Privacy Policy

1Information We Collect

Account Information

When you sign in to the App using your Encore Rewards credentials, we process your email address and authentication token to establish and maintain your session. Your password is never stored by the App — authentication is handled through your existing Encore Rewards account.

Pass and Membership Data

The App displays your Encore Rewards membership information, including your name, member number, tier status, and points balance. This data is retrieved from your existing Encore Rewards account and displayed locally on your device.

Device and Usage Information

We may collect limited technical information necessary for the App to function correctly, including:

• Device type and iOS version (for compatibility purposes)
• App version information
• Network connectivity status (to display the offline banner)
• Camera and photo library access (only when you choose to attach images to a support request)

Support Communications

If you contact us through the in-app support feature or via email, we collect the information you provide in your message, including any attached images, in order to respond to your inquiry.

2How We Use Your Information

We use the information collected solely to:

• Authenticate your identity and maintain your session within the App
• Display your digital Encore Rewards pass, tier status, and points balance
• Enable in-app features such as dining reservations, entertainment bookings, and hotel inquiries
• Respond to support requests and inquiries you submit
• Improve the App's performance and user experience
• Comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3Local Storage and Session Persistence

The App uses secure local storage on your device to maintain your session between app launches. This means you do not need to sign in every time you open the App. Your authentication token is stored using iOS secure storage mechanisms and is never transmitted to third parties.

Any preferences or settings you configure within the App are stored locally on your device and remain under your control. You can clear this data by deleting the App from your device.

4Third-Party Services

The River Rock Casino Digital Pass does not integrate with third-party analytics platforms, advertising networks, or data brokers. The App does not include tracking SDKs or behavioural analytics tools.

The App may open external links (such as Maps for directions or the App Store for reviews) using your device's native applications. These external services are governed by their own privacy policies, which we encourage you to review.

5Security

We take the security of your information seriously. The App employs the following security measures:

• Authentication tokens are stored using iOS Keychain (flutter_secure_storage)
• The digital QR pass includes a 30-second auto-refresh mechanism to prevent static code capture
• A QR blur toggle allows you to hide your pass in public environments
• Screenshot detection overlay warns you when a screenshot is attempted while the pass is visible
• Biometric authentication support (Face ID / Touch ID) is available on compatible devices

While we implement strong security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

6Age Requirements

The River Rock Casino Digital Pass is intended for use by individuals who are 19 years of age or older, in accordance with British Columbia gaming regulations. The App requires acknowledgement of the 19+ age requirement during the policy acknowledgement screen on first login.

We do not knowingly collect personal information from individuals under the age of 19. If you believe we have inadvertently collected such information, please contact us immediately at contact@riverrockcasinodigitalpass.com.

7Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data via the Account Settings screen
• Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us at contact@riverrockcasinodigitalpass.com.

8Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this policy. We encourage you to review this policy periodically.

Continued use of the App after any changes to this policy constitutes your acceptance of the revised policy.

9Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: