Privacy Policy

SquareKick LLC, a Texas limited liability company, operates the SquareKick platform accessible via https://squarekick.org and through our mobile applications.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website, contest rooms, Skill Card features, wallet features, payout setup features, notifications, live chat/support features, and related mobile app functionality.

1. Information We Collect

• Account Information: name, username, email address, login details, and records of required policy consent at signup
• Contest Participation Information: room entries, square selections, half-square or full-square participation, Skill Card-1 and Skill Card-2 answers, tiebreaker answers, square/digit scoring records, matchup activity, results, notifications, and related support or audit records
• Financial Information: transaction details related to deposits, entry payments, winner awards, refunds, withdrawals, payout setup status, and tax-reporting status (processed through trusted payment and tax services such as Stripe; we do not store full payment card details or raw taxpayer identification numbers inside standard SquareKick app records)
• Device and Usage Information: IP address, browser type, device type, operating system, app version, basic activity records, and similar information used to operate and secure the platform
• Mobile and Notification Data: app usage information and, where available, notification information used to deliver account and contest-related alerts
• Location and Eligibility Data: Current Physical Location State declarations, secure location-verification signals, browser/device permission signals, trusted location-verification decisions when configured, state-level eligibility results, VPN/proxy/spoofing risk flags, verification reference IDs, audit records, and related checkout decision logs

2. How We Use Your Information

We use your information to:

• Create and manage user accounts
• Support participation in matchups, rooms, board selection, reservations, checkout, two-stage Skill Card submission, score prediction, combined-score ranking, scoring/tiebreaker calculations, and results display
• Process payments, deposits, winner awards, refunds, withdrawals, payout account setup workflows, tax-reporting status checks, and year-end 1099-MISC review records
• Provide customer support and resolve account, scoring, payout, or transaction issues
• Send notifications related to account activity, contest participation, shuffle or room updates, winner awards, and payout status
• Maintain platform security, investigate fraud or abuse, enforce our terms and rules, conduct compliance review, monitor for suspicious activity, and keep service records
• Verify that paid room entry starts only when the user is physically located in an allowed state at checkout time, and keep audit records for allowed or blocked location decisions

3. Payments, Payouts, Tax Reporting, and Third-Party Services

Payments, payout setup, and 1099-MISC tax-reporting setup may be processed through trusted third-party services such as Stripe. Those services may collect, verify, and process payment, payout, identity, taxpayer, or tax-reporting information under their own terms and privacy policies.

SquareKick is configured for U.S. skill-based contest award reporting using Form 1099-MISC only. The platform tax setup is not configured for W-2G reporting/withholding logic.

SquareKick may track gross winner awards by calendar year, maintain internal 1099-MISC review records, and use payout/tax status information to support tax reporting, professional review, dispute handling, fraud prevention, and compliance obligations.

SquareKick may delay or hold winner payouts, wallet award credits, withdrawals, or related payout activity when required payout or tax-reporting information is missing, incomplete, expired, unverifiable, or otherwise requires review.

Winners remain responsible for reporting award income on their own tax returns and paying any taxes owed. SquareKick does not store full payment card details, raw Social Security numbers, or full taxpayer identification numbers inside standard SquareKick app records.

We may also use secure infrastructure, analytics, messaging, and support services to operate the platform and its mobile features.

When configured, SquareKick may use a trusted location-verification service to verify a user’s physical location, detect VPN/proxy/spoofing risks, and return an auditable decision before paid checkout begins.

4. Contest Rooms, Contests, and Compliance Restrictions

SquareKick is a skill-predominant sports knowledge and matchup-analysis contest platform. In Skill Card rooms, Skill Card performance is the primary determinant and square/digit position is a limited secondary scoring component under the room’s locked configuration. It does not operate as a sportsbook, house-banked casino, slot machine, lottery, or house-banked product.

Certain contests, contest rooms, square selections, payout features, winner awards, withdrawals, promotional contest features, or similar platform functionality may be subject to state or local eligibility restrictions.

SquareKick may restrict, delay, decline, review, or reverse participation, payments, payouts, withdrawals, or account activity where required by law, platform rules, payment or payout service requirements, fraud monitoring, AML-related review, dispute handling, or compliance review.

Paid-entry eligibility is based on the user’s physical location state at the time they start room-entry checkout. Residency, billing address, tax address, profile state, and payout state do not determine paid-entry eligibility. If eligibility cannot be verified, checkout is blocked before payment confirmation.

5. Data Sharing

We do not sell your personal data. We may share data only:

• With payment, payout, or support services as needed to complete transactions and operate the platform
• With trusted services supporting notifications, analytics, fraud prevention, customer support, or platform operations
• When required by law, legal process, regulation, compliance review, dispute resolution, or to protect rights, security, users, or the platform

6. Cookies, Analytics, Tracking, and Do Not Track

We may use cookies, session tools, pixels, analytics tools, mobile analytics tools, Meta Pixel, Google Analytics, and similar browser or app storage technologies to keep you signed in, preserve preferences, support security features, measure platform performance, improve the user experience, and understand how users interact with the website and mobile app.

Some browsers offer a Do Not Track signal. Because there is no consistent industry standard for responding to Do Not Track signals, SquareKick does not currently change its data practices in response to those signals. You may still control cookies and tracking choices through your browser, device, and available privacy settings.

7. Data Security and Retention

We implement reasonable security measures, including secure connections and operational safeguards, to protect your information. Payment and payout data is handled securely through trusted payment and payout services.

We retain information for as long as reasonably necessary to operate the platform, complete transactions, maintain records, enforce our policies, comply with law, and resolve disputes.

We may retain account, transaction, and fraud prevention records after account closure where required for legal, regulatory, tax, anti-money laundering, fraud prevention, or dispute resolution purposes.

8. Texas Consumer Privacy Notice

This Texas Consumer Privacy Notice is provided for Texas residents and supplements the rest of this Privacy Policy. This notice addresses the Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq., the Texas Identity Theft Enforcement and Protection Act, Tex. Bus. & Com. Code § 521.001 et seq., and related Texas privacy, security, geolocation, biometric, automated-profiling, consumer-rights, and data-security requirements that may apply to SquareKick.

Texas consumer privacy rights. Subject to applicable law, verification, and exceptions, Texas residents may request confirmation of whether SquareKick is processing their personal data; access to personal data maintained by SquareKick; correction of inaccurate personal data; deletion of personal data; and a portable digital copy of personal data, game-room logs, Skill Card records, matchmaking or room-participation records, transaction records, payout records, support records, and other account records that SquareKick can reasonably provide.

Sensitive data opt-in consent. Where Texas law applies, SquareKick will not intentionally process sensitive data without the affirmative consent required by applicable law. Sensitive data may include precise geolocation used to verify legal boundaries and restricted-jurisdiction compliance, biometric data if a supported identity or account-security workflow requires it, and other data treated as sensitive by applicable law. Where Face ID, Touch ID, or similar biometric authentication is handled locally by a user’s device or operating system, SquareKick does not intend to receive or store raw biometric templates in standard app records.

