Last Revised on October 14, 2026

This Privacy Policy for Rider Rodeo LLC (“Company,” “we,” “us,” “our”) describes how we collect, use, and disclose information about users of the Company’s website https://www.riderrodeo.com, the Company app Rider Rodeo Cash (“App”), and related services, tools, and features (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services.

Please read this Privacy Policy carefully. By using, accessing, or downloading any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, you may not use, access, or download any of the Services.

Updating This Privacy Policy

We may modify this Privacy Policy from time to time, in which case we will update the “Last Revised” date at the top of this Privacy Policy. If we make material changes to the way in which we use information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on our Website and/or the App, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not access or continue to use the Services.

Our Collection and Use of Information

When you access or use the Services, we may collect certain categories of information about you from a variety of sources.

This Privacy Policy covers our use of any information that can or could be used to identify you (“Personal Data”). It does not cover information which cannot be used to identify you (“Anonymous Data”). We need to collect and use certain Personal Data to provide the Services to you and fulfill the promises we make to you in the Terms of Service.

Some features of the Services may require you to directly enter certain information about yourself. We provide you with choices regarding the collection, use, and sharing of your Personal Data. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services may include:

Account and Registration. Users may access our App only if they register an Account with us. The Personal Data we collect as part of the Account creation process includes your first and last name, email, password, information to confirm you are old enough to use the Services and the App, and payment information for Subscription Fees, Entry Fees, or storage of funds in your Wallet. Wallet balances are governed by the Terms of Service and are subject to verification, compliance review, and applicable law. We may also ask you, or allow you, to submit certain optional information, which may include your notification and gameplay preferences and settings.

Age and Eligibility Information. As part of registration and ongoing eligibility, we collect self-disclosed information used to confirm that you are at least eighteen (18) years of age (or the age of majority in your jurisdiction), including your date of birth. You are responsible for the accuracy of this information as described in our Terms of Service. Where we perform identity or age verification, we (or our verification vendors) may collect additional information as described under “Identity Verification (KYC) and Anti-Fraud Information” below.

Subscription and Billing Information. Because participation in real-money Cash Games requires an active, auto-renewing Subscription, we (and our payment processor) collect and process information related to your Subscription, including your subscription status, plan, enrollment and renewal dates, billing history, the payment method used, and records of your consent to recurring charges. We retain records of your auto-renewal consent and related disclosures as required by applicable automatic-renewal laws.

External Account Sign-On. You may be required to have an account with a supported external single sign-on service in order to use some of our Services. Where this is the case, the Personal Data we collect also depends on which external accounts you choose to use, their privacy policy, and your privacy settings with those services. For example: if you link your Google account, we will collect your Google email address and an authentication token provided by Google; if you link your Facebook account, we will collect a unique user ID provided by Facebook and, if permitted by you, your Facebook-registered email address; and if you link your Apple account, we will collect your email address on file with your Apple ID account or a private relayed email address if you use the Hide My Email option provided by Apple. Depending on the particular Service you sign up for, we may support other external single sign-on services and collect additional Personal Data from them.

Location of Your Device; Geolocation. We collect and use your device location information as you use our Services (and, if you elect to turn on background location tracking for participating Services, while you are not directly interacting with these Services), including how you move around and events that occur during in-app activity or gameplay. Because real-money Cash Games are offered only in permitted jurisdictions, we also collect and verify your precise geolocation to confirm that you are not located in a Prohibited Jurisdiction at registration, when you join a Cash Game, when you withdraw Winnings, and at other times. If you disable or interfere with geolocation, we may be unable to permit you to participate in Cash Games. We further use the information above in order to provide technical and customer support to you.

Identity Verification (KYC) and Anti-Fraud Information. To comply with our legal, tax, anti-fraud, and anti-money-laundering obligations and to protect the integrity of the Platform, we (and our third-party verification and payment vendors) may collect information necessary to verify your identity, age, residency, and payment method. This may include a copy of a government-issued identification document, the last four digits or other elements of a Social Security or Taxpayer Identification Number, date of birth, address, and information derived from your device and gameplay used to detect fraud, collusion, multi-accounting, or cheating.

