or dispute purposes, including where the Texas SCOPE Act or other child-safety laws apply.

Request methods and appeals. Texas privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, targeted-advertising, automated-decision, opt-out, appeal, and breach-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding. If SquareKick denies a Texas privacy request, the user may appeal through the same support channels and may contact the Office of the Texas Attorney General where applicable law provides an escalation path.

9. Virginia Consumer Privacy Notice

This Virginia Consumer Privacy Notice is provided for Virginia residents and supplements the rest of this Privacy Policy. It addresses privacy, data protection, consumer privacy rights, data security, breach notification, sensitive data, precise geolocation, account security, payment and payout records, tax-support records, identity-verification data, fraud-prevention data, and minor-safety practices that may apply to SquareKick, including the Virginia Consumer Data Protection Act, Va. Code 59.1-575 to 59.1-584, Virginia data breach notice requirements, and related Virginia consumer-protection standards where privacy or data-security statements are involved.

Categories of personal data processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, approximate and precise location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, compliance logs, and other information described in this Privacy Policy.

Purposes of processing. SquareKick uses Virginia personal data to operate accounts, verify identity and age, verify physical location and eligibility, enforce restricted-jurisdiction rules, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Virginia consumer privacy rights. Subject to applicable law, identity verification, and legal exceptions, Virginia residents may request to confirm whether SquareKick processes their personal data, access personal data, correct inaccuracies, delete personal data, and obtain a portable copy of personal data that SquareKick can reasonably provide. Virginia residents may also opt out of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects where such rights apply.

Sensitive data and precise geolocation consent. SquareKick may process sensitive data only where reasonably necessary and permitted, including precise geolocation used to verify geographic eligibility and enforce restricted-state geofencing, identity-verification information used to confirm age and account ownership, payment and payout information used for transactions, and compliance information used for fraud prevention, tax support, dispute handling, and security. Where the VCDPA requires express, affirmative opt-in consent before processing sensitive data, SquareKick will request that consent before using the covered data for the applicable purpose.

Geolocation and restricted-state enforcement. Even where Virginia users are not permitted to participate in paid-entry rooms, SquareKick may process location, device, IP address, account, and compliance signals to determine whether access must be blocked, to prevent spoofing, to protect users, and to maintain records needed for legal, fraud-prevention, payment, payout, dispute, tax-support, and security purposes.

No sale of personal data. SquareKick does not sell Virginia personal data for monetary or other valuable consideration. SquareKick may share information with service providers and vendors that help provide hosting, payment processing, payout support, identity verification, geolocation, fraud prevention, tax-support workflows, analytics, security, customer support, legal compliance, and dispute resolution, subject to appropriate contractual and security restrictions.

Data security and breach notification. SquareKick maintains reasonable administrative, physical, and technical safeguards designed to protect Virginia personal data, including identifiers linked to financial accounts, payment references, payout records, tax-support information, government identifiers where required for tax or identity verification, geolocation signals, account credentials, and fraud-prevention records. If SquareKick determines that a security incident triggers Virginia breach-notification requirements, SquareKick will provide notice to affected Virginia residents and, where required, regulators or other parties by legally permitted methods.

Protection of minors. SquareKick is intended only for users who are at least 18 years old. We do not knowingly collect, process, or maintain personal data from individuals under 18. If SquareKick learns that a minor has bypassed identity or age checks, SquareKick may deactivate the account, block paid participation, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, dispute, tax, security, or compliance purposes.

Request methods and appeals. Virginia privacy, account-access, correction, deletion, portability, opt-out, geolocation, payment, payout, tax-support, fraud-review, breach-notification, and security-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding. If a request is denied, Virginia residents may submit an appeal using the same contact method or any appeal process SquareKick provides.

10. Georgia Consumer Privacy Notice

This Georgia Consumer Privacy Notice is provided for Georgia residents and supplements the rest of this Privacy Policy. It addresses Georgia privacy, data-protection, breach-notification, consumer-protection, account-security, payment, payout, tax-support, identity-verification, fraud-prevention, precise-location, and minor-safety practices that may apply to SquareKick, including the Georgia Personal Identity Protection Act, O.C.G.A. 10-1-910 to 10-1-912, and the Georgia Fair Business Practices Act where privacy, security, or data-handling representations are involved.

Categories of information processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, approximate and precise location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy.

Purposes of processing. SquareKick uses Georgia personal information to operate accounts, verify identity and age, verify physical location and eligibility, enforce restricted-jurisdiction rules, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Georgia data-security safeguards. SquareKick maintains reasonable administrative, physical, and technical safeguards designed to protect Georgia personal information, including personal identifiers linked to financial accounts, payment references, payout records, government identifiers where required for tax or identity verification, geolocation signals, account credentials, and fraud-prevention records. These safeguards may include encryption, access controls, logging, vendor restrictions, retention controls, and security reviews appropriate to the nature of the information.

Breach notification. If SquareKick determines that a data-security incident has resulted in unauthorized access to unencrypted Georgia personal information covered by Georgia law, SquareKick will provide notice to affected Georgia residents electronically or by another legally permitted method as required by O.C.G.A. 10-1-912 and other applicable law. SquareKick may also notify payment processors, identity-verification vendors, law enforcement, regulators, or other parties when legally required or reasonably necessary to protect users and the platform.