Geolocation, biometric, and eligibility data. SquareKick may collect or process location signals, IP addresses, GPS or browser-location permission signals, device signals, payment or payout location indicators, identity-verification data, and fraud-prevention data only as reasonably necessary and proportionate to operate the platform, verify eligibility, enforce restricted-jurisdiction rules, prevent fraud, protect accounts, process payments and payouts, comply with tax and legal obligations, and administer contest rooms requested by the user.

Automated profiling and targeted-advertising opt-out. SquareKick may use automated fraud-detection, account-security, eligibility, location, payment, payout, room-integrity, or data-matching tools to protect the platform, pair or manage players in rooms, detect abuse, or enforce rules. Texas residents may contact SquareKick to opt out of profiling or targeted advertising where applicable law requires an opt-out right. If SquareKick denies a privacy request or appeal, the user may have the right to submit an escalation complaint to the Office of the Texas Attorney General.

Financial-data safeguards and breach notice. Because SquareKick may handle user names, payment records, payout records, debit card or bank-account tokens handled by payment services, transaction histories, and identity or tax-related verification status, SquareKick uses reasonable administrative, technical, and organizational safeguards, including encryption and trusted payment/payout trusted services where appropriate. Under Texas law, any unauthorized security breach exposing unencrypted Texas resident records will be reviewed and, where legally required, affected residents will be notified within the applicable legal timeframe, including strictly within 60 days of discovery where required by the Texas Identity Theft Enforcement and Protection Act.

Minor-data safeguards. SquareKick is for users aged 18 or older. SquareKick does not knowingly allow minors to enter paid rooms, deposit funds, receive winner awards, or maintain paid prize accounts. Where Texas law, the TDPSA, COPPA, or other applicable law imposes additional requirements for known children or minors, SquareKick will restrict participation, suspend accounts, delete or limit data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, dispute, tax, payment, payout, or compliance purposes.

Request methods. Texas privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, targeted-advertising, automated-decision, and breach-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

9. California Privacy Notice

This California Privacy Notice and Notice at Collection is provided for California residents and supplements the rest of this Privacy Policy. This notice addresses the California Consumer Privacy Act, as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.100 et seq., the California Online Privacy Protection Act, Cal. Bus. & Prof. Code § 22575-22579, and the California "Shine the Light" law, Cal. Civ. Code § 1798.83, to the extent those laws apply to SquareKick.

Categories of personal information we may collect include identifiers such as name, username, email address, IP address, device identifiers, account credentials, and contact details; internet or electronic network activity such as browser, device, app usage, session, cookie, analytics, and similar activity records; commercial and transaction information such as deposits, entry payments, reservations, winner awards, refunds, withdrawals, payout setup, and tax-reporting status; geolocation or location-related information where used for eligibility, restricted-jurisdiction, fraud-prevention, or compliance review; account, contest, Skill Card, tiebreaker, square-selection, scoring, result, support, notification, fraud-prevention, automated-review, and audit records; and professional or compliance information needed for payout, tax, identity, or eligibility review.

Sensitive personal information may include precise geolocation used for location eligibility, restricted-jurisdiction review, anti-fraud controls, or compliance checks; government, payment, payout, tax, or account-verification information when required; and biometric-related information only if a supported identity, account-security, or device-authentication workflow requires it. Where Face ID, Touch ID, or similar biometric login features are handled by a user’s device or operating system, SquareKick does not intend to receive or store the raw biometric template in standard app records.

We collect and use these categories for the purposes described in this Privacy Policy, including account operation, contest participation, Skill Card scoring, payment and payout processing, tax support, platform security, fraud prevention, restricted-jurisdiction compliance, customer support, notifications, analytics, debugging, legal compliance, dispute resolution, and responsible platform operations. We do not collect or process personal information that is unrelated to these disclosed purposes unless we provide additional notice where required by law.

We may disclose personal information to trusted services and contractors that support payment processing, payout onboarding, tax-reporting support, secure infrastructure, analytics, notifications, fraud prevention, customer support, score updates, app functionality, legal compliance, and platform operations. We may also disclose information when required by law, legal process, compliance review, dispute resolution, fraud investigation, or to protect users, rights, property, or the platform.

SquareKick does not sell personal information for money. SquareKick does not intentionally sell or share personal information for cross-context behavioral advertising. If SquareKick later uses advertising, analytics, device-ID, or tracking practices that constitute a sale or sharing under California law, SquareKick will provide a conspicuous "Do Not Sell or Share My Personal Information" method in the app or website and honor applicable opt-out preference signals where required by law.

California residents may have the right to know the categories and specific pieces of personal information collected about them, the categories of sources, purposes for collection, categories of third parties to whom information is disclosed, and the categories of information sold, shared, or disclosed; to request deletion of personal information subject to legal and operational exceptions; to request correction of inaccurate personal information; to opt out of sale or sharing where applicable; to limit use and disclosure of sensitive personal information where applicable; and to be free from discrimination or retaliation for exercising privacy rights.

SquareKick uses sensitive personal information only as reasonably necessary to provide the requested services, verify eligibility or identity, confirm location, process payments or payouts, support tax reporting, prevent fraud or abuse, maintain security, satisfy legal obligations, resolve disputes, or perform other purposes permitted by applicable law. California residents may request that SquareKick limit use or disclosure of sensitive personal information where the request applies and where the information is not needed for a permitted operational, security, legal, payment, payout, tax, or compliance purpose.

California residents may submit verifiable privacy requests through at least two available methods: the Contact Us page or Live Chat support options inside SquareKick, and the privacy contact information listed in the Contact section of this Privacy Policy. Account deletion tools available inside the platform may also be used for deletion-related requests. We may need to verify your identity, account ownership, residency, and request authority before responding. You may also use an authorized agent where permitted by law, subject to verification requirements.

CalOPPA and Do Not Track. Some browsers or mobile operating systems transmit Do Not Track or similar signals. Because there is not a single uniform technology standard for every Do Not Track signal, SquareKick does not currently change its core data practices in response to every browser DNT signal unless required by applicable law or a supported opt-out preference signal. You may still control cookies, analytics permissions, notifications, location access, and app permissions through browser, device, and account settings.

California Shine the Light. California residents may request, once per calendar year, information about categories of personal information, if any, that SquareKick disclosed to third parties for those third parties’ direct marketing purposes during the preceding calendar year and the categories of third parties that received such information. SquareKick does not intend to disclose personal information to third parties for their own direct marketing without notice and required consent where applicable.

California minor data. SquareKick is for users who are at least 18 years old. We do not knowingly sell or share personal information of users under 16 years of age. If SquareKick ever allows non-paid users aged 13 through 17, SquareKick will not knowingly profile, track, sell, share, or use teen data for targeted marketing without the affirmative consent required by applicable California minor-privacy laws. If we learn that we have collected personal information from a person under 18, we may suspend the account and delete the information where legally permitted.

