Last Updated: January 1, 2023

This additional state-specific privacy disclosure page (“Disclosure”) supplements MGM’s Privacy Policy and is effective as of  January 1, 2023. MGM’s Privacy Policy describes the personal information that we collect, the sources from which we collect it, the purposes for which we use it, the limited circumstances under which we share personal information, and with whom we share it. These additional disclosures are required by the California Privacy Rights Act and Virginia Consumer Data Protection Act.

If you are an MGM production candidate, employee, contractor, or participant who is a resident of California, click here for the Privacy Notice applicable to you.

1. Categories of personal information collected. The personal information that MGM collects, or has collected from consumers in the twelve months prior to the effective date of this Disclosure, falls into the following categories established by the California Privacy Rights Act, depending upon how you use our site and other factors: 
   • identifiers, such as your name, alias, address, phone number, IP address, email address, your MGM account log-in information, or a government-issued identifier (e.g., a social security number);
   • personal information, such as a credit card number or other payment information;
   • information that may reveal age, gender, race, sexual orientation, veteran status, disability, or other protected classifications;
   • commercial information, such as purchase and content streaming activity and records of personal property;
   • internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details, and the content of email and text messages;
   • geolocation data, such as the location of your device or computer, which may in some cases constitute precise geolocation information;
   • audio, electronic, visual, or similar information;
   • education information;
   • professional information;
   • health information;
   • inference data, such as information about your preferences and characteristics.

2. Categories of personal information disclosed for a business purpose. The personal information that MGM disclosed to the third parties identified in the “How and When We Disclose Personal Information to Third Parties” section of the MGM Privacy Policy about consumers for a business purpose in the twelve months prior to the effective date of this Disclosure fall into the following categories established by the California Privacy Rights Act, depending on how you use our site and other factors:
   • identifiers, such as your name, alias, address, phone number, IP address, email address, unique personal identifier (e.g., a cookie), your MGM account log-in information, or a government-issued identifier (e.g., a social security number);
   • personal information, such as a credit card number or other payment information;
   • information that may reveal age, gender, race, sexual orientation, veteran status, disability, or other protected classifications;
   • commercial information, such as purchase and content streaming activity and records of personal property;
   • internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details, and the content of email and text messages;
   • geolocation data, such as the location of your device or computer, which may in some cases constitute precise geolocation information;
   • audio, electronic, visual, or similar information;
   • education information;
   • professional information; and
   • inference data, such as information about your preferences and characteristics.

3. Your Data Rights. You may have certain data rights under the California Privacy Rights Act or Virginia Consumer Data Protection Act, including to request information about the collection of your personal information by MGM, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things, please email us at privacy@mgm.com or call us toll-free at (888) 364-9521. Additionally, you may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request.  Depending on your data choices, certain services may be limited or unavailable.

   To exercise your rights under applicable law regarding cross-context behavioral advertising or targeted advertising (as those terms are defined under applicable law), you may use the preference tool available on the applicable Service (e.g., through the “Your Ads Privacy Choices” link in the footer of the website), which will be made available if cross-context behavioral advertising or targeted advertising takes place on or through that Service.  Your choices might not be recognized when you use a different device or browser or delete your cookies.

   To ensure the security of your MGM account, we will generally ask you to verify your request using the contact information you have already provided.  If you do not have an account, or if you are an authorized agent under the California Privacy Rights Act, contact us using the information above.

4. Sale of Personal Information. In the twelve months prior to the effective date of this Disclosure, MGM has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.

5. Sharing of Personal Information. The personal information of consumers that MGM may share or may have shared, as those terms are defined in the California Privacy Rights Act, in the 12 months prior to the effective date of this notice falls into the following categories established by the CPRA:
   • Identifiers, such as your email address or unique personal identifier (e.g., a cookie)
   • Internet or other electronic network activity information

6. California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that MGM collects and discloses for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act. MGM does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

7. California Privacy Rights Act Retention Disclosure. We keep your personal information to enable your continued use of MGM’s services, for as long as it is required in order to fulfill the relevant purposes described in the MGM Privacy Policy, as permitted or as may be required by law, or as otherwise communicated to you. Please see the “Retention Period” section of the MGM Privacy Policy for more information.

8. California Privacy Rights Act Non-discrimination Statement. MGM will not discriminate against any consumer for exercising the consumer’s rights under the California Privacy Rights Act.

9. Virginia Consumer Data Protection Act De-identified Data Disclosure. MGM may use de-identified data in some instances. MGM either maintains such data without attempting to re-identify it or treats such data as personal data subject to applicable law.