Legal and Privacy

Fortis Games, its affiliates and subsidiaries (hereafter “Fortis”, “we” or “our”) respect your concerns about privacy. This Privacy Notice describes the types of personal data we obtain in connection with job applications, including applications submitted through careers.fortisgames.com (the “Site”), how we may use the data, with whom we may share it and the choices available regarding our use of the data. The Notice also describes the measures we take to safeguard the personal data we obtain and how you can contact us about our privacy practices. The data controller for the processing of personal data in relation to the recruitment process is the Fortis entity with which you decide to apply for a job position.

Last Updated: September 25, 2025

INFORMATION WE OBTAIN

We obtain the following types of personal data in connection with job applications:

• Identification and contact information, such as full name, phone numbers, and email addresses;
• Personal characteristics, such as gender, ethnicity and veteran status (if legally permissible), and citizenship;
• Details about your personal life, such as information on dependents, beneficiaries and/or spouse;
• Professional details, such as information contained in resumes/cover letters concerning your education and work history, training, diplomas and/or certifications, professional qualifications, language and related job skills, career goals and reference’s contact information (name and phone numbers);
• Economic and financial data, such as your current and historic salary;
• Connection or traffic data, such as login timestamps; and
• Other data, such as photographs and video recordings.

We will only collect sensitive personal data concerning you, such as information about your race, for representation analysis and programs and criminal data for background check purposes where we are required or permitted to do so by applicable law, or you have, in accordance with applicable law, provided your explicit consent to the collection and processing of your sensitive personal data.

You are required to provide certain personal data to Fortis so that we may consider your application. The mandatory information is indicated on our application forms. If you fail to provide any personal data that is marked as mandatory we may be unable to evaluate and process your application.

HOW WE USE THE INFORMATION WE OBTAIN

We use the personal data we collect in connection with job applications for the following purposes:

• Recruitment: managing the recruitment process, administering our applicant tracking system portal, making offers to successful job applicants, verifying references and employment history of job applicants, carrying out background checks, and staff onboarding. We process personal data for these purposes on the basis that it is necessary in order to take steps at your request prior to entering into a contract or for our legitimate interests of managing and administering our business and recruiting staff.
• Legal and compliance: compliance with legal and other requirements, such as immigration, record-keeping and various reporting obligations, responding to legal processes such as subpoenas and court orders, pursuing legal rights and remedies, defending litigation and managing any complaints or claims, conducting investigations and complying with policies and procedures. We process personal data for these purposes on the basis that we are required to do so by law or that it is necessary for our legitimate interests, including for the establishment, exercise or defence of legal claims.
• Communications, facilities and emergencies: facilitating communications with you (including informing you about future job opportunities), protecting the health and safety of anyone visiting our premises, and safeguarding office equipment, facilities and other property. We process personal data for these purposes on the basis that it is necessary for our legitimate interests in managing and administering our business, and administering, maintaining and ensuring the security of our IT systems and premises.

We also may use the information we collect about you in other ways for which we provide specific notice at the time of collection and obtain your consent if required by applicable law.

When processing personal data for our legitimate interests, we take appropriate measures to ensure that the interests we pursue are balanced with your interests, rights and freedoms (which we can explain to you upon request).

INFORMATION SHARING

Your personal data will only be accessible to those individuals within Fortis with a legitimate need to access and process such information, including members of the People, Legal, and IT team, hiring managers, the interview panel and executives making recruitment-related decisions.

We also share your personal data with Fortis affiliates and other entities of the Las Vegas Sands group, if necessary for the purposes described in this Notice.

Your personal data will also be disclosed to third party service providers, which provide products or services to Fortis or any of our affiliates, including recruiting agencies, internal HR software, analytics providers, background checks providers and hosting service providers.. Fortis or the relevant group entity has contractually bound these third-party service providers to appropriate data security and confidentiality obligations, in accordance with applicable law.

In addition, we may disclose personal data about you (1) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (2) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (3) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (4) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).

DATA TRANSFERS

To the extent that the data recipients identified above are located in countries outside the European Economic Area (“EEA”) that have not been recognized by the European Commission as providing an adequate level of data protection, we ensure that appropriate safeguards aimed at ensuring such a level of data protection are in place, including by entering into the European Commission’s EU Standard Contractual Clauses with the data recipients pursuant to Article 46, §2 of the EU General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”). To obtain a copy of the safeguards we have put in place, please contact us as indicated below.

YOUR CHOICES AND RIGHTS

Subject to applicable law, you have the right to (1) request access to the personal data we maintain about you; (2) request that we correct or erase your personal data; (3) to obtain the restriction of our processing of your personal data; and (4) object at any time to the processing of your personal data on grounds relating to your particular situation; and (5) where you have consented to the processing of your personal data, withdraw your prior consent at any time. Subject to applicable law, you also have the right to receive, in a structured, commonly used and machine-readable format, the personal data that you have provided to us about you, with your consent or in order to take steps prior to entering into a contract. You also have the right, subject to applicable law, to have this information transmitted to another data controller, where it is technically feasible.

To exercise these rights, please contact us as indicated in the How To Contact Us section of this Privacy Notice.

If you are not satisfied with our response to your request, you may lodge a complaint with a supervisory authority.

To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the information or complying with your request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request if we find it to be manifestly unfounded or excessive, or in case of an access request, in order to provide you with additional copies of the personal data we maintain about you.

HOW WE PROTECT PERSONAL DATA

We maintain administrative, technical and physical safeguards designed to protect personal data against unauthorised access, disclosure or use.

RETENTION OF PERSONAL DATA

We will keep your personal data for the duration of our relevant recruitment processes, plus a reasonable period thereafter taking into account applicable statute of limitation periods and records retention requirements under applicable law. Retention periods may be extended if you agree that we may retain your personal data to inform you about future opportunities with Fortis.

UPDATES TO THIS PRIVACY NOTICE

This Privacy Notice may be updated periodically to reflect changes in our privacy practices. We will post a notice on the Site to notify you of significant changes to this Privacy Notice. The date at the top of the Privacy Notice will indicate when the Notice was last updated.

HOW TO CONTACT US

If you have any questions or would like to exercise your rights in relation to the processing of your personal data, please contact us at: privacy@fortisgames.com.