Who are we?

We are Scientific Games, Inc. on behalf of the Colorado Lottery ("we" "our" "us" or " Client").

Toluna is an online data collection group focused on providing high-quality market research data to its clients who are in various business sectors, including other market research agencies and other global and corporate clients of all sizes. We also build and maintain large online consumer panels, providing real-time digital consumer insights to our clients via our market research client surveys and analytics platforms.

What is our Privacy Commitment to you?

We respect your privacy and are committed to protecting your personal data. This privacy notice describes how we collect, use, share and secure personal data you provide on Two Cents Colorado (the "site ") when you become a community member and participate in surveys and/or research studies ("surveys"). It also explains your privacy rights and how laws that are applicable to you may protect you.

This Privacy Notice tells you about:

• Who are we?
• What is our Privacy Commitment to you?
• What personal data do we collect about you and how do we use your personal data?
• Who do we share your personal data with?
• Do we transfer your personal data to other countries?
• What cookies do we use on the site?
• What other tracking technologies do we use for surveys you participate in and for other purposes?
• How do you access your information; use the member services area and/or update, correct or delete your information?
• How do you terminate your community membership?
• How do you ask a question or make a complaint?
• What is our winner's policy?
• What security measures do we undertake to protect your personal data?
• How do you opt out from your community membership?
• What are our data retention and destruction policies?
• Links
• Changes to the privacy notice and your duty to inform us of changes
• Privacy contact details

What personal data do we collect about you and how do we use your personal data?

Community Members

When you agree to become one of [our] community members, you are able to participate in "our" surveys. We will ask you to complete the registration form on the site or via links displayed on our partners' websites. As part of your registration, you will provide us with your Identity data and Contact data and we will through your participation in the Surveys obtain certain other data about you, such as; Demographic/Profile data, Technical data and Pseudonymised data.

We use your Identity data and Contact data for:

• Contacting you for any reason connected with your panel community membership;
• Incentive fulfilment - when you earn incentive points through your participation in the surveys, the points are deposited into your account. When you wish to redeem them, we will use your Identity data and Contact data to send you your rewards.
• Sending you invitations for your participation in surveys - to ask you if you are interested in participating in our upcoming surveys. We may also make you aware via your online panel community membership account of surveys you may be suitable to participate in, based on our knowledge of your personal data.

We may from time to time ask you to provide us with Special Categories of personal data about yourself for specific surveys and if required by applicable law, we will ask you for your consent before processing such Special Categories of personal data.

We use your Demographic/Profile data for matching you with appropriate surveys to see if you qualify for particular surveys and your age is automatically updated so that we may ensure we select individuals, based on their age as may be required for the relevant survey.

Public forums and blogs

Our site offers publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them.
we display personal testimonials of satisfied customers on the site in addition to other endorsements. With your consent, we may post your testimonial along with your username. If you wish to update or delete your testimonial, you can contact us at support@twocentscolorado.com .

You should be aware that any personal data you choose to make public on the site, in the Community area (under a message on your wall, as an opinion, topic, battle, thumb it) can be read, collected, stored and/or used by other users and could be used to send you unsolicited messages. We strongly discourage you from disclosing any of your personal data in the community area that you may find on the site and/or providing your personal data as we cannot guarantee that third parties who may collect and process your personal data from those community areas will keep them secure. Please be aware that we are not responsible for the personal data you choose to submit or make public. In addition, we are not responsible for the content you publicly post on the site that can be found via web-based search engines.

Toluna would never ask you to provide your Contact data or Identity data as part of a survey, so please do not transfer such data to a third party as we cannot guarantee the security of such data.

Categories of personal data we may process about you

• Identity data - name (includes first, last, maiden and married names), date of birth, marital status, gender, panellist id and username.
• Contact data - postal address, email address and telephone number.
• Special categories of personal data - ethnic/racial origin, health, genetics, political opinion, religion, sexual orientation and sex life and biometrics (used for ID purposes).
• Biometrics means personal data resulting from specific technical processing relating to the physical, physiological, or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or finger print data.
• Demographic/Profile data - interests, preferences, feedback and survey responses and including, but not limited to; age, marital status, gender, birthday, household size, income, education and employment status.
• Technical data includes internet protocol (IP) addresses, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• "Pseudonymised data" is identifiable data as unique identifiers such as panellist ID's are used, however direct identifiers, such as; name and Contact data are removed.

Who do we share your personal data with?

All of the responses we collect from you via our surveys are provided to "us" in aggregate or pseudonymised form. This means that information is provided about groups of individuals and not on an individual level but may include Pseudonymised data.

As Toluna is our data processor and provides the platform, upon which the site is hosted, Toluna processes all personal data we process about you as part of your community membership. We require Toluna to respect the security of your personal data and to treat it in accordance with the law. We do not allow Toluna to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.]

Though we make every effort to preserve your privacy, we may be required to disclose your personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; or to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, to protect your safety or the safety of others, to investigate fraud or breaches of the site terms, or to respond to a government request.]

Do we transfer your personal data to other countries?

From time to time your personal data is transferred from a Toluna company that is located in the Europe to a country that has not been recognised as providing equivalent protection. Toluna has put in place transfer agreements using the standard model contracts for the transfer of personal data to third countries as decreed by the European Commission.

Toluna USA Inc., - EU-U.S. and the Swiss-U.S. Privacy Shield Framework

Toluna's global back up and hosting service centre is located in the USA. Toluna USA Inc., ("Toluna USA") is a member of the ITWP group of companies and all data that Toluna uses are transferred to Toluna USA for those purposes. Toluna USA recognises that the EEA (including Switzerland) have established strict protections regarding the handling of personal data from the EEA, including requirements to provide adequate protection for such personal data transferred outside of the EEA. Toluna ensures that it provides adequate protection for certain EEA personal data about individuals (including about you and Toluna corporate clients, suppliers, business partners, job applicants and employees. Toluna USA has therefore elected to self-certify to the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework administered by the US Department of Commerce ("Privacy Shield"). Toluna USA is responsible for the processing of personal data it receives, under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf for the purposes of providing back up services to ensure the security of your personal data. Toluna USA adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement, and Liability. If there is any conflict between the terms of this privacy notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern.

For the purposes of enforcing compliance with the Privacy Shield, Toluna is subject to the investigatory and enforcement authority of the US Federal Trade Commission. For more information about the Privacy Shield, see the US Department of Commerce's Privacy Shield website located at https://www.privacyshield.gov. To review Toluna's representation on the Privacy Shield list, see the US Department of Commerce's Privacy Shield self-certification list located at https://www.privacyshield.gov/list .

What Cookies do we use on the site?

Cookies are used on the site to distinguish you from other users of the site, helping us to provide you with a good experience when you browse our site and allowing us to improve the site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy attached:

What other Tracking Technologies do we use for surveys you participate in and for other purposes?

Other Technologies

Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. we may combine this automatically collected log information with other information we collect about you. we do this to improve services we offer you, to improve analytics, marketing, and site functionality.

Digital Fingerprinting

In general, digital Fingerprinting technologies assign a unique identifier or "Machine-ID" to a user's computer to identify and track your computer. we will not use digital fingerprinting technology (the " Technology") to collect your personal data, or track your online activities; and will not disrupt or interfere with the use or control of your computer or alter, modify or change its settings or functionality. Occasionally, in specific market research programs, we will use the Technology to assist "us" in ensuring the integrity of survey results. The Technology will analyse publicly available information and data obtained from your computer's web browser and from other publicly available data points, including the technical settings of your computer, the characteristics of your computer, and its IP Address, to create a unique identifier, which will be assigned to your computer. The unique identifier will be an alpha-numeric ID In order to assist "us" in protecting and ensuring the integrity of survey results, we may; (a) link or associate your unique identifier to you and any of your personal data; (b) share your unique identifier with other sample or panel providers; and (c) receive or obtain a unique identifier linked to you from a third party, including without limitation a sample or panel provider or "us", however we will only provide such information to any third parties on an aggregated and anonymised or pseudonymised basis. In addition, any unique identifier(s) received or obtained by us and linked to you will be protected in accordance with this privacy notice and if required by law, we will ask for your consent in advance.

We shall do everything we can to ensure that the Technology is safe, secure and does not cause undue privacy or data security risks and we shall use and distribute the Technology in a professional and ethical manner and in accordance with (a) this privacy notice, (b) any other statements and/or disclosures made by us to you and (c) applicable laws and market research codes of practice.
In the event that we discover or learn of any unethical conduct in connection with the use of the Technology, or that the Technology is being used in a manner that is inconsistent with the statements and/or disclosures made by us to you or is in breach of applicable laws and the market research codes of conduct, we will take immediate action to prohibit such unethical conduct and to ensure the proper administration of the Technology.

