This Privacy Policy explains how grand-play-base collects, uses, stores, discloses, and protects personal information provided through the Iowa-focused horse racing platform. It applies to website visitors, account applicants, registered users, and individuals who contact support or otherwise interact with platform services. Our service references the licensed operator profile of Prairie Meadows Racetrack & Casino, Inc. under License Number IA-RPM-2026-004, and privacy handling is designed to support responsible operation, security monitoring, and legal compliance in that context. By using the site, you acknowledge this Policy.
1. Categories of Data We Collect
We collect data that you provide directly, such as legal name, email address, date of birth, mobile number, address information, ZIP code, account credentials, and security-answer fields entered in registration flows. We also collect operational metadata, including device information, browser type, session timestamps, page interaction events, language preferences, and approximate network-level location signals needed for service integrity. In regulated workflows, we may process identity validation outcomes, fraud-risk flags, and account status markers generated by internal and external verification checks. We do not intentionally collect unnecessary sensitive data beyond what is required for lawful service operation and compliance.
2. How We Use Personal Information
Personal data is used to provide account access, validate eligibility, protect users from unauthorized activity, respond to support requests, maintain platform stability, and fulfill legal obligations tied to licensing and responsible participation controls. We may use your information to authenticate sessions, troubleshoot technical issues, monitor for suspicious patterns, apply anti-abuse protections, and deliver required notices related to account status or policy changes. Limited analytics are used to improve page performance, user flow clarity, and service reliability; these insights help us maintain secure and usable racing platform experiences for Iowa users.
3. Legal Basis and Compliance Context
We process data on several grounds, including your consent where required, fulfillment of contractual and platform obligations, compliance with applicable legal or regulatory duties, and our legitimate interest in operating a secure and lawful service. Where identity verification, anti-fraud screening, geolocation checks, or session security controls are mandated by law or licensing obligations, related processing is considered necessary for service integrity and public-interest compliance. If you choose not to provide required information, certain features may be unavailable or access may be denied.
4. Sharing and Disclosure of Information
We may share information with service providers that support hosting, analytics, security, compliance screening, customer communications, or technical maintenance, but only to the extent needed to perform those functions. We may disclose data to legal authorities, regulators, courts, or enforcement bodies where disclosure is required by law, legally valid request, audit obligation, or critical security concern. Information may also be shared in good faith to investigate suspected fraud, prevent harm, enforce terms, or protect platform rights. We do not sell your personal information for third-party advertising broker markets.
5. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, including account operation, support resolution, legal compliance, dispute handling, and fraud-prevention review. Retention periods vary depending on data type, jurisdictional requirements, and the sensitivity of the records. Inactive account information may be archived for compliance or security reasons and then deleted or anonymized when retention obligations expire. Backup records may persist for limited periods as part of disaster recovery and integrity controls.
6. Security Safeguards
We apply administrative, organizational, and technical controls intended to protect data from unauthorized access, loss, misuse, or alteration. Safeguards may include encrypted transport, access controls, logging, role-based permission management, monitoring systems, and secure development processes. Although we use reasonable measures, no internet service can be guaranteed fully secure at all times. You should protect account credentials, avoid credential reuse across services, and notify us promptly if you suspect account compromise or suspicious activity.
7. Your Rights and Choices
Depending on applicable law, you may have rights to request access to your personal data, correction of inaccuracies, deletion of data where legally permissible, restriction of certain processing, or objection to specific uses. You may also request information about data categories, sources, and disclosure practices. Where processing is based on consent, you may withdraw consent for future processing, subject to legal limits and operational requirements. We may ask you to verify identity before fulfilling rights requests to protect account security and prevent unauthorized disclosures.
8. International and Cross-Border Considerations
Services are targeted to Iowa-regulated operational context. If data is processed in infrastructure located outside your immediate region, we apply safeguards designed to maintain confidentiality and lawful handling. Cross-border transfers, where applicable, are structured to preserve appropriate security and compliance standards. Users should understand that legal protections may differ between jurisdictions, but our handling practices are designed to remain consistent with this Policy and applicable obligations.
9. Children's Privacy
The platform is not intended for individuals under twenty-one years of age. We do not knowingly solicit or collect personal information from minors. If we become aware that data from an ineligible individual has been submitted, we will take appropriate action, which may include account closure and data removal where permissible and practical. Parents or guardians who believe an underage individual has provided data may contact us for review.
10. Policy Updates
We may update this Privacy Policy to reflect legal developments, security requirements, operational changes, or improved disclosure clarity. Updated versions will be posted on this page with an effective date. Continued use of the platform after updates are posted indicates acknowledgment of revised terms. We encourage users to review this page periodically, especially before submitting new account information.
11. Contact and Data Controller Context
Questions about this Privacy Policy can be submitted through the platform contact channels. For reference, the Organization Name is Prairie Meadows Racetrack & Casino, Inc.; Racetrack is Prairie Meadows Racetrack; Principal Office Address is 1 Prairie Meadows Dr Altoona, Iowa 50009 United States. Requests should include enough detail to identify the account or interaction involved so we can respond efficiently.