Personal Data. When you interact with our Services (e.g., making purchases, subscribing, registering for events, entering competitions, or communicating with us), we collect personal data such as your name, address, phone number, country, age, and email. This data is used to fulfill services and provide customer support.

Legitimate Interests

We use your personal data for the following purposes based on legitimate interests:

• Usage Data: Collecting IP address, browser type, operating system, visited pages, time spent, clicks, device and advertising identifiers, age, gender, in-app actions, settings, preferences, and purchases to understand user behavior and improve services.

• Communication: Using your email to provide technical and customer support.

• Service Improvement: Enhancing and adding new features to our services.

• Anti-Fraud and Integrity Measures: Using device, location, and in-app data to prevent fraud, cheating, collusion, multi-accounting, and unlawful access, and to verify eligibility and location.

• Legal and Regulatory Compliance: Making necessary legal or regulatory disclosures, including tax reporting and recordkeeping for Wallet and Subscription activity.

Consent-Based Usage

We will use your personal data for the following purposes only with your consent:

• Marketing: Sending marketing materials via email or in-app notifications (opt-out available).

You can manage your preferences and opt-out options through device or in-app settings.

Prizes and Payments. We collect information to process prize Winnings, administer payments, comply with the law (including requiring IRS Form W-9 when necessary), and maintain records of prizes, which may include your email, full name, mailing address, Social Security or Taxpayer Identification Number, and other information necessary to complete a Form 1099-MISC and other relevant tax documentation.

Feedback. We collect and maintain records of customer service and other communications with users, including survey responses, questions, or comments sent to us (including the nature of the request and name and contact information). This information may be used to enhance the Services or the App and to market to you or others.

Custom Content. We may use the information we collect automatically to tailor features and content to you, to market to you, to provide you with offers or promotions, to run analytics, and to better understand user interaction with the Services.

Outside Sources. We may obtain information about you from outside sources, including identity-verification, fraud-prevention, and payment vendors. Any information we receive from outside sources will be treated in accordance with this Privacy Policy.

Legal Requirements. In addition to the foregoing, we may use any of the above information to comply with applicable legal obligations, improve and develop the Services, enforce any applicable terms of service, protect or defend the Services and the rights of our users or others, and combat fraud, or to otherwise operate our business. This Privacy Policy is integrated into and is expressly a part of the Terms of Service, to be interpreted in conjunction with such Terms. Any capitalized term not defined herein shall have the meaning ascribed to it in the Terms of Service.

Account Information; Deleting Your Account

You can review or change your account information at any time in your account settings. You can also request deletion of your account from within the App, at ACCOUNT → DELETE ACCOUNT, or by contacting us at privacy@riderrodeo.com. Deleting your account is not the same as deactivating it. When you request deletion, we close your account permanently: your login credentials are destroyed, the account cannot be restored or logged into, your profile information is removed, and your contact information is deleted from our marketing and messaging systems. To keep your deletion effective, we retain your email address in a disabled, suppressed state so that it cannot be used to register a new account; that record cannot be logged into and is not used for any other purpose. We then delete everything we are not required to keep. What we are required to keep is listed under “Data Retention” below. That information is moved to a restricted archive and is used only for the specific purposes that require us to keep it — tax reporting, financial-crime and fraud compliance, and establishing or defending legal claims — and is not used to operate the Services, for analytics, or for marketing. Each category is deleted or irreversibly anonymized when the period stated below expires. We cannot complete a deletion request while your account holds deposited funds, or while a deposit or withdrawal is still in progress. Deposited funds cannot be withdrawn in the App — our support team will return them to your linked bank account before the deletion completes. If you have Winnings, withdraw them before requesting deletion: once your account is deleted you will no longer be able to withdraw them in the App, and any amount left unclaimed will be handled as required by law.

Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, to operate the Services, and to comply with applicable legal, regulatory, tax, and accounting requirements. Our retention periods are as follows.

• Identity Information. Your legal name, date of birth, taxpayer identification number, and address are retained for seven (7) years following December 31 of the later of (i) the year in which we last made a reportable payment to you and (ii) the year in which your account closed. We keep these records to support the tax information returns we are required to file and the customer-identification records that financial-crime rules require.