No sale of personal information. SquareKick does not sell Georgia personal information for monetary consideration. SquareKick may share information with service providers and vendors that help provide hosting, payment processing, payout support, identity verification, geolocation, fraud prevention, tax-support workflows, analytics, security, customer support, legal compliance, and dispute resolution, subject to appropriate contractual and security restrictions.

Precise geolocation, identity, payment, and fraud-prevention data. SquareKick may collect and process precise geolocation, device, IP address, payment, payout, identity-verification, and fraud-prevention information only as reasonably necessary to verify eligibility, enforce state restrictions, prevent unauthorized access, process transactions, protect users, respond to disputes, and comply with legal, tax, payment, payout, and security obligations.

Protection of minors. SquareKick is intended only for users who are at least 18 years old. We do not knowingly collect, process, or maintain personal information from individuals under 18. If SquareKick learns that an underage user has bypassed identity or age checks, SquareKick may deactivate the account, block paid participation, delete or limit personal information where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, dispute, tax, security, or compliance purposes.

Request methods. Georgia privacy, account-access, correction, deletion, geolocation, payment, payout, tax-support, fraud-review, breach-notification, and security-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

11. Colorado Consumer Privacy Notice

This Colorado Consumer Privacy Notice is provided for Colorado residents and supplements the rest of this Privacy Policy. This notice addresses Colorado privacy, data-protection, consumer privacy rights, sensitive-data consent, precise geolocation, data security, minor-safety, payment, payout, tax-support, identity-verification, fraud-prevention, and account-security practices that may apply to SquareKick, including the Colorado Privacy Act, C.R.S. 6-1-1301 et seq., and the Colorado Consumer Protection Act where privacy or data-security representations are involved.

Categories of personal data processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, approximate and precise location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy.

Purposes of processing. SquareKick uses Colorado personal data to operate accounts, verify identity and age, verify physical location and eligibility, enforce restricted-jurisdiction rules, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Colorado privacy rights. Subject to applicable law and verification, Colorado residents may have the right to confirm whether SquareKick processes their personal data, access personal data, correct inaccurate personal data, delete personal data, obtain a portable copy of personal data, and opt out of processing for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. SquareKick does not sell Colorado personal data for monetary consideration.

Sensitive data and precise geolocation consent. The Colorado Privacy Act treats certain information, including precise geolocation data within the legally defined radius, as sensitive data. SquareKick may use precise geolocation, device signals, IP address, payment information, payout information, identity-verification data, and related eligibility signals only as reasonably necessary for identity verification, age verification, fraud prevention, geofencing compliance, payment and payout processing, tax-support workflows, dispute handling, platform security, and legal compliance. By enabling location services or using paid-entry features that require location verification, you provide affirmative consent to the collection and processing of location information needed for those purposes.

Data minimization and disclosure. SquareKick limits Colorado personal data processing to what is reasonably necessary and proportionate for the services requested, compliance obligations, fraud prevention, account security, contest integrity, payments, payouts, tax-support workflows, and dispute resolution. SquareKick may disclose Colorado personal data to service providers, payment processors, payout providers, tax-support providers, identity and geolocation verification providers, fraud-prevention providers, hosting and security providers, professional advisers, regulators, law enforcement, or other parties as described in this Privacy Policy and as permitted by law.

Targeted advertising, profiling, and sale opt-outs. Colorado residents may submit requests to opt out of targeted advertising, sale of personal data, or covered profiling where applicable. SquareKick does not use sensitive data to make unlawful eligibility decisions and does not knowingly sell or process the personal data of minors for targeted advertising. SquareKick may continue processing personal data needed for account operations, security, fraud prevention, payments, payouts, tax reporting, legal compliance, contest integrity, and dispute handling.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In compliance with Colorado privacy and consumer-protection requirements and federal regulations, SquareKick does not knowingly collect, process, retain, sell, share, profile, or target advertising to personal data from individuals under 18. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Data security and breach safeguards. SquareKick maintains reasonable administrative, technical, and organizational safeguards designed to protect Colorado personal data, including account credentials, financial information, identity-verification information, location signals, payment records, payout records, tax-support information, and fraud-prevention records, against unauthorized access, acquisition, disclosure, alteration, misuse, account takeover, payment fraud, payout fraud, and other security risks. If a data security incident requires notice under applicable Colorado law, SquareKick will provide required notices in accordance with applicable legal requirements.

Privacy requests and appeals. Colorado residents may submit privacy, opt-out, sensitive-data consent, appeal, security, geolocation, identity-verification, payment, payout, tax-support, minor-data, fraud-prevention, account-access, and support requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may deny or limit requests where an exception applies. If SquareKick denies a Colorado privacy request, you may appeal through the same contact method unless a different appeal method is provided.

12. Washington Consumer Privacy Notice

This Washington Consumer Privacy Notice is provided for Washington residents and supplements the rest of this Privacy Policy. This notice addresses Washington privacy, data-protection, data-security, breach-notification, minor-safety, geolocation, payment, payout, tax-support, identity-verification, fraud-prevention, and account-security practices that may apply to SquareKick, including the Washington My Health My Data Act where applicable and Washington data-breach notification requirements.

Categories of personal information processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, precise or approximate location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy.

Purposes of processing. SquareKick uses Washington personal information to operate accounts, verify eligibility, enforce restricted-jurisdiction rules, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Geolocation, eligibility, and data minimization. SquareKick may collect and process precise or approximate geolocation data, IP address, device signals, identity-verification information, payment information, payout information, and related eligibility signals only as reasonably necessary for identity verification, fraud prevention, geofencing compliance, payment and payout processing, tax-support workflows, dispute handling, security, and legal compliance. Washington users may be blocked from paid-entry rooms where required by SquareKick policy, applicable law, or risk controls.