How do you access your information; use the member services area and/or update, correct or delete your information?

Upon request, we will provide you with information about whether we hold any of your personal data. If you are based in the EEA, you should refer to section entitled Your legal rights if you are in the EEA to understand more about your rights. You may access, correct, or request deletion of your personal data, or terminate your membership by logging into your Community Account. By following the appropriate directions, your information should be automatically updated in our database. For these purposes, and if you are unable to correct your personal data yourself via your Community Account you may write to us at the postal address found at the end of this Privacy notice, or contact us by email at support@twocentscolorado.com . we will respond to all requests within a reasonable timeframe.

How do you terminate your panel community membership?

If you are a Community member and terminate your membership, we will no longer use your Identity data or Contact data, except for archival purposes and we will process your personal data in accordance with our backup procedures, your personal data are eventually destroyed in accordance with our data retention policies and we will continue to employ the security procedures and technologies to keep your personal data safe.

If you choose to end your membership with the Community, or to require us to cease processing your personal data, you may automatically discontinue your membership by clicking Unsubscribe in the footer of our Homepage. By following the appropriate directions, your record will be marked as "do not contact", and you will no longer receive communications from us. In addition, you will forfeit any incentive balance that has not been requested as of the time you opt out. As an alternative, you may send an email directly to support@twocentscolorado.com requesting to be removed. Email links are provided on the site so that you may contact us directly with any questions or concerns you may have. Each email we receive is read and responded to individually. In most cases it will take 2 to 3 days to process this change, but please allow up to two full weeks for your status to be finalised. In the meantime, you may receive emails from us.

How do you ask a question or make a complaint?

You can direct any questions or complaints about the use or disclosure of your personal data to our Privacy Contact. We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of your personal data within 30 days of receiving your complaint.

If you are based outside the EEA and have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request . Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint , you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

What is our winner's policy?

Community members either receive points for their participation in surveys, other activities and as being a member of the community or may be randomly selected to win prizes for participation in surveys, polls, and other promotions. All winners are notified by email of their winnings. For more information, please visit our Terms and Conditions page. Toluna shall post the usernames or first name and first initial of last name of winners on the Reward Page or communicate them via newsletter to all panelists. For more information about earning points, please visit our Terms and Conditions page.

What data security measures do we undertake to protect your personal data?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator or supervisory authority of a breach where we are legally required to do so.

How do you opt out from your panel community membership?

If you choose to end your membership with the Community or require us to cease processing your personal data, you may discontinue your membership by logging into your account and clicking on the unsubscribe link in the footer of the website. By following the appropriate directions, your record will be marked as "unsubscribed", and you will no longer receive invites to participate in future Surveys or other community activities from Toluna. In addition, you will forfeit any incentive balance that has not been requested as of the time you opt out. In most cases it will take 2 to 3 days to process this change, but please allow up to two full weeks for your status to be finalised. In the meantime, you may receive emails from us. As an alternative, you may send an email directly to support@twocentscolorado.com requesting to be removed. Each email we receive is read and responded to individually; please allow two to three business.

What are our data retention and destruction policies?

How long will you use my personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

As the results of the surveys and other aggregated or Pseudonymised data are used for research and/or statistical purposes, we and other third parties may use this information in accordance with the terms indefinitely without further notice to you.

Links

From time to time we may offer visitors the ability to voluntarily link to other sites. We do not review and are not responsible for, the content or effect of the privacy policies of these sites.

It is important that the personal data we hold about you is accurate and current. Please keep your Account details updated if your personal data changes during your relationship with us.

Changes to the privacy notice and your duty to inform us of changes

This version was last updated on the date at the top of this privacy policy.

If we decide to change our privacy notice, we will post those changes to this privacy statement on the homepage, or other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here, by email, or by means of a notice on our home page prior to the change becoming effective.

It is important that the personal data we hold about you is accurate and current. Please keep your Account details updated if your personal data changes during your relationship with us.

Privacy contact details

You may contact our processor (Toluna), who will deal with your complaint on our behalf by writing to:

Privacy Officer
Toluna USA Inc.
21 River Road
Wilton, Connecticut 06897
USA
E-Mail: support@twocentscolorado.com