• Financial Records. Wallet balances, deposit and withdrawal records, Entry Fee and transaction history, subscription records, and records of your authorization for recurring charges are retained for seven (7) years from the transaction or from the end of the Subscription.

• Bank Account Details. When you request deletion, we immediately truncate your linked bank account number so that only the last four digits remain. The payment token used by our processor is retained for five (5) years with the related transaction record and is then deleted.

• Identity Verification (KYC) Records. Verification results and any identity documents you submitted are retained for five (5) years from verification or from account closure, whichever is later. Where a record supports a report we are required to file with a government authority, it is retained for five (5) years from that filing.

• Geolocation Check History. Records of location checks are retained for five (5) years. We then reduce them to the jurisdiction and the result of the check and delete precise location data.

• Account and Transaction Audit Logs. Logs of account activity and money movement are retained for five (5) years from the event, and are then deleted or stripped of information identifying you.

• Self-Exclusion and Responsible Play Records. If you self-exclude, we keep a minimal record for as long as the exclusion is in effect, and indefinitely where you have excluded yourself permanently. Deleting this record would defeat your own request by allowing a new account to be opened. The record contains only an irreversible identifier and the terms of your exclusion.

• Marketing and Communications Data. Contact information and marketing preferences are deleted from our marketing and messaging systems as soon as you opt out or close your account.

• Suppressed Login Record. When you delete your account, we keep your email address in a disabled, suppressed state so that the same address cannot be used to register a new account and your deletion remains effective. This record cannot be logged into, is not used to contact you, and is kept only for as long as the suppression is maintained.

• Records of Your Requests. We keep the minimum record of a deletion request necessary to ensure that your data remains deleted, and we do not use that record for any other purpose.

When Personal Data is no longer required for these purposes, we delete it or irreversibly anonymize it so that it can no longer be associated with you or with your device. Information that has been irreversibly anonymized is not Personal Data and may be retained and used, including in aggregate form.

Deletion Requests and Our Service Providers. When we receive a deletion request from you, we also instruct the service providers that hold your data on our behalf — including our payment processor, our identity-verification provider, and our geolocation-compliance provider — to delete it from their records, and we direct them to pass that instruction to their own subprocessors. A service provider may retain data where its own legal or regulatory obligations require it to do so, such as the financial-crime recordkeeping rules that apply to our payment processor. Where that is the case, the retained data is kept only for that purpose.

Parties We May Share Your Information With

We will not share any Personal Data that we have collected from or about you except as described below:

Information Shared with Our Service Providers. We engage external Service Providers to administer and provide the Services. As part of that, they will process your Personal Data on our behalf. These external Service Providers have access to your Personal Data only for the purpose of performing services on our behalf, in compliance with this Privacy Policy, and each is contractually obliged not to disclose or use your Personal Data for any other purpose. The Service Providers we use help us to: run, operate, and maintain our Services; perform content moderation and crash analytics; run email and mobile messaging campaigns; perform game, app, and marketing analytics; provide measurement services and target ads (you can opt out at sites such as http://www.aboutads.info/choices and http://www.youronlinechoices.eu/); provide payment attribution; perform identity verification, geolocation verification, and fraud prevention; provide technical and customer support; and process payments for Subscriptions, Entry Fees, deposits, live Contests ticketing, or other purchases. Some external service providers may also collect information directly from you (for example, a payment processor may request your billing and financial information) as a Third-Party Service in accordance with their own privacy policy.

Information Visible to Other Players. The Services do not currently include chat, messaging, player-to-player communication, content uploads, public profiles, or any other social or content-sharing feature. Players compete in timed events, and nothing a player enters in the App is visible to any other player; other participants see only the results the App generates for an event. If we introduce social or content-sharing features in the future, we will update this Privacy Policy before those features become available.

Information Shared with Third Parties. We share Anonymous Data with third parties for industry and market analysis. We may share Personal Data with our third-party publishing partners for their direct marketing purposes only if we have your express permission. We do not share Personal Data with any other third parties for their direct marketing purposes.

Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law-enforcement officials and private parties to enforce and comply with the law. We only share information about you when we reasonably believe it necessary or appropriate: (a) to respond to claims and legal process (including subpoenas and warrants); (b) to protect our property, rights, and safety and those of a third party or the public; or (c) to investigate and stop any activity that we consider illegal, unethical, or legally actionable.