Consumer health data and sensitive inferences. SquareKick is not intended to collect health information. SquareKick does not knowingly use geolocation, device, biometric, or other information to infer a Washington user physical or mental health status. If SquareKick or a verification provider ever collects information regulated as consumer health data under Washington law, SquareKick will process that information only as permitted by law, will seek consent where required, and will not sell such data.

Sale, targeted advertising, and deceptive data practices. SquareKick does not sell Washington personal information and does not deceptively transfer Washington personal information. SquareKick does not process Washington personal information for behavioral advertising where prohibited by applicable law. SquareKick will follow its posted Privacy Policy and will not make misleading statements about collection, use, sharing, retention, security, location verification, payment verification, payout verification, or identity verification practices.

Data security and breach notification. SquareKick maintains reasonable administrative, technical, and organizational safeguards designed to protect Washington personal information, including financial information, account credentials, identity-verification data, location signals, payment records, payout records, and tax-support information, against unauthorized access, acquisition, disclosure, alteration, misuse, account takeover, payment fraud, payout fraud, and other security risks. If a security incident involving Washington residents requires notice under RCW 19.255.010 or other applicable law, SquareKick will provide required notices to affected users and regulators in accordance with applicable legal requirements, including electronic notice where permitted and timelines required by Washington law.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In compliance with Washington consumer-protection standards and federal regulations, SquareKick does not knowingly collect, process, retain, sell, share, profile, or target advertising to personal data from individuals under 18. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Privacy requests. Washington residents may submit access, correction, deletion, security, breach-related, minor-data, geolocation, identity-verification, payment, payout, tax-support, fraud-prevention, account-access, and support requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes.

13. Oklahoma Consumer Privacy Notice

This Oklahoma Consumer Privacy Notice is provided for Oklahoma residents and supplements the rest of this Privacy Policy. This notice addresses Oklahoma privacy, data-protection, data-security, breach-notification, minor-safety, geolocation, payment, payout, tax-support, identity-verification, fraud-prevention, and account-security practices that may apply to SquareKick, including the Oklahoma Consumer Data Privacy Act where applicable and the Oklahoma Security Breach Notification Act.

Oklahoma consumer privacy rights. Oklahoma residents may have the right to confirm whether SquareKick processes their personal data, access personal data, correct inaccuracies, request deletion, obtain a portable copy of personal data, and opt out of processing for targeted advertising, profiling, or the sale of personal data where applicable law provides those rights. SquareKick does not sell Oklahoma personal data for monetary consideration.

Categories of personal data processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, precise or approximate location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy.

Purposes of processing. SquareKick uses Oklahoma personal data to operate accounts, verify eligibility, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, comply with restricted-jurisdiction rules, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Data minimization, sensitive data, and geolocation. SquareKick limits the collection and processing of Oklahoma personal data to information reasonably necessary for the disclosed purposes. Precise geolocation, payment-related information, biometric information if ever used by a verification provider, identity-verification data, and other sensitive information are processed only when reasonably necessary for eligibility, security, fraud prevention, payment, payout, tax, dispute, compliance, or legal purposes, or with consent where required by law.

Targeted advertising, sale, and profiling choices. Where Oklahoma law provides applicable rights, Oklahoma residents may opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. SquareKick does not use Oklahoma personal data to make eligibility, payout, or winner decisions through unlawful profiling; winner results are determined through posted contest rules, locked room settings, Skill Card scoring, square/digit scoring components, and objective system records.

Data security and breach notification. SquareKick maintains reasonable administrative, technical, and organizational safeguards designed to protect Oklahoma personal information, including financial information, account credentials, identity-verification data, location signals, and biometric information if ever used, against unauthorized access, acquisition, disclosure, alteration, misuse, account takeover, payment fraud, payout fraud, and other security risks. If a security incident involving Oklahoma residents requires notice under the Oklahoma Security Breach Notification Act or other applicable law, SquareKick will provide required notices to affected users and regulators in accordance with applicable legal requirements, including Attorney General notice where required for qualifying incidents.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In compliance with Oklahoma child-safety and consumer-protection standards and federal regulations, SquareKick does not knowingly collect, process, retain, sell, share, profile, or target advertising to personal data from individuals under 18. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Privacy requests. Oklahoma residents may submit access, correction, deletion, portability, opt-out, appeal, breach-related, minor-data, geolocation, identity-verification, payment, payout, tax-support, fraud-prevention, account-access, and support requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes.

14. New York Consumer Privacy Notice

This New York Consumer Privacy Notice is provided for New York residents and supplements the rest of this Privacy Policy. This notice addresses New York privacy, data-protection, data-security, breach-notification, minor-safety, geolocation, payment, payout, tax-support, identity-verification, fraud-prevention, and account-security practices that may apply to SquareKick, including the New York Stop Hacks and Electronic Data Security Act and New York child data-protection requirements where applicable.

New York data security notice. SquareKick uses reasonable administrative, technical, and organizational safeguards designed to protect New York private information and personal information against unauthorized access, acquisition, disclosure, alteration, misuse, loss, payment fraud, payout fraud, account takeover, restricted-jurisdiction abuse, and other security risks. These safeguards may include access controls, encryption or hashing where appropriate, logging, vendor controls, fraud monitoring, payment and payout verification, and incident-response procedures.