10. Illinois Privacy Notice and Biometric Information Privacy Act (BIPA) Disclosure

This Illinois Privacy Notice and Biometric Information Privacy Act (BIPA) Disclosure is provided for Illinois residents and supplements the rest of this Privacy Policy. This notice addresses Illinois-specific privacy, biometric, genetic-information, geolocation, automated-review, consumer-fraud, minor-protection, data-minimization, and privacy-request requirements that may apply to SquareKick.

Illinois Biometric Information Privacy Act (BIPA) disclosure. SquareKick does not currently require users to submit biometric identifiers or biometric information, such as facial scans, voiceprints, retina or iris scans, hand scans, or fingerprint templates, to create an account or participate in standard contest rooms. Device-level features such as Face ID, Touch ID, fingerprint unlock, or similar local device authentication, if turned on by a user on the user's own device, are generally handled by the device or operating-system provider and are not stored by SquareKick as biometric templates.

If SquareKick later offers any biometric identity-verification, face-matching, fingerprint, voiceprint, selfie-verification, multi-account prevention, banned-player blocking, or similar biometric fraud-prevention feature for Illinois users, SquareKick will provide a distinct, prominent, publicly available BIPA notice and a separate written-release consent workflow before collection. That notice will state the exact purpose for collecting or using the biometric data, identify the biometric identifiers or biometric information involved, describe storage and protection procedures, and require a standalone affirmative electronic opt-in release before any biometric scan, template, identifier, or biometric information is processed.

Illinois biometric retention and destruction schedule. If Illinois biometric identifiers or biometric information are ever collected, SquareKick will use appropriate administrative, technical, and encryption safeguards for storage and transmission and will permanently destroy the biometric identifier or biometric information when the initial purpose for collection has been satisfied or within three years of the user's last interaction with SquareKick, whichever occurs first, unless a shorter period or different treatment is required by applicable law. SquareKick will not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information.

Illinois Genetic Information Privacy Act (GIPA). SquareKick does not request, require, collect, purchase, use, or infer genetic information, genetic-test results, DNA markers, family medical history, or similar genetic data from users for account creation, contest entry, identity review, fraud prevention, payout review, matchmaking, profiling, or advertising.

Geolocation and eligibility data. SquareKick may collect or process location-related information, including IP address, device-derived approximate location, browser or app permission-based location, GPS or similar precise-location signals if provided, state or jurisdiction indicators, payment or payout location signals, and fraud-prevention signals, when reasonably necessary to verify eligibility, block restricted jurisdictions, prevent account abuse, support compliance review, protect users and the platform, and maintain required records. Users should not participate from a restricted location and may be asked to provide or enable location information as part of eligibility review.

Automated processing and Illinois Consumer Fraud and Deceptive Business Practices Act transparency. SquareKick may use automated or AI-assisted tools, rules, risk signals, data-matching software, fraud-detection scripts, and support workflows to help monitor account activity, pair or place players in game rooms where applicable, detect fraud, identify restricted-location attempts, review abnormal payment or payout activity, improve support responses, and protect platform integrity. Users may contact support if they believe an automated review, restriction, fraud flag, room placement, or support response is inaccurate.

Illinois residents may have rights, subject to applicable thresholds and exceptions, to request access to personal information, request deletion of personal information, correct inaccurate information, and opt out of sale of personal information or processing for targeted advertising where those practices apply. SquareKick does not sell personal information for money and does not intentionally process personal information for targeted advertising. If SquareKick later adopts practices that constitute a sale or targeted advertising under applicable Illinois law, SquareKick will provide a clear opt-out method outside this Privacy Policy as required by law, such as through the Contact Us page, account tools, live support, or another conspicuous request method.

SquareKick applies data minimization principles to sensitive information. We aim to collect only the sensitive data reasonably necessary to operate contest rooms, verify age and eligibility, prevent fraud, process payments and payouts, support tax reporting, maintain security, provide support, comply with legal obligations, and resolve disputes.

SquareKick is for users who are at least 18 years old. We do not knowingly track, profile, sell, or use minors' personal information for targeted advertising. If we learn that a person under 18 has provided personal information or used an account, we may suspend or terminate the account and delete the information where legally permitted, while retaining limited records only when needed for legal, safety, fraud-prevention, dispute-resolution, payment, tax, or compliance purposes.

Illinois privacy requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. We may verify identity, account ownership, residency, and request authority before responding.

11. District of Columbia Privacy Notice

This District of Columbia Privacy Notice is provided for District of Columbia residents and supplements the rest of this Privacy Policy. This notice addresses D.C.-specific consumer-protection, data-security, financial-data, breach-notification, geolocation, automated-review, consumer-health-information, and transparency expectations, including the D.C. Consumer Security Breach Notification Act, D.C. Code § 28-3851 et seq., and D.C. automated decision-making and profiling transparency expectations, to the extent they apply to SquareKick.

Financial and transactional data. SquareKick may collect and retain financial and transactional records such as deposits, entry payments, room fees, administrative/platform fees, prize-pool allocations, winner awards, wallet credits, refunds, withdrawals, payout setup status, payout method status, tax-reporting review status, transaction identifiers, dispute records, and related audit logs. Full payment-card numbers, raw bank credentials, and sensitive payout/tax identity information are generally handled by trusted payment, payout, and tax-trusted services and are not stored in standard SquareKick app records.

D.C. personal-information combinations. For purposes of D.C. Code § 28-3851 et seq. and D.C. breach-notification review, protected personal information may include a person’s name combined with items such as driver’s license or D.C. identification card number, passport number, account usernames or passwords, access codes, financial account, debit-card, or payment-account information with required access credentials, security codes, biometric data if ever collected, or other protected identifiers covered by applicable D.C. law. SquareKick uses reasonable administrative, technical, and organizational safeguards appropriate to these categories, including secure connections, access controls, audit records, vendor controls, payment-service tokenization, limited internal access, fraud monitoring, encryption or tokenization where appropriate, and review procedures.

D.C. Security Breach Protocol. If SquareKick experiences an unauthorized security incident involving D.C. residents’ protected personal information, financial account information, transaction records, payout or tax-support records, location data, account credentials, biometric data if ever collected, or other legally protected information, SquareKick will investigate, take appropriate containment steps, coordinate with trusted services when needed, and provide notices required by applicable D.C. breach-notification law expeditiously and without unreasonable delay. Depending on the facts and legal thresholds, notice may be provided through email, account notice, website notice, direct support contact, regulator or attorney-general notice, service-provider coordination, or another legally permitted method.

Consumer health information and wellness-related signals. SquareKick does not currently require wearable-device telemetry, heart-rate data, biometric health signals, or smartwatch integrations to create an account or enter standard contest rooms. If SquareKick later offers responsible-play, wellness, biometric, behavioral, or physical-telemetry features that may create consumer health information or consumer health profiles under D.C. law, SquareKick will provide additional notice and obtain any required informed consent before collecting those metrics.

Responsible-play and behavior logs. SquareKick may review account activity, session activity, funding activity, entry patterns, support messages, self-exclusion requests, cooling-off requests, and similar platform records to support responsible play, fraud prevention, safety, eligibility review, and dispute handling. Users may request deletion of behavioral or responsible-play logs through the Contact Us page, live support, account deletion tools, or the privacy contact information listed in this Privacy Policy, subject to legal, tax, payment, payout, fraud-prevention, dispute, security, and compliance retention requirements.

