Effective date: April 14, 2026

OHKAY Hotel Casino (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (ohkay.com), use our services, or interact with us in person or online. Please read this policy carefully. If you do not agree with its terms, please discontinue use of our site and services.

This policy applies to information collected through our website, email and text communications, loyalty program enrollment, hotel reservations, and in-person interactions at our property in Ohkay Owingeh, New Mexico.

1. Information We Collect

We may collect the following categories of personal information:

Information You Provide Directly

• Name, address, phone number, and email address
• Date of birth and government-issued ID details (required for Winners Circle enrollment and prize claiming)
• Payment and billing information (credit/debit card, banking details for transactions)
• Hotel reservation details including room preferences and length of stay
• Employment application information
• Communications and correspondence you send to us

Information Collected Automatically

• IP address, browser type, device identifiers, and operating system
• Pages visited, time spent on pages, referring URLs, and clickstream data
• Cookies, pixel tags, and similar tracking technologies
• Location data if permitted by your device settings

Information from Third Parties

• Information from gaming systems and loyalty program partners
• Information from booking and reservation platforms
• Publicly available information and data from business partners

2. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and improve our website, hotel, casino, dining, and entertainment services
• To manage your Winners Circle loyalty account and deliver earned rewards
• To process hotel reservations, payments, and refunds
• To communicate with you about promotions, events, and offers — where you have opted in or where permitted by law
• To comply with federal, state, and tribal gaming regulations, including identity verification and tax reporting requirements
• To respond to inquiries, requests, and customer service matters
• To detect, investigate, and prevent fraud, security incidents, and other prohibited activities
• To evaluate employment applications
• To analyze website usage and improve user experience
• To meet our legal and regulatory obligations

3. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and support marketing efforts. Cookies are small data files stored on your device.

We use the following types of cookies:

• Essential Cookies: Required for core website functionality such as navigation and form
  submission.
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics).

You may disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We do not currently respond to “Do Not Track” signals from browsers, as no uniform standard exists.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist with website hosting, payment processing, email delivery, analytics, and other operational functions, bound by confidentiality obligations.
• Gaming Regulators: The Ohkay Owingeh Gaming Commission and applicable federal or state authorities as required by law.
• Tax Authorities: The IRS and applicable state agencies for required tax reporting on gaming winnings.
• Law Enforcement: When required by law, court order, or to protect the rights, property, or safety of our guests, employees, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
• With Your Consent: For any other purpose with your explicit permission.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal and regulatory obligations (including gaming commission requirements), resolve disputes, and enforce our agreements. When information is no longer needed, we dispose of it securely.

6. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encrypted data transmission (SSL/TLS), restricted access controls, and secure storage practices.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

7. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or booking services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

8. Children’s Privacy

Our website and services are not directed to individuals under the age of 21. We do not knowingly collect personal information from anyone under 21. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at the information below.

9. Your Privacy Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete information.
• Deletion: The right to request deletion of your personal information, subject to legal and regulatory retention requirements.
• Opt-Out of Marketing: The right to opt out of promotional email or text communications at any time by clicking "unsubscribe" in any email or contacting us directly.

To exercise any of these rights, please contact us using the information in Section 11. We will respond to verified requests within a reasonable timeframe. Please note that certain information cannot be deleted where retention is required by gaming regulations or other applicable law.

10. Nevada, California, and Other State Residents

If you are a resident of California or another state with specific consumer privacy laws, you may have additional rights under applicable legislation, including the California Consumer Privacy Act (CCPA). We honor verifiable consumer requests as required. To submit a request or learn more about your state-specific rights, please contact us directly.

Note: OHKAY Hotel Casino is a tribally owned and operated enterprise of the Ohkay Owingeh Pueblo. Certain state consumer privacy laws may not apply to tribal enterprises. We nonetheless strive to honor the spirit of applicable privacy protections for all of our guests.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

OHKAY Hotel Casino
340 Hwy 68, Ohkay Owingeh, NM 87566

Phone: (505) 747-1668
Email: info@ohkaycasino.net

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.