Categories of information protected. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy. Some of this information may be treated as private information or sensitive information when combined with account, financial, biometric, location, or authentication data.

Purposes of processing. SquareKick uses New York personal information to operate accounts, verify eligibility, process paid room entries, administer Skill Card and square/digit scoring, publish results, process payments and payouts, support wallets and withdrawals, maintain tax-support workflows, comply with restricted-jurisdiction rules, prevent fraud and collusion, investigate disputes, secure the platform, respond to support requests, and comply with legal obligations.

Sale, sharing, and deceptive transfer restrictions. SquareKick does not sell New York personal information. SquareKick also does not deceptively transfer, share, or disclose New York personal information in a manner inconsistent with this Privacy Policy. Service providers, payment processors, payout processors, identity-verification providers, geolocation providers, hosting providers, analytics providers, tax-support providers, fraud-prevention vendors, professional advisers, and legal or regulatory recipients may receive information only for disclosed operational, legal, security, compliance, payment, payout, tax, or support purposes.

Geolocation, financial information, identity verification, and fraud prevention. SquareKick may process precise or approximate location information, financial account-related references, tax-support information, identity-verification data, device signals, and fraud-prevention data where reasonably necessary to verify eligibility, block restricted jurisdictions, detect account takeover, prevent underage use, process payments and payouts, comply with tax and legal requirements, handle disputes, and protect contest integrity.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In compliance with New York child data-protection requirements and federal regulations, SquareKick does not knowingly collect, process, sell, share, retain, profile, or target advertising to personal data from individuals under 18. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Data breach notification. If SquareKick determines that a security incident involving New York residents requires notice under the New York SHIELD Act, breach-notification law, or other applicable law, SquareKick will provide required notices to affected users and regulators in accordance with applicable legal requirements, subject to lawful security, remediation, investigative, and system-restoration needs.

Privacy and security requests. New York residents may submit privacy, data-security, breach-related, minor-data, geolocation, identity-verification, payment, payout, tax-support, fraud-prevention, account-access, correction, deletion, and support requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes.

15. Minnesota Consumer Privacy Notice

This Minnesota Consumer Privacy Notice is provided for Minnesota residents and supplements the rest of this Privacy Policy. This notice addresses Minnesota privacy, data-protection, consumer-rights, data-security, minor-safety, geolocation, payment, payout, tax-support, identity-verification, and fraud-prevention practices that may apply to SquareKick, including the Minnesota Consumer Data Privacy Act and Minnesota minor-protection requirements where applicable.

Minnesota privacy rights. Subject to applicable law, verification, and exceptions, Minnesota residents may request confirmation of whether SquareKick processes their personal data, access to their personal data, correction of inaccurate personal data, deletion of personal data, and a portable copy of personal data previously provided to SquareKick. Minnesota residents may also opt out of targeted advertising, profiling in furtherance of decisions that produce legal or similarly significant effects, and the sale of personal data where required by applicable Minnesota law.

Categories of information processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy. SquareKick uses this information to operate the platform, verify eligibility, process entries, determine and publish results, prevent fraud, enforce rules, support users, process payments and payouts, and comply with law.

Purposes of processing and data minimization. SquareKick processes Minnesota personal data for account operation, paid room participation, Skill Card scoring, square selection, payment processing, wallet and payout workflows, tax-support workflows, geolocation and restricted-jurisdiction compliance, fraud prevention, support, security, dispute resolution, legal compliance, and platform operation. SquareKick aims to collect and use Minnesota personal data only as reasonably necessary and proportionate for those disclosed purposes and to maintain contest integrity and platform security.

Sale, targeted advertising, and profiling. SquareKick does not sell Minnesota personal data for monetary or other valuable consideration. If SquareKick uses advertising, analytics, measurement, fraud-prevention, or platform-support tools that may be considered targeted advertising, regulated profiling, or a sale under Minnesota law, Minnesota residents may use the available privacy contact methods to submit an opt-out request where legally required.

Sensitive data, geolocation, and payment information. Precise geolocation, financial account-related information, identity-verification information, tax-support information, and fraud-prevention signals are processed only where reasonably necessary for eligibility verification, restricted-state controls, payment and payout processing, tax reporting, account security, anti-fraud review, dispute handling, legal compliance, or other purposes described in this Privacy Policy. SquareKick does not use precise geolocation to target minors and does not knowingly process minor data for targeted advertising.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In accordance with Minnesota minor-safety and privacy requirements and federal regulations, SquareKick does not knowingly collect, process, sell, retain, or target advertising to personal data from individuals under 18. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Data security and breach response. SquareKick uses reasonable administrative, technical, and organizational safeguards designed to protect Minnesota personal information against unauthorized access, misuse, loss, payment fraud, payout fraud, account takeover, and restricted-jurisdiction abuse. If SquareKick determines that a data security incident involving Minnesota residents requires notice under applicable law, SquareKick will provide required notices in accordance with applicable legal requirements, subject to lawful security, remediation, investigative, and system-restoration needs.

Privacy requests, appeals, and verification. Minnesota residents may submit privacy, access, correction, deletion, portability, opt-out, profiling, targeted-advertising, minor-data, data-security, breach-related, geolocation, identity-verification, payment, payout, tax-support, and fraud-prevention requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes. If an appeal process is required by applicable Minnesota law, Minnesota residents may appeal a denied privacy request through the same support channels.