D.C. automated decision-making and profiling transparency. SquareKick may use automated or AI-assisted tools, algorithmic profiling, matching rules, risk scoring, fraud-detection scripts, geolocation checks, payment and payout review signals, account-security rules, support triage, data-matching software, and contest-room eligibility logic to operate rooms, pair or place players into eligible rooms, protect users, monitor player behavior, detect abuse, prevent restricted-jurisdiction participation, and maintain fair play. SquareKick does not use these tools to guarantee outcomes or secretly change posted room rules, entry fees, platform fees, Skill Card scoring, square/digit scoring, or prize calculations.

If an automated, algorithmic, AI-assisted, fraud-prevention, geolocation, or matching review results in account restriction, entry rejection, payout delay, room access block, suspension, or other adverse action, D.C. residents may dispute the decision by contacting SquareKick through the Contact Us page, live support, account tools, or the privacy contact information listed in this Privacy Policy as the dedicated point of contact for automated-decision disputes. SquareKick may require identity, account, transaction, location, or eligibility verification before changing a restriction or releasing funds.

SquareKick may collect location-related information for D.C. users, including IP address, device-derived approximate location, browser or app permission-based location, GPS or similar precise-location signals if provided, network information, payment or payout location signals, and fraud-prevention signals. This information may be used to verify eligibility, apply restricted-jurisdiction rules, comply with platform obligations, prevent spoofing, and protect users and SquareKick.

D.C. privacy, breach, financial-data, location, automated-review, consumer-health-information, and data-security requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. We may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

12. Maryland Privacy Notice

This Maryland Privacy Notice is provided for Maryland residents and supplements the rest of this Privacy Policy. This notice addresses Maryland privacy, data-security, breach-notification, consumer-rights, geolocation, biometric, minor-data, profiling, and sensitive-data requirements that may apply to SquareKick, including the Maryland Online Data Privacy Act and the Maryland Personal Information Protection Act where applicable.

Reasonably necessary and proportionate processing. SquareKick aims to collect, use, and process only personal data that is reasonably necessary and proportionate to provide the services requested by the user, including account operation, paid room participation, Skill Card scoring, payment processing, payout and tax-support workflows, fraud prevention, geolocation and restricted-jurisdiction compliance, support, security, dispute resolution, legal compliance, and platform operation. SquareKick does not collect supplementary player metrics merely because they might be useful in the future.

Maryland sensitive data processing disclosures. Depending on the features used, sensitive data may include precise geolocation used to confirm eligibility for paid rooms, biometric-related data if future identity verification or device authentication features are introduced, account credentials, payment or payout status information, and data associated with known minors. Such data is processed only when reasonably necessary to provide the requested service, prevent fraud, verify identity or location, protect users, satisfy payment or payout requirements, or comply with law. SquareKick does not sell sensitive data, including biometric data, precise geolocation data, or data collected from known minors, and will not exchange such sensitive data for valuable consideration.

Biometric and geolocation definitions. For Maryland purposes, biometric data may include automated measurements or representations of biological characteristics used for unique identification or authentication, such as face geometry, fingerprint data, voiceprint data, or similar identifiers, if SquareKick or a trusted verification provider later introduces those features. Geolocation data may include GPS permission signals, IP-derived location, device location, network signals, payment or payout location indicators, or other location-related information used to determine whether a player is in a permitted jurisdiction.

Maryland consumer rights. Subject to applicable law, verification, and exceptions, Maryland residents may request access to personal data, correction of inaccurate personal data, deletion of personal data, and a portable copy of personal data or gaming logs that SquareKick can reasonably provide. Maryland residents may also request to opt out of profiling used for solely automated decisions that produce legal or similarly significant effects, such as automated account restrictions, paid-room access blocks, payout delays, or fraud-prevention decisions, where such opt-out rights apply.

Request and appeal process. Maryland privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, and automated-decision requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding. If SquareKick denies a Maryland privacy request, the user may contact SquareKick to request an internal appeal, and may also contact the Consumer Protection Division of the Maryland Office of the Attorney General where permitted by law.

Personal Information Protection Act breach notice. SquareKick uses reasonable administrative, technical, and organizational safeguards for personal and financial information, including transaction records, payment-service references, payout status, legal-name records, and related account information. Full card numbers, security codes, raw taxpayer identification numbers, and similar payment or tax credentials are generally processed by trusted payment, payout, or tax providers rather than stored in standard SquareKick app records. If SquareKick determines that an unauthorized breach involving Maryland personal information has occurred, impacted Maryland residents will be notified without unreasonable delay, consistent with applicable Maryland breach-notification requirements and any law-enforcement delay that may apply.

Minor-data safeguards. SquareKick is for users who are at least 18 years old. SquareKick does not knowingly allow minors to register, fund entries, join paid game rooms, receive awards, request withdrawals, or use payout features. SquareKick does not knowingly process personal data of minors for targeted advertising, sale, or profiling. If SquareKick learns that a minor has provided information or used an account, SquareKick may restrict or terminate the account and take appropriate action consistent with this Privacy Policy, the Terms of Service, and applicable law.

13. Minnesota Privacy Notice

This Minnesota Privacy Notice is provided for Minnesota residents and supplements the rest of this Privacy Policy. This notice addresses Minnesota privacy, data-security, sensitive-data, geolocation, biometric, profiling, breach-notification, minor-data, and consumer-request requirements that may apply to SquareKick, including the Minnesota Consumer Data Privacy Act, Minnesota breach-notification requirements, and related consumer-protection expectations where applicable.

Reasonably necessary and proportionate processing. SquareKick aims to collect, use, retain, and process only personal data that is directly relevant, reasonably necessary, and proportionate to provide the services requested by the user, including account registration, paid room participation, Skill Card scoring, square selection, payment processing, payout and tax-support workflows, fraud prevention, geolocation and restricted-jurisdiction compliance, responsible-play support, customer support, security, dispute resolution, legal compliance, and platform operation. SquareKick does not collect additional player metrics merely because they might be useful later.

Minnesota sensitive data consent. Depending on the features used, sensitive data may include precise geolocation, biometric data used for unique identification, account credentials, payment or payout status information, data associated with minors, or other protected categories under applicable law. Where Minnesota law requires affirmative opt-in consent before processing sensitive data, SquareKick will seek that consent before using such data for the covered purpose. If a user does not provide required geolocation, identity, or eligibility information, SquareKick may be unable to provide access to paid rooms, payouts, withdrawals, or certain account features.

Precise geolocation and biometric safeguards. For Minnesota purposes, precise geolocation may include GPS, browser, device, or similar location signals capable of identifying a user within a narrow radius, including location used to confirm eligibility for paid game rooms. Biometric data may include automated measurements or representations of biological characteristics used for unique identification, such as face geometry, fingerprint data, voiceprint data, or similar identifiers, if SquareKick or a trusted verification provider later introduces those features. Such processing is limited to purposes such as identity review, fraud prevention, account security, device authentication, and jurisdiction compliance, where available and legally permitted.