Information Disclosed in Connection with Business Transactions. Information that we collect from our users, including Personal Data, is a business asset. If we are acquired by a third party as a result of a transaction such as a merger, acquisition, or asset sale, or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your Personal Data, will be disclosed or transferred to a third-party acquirer in connection with the transaction.

In certain circumstances, the Company may share your information with third parties for legitimate purposes subject to this Privacy Policy, including: with vendors or service providers such as cloud-storage providers, security vendors, data-analytics vendors, identity-verification vendors, banks, and payment processors; with our affiliates or within our corporate group; with third parties for marketing purposes, including the sponsors of any Contests; when you request that we share information with third parties; to comply with applicable law; in connection with an asset sale, merger, bankruptcy, or other business transaction; to enforce our Terms of Service; to ensure the safety and security of the Company and/or its users; and with professional advisors, such as auditors, law firms, or accounting firms.

Cookies and Other Tracking Technologies

Cookies Policy — Effective as of October 14, 2026.

Our Services use cookies, which are small text files that are placed on your computer or device by a web server when you access our Services. We may place and access cookies and similar technologies on your computer or device, which are known as “first party cookies.” Cookies may also be placed and accessed by third parties, which are known as “third party cookies” and are described below.

We use cookies and local storage to monitor aggregate usage and web traffic of our Services, customize and improve our Services, help you navigate our Services, deliver content specific to your interests, and deliver advertisements to you. We also use “web beacons” (also known as web bugs, pixel tags, or clear GIFs), which are small graphics with a unique identifier that may be included on our Services, for example to deliver or communicate with cookies, to track and measure the performance of our Services, to monitor how many visitors view our Services, and to monitor the effectiveness of our advertising.

Types of Cookies. We use the following types of cookies:

• Strictly Necessary Cookies: essential to enable you to use the Services (e.g., cookies that enable you to log in).

• Performance Cookies: collect information about how and when you and other visitors interact with our Services; the information is used to improve how our Services work.

• Functionality Cookies: allow our Services to remember choices you have made and provide customized content and features.

• Advertising Cookies: used to deliver advertisements that are more relevant to you and your interests; we may share this type of information with third parties for these purposes.

The types of cookies described above may be “session cookies” or “persistent cookies.” Session cookies are stored only while you are using the Services and are deleted when you log off or close your browser. Persistent cookies remain on your device for a period of time after you log off or close your browser.

Third Party Cookies. Some cookies may be placed by third parties when you use the Services, including third-party advertisers. For example, our websites use Google Analytics, a web-analytics service provided by Google, Inc. (“Google”). The information generated by the cookie about your use of the website or app (including your IP address) will be transmitted to and stored by Google. Similarly, we use the Facebook pixel service, an analytics tool that allows us to measure the effectiveness of our advertising by understanding the actions you take on other websites or apps. By using our Services, you consent to the processing of data about you by Google and Facebook in the manner and for the purposes set out above.

Cookies Settings. You may decline cookies that are not Strictly Necessary by clicking “Decline” in the cookie banner. Although most browsers automatically accept cookies, you can change your browser options to stop automatically accepting cookies or to prompt you before accepting them. If you do not accept cookies, you may not be able to access all portions or features of the Services.

Do Not Track Signals. Your browser settings may allow you to transmit a “Do Not Track” signal. Like many websites, our Website is not designed to respond to “Do Not Track” signals received from browsers. To learn more, you can visit http://www.allaboutdnt.com/.

Third-Party Websites and Links

We may provide links to third-party websites or other online platforms operated by third parties. If you follow these links or interact with features not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy, security, accuracy, completeness, or reliability of information found on these third-party sites. Information you provide on public or semi-public venues, including third-party social networking platforms like Facebook or X (formerly Twitter), may be viewable by other users without limitation on its use by us or third parties. Our inclusion of such links does not imply endorsement.

Children’s Privacy

Children are not allowed to use the Services. We do not seek or knowingly collect any Personal Data from children. The Services are intended solely for adults eighteen (18) years of age or older (or the age of majority in the user’s jurisdiction). If we become aware that we have unknowingly collected information about a child, we will make commercially reasonable efforts to delete such information from our database.