16. Maryland Consumer Privacy Notice

This Maryland Consumer Privacy Notice is provided for Maryland residents and supplements the rest of this Privacy Policy. This notice addresses Maryland privacy, data-protection, consumer-rights, data-security, breach-notification, minor-data, geolocation, payment, payout, tax-support, identity-verification, and fraud-prevention practices that may apply to SquareKick, including the Maryland Online Data Privacy Act and the Maryland Personal Information Protection Act where applicable.

Maryland privacy rights. Subject to applicable law, verification, and exceptions, Maryland residents may request confirmation of whether SquareKick processes their personal data, access to their personal data, correction of inaccurate personal data, deletion of personal data, and a portable copy of personal data previously provided to SquareKick. Maryland residents may also opt out of targeted advertising and certain other processing where required by applicable Maryland privacy law.

Data minimization and service-limited processing. SquareKick aims to collect, use, and process Maryland personal data only as reasonably necessary and proportionate to provide the services requested by the user, including account operation, paid room participation, Skill Card scoring, square selection, payment processing, wallet and payout workflows, tax-support workflows, geolocation and restricted-jurisdiction compliance, fraud prevention, support, security, dispute resolution, legal compliance, and platform operation.

Sensitive personal data. SquareKick does not sell sensitive personal information of Maryland residents. Precise geolocation, financial account-related information, identity-verification information, tax-support information, and fraud-prevention signals are processed only where reasonably necessary for eligibility verification, restricted-state controls, payment and payout processing, tax reporting, account security, anti-fraud review, dispute handling, legal compliance, or other purposes described in this Privacy Policy.

Categories of information processed. SquareKick may process identifiers, contact details, account credentials, device and browser information, IP address, location signals, payment and payout references, wallet records, tax-support status, room-entry records, Skill Card records, square-selection records, score and winner records, support communications, dispute records, fraud-prevention signals, and other information described in this Privacy Policy. SquareKick uses this information to operate the platform, verify eligibility, process entries, determine and publish results, prevent fraud, enforce rules, support users, process payments and payouts, and comply with law.

Sale, targeted advertising, and profiling. SquareKick does not sell Maryland personal data. SquareKick does not sell Maryland sensitive data. SquareKick does not knowingly process personal data of users under 18 for targeted advertising or sale. If SquareKick uses advertising, analytics, measurement, fraud-prevention, or platform-support tools that may be considered targeted advertising or regulated profiling under Maryland law, Maryland residents may use the available privacy contact methods to submit an opt-out request where legally required.

Children and minors. SquareKick is intended only for users who are at least 18 years old. In accordance with Maryland privacy and consumer-protection requirements, SquareKick does not knowingly collect, process, sell, or retain personal data from individuals under 18 and does not knowingly process minor data for targeted advertising. If SquareKick learns that an underage user has bypassed age or identity checks, SquareKick may deactivate the account, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or audit purposes.

Maryland Personal Information Protection Act security and breach notice. SquareKick uses reasonable administrative, technical, and organizational safeguards designed to protect Maryland personal information against unauthorized access, misuse, loss, payment fraud, payout fraud, account takeover, and restricted-jurisdiction abuse. If SquareKick determines that a data security incident involving Maryland residents requires notice under the Maryland Personal Information Protection Act, SquareKick will provide required consumer and regulator notices in accordance with Maryland law, subject to lawful security, remediation, investigative, and system-restoration needs.

Privacy requests, appeals, and verification. Maryland residents may submit privacy, access, correction, deletion, portability, opt-out, sensitive-data, minor-data, data-security, breach-related, geolocation, identity-verification, payment, payout, tax-support, and fraud-prevention requests through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes. If an appeal process is required by applicable Maryland law, Maryland residents may appeal a denied privacy request through the same support channels.

17. District of Columbia Consumer Privacy Notice

This District of Columbia Consumer Privacy Notice is provided for users who reside in, or whose personal information is processed in connection with activity in, Washington, D.C. This notice supplements the rest of this Privacy Policy and addresses D.C. privacy, data-security, breach-notification, consumer-protection, minor-safeguard, geolocation, identity-verification, payment, payout, tax-support, and fraud-prevention data practices that may apply to SquareKick.

Privacy transparency under D.C. consumer-protection law. The District of Columbia does not currently maintain a single omnibus consumer privacy statute identical to California’s CCPA/CPRA. However, the D.C. Consumer Protection Procedures Act prohibits deceptive, unfair, or misleading representations about privacy, security, tracking, data use, data sharing, advertising, or account practices. SquareKick is committed to honoring the privacy representations made in this Privacy Policy and not materially misrepresenting how personal information is collected, used, retained, protected, or disclosed.

Categories of information processed. SquareKick may collect identifiers, contact information, account credentials, room-entry records, Skill Card records, square-selection records, scoring and winner records, support communications, transaction references, payment and payout references, tax-support status, device data, IP address, fraud-prevention signals, approximate or precise geolocation signals, and other information described in this Privacy Policy. SquareKick uses this information to operate accounts, verify eligibility, process entries, publish contest results, support wallet and payout functions, prevent fraud, enforce restrictions, comply with tax and legal obligations, and respond to disputes or support requests.

D.C. geolocation, identity, and compliance data. For paid-entry rooms, SquareKick may process physical-location information, device signals, IP address information, identity-verification information, payment and payout signals, and tax-support information to confirm legal age, detect restricted-jurisdiction access, identify VPN, proxy, emulator, or spoofing activity, enforce posted room rules, protect contest integrity, and prevent fraud, chargeback abuse, money-laundering patterns, and account takeover. These signals are processed for compliance, security, fraud-prevention, eligibility, payment, payout, tax, and dispute purposes.