Behavioral, responsible-play, and health-related telemetry. SquareKick may review account activity, room participation, session activity, payment or withdrawal activity, support messages, self-exclusion requests, cooling-off requests, play-limit requests, and responsible-play signals to operate the platform, support user safety, prevent abuse, and respond to user requests. SquareKick does not intentionally collect smart-device health metrics, heart-rate data, or medical telemetry for advertising. If future features collect physical indicators or health-related telemetry for responsible-play or safety purposes, SquareKick will disclose the feature, seek any required consent, securely store the data, and avoid sharing it with third-party advertisers.

Minnesota consumer privacy rights. Subject to applicable law, verification, and exceptions, Minnesota residents may request access to personal data, correction of inaccurate personal data, deletion of personal data, and a portable copy of personal data or gaming logs that SquareKick can reasonably provide. Minnesota residents may also request to opt out of profiling used for solely automated decisions that produce legal or similarly significant effects, such as automated account restrictions, paid-room access blocks, payout delays, or fraud-prevention decisions, where such rights apply.

Profiling opt-out and appeal process. Minnesota privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, and automated-decision requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding. If SquareKick denies a Minnesota privacy request, the user may request an internal appeal. If the appeal is denied or unresolved, the user may submit a complaint to the Minnesota Attorney General’s Office where permitted by law.

Breach notification and financial-data security. SquareKick uses reasonable administrative, technical, and organizational safeguards for personal and financial information, including account records, transaction histories, payment-service references, payout status, wallet or ledger activity, legal-name records, and related records. Full card numbers, security codes, raw bank credentials, taxpayer identification numbers, and similar payment, payout, or tax credentials are generally processed by trusted payment, payout, or tax providers rather than stored in standard SquareKick app records. If SquareKick determines that an unauthorized breach involving Minnesota personal information has occurred, impacted Minnesota residents will be notified immediately and without unreasonable delay, consistent with applicable Minnesota breach-notification requirements and any law-enforcement delay that may apply.

Minor-data safeguards. SquareKick is for users who are at least 18 years old. SquareKick does not knowingly allow minors to register, fund entries, join paid game rooms, receive awards, request withdrawals, or use payout features. SquareKick does not knowingly process minors’ personal data for targeted advertising, sale, or profiling. If SquareKick learns that a minor has provided information or used an account, SquareKick may restrict or terminate the account and take appropriate action consistent with this Privacy Policy, the Terms of Service, and applicable law.

14. New York Privacy Notice

This New York Privacy Notice is provided for New York residents and supplements the rest of this Privacy Policy. This notice addresses New York privacy, security, breach-notification, child-data, biometric, geolocation, financial-data, profiling, automated-review, and consumer-protection requirements that may apply to SquareKick, including the New York SHIELD Act and related New York digital-safety and consumer-protection expectations where applicable.

New York SHIELD Act security safeguards. SquareKick may process New York private information, including legal names combined with account credentials, financial transaction references, payment or payout-service tokens, device identifiers, location signals, identity-verification records, biometric identifiers if introduced through a trusted verification provider, or other protected data elements. SquareKick maintains reasonable administrative, technical, and organizational safeguards designed to protect such information, including access controls, secure transmission, service-provider controls, logging, monitoring, and limited retention practices appropriate to the nature of the data and the services provided.

Financial, payment, and payout information. SquareKick may collect or receive records related to entry fees, wallet or ledger balances, payment intent references, transaction history, payout onboarding, withdrawal requests, refund records, tax-support status, fraud review, and compliance review. Full card numbers, security codes, raw bank credentials, taxpayer identification numbers, and similar payment, payout, or tax credentials are generally processed by trusted payment, payout, or tax providers rather than stored in standard SquareKick app records. SquareKick uses these records to operate game rooms, process payments, support withdrawals and payouts, prevent fraud, comply with law, resolve disputes, and maintain required financial records.

New York breach notification. If SquareKick determines that an unauthorized acquisition, access, or disclosure of New York private information has occurred and legal notice is required, SquareKick will notify affected New York residents within the timeframe required by applicable New York law, including within 30 days of discovery where such timing applies, subject to any lawful delay requested by law enforcement and any permitted investigation necessary to determine the scope of the incident, restore system integrity, and identify affected users. SquareKick may also notify regulators, trusted services, payment processors, payout providers, tax-support vendors, or other required parties when legally required or operationally necessary.

New York minor data disclosures. SquareKick is for users who are at least 18 years old and does not knowingly allow minors to register, fund entries, join paid game rooms, receive awards, request withdrawals, or use payout features. If SquareKick ever permits New York users aged 13 to 17 to access a non-paid informational or non-prize feature, SquareKick will not knowingly profile, track, sell, share, or process teen player data for targeted advertising or addictive-feed-style engagement without the explicit, informed affirmative consent required by applicable law. SquareKick does not design its paid room experience for minors.

Biometric privacy and local-device authentication. SquareKick does not require biometric data for ordinary account registration or paid-room participation unless a specific identity, fraud-prevention, device-authentication, or payout-verification feature later discloses and obtains any required consent. Device-level biometric authentication tools, such as Face ID, Touch ID, or similar operating-system features, are generally processed locally by the user’s device provider and are not stored in a SquareKick corporate biometric database. If SquareKick or a verification provider later processes selfie verification, face geometry, fingerprint, voiceprint, or similar identifiers for unique identification, SquareKick will disclose the purpose, retention approach, service-provider role, and user choices required by applicable law.

Geolocation and restricted-jurisdiction checks. SquareKick may process location-related information such as GPS permission signals, browser or device location, IP address, IP triangulation, network signals, payment or payout region indicators, and fraud-prevention signals to determine whether a user may access paid rooms, withdrawals, payouts, or other regulated features. Location data is used to support eligibility, restricted-jurisdiction compliance, fraud prevention, account security, dispute resolution, and legal compliance.

Profiling, automated review, and dispute rights. SquareKick may use automated or AI-assisted tools, rules, risk scoring, matching checks, payment-review checks, geolocation checks, device checks, or fraud-prevention workflows to detect abuse, restrict access, delay payouts, protect users, and enforce posted rules. Users may contact SquareKick through the Contact Us page, Live Chat support icon, account tools, or the privacy contact methods listed in this Privacy Policy to request review of an automated restriction, fraud flag, account suspension, payout hold, or location-based access decision. SquareKick may require identity, account, transaction, and location verification before changing a restriction or releasing funds.

15. Oklahoma Privacy Notice

This Oklahoma Privacy Notice is provided for Oklahoma residents and supplements the rest of this Privacy Policy. This notice addresses Oklahoma consumer privacy, sensitive-data consent, geolocation, biometric, automated profiling, data-rights, computer-security, fraud-prevention, breach-notification, and consumer-protection requirements that may apply to SquareKick where Oklahoma law applies.