Data Security

Please be aware that, despite our reasonable efforts to protect your information, no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Please further note that any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

Specific Disclosures for California Residents

California law requires that we make certain disclosures about your data. The following disclosures are made pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”).

Collection and Use of Personal Data. In the preceding 12 months, we have collected the following categories of Personal Data: identifiers, commercial information, financial information, Internet or other electronic network activity information, geolocation data, and visual information. To learn more about the specific information we collect and the sources and purposes of such collection, please see “Our Collection and Use of Information” above.

Sale or Sharing of Personal Data. We do not sell or share your Personal Data as those terms are defined under the CCPA. We have no actual knowledge of selling or sharing the Personal Data of consumers under 16 years of age.

Disclosure of Personal Data for a Business Purpose. In the preceding 12 months, we have disclosed for a business purpose the following categories of Personal Data: identifiers, commercial information, financial information, Internet or other electronic network activity information, geolocation data, and visual information. To learn more, please see “Parties We May Share Your Information With” above.

Your CCPA Rights.

• Right to Know and Access Personal Data. You have the right to request the categories and specific pieces of Personal Data we have collected about you.

• Right to Delete Personal Data. You have the right to request the deletion of your Personal Data, subject to certain exceptions.

• Right to Correct Inaccurate Personal Data. You have the right to request the correction of any inaccurate Personal Data that we maintain about you.

• Right to Limit Use and Disclosure of Sensitive Personal Data. To the extent we collect sensitive Personal Data (such as a government identifier collected for identity verification or tax reporting), we use and disclose it only for purposes permitted under, and not requiring an opt-out under, Section 7027(m) of the CCPA regulations (such as verifying identity, preventing fraud, complying with law, and providing the Services you request).

• Right to Opt Out of Sale or Sharing. Because we do not sell or share Personal Data as defined under the CCPA, we do not offer this opt-out.

• Right of Non-Discrimination. You have the right to exercise your CCPA privacy rights without receiving discriminatory treatment.

Your Choices

We may send periodic informational emails to you. You may opt out of such communications by following the opt-out instructions contained in the email. If you opt out of receiving emails about recommendations or other information we think may interest you, we may still send you emails about any Services you have requested or received from us, and transactional or administrative messages relating to your Account, Subscription, or Wallet.

Your Rights, Choices, and How to Contact Us

You may exercise your rights under this Privacy Policy by reviewing the options below. Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@riderrodeo.com or contact us at Rider Rodeo, LLC, P.O. Box 622, Pontotoc, MS 38863 / 1-662-205-0212.

To exercise your rights regarding your Personal Data, you can:

• Request access to the Personal Data we hold about you by emailing privacy@riderrodeo.com.

• Delete or correct your Personal Data. You can delete your account from within the App, at ACCOUNT → DELETE ACCOUNT, or at https://app.riderrodeogames.com/delete-account. The easiest way to correct your account information is in your in-App settings. You can also submit a request through our support website or email us at privacy@riderrodeo.com. See “Account Information; Deleting Your Account” above for what deletion does and what we are required to keep.

• Ask us to stop processing your Personal Data, including for direct marketing and promotional purposes, by emailing optout@riderrodeo.com. Be aware that sometimes we need to use your Personal Data in order to provide the Services to you.

The law provides exceptions to these rights in certain circumstances. Where you cannot exercise one of these rights because of such an exception, we will explain why. After you contact us, you may receive an email in order to verify your request. We will respond to your request within forty-five (45) days. Where reasonably necessary because of the complexity or number of requests, we may extend that period once by a further forty-five (45) days, and we will tell you within the first forty-five (45) days if we do. If we decline your request, we will tell you why. If the law of your state provides a right to appeal, you may appeal our decision by emailing privacy@riderrodeo.com with the word “Appeal” in the subject line. We will respond to your appeal in writing within sixty (60) days, with the reasons for our decision. If we deny your appeal, we will also provide you a way to submit a complaint about the result to your state attorney general.

Data Protection Officer / Privacy Contact: Chance Collier, privacy@riderrodeo.com

© 2026 RIDER RODEO LLC. All rights reserved.