No deceptive sale or transfer of personal information. SquareKick does not knowingly sell or deceptively transfer D.C. users’ personal information for hidden commercial resale purposes. SquareKick may disclose information to service providers, payment processors, payout providers, tax-support providers, identity-verification providers, geolocation providers, fraud-prevention vendors, hosting and analytics providers, legal or compliance advisors, law enforcement, regulators, or other parties where reasonably necessary for the purposes described in this Privacy Policy, the Terms of Service, the Contest Rules, or applicable law.

Data-security and breach notification. SquareKick uses reasonable administrative, technical, and organizational safeguards designed to protect D.C. personal information against unauthorized access, misuse, loss, account takeover, payment fraud, payout fraud, and restricted-jurisdiction abuse. If SquareKick determines that a data security incident involving D.C. residents requires notice under the D.C. Consumer Personal Information Security Breach Notification Act, SquareKick will provide required notices electronically or by another legally permitted method in accordance with D.C. Official Code § 28-3852 and related requirements, subject to lawful security, remediation, investigative, and system-restoration needs.

Minors’ privacy and safeguards. SquareKick is intended only for users who are at least 18 years old. SquareKick does not knowingly collect, store, or target marketing toward individuals under 18. If SquareKick learns that a minor has bypassed age or identity controls and submitted personal information, SquareKick may terminate or restrict the account, delete or limit personal information where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, audit, or compliance purposes. A parent or legal guardian may contact SquareKick support to request review and deletion of a minor’s account information where permitted by law.

Privacy requests. Subject to applicable law, verification, and exceptions, D.C. users may request access to account information, correction of inaccurate account information, deletion of personal information where legally permitted, and information about SquareKick’s privacy, data-security, geolocation, identity-verification, payment, payout, tax-support, and fraud-prevention practices. SquareKick may verify identity, residency, account ownership, transaction history, location, and request authority before responding and may retain information required for legal, payment, payout, tax, contest-integrity, fraud-prevention, dispute, security, or audit purposes.

Request methods. D.C. privacy, security, breach-related, geolocation, identity-verification, minor-data, correction, access, and deletion requests may be submitted through the Contact Us page, the Live Chat support icon, account tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy.

18. Illinois Consumer Privacy Notice

This Illinois Consumer Privacy Notice is provided for Illinois residents and supplements the rest of this Privacy Policy. This notice addresses the Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq. (BIPA), the Illinois Personal Information Protection Act, 815 ILCS 530/1 et seq. (PIPA), Illinois minor-data and consumer-protection privacy requirements, and related data-security, breach-notification, geolocation, biometric, identity-verification, and privacy-request obligations that may apply to SquareKick.

Personal information and PIPA safeguards. SquareKick may collect identifiers, contact information, account credentials, room-entry records, Skill Card records, square-selection records, transaction records, payment and payout references, tax-support status, device and usage information, IP address, geolocation signals, fraud-prevention signals, support messages, and similar information described in this Privacy Policy. SquareKick uses reasonable administrative, technical, and organizational safeguards to protect Illinois personal information and to reduce risks of unauthorized access, identity theft, payment fraud, account takeover, location spoofing, and contest-integrity abuse.

Biometric information. SquareKick does not currently require users to submit biometric identifiers or biometric information, such as facial geometry scans, voiceprints, retina or iris scans, hand scans, or fingerprint templates, to create an account or participate in standard contest rooms. Device-level features such as Face ID, Touch ID, fingerprint unlock, or similar local device authentication, if enabled by the user on the user’s own device, are generally handled by the device or operating system and are not intended to be stored by SquareKick as raw biometric templates in standard app records.

BIPA consent, disclosure, and retention. If SquareKick or a supported identity-verification, anti-fraud, or fair-play provider later collects, captures, receives, stores, or uses a biometric identifier or biometric information for Illinois users, SquareKick will provide a separate written disclosure describing the purpose and length of term for the collection, storage, and use; obtain any written release or consent required by Illinois law before collection; prohibit the sale, lease, trade, or profit from biometric identifiers; limit disclosure except as permitted by law; and follow a retention and destruction schedule consistent with BIPA and applicable provider obligations.

Geolocation, identity, and eligibility data. SquareKick may process precise or approximate geolocation signals, device signals, IP address information, payment and payout signals, and identity-verification information to confirm paid-entry eligibility, prevent restricted-jurisdiction access, detect VPN, proxy, emulator, or GPS-spoofing activity, enforce age restrictions, protect payment and payout workflows, and preserve contest integrity. These signals are used for compliance, security, fraud prevention, and dispute handling, not for selling Illinois consumer data to third-party advertisers.

Illinois privacy requests. Subject to applicable law, verification, and exceptions, Illinois residents may request access to personal information maintained by SquareKick, correction of inaccurate account information, deletion of personal information where legally permitted, and information about processing, retention, security, or biometric practices that apply to their account. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding, and may deny, limit, or delay requests where payment, payout, tax, fraud-prevention, contest-integrity, legal, security, or dispute-retention obligations require continued processing.

Breach notification. If SquareKick determines that a security breach involving unencrypted or unredacted Illinois personal information requires notice under PIPA, SquareKick will provide notice to affected Illinois residents and, where required, appropriate public authorities without unreasonable delay, subject to lawful investigative, security, remediation, or system-restoration needs.