Oklahoma Consumer Data Privacy Act rights. Oklahoma residents may request access to, correction of, deletion of, or a portable copy of personal data associated with their SquareKick account, including account records, game-room participation history, Skill Card answers, ranking and tiebreaker records, payment or payout references, wallet or ledger records, support records, and fraud or compliance review records, subject to identity verification, legal retention, security, dispute, tax, payment, payout, fraud-prevention, and compliance exceptions. Users may submit requests through the Contact Us page, Live Chat support icon, account tools, or the privacy contact methods listed in this Privacy Policy.

Data minimization and proportional processing. SquareKick limits the personal data it collects, uses, and processes to information reasonably necessary and proportionate to provide the requested services, including account registration, age and identity review, room entry, Skill Card participation, payment processing, wallet and withdrawal support, payout onboarding, tax-support records, fraud prevention, location eligibility, customer support, dispute resolution, security, and legal compliance. SquareKick does not intend to collect supplementary player metrics unrelated to the services provided.

Sensitive data opt-in consent. Where Oklahoma law requires affirmative consent before processing sensitive data, SquareKick will seek the required opt-in consent before processing precise geolocation, biometric identifiers used for unique identification, government identification data, or other sensitive data categories for features such as jurisdiction verification, fraud prevention, account security, payout review, or identity verification. If a user declines or revokes required consent, SquareKick may be unable to permit paid-room participation, withdrawals, payouts, or other regulated features that depend on such verification.

Precise geolocation and biometric data. SquareKick may process GPS signals, IP address, IP triangulation, browser or device location, network signals, payment or payout region indicators, and fraud-prevention signals to determine whether a user may access paid rooms, withdrawals, payouts, or other regulated features. SquareKick does not require biometric data for ordinary registration unless a specific identity, fraud-prevention, device-authentication, or payout-verification feature later discloses and obtains any required consent. Device-level biometric authentication such as Face ID, Touch ID, or similar operating-system features is generally processed locally by the user’s device provider and is not stored in a SquareKick corporate biometric database.

Automated profiling and appeal rights. SquareKick may use automated or AI-assisted tools, rules, risk scoring, matching checks, payment-review checks, geolocation checks, device checks, bot-detection tools, or fraud-prevention workflows to detect abuse, restrict access, delay payouts, protect users, and enforce posted rules. Oklahoma residents may request review of an automated restriction, fraud flag, matching decision, account suspension, payout hold, or location-based access decision. Where an Oklahoma privacy rights request or appeal is denied, the user may have the right to contact or file a complaint with the Oklahoma Attorney General’s Office as provided by applicable law.

Authorized data retrieval and device signals. SquareKick may retrieve, store, or communicate limited device, session, network, browser, IP, hardware-signal, security, or fraud-prevention information when a user accesses the service, attempts to enter paid rooms, submits Skill Card answers, requests payouts, or uses payment or wallet features. Such data retrieval is performed for authorized security, fraud prevention, cheating prevention, bot detection, location eligibility, account protection, payment review, and legal-compliance purposes.

Oklahoma Computer Crimes Act notice. Users may not gain unauthorized access to SquareKick systems, servers, databases, source code, accounts, payment records, payout records, wallet records, logs, or administrative tools; alter or falsify data records; inject malicious code; scrape protected content; deploy automated macros, bots, scripts, or credential attacks; interfere with service operations; or attempt to bypass security controls. SquareKick may suspend accounts, preserve records, cancel entries, void awards, hold funds where legally permitted, and report suspected unauthorized computer access, bots, macros, data tampering, or other security incidents to appropriate authorities where required or appropriate.

Financial and breach notification safeguards. SquareKick may collect or receive records related to entry fees, payment intent references, wallet or ledger balances, payout onboarding, withdrawal requests, refunds, tax-support status, fraud review, and compliance review. Full card numbers, security codes, raw bank credentials, taxpayer identification numbers, and similar payment, payout, or tax credentials are generally processed by trusted services rather than stored in ordinary app records. SquareKick uses administrative, technical, organizational, access-control, encryption, logging, and service-provider safeguards appropriate to the data processed. If SquareKick determines that an unauthorized data breach affecting Oklahoma residents has occurred and notice is legally required, SquareKick will provide notice in accordance with applicable law and without unreasonable delay, subject to lawful investigation and any permitted law-enforcement delay.

16. Washington Privacy Notice

This Washington Privacy Notice is provided for Washington residents and supplements the rest of this Privacy Policy. This notice addresses Washington privacy, consumer-health-data, security, geolocation, biometric, profiling, automated-review, data-rights, and consumer-protection requirements that may apply to SquareKick, including Washington My Health My Data Act considerations, Washington consumer data-rights expectations, and related security obligations where applicable.

Washington consumer health data and responsible-play telemetry. SquareKick is not a healthcare provider and does not seek to collect medical records. However, Washington law may treat certain wellness, behavioral, biometric, or responsible-play signals as consumer health data if they reveal or infer a physical or mental health status. SquareKick may review session activity, room participation, payment or withdrawal activity, support messages, self-exclusion requests, cooling-off requests, play-limit requests, and responsible-play signals to operate the platform, support user safety, prevent abuse, and respond to user requests. SquareKick does not intentionally collect smart-device heart-rate data, wearable telemetry, medical records, or biometric performance data for advertising. If future features collect consumer health data, biometric telemetry, compulsive-play indicators, or similar sensitive behavioral telemetry for responsible-play or safety purposes, SquareKick will provide a dedicated Washington Consumer Health Data disclosure and obtain any separate, affirmative opt-in consent required by applicable law before collecting or processing that data.

Separate consent for sensitive telemetry. Where Washington law requires separate affirmative consent for consumer health data, precise geolocation, biometric identifiers, or sensitive behavioral telemetry, SquareKick will request that consent before using the covered data for the disclosed purpose. If a user does not provide required location, identity, eligibility, or safety-related permissions, SquareKick may be unable to provide access to paid game rooms, payouts, withdrawals, or certain account features.

Washington consumer data rights. Subject to applicable law, verification, and exceptions, Washington residents may request confirmation of whether SquareKick processes their personal data, access to personal data, correction of inaccurate personal data, deletion of personal data, and a portable copy of personal data, game-room history, Skill Card records, transaction records, or support records that SquareKick can reasonably provide. Washington residents may also request to opt out of profiling used for automated decisions with legal or similarly significant effects, such as automated account restrictions, paid-room access blocks, payout delays, or fraud-prevention decisions, where such rights apply.

Profiling, automated review, matchmaking, and fraud prevention. SquareKick may use automated or AI-assisted tools, rules, risk scoring, matching checks, device checks, payment-review checks, geolocation checks, or fraud-prevention workflows to place or validate entries, detect abuse, restrict access, delay payouts, protect users, and enforce posted rules. Users may contact SquareKick through the support and privacy request methods listed in this Privacy Policy to request human review, submit a dispute, or request opt out where Washington law provides an applicable profiling opt-out right.

Geolocation, GPS, IP, and jurisdiction verification. SquareKick may process location-related information, including GPS permission signals, browser or device location, IP address, IP triangulation, network data, payment or payout region indicators, and fraud-prevention signals, when reasonably necessary to verify eligibility, enforce restricted jurisdictions, prevent fraud, secure the platform, process payments or payouts, or satisfy legal obligations. These signals may be used at account creation, login, room entry, payment, payout, withdrawal, support, dispute, and compliance-review points.

Biometric and local-device authentication. SquareKick does not require biometric identifiers or biometric information for ordinary account registration or standard paid-room participation unless a specific identity, fraud-prevention, device-authentication, or payout-verification feature later discloses and obtains any required consent. Device-level biometric authentication tools, such as Face ID, Touch ID, fingerprint unlock, or similar operating-system features, are generally processed locally by the user’s device or platform provider and are not stored in a SquareKick corporate biometric database. If SquareKick or a verification provider later processes selfie verification, face geometry, fingerprint, voiceprint, hand-movement, or similar identifiers for unique identification or gameplay verification, SquareKick will disclose the purpose, provider role, retention approach, user choices, sharing practices, and consent requirements before processing where required by law.

Security, sharing, and advertiser limits. SquareKick uses administrative, technical, and organizational safeguards designed to protect account records, payment references, payout records, Skill Card records, wallet or ledger records, support records, location-verification records, and responsible-play records. SquareKick does not sell consumer health data, precise geolocation, biometric identifiers, or known minor data to third-party advertisers. If any future feature requires sharing Washington consumer health data or similar sensitive data with a trusted service, SquareKick will disclose the category of data, purpose, recipient type, and user choices before doing so where required by applicable law.

Request methods. Washington privacy, deletion, correction, portability, sensitive-data, consumer-health-data, geolocation, profiling, automated-decision, and responsible-play-data requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

17. Colorado Privacy Notice

This Colorado Privacy Notice is provided for Colorado residents and supplements the rest of this Privacy Policy. This notice addresses the Colorado Privacy Act, C.R.S. § 6-1-1301 et seq., the Colorado Data Breach Notification Law, C.R.S. § 6-1-716, and related Colorado privacy, security, geolocation, biometric, automated-profiling, consumer-rights, and data-security requirements that may apply to SquareKick.

Colorado sensitive data consent. SquareKick may process sensitive data only where reasonably necessary and permitted, such as precise geolocation used to verify eligibility and restricted jurisdictions, biometric-related information only where a supported identity or device-authentication workflow requires it, payment or payout information used for transactions, and compliance information used for fraud prevention, tax support, dispute handling, and platform security. Where Colorado law requires affirmative opt-in consent before processing sensitive data, SquareKick will seek that consent before using the covered data for the applicable purpose.

Precise geolocation and biometric safeguards. Location-related data may be used to confirm that a player is physically located in a permitted jurisdiction, prevent location spoofing, satisfy compliance checks, and protect the integrity of paid rooms. If device-level Face ID, Touch ID, fingerprint unlock, or similar local authentication is used, those features are generally handled by the device or operating system, and SquareKick does not intend to store raw biometric templates in standard app records.

Colorado consumer privacy rights. Colorado residents may request to confirm whether SquareKick processes their personal data, access personal data, correct inaccuracies, delete personal data, and obtain a portable digital copy of personal data, gaming history, account records, Skill Card records, payment and payout records, and other applicable logs, subject to legal, security, fraud-prevention, payment, payout, tax, accounting, dispute, and operational exceptions.

Universal opt-out mechanisms and profiling. Where required by Colorado law, SquareKick will recognize and respect supported universal opt-out mechanisms, such as Global Privacy Control, for covered processing such as targeted advertising, sale of personal data, or certain profiling. SquareKick does not intend to sell personal data for money or use personal data for cross-context behavioral advertising. If SquareKick uses automated fraud-detection, data-matching, room integrity, risk scoring, or automated review tools that produce legal or similarly significant effects, Colorado residents may request review, opt out where applicable, or dispute an automated restriction through the Contact Us, Live Chat, or privacy contact methods.

Appeals and complaints. If SquareKick denies a Colorado privacy request, the resident may appeal using the privacy contact methods listed in this Privacy Policy. If an appeal is denied or unresolved, the resident may contact the Colorado Attorney General's Office or another authorized regulator as permitted by applicable law.

Colorado breach notification. SquareKick uses reasonable administrative, technical, and organizational safeguards, including encryption and access controls where appropriate, to protect names, account credentials, payment and payout tokens, financial records, identity or eligibility records, geolocation records, Skill Card records, wallet records, and other sensitive account information. If an unauthorized security breach exposes unencrypted covered personal information of Colorado residents, SquareKick will notify affected Colorado residents within the time required by Colorado law, currently within 30 days of discovery where applicable, unless a lawful delay applies.

18. Georgia Privacy Notice

This Georgia Privacy Notice is provided for Georgia residents and supplements the rest of this Privacy Policy. This notice addresses Georgia consumer privacy, sensitive-data consent, geolocation, biometric, automated profiling, data-rights, breach-notification, financial-data security, and consumer-protection requirements that may apply to SquareKick where Georgia law applies.

Georgia Consumer Privacy Rights. Subject to applicable law, verification, and exceptions, Georgia residents may request access to personal data SquareKick maintains about them, correction of inaccurate personal data, deletion of personal data, and a portable digital copy of personal data, game-room logs, Skill Card records, transaction records, payout records, support records, and other account records that SquareKick can reasonably provide.

Sensitive-data opt-in consent. Where Georgia law requires affirmative opt-in consent for sensitive data, SquareKick will request that consent before processing covered data for the disclosed purpose. Sensitive data may include precise geolocation data used to verify a player’s location or eligibility and biometric data used for unique identification, secure device profile logins, fraud prevention, or account security. If a user does not provide required location, identity, security, or eligibility permissions, SquareKick may be unable to provide paid game rooms, payouts, withdrawals, or other restricted account features.

Geolocation and boundary verification. SquareKick may process location-related information, including GPS permission signals, browser or device location, IP address, IP triangulation, network data, payment or payout region indicators, and fraud-prevention signals, when reasonably necessary to verify eligibility, enforce restricted jurisdictions, prevent fraud, secure the platform, process payments or payouts, or satisfy legal obligations. These checks may occur at registration, login, room entry, payment, payout, withdrawal, support, dispute, and compliance-review points.

Biometric and local-device authentication. SquareKick does not require biometric identifiers or biometric information for ordinary account registration or standard paid-room participation unless a specific identity, fraud-prevention, device-authentication, or payout-verification feature later discloses and obtains any required consent. Device-level biometric authentication tools, such as Face ID, Touch ID, fingerprint unlock, or similar operating-system features, are generally processed locally by the user’s device or platform provider and are not stored in a SquareKick corporate biometric database. If SquareKick or a verification provider later processes selfie verification, face geometry, fingerprint, voiceprint, or similar identifiers for unique identification, SquareKick will disclose the purpose, provider role, retention approach, sharing practices, and consent requirements before processing where required by law.

Automated profiling, matching, and fraud review. SquareKick may use automated or AI-assisted tools, rules, risk scoring, matching checks, device checks, payment-review checks, geolocation checks, or fraud-prevention workflows to validate entries, help administer game rooms, detect abuse, restrict access, delay payouts, protect users, and enforce posted rules. Georgia residents may contact SquareKick to request human review, dispute an automated account restriction, or request opt out of automated profiling or targeted marketing where such rights apply.