Protection of minors’ data. SquareKick is intended only for users who are at least 18 years old. SquareKick does not knowingly collect, maintain, or process personal information from individuals under 18 for paid-entry room participation. If SquareKick learns that an underage user has bypassed identity or age checks, SquareKick may deactivate the account, block paid-entry access, delete or limit personal data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, audit, or compliance purposes.

Request methods. Illinois privacy, deletion, correction, access, biometric, geolocation, breach-related, and minor-data requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy.

19. California Consumer Privacy Notice

This California Consumer Privacy Notice and Notice at Collection is provided for California residents and supplements the rest of this Privacy Policy. This notice addresses the California Consumer Privacy Act as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.100 et seq., the California Online Privacy Protection Act, the California Shine the Light law, the California Age-Appropriate Design Code Act to the extent enforceable, the California Eraser Law, California data-breach and reasonable-security requirements, and related privacy, data-protection, consumer-rights, sensitive-data, minor-data, geolocation, and security requirements that may apply to SquareKick.

Categories of personal information collected. During the applicable California look-back period, SquareKick may collect identifiers, account information, contact information, commercial and transaction records, room-entry and contest records, Skill Card records, wallet, payment, payout, refund, withdrawal, tax-support and support records, device identifiers, IP address, browser or app information, approximate or precise geolocation signals used for eligibility checks, fraud-prevention signals, internet or electronic-network activity, inferences used for platform safety or eligibility review, and other information described in this Privacy Policy. Sensitive personal information may include precise geolocation, account login credentials, financial account or payment-token references, payout verification information, and tax-support information processed by SquareKick or trusted service providers.

Purposes for collection, use, and disclosure. SquareKick uses California personal information to create and secure accounts, verify age, identity, eligibility, and physical location, process deposits, entry payments, refunds, withdrawals, winner awards, payout setup, and 1099-MISC tax-support workflows, operate contest rooms, score Skill Card and square/digit results, provide customer support, send account and contest notices, detect fraud or abuse, prevent restricted-jurisdiction participation, investigate disputes, maintain records, comply with law, and protect users and SquareKick. SquareKick may disclose information to payment processors, payout and tax-support providers, identity or location-verification providers, cloud hosting, security, analytics, support, legal, compliance, regulatory, law-enforcement, and other service providers or parties where permitted or required by law.

Sale, sharing, targeted advertising, and opt-out rights. SquareKick does not sell personal information for money and does not intentionally share personal information for cross-context behavioral advertising. If SquareKick later uses advertising, analytics, device-ID, or tracking practices that constitute a sale or sharing under California law, SquareKick will provide a conspicuous Do Not Sell or Share My Personal Information method, honor applicable opt-out preference signals where required, and update this notice. California residents may opt out of any sale or sharing, if applicable, through the Contact Us page, the Live Chat support icon, account tools, or the privacy contact information listed in the Contact section of this Privacy Policy.

California privacy rights. Subject to applicable law, verification, and exceptions, California residents may request access to the categories and specific pieces of personal information collected, correction of inaccurate personal information, deletion of personal information, a portable copy of personal information where applicable, information about categories of sources, purposes, disclosures, sales, sharing, and third parties, and non-discriminatory treatment for exercising privacy rights. California residents may use an authorized agent where permitted by law, subject to verification of identity, residency, account ownership, and agent authority.

Sensitive personal information and precise geolocation. SquareKick uses sensitive personal information only as reasonably necessary to provide requested services, verify eligibility and location, process payments, payouts, refunds, withdrawals, tax-support workflows, prevent fraud, protect account security, comply with law, resolve disputes, and perform other purposes permitted by California law. SquareKick uses precise geolocation solely for eligibility, anti-fraud, restricted-jurisdiction, payment, payout, security, and compliance purposes. California residents may request limitation of sensitive personal information where the request applies and where the information is not needed for a permitted operational, security, legal, payment, payout, tax, or compliance purpose.

Data retention and security. SquareKick retains California personal information only for as long as reasonably necessary to provide the platform, complete transactions, maintain contest, Skill Card, wallet, payment, payout, tax, fraud-prevention, legal, security, and dispute records, satisfy legal obligations, and enforce platform rules. SquareKick uses reasonable administrative, technical, and organizational safeguards, including access controls, secure transmission or encryption where appropriate, audit logging, restricted administrative access, and payment-token handling. If a security incident triggers California data-breach notice duties, SquareKick will provide required notice consistent with applicable law and any lawful investigative delay.

Minors data protection and removal. SquareKick is intended only for users who are at least 18 years old and legally eligible to participate. SquareKick does not knowingly collect, sell, share, or process personal information from minors for paid-entry participation. If SquareKick learns that a minor has created an account, funded entries, entered rooms, submitted Skill Cards, or attempted to use payout features, SquareKick may restrict or terminate the account, cancel entries, delete or limit data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or compliance purposes. Parents or legal guardians may contact SquareKick to request review and deletion of minor-related information where legally available.

California Shine the Light and direct marketing. California residents may request, once per calendar year where applicable, information about categories of personal information disclosed to third parties for those third parties’ direct marketing purposes during the preceding calendar year and the categories of third parties that received such information. SquareKick does not intend to disclose personal information to third parties for their own direct marketing without notice and required consent where applicable.