Appeals and Georgia Attorney General escalation. If SquareKick denies a Georgia privacy or profiling request, the user may appeal using the support and privacy request methods listed in this Privacy Policy. If an appeal is denied, Georgia residents may have the right to contact or file an escalation with the Georgia Attorney General’s Consumer Protection Division or other applicable authority, subject to applicable law.

Financial-data safeguards and breach notification. SquareKick may process legal names, account identifiers, payment references, debit card or bank-account tokens, wallet or ledger records, payout records, tax-support information, and transaction histories through payment processors and trusted services. SquareKick uses administrative, technical, and organizational safeguards, including encryption or tokenization where appropriate, designed to protect these records. If an unauthorized security breach exposes unencrypted Georgia player profiles, financial payloads, or other covered personal information, SquareKick will provide notice to affected Georgia residents in accordance with applicable law, including any legally required rapid notification window such as notice within 72 hours of discovery where that standard applies.

Data minimization and sharing limits. SquareKick aims to collect and process Georgia user data only as reasonably necessary and proportionate to provide requested services, operate game rooms, verify eligibility, prevent fraud, secure the platform, process payments and payouts, support tax and compliance workflows, provide support, enforce rules, and comply with legal obligations. SquareKick does not sell precise geolocation, biometric identifiers, known minor data, or sensitive payment or payout data to third-party advertisers.

Request methods. Georgia privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, automated-decision, and breach-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

19. Virginia Consumer Privacy Notice

This Virginia Consumer Privacy Notice is provided for Virginia residents and supplements the rest of this Privacy Policy. This notice addresses the Virginia Consumer Data Protection Act, Va. Code § 59.1-575 et seq., the Virginia personal information notice and data breach law, Va. Code § 18.2-186.6, and related Virginia privacy, security, geolocation, biometric, automated-profiling, consumer-rights, and data-security requirements that may apply to SquareKick.

Virginia sensitive data consent. SquareKick may process sensitive data only where reasonably necessary and permitted, such as precise geolocation used to verify eligibility and restricted jurisdictions, biometric-related information only where a supported identity or device-authentication workflow requires it, payment or payout information used for transactions, and compliance information used for fraud prevention, tax support, dispute handling, and platform security. Where Virginia law requires explicit, affirmative opt-in consent before processing sensitive data, SquareKick will request that consent before using the covered data for the applicable purpose.

Precise geolocation and biometric safeguards. Location-related information may be used to confirm that a player is physically located in a permitted jurisdiction, prevent location spoofing, satisfy compliance checks, and protect the integrity of paid rooms. If device-level Face ID, Touch ID, fingerprint unlock, or similar local authentication is used, those features are generally handled by the device or operating system, and SquareKick does not intend to store raw biometric templates in standard app records. If SquareKick or a verification provider later processes selfie verification, facial geometry, fingerprint, voiceprint, or similar identifiers for unique identification, SquareKick will disclose the purpose, provider role, retention approach, sharing practices, and consent requirements before processing where required by law.

Virginia consumer privacy rights. Subject to applicable law, verification, and exceptions, Virginia residents may request to confirm whether SquareKick processes their personal data, access personal data, correct inaccuracies, delete personal data, and obtain a portable digital copy of personal data, gaming history, account records, Skill Card records, matchmaking or room history, payment and payout records, and other applicable logs that SquareKick can reasonably provide.

Automated profiling, targeted advertising, and opt-out rights. SquareKick does not intend to sell personal data for money or use personal data for targeted advertising without appropriate notice and rights. If SquareKick uses automated fraud-detection, data-matching, room integrity, risk scoring, or automated review tools that produce legal or similarly significant effects, Virginia residents may request review, opt out where applicable, or dispute an automated restriction through the Contact Us, Live Chat, or privacy contact methods. These tools may be used to detect fraud, multi-accounting, location spoofing, payment abuse, payout risk, policy violations, or other security concerns.

Appeals and Virginia Attorney General escalation. If SquareKick denies a Virginia privacy request, the resident may appeal using the privacy contact methods listed in this Privacy Policy. If an appeal is denied or unresolved, the resident may submit an escalation complaint to the Office of the Attorney General of Virginia or another authorized regulator as permitted by applicable law.

Virginia breach notification and financial-data safeguards. SquareKick uses reasonable administrative, technical, and organizational safeguards, including encryption and access controls where appropriate, to protect names, account credentials, payment references, debit-card or bank-token references, payout records, tax-support records, Skill Card records, wallet or ledger records, support records, and location-verification records. If an unauthorized security breach exposes unencrypted personal information of Virginia residents in a manner requiring notice under Va. Code § 18.2-186.6, SquareKick will notify affected residents without unreasonable delay, subject to lawful investigative, security, or remediation needs.

Minor-data safeguards. SquareKick is for users aged 18 or older. SquareKick does not knowingly allow minors to enter paid game rooms or maintain paid prize accounts. Where Virginia law, the VCDPA, COPPA, or other applicable law imposes additional requirements for known children or minors, SquareKick will restrict participation, suspend accounts, delete or limit data where legally permitted, and retain only records reasonably necessary for legal, fraud-prevention, dispute, tax, payment, payout, or compliance purposes.

Request methods. Virginia privacy, deletion, correction, portability, sensitive-data, geolocation, profiling, automated-decision, targeted-advertising, and breach-related requests may be submitted through the Contact Us page, the Live Chat support icon, account deletion tools available inside the platform, or the privacy contact information listed in the Contact section of this Privacy Policy. SquareKick may verify identity, account ownership, residency, transaction history, location, and request authority before responding.

20. User Rights

Subject to applicable law, you may request:

Requests may be submitted through our support contact points available on https://squarekick.org. Logged-in users may also initiate an account deletion request from the Account Deletion page linked inside the platform. We may retain records when reasonably necessary for legal, tax, payment, payout, fraud-prevention, dispute-resolution, security, or compliance purposes.

• Access to your personal information
• Correction of inaccurate information
• Deletion of your account and personal information where legally permitted
• Applicable opt-out or limitation rights where required by state privacy law

21. Age Restriction

SquareKick is for users aged 18 years or older. If we learn that we have collected personal information from a person under 18, we may suspend the account and delete the information where legally permitted.

22. Mobile Application Usage

The SquareKick mobile application provides access to substantially the same services as our website, including contest participation views, two-stage Skill Card pages, wallet-related features, notification features, support/contact features, and policy pages. Data collected through the mobile app is processed in accordance with this Privacy Policy.

23. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform after an update constitutes acceptance of the revised policy to the extent permitted by law.

24. Contact

For privacy questions or requests, please contact us through:

SquareKick LLC

privacy@squarekick.org

3008 Presidio Circle

Carrollton, Texas 75007

Support query options are also available at the SquareKick’s Contact Us page.

You can also directly chat with us using the Live Chat icon available on all SquareKick front end pages.