Request methods and response process. California privacy, access, deletion, correction, portability, sale or sharing opt-out, sensitive-data limitation, geolocation, minor-data, direct-marketing, and breach-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, California residency, account ownership, transaction history, location, and request authority before responding, and may deny, limit, or delay requests where legal exceptions, security needs, fraud-prevention duties, payment, payout, tax, legal, dispute, or compliance retention obligations apply.

20. Nevada Consumer Privacy Notice

This Nevada Consumer Privacy Notice is provided for Nevada residents and supplements the rest of this Privacy Policy. This notice addresses Nevada privacy, data-security, online-service notice, consumer opt-out, covered-information, minor-data, geolocation, identity-verification, breach-notification, and related requirements that may apply to SquareKick, including Nevada Revised Statutes Chapter 603A.

Covered information and categories collected. For Nevada purposes, SquareKick may collect covered information such as first and last name, username, email address, account credentials, address or location-related information, phone number if provided, payment and payout references, transaction records, room-entry records, Skill Card records, square-selection records, support messages, device identifiers, IP address, browser or app information, geolocation signals, fraud-prevention signals, and other information described in this Privacy Policy. Full payment card numbers, security codes, and raw taxpayer-identification numbers are generally processed by trusted payment, payout, or tax providers rather than stored in standard SquareKick app records.

Use and sharing of covered information. SquareKick may use Nevada covered information to create and secure accounts, verify age, identity, eligibility, and physical location, process deposits, entry payments, refunds, withdrawals, winner awards, and tax-support workflows, operate contest rooms, score Skill Cards and square/digit results, provide support, detect fraud, prevent restricted-jurisdiction participation, investigate disputes, maintain records, comply with law, and protect users and SquareKick. SquareKick may share information with service providers, payment processors, payout and tax-support providers, identity or location-verification providers, cloud-hosting and security providers, analytics or operational vendors, legal or compliance advisors, regulators, law enforcement, or other parties when permitted or required by law.

Nevada sale opt-out right. Nevada law allows residents to direct an operator not to make a sale of certain covered information. Nevada defines sale narrowly as an exchange of covered information for monetary consideration to a person for that person to license or sell the information to additional persons. SquareKick does not sell personal information for monetary consideration under this Nevada definition. If SquareKick later adopts a practice that may constitute a sale under Nevada law, Nevada residents may submit an opt-out request through the Contact Us page, the Live Chat support icon, account tools, or the privacy contact information listed in the Contact section of this Privacy Policy.

Response timing for Nevada opt-out requests. SquareKick will respond to a verified Nevada sale opt-out request within sixty (60) days after receipt where required by NRS Chapter 603A. If reasonably necessary, SquareKick may extend the response period by up to thirty (30) additional days and will notify the requester of the extension where required. SquareKick may verify identity, Nevada residency, account ownership, request authority, transaction history, and request scope before acting on the request.

Data security and retention. SquareKick uses reasonable administrative, technical, and organizational safeguards designed to protect Nevada covered information, including access controls, secure transmission or encryption where appropriate, restricted administrative access, audit logs, fraud monitoring, payment-token handling, and data-retention limits tied to account operation, payment, payout, tax, fraud-prevention, legal, dispute, security, and compliance needs. If SquareKick determines that an unauthorized acquisition of Nevada personal information requires notice under applicable Nevada security-breach law, SquareKick will provide notice consistent with applicable law and any lawful investigative delay.

Protection of minors. SquareKick is intended only for users who are at least 18 years old and legally eligible to participate. SquareKick does not knowingly collect, solicit, sell, or process personal information from minors for paid-entry participation. If SquareKick learns that a minor has created an account, submitted information, funded entries, entered rooms, or attempted to use payout features, SquareKick may restrict or terminate the account, cancel entries, delete or limit data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, payment, payout, tax, dispute, security, or compliance purposes.

Nevada privacy request methods. Nevada privacy, data-security, covered-information, opt-out, geolocation, age-verification, identity-verification, breach-related, and deletion-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may deny, limit, or delay a request where verification fails, the request is fraudulent or abusive, or retention is reasonably necessary for payment, payout, tax, legal, fraud-prevention, dispute, security, or compliance purposes.

21. User Rights

Subject to applicable law, you may request:

Requests may be submitted through our support contact points available on https://squarekick.org. Logged-in users may also initiate an account deletion request from the Account Deletion page linked inside the platform. We may retain records when reasonably necessary for legal, tax, payment, payout, fraud-prevention, dispute-resolution, security, or compliance purposes.

• Access to your personal information
• Correction of inaccurate information
• Deletion of your account and personal information where legally permitted
• Applicable opt-out or limitation rights where required by state privacy law

22. Age Restriction

SquareKick is for users aged 18 years or older. If we learn that we have collected personal information from a person under 18, we may suspend the account and delete the information where legally permitted.

23. Mobile Application Usage

The SquareKick mobile application provides access to substantially the same services as our website, including contest participation views, two-stage Skill Card pages, wallet-related features, notification features, support/contact features, and policy pages. Data collected through the mobile app is processed in accordance with this Privacy Policy.

24. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform after an update constitutes acceptance of the revised policy to the extent permitted by law.

25. Contact

For privacy questions or requests, please contact us through:

SquareKick LLC

info@squarekick.org

Mail: 3008 Presidio Circle, Carrollton, Texas 75007

Support query options are also available at the SquareKick’s Contact Us page.

You can also directly chat with us using the Live Chat icon available on all SquareKick front end pages.