Privacy Policy

I. Scope of this Policy

MGM values your patronage and respects your privacy. This Privacy Policy ("Policy") describes the information, collection, use, protection, and sharing practices of MGM Grand Paradise Ltd., a company that is incorporated in and subject to the laws of the Special Administrative Region of Macau (“Macau SAR”). This Policy applies to MGM Grand Paradise Ltd, to its website(s) and to the operations of its hotel-casino resort properties in Macau ("Macau MGM").

The practices aforementioned are those carried out in Macau SAR. We are a subsidiary of MGM China Holdings Limited, a company incorporated in the Cayman Islands and listed in the Hong Kong Stock Exchange, an indirect subsidiary of MGM Resorts International (“MRI”), a company incorporated in and subject to the laws of the United States of America, and an affiliate of any other MRI subsidiaries or entities under the control of MRI (collectively, the “Company Group”). The Company Group is spread across different jurisdictions, which may offer different levels of privacy protection. Privacy practices adopted across the Company Group may have to be adjusted in each jurisdiction, so as to comply with local laws. We make no representation that the practices described in this Policy are compliant with laws outside Macau SAR. Should any information collected or stored overseas be disclosed or transferred to Macau SAR, it will be handled in accordance with the laws prevailing herein.

This Policy applies when you provide personal information to Macau MGM through various channels and methods such as websites, social media platforms, WeChat mini-programs, mobile applications, and paper forms. We process personal information based on your consent (where required) and legal provisions, including processing necessary for the performance of a contract to provide you with Macau MGM's products or services. You should read and fully understand the entire content of this Policy (including specific rules regarding personal information processing and your rights and obligations in each section). Your explicit consent to this Policy, or your provision of personal information through actual use of our products or services, shall be deemed as your consent to our processing of your personal information in accordance with this Policy (where required). If you refuse to consent to this Policy, please do not use any products or services we provide; if you have already started using them, you should cease use immediately, and we will stop processing your personal information (unless otherwise stipulated by laws and administrative regulations).

When you provide personal information directly to Macau MGM and we process it, we are the personal information processor (our contact details are provided at the end of this Policy). However, in any jurisdiction outside Macau SAR, if you provide personal information to an entity entrusted by Macau MGM for the purpose of obtaining Macau MGM's products or services, such entrusted entity constitutes the personal information processor. We will urge such entities to strictly protect your personal information in accordance with applicable laws.

II. Information We Collect and Processing Purposes

Based on lawful, legitimate, and necessary means, and with your consent or as permitted by law, we obtain information through various channels and methods (e.g., company websites, WeChat mini-programs, mobile applications, paper forms), including but not limited to the following:

Information directly provided by you. When you visit our property or contact or interact with us through various channels, you might provide us with personal information such as your name, postal address, e-mail address, telephone number and mobile number (“contact information”). When you make a purchase or engage in other transactions, you might provide us with your contact information and, in addition, other information such as your date of birth, passport or ID number (or copy thereof), and your credit or debit card number. For particular types of purchases or transactions, you might provide us with other additional information, such as your profession, name of your employer and your professional address.

Purchase and Transaction Information. When you visit our property or contact or interact with us through various channels, we might collect information about your purchases, reservations, and gaming activity (if you are legally permitted to gamble).

Wi-Fi and Location Information. When you use Wi-Fi services we make available at our property, we might collect information (directly or through third parties) about the web sites you visit, the type of device and browser you are using, your device identification number, bandwidth used, session time, etc. With your consent, we might also collect information about your precise physical location within and around our property for marketing purposes.

Device and Browser Information. When you visit our website(s), we might collect information about the type of device and browser you are using, the unique number assigned to your server or Internet connection, your geographic location, and your interactions with our website(s). We may also use “cookies” and similar technologies to help us recognize and serve you better. Third-party advertising companies that work with us may also use cookies and similar technologies to collect information at our website(s) for a variety of purposes including providing you with advertisements that are likely to be of interest to you. This type of ad customization is sometimes referred to as online behavioral advertising.

Social Media Information. When you use integrated social media features on our website(s), mobile applications, or other social media websites to interact with us, we may obtain information such as your name and e-mail address.

Other Information. We may obtain information about you from third parties, including entities that direct you to or are located at our website(s) or our property, business partners, family members, and friends.

Sensitive Personal Information. We generally do not process your sensitive personal information. If we need to process your sensitive personal information for specific purposes with full necessity, we will implement strict protective measures. Prior to collecting sensitive personal information, we will separately inform you of the necessity of the processing and its impact on your rights, and obtain your separate consent (where laws or administrative regulations require written consent, such requirements shall be followed).

Minors' Personal Information. We generally do not actively process personal information of minors. We only process minors' personal information within the scope permitted by law, and prior to processing such information, we must obtain the separate consent of their parents or other guardians.

If you are a minor, please do not provide us with any personal information without the consent of your guardian.

III. How we use, process and store the information we collect

A. Use by MGM Grand Paradise Ltd.

Marketing Purposes. We might use the information we collect for our own marketing purposes, such as notifying you of special promotions, offers and events via e-mail, telephone, text message, push notifications, and other means. Typically, we will only send you such information via channels you have separately provided, such as personal email or phone, after obtaining your consent, to inform you about our products, services, and events. We will ensure that such communications do not involve unreasonable discriminatory treatment based on your sensitive personal information such as ethnicity, race, religious beliefs, biometric data, or health status, nor are they targeted based on your individual characteristics. You may choose to unsubscribe or notify us to cease personalized communications to you.

Non-Marketing Purposes. We might use the information we collect for non-marketing purposes such as (1) validating your identity; (2) recording gaming-related activity (if you are legally permitted to gamble); (3) conducting statistical or demographic analysis; (4) processing, fulfilling, and tracking reservations, purchases, or other transactions; (5) complying with legal and regulatory requirements; (6) customizing your experience at our website(s); (7) protecting and defending MGM Grand Paradise Ltd. and its affiliates against legal actions or claims; (8) preventing fraud; (9) debt collection; and (10) satisfying contractual obligations (collectively “Non-Marketing Purposes”).

B. Sharing with third parties

Provided that we are allowed (or required) to, we might share the information we collect with other companies within the Company Group, with our business partners or with other third parties. For marketing purposes specifically, we will share no information other than your contact information, and only with other companies within the Company Group or with our business partners, such as our marketing agencies. We will always require any third party with which information is shared to exercise reasonable care to protect such information and restrict the use of such information to the purposes for which the information is shared. In some cases, we will seek or might be required to collect your specific consent.

C. Processing and Storage

The information we collect may be processed through manual or automated means, and may be digitally stored on premise or with a third party service provider (the “cloud provider”). While stored, the information we collect is kept strictly confidential and not made accessible to any third parties (including, if the case, the cloud provider). Security and confidentiality of the data is protected by systems and procedures no less protective than those followed by the industry standards.

D. Transfer to Overseas

Other companies within the Company Group, our business partners or any other third parties that we might share the information we collect with might be based or located outside the Macau SAR. Likewise, the cloud provider (and its servers) offering any cloud computing solution that we might use to store the information we collect might be based or located outside the Macau SAR. Where this is the case, we might be required to observe additional standards or take additional measures to ensure that the transfer to overseas of the information we collect is carried out in a secure and lawful manner. In some cases, we will seek or might be required to collect your specific consent.

IV. Opt-out

If you wish to opt-out of receiving marketing solicitations from us, or do not want us to share your personal information for marketing purposes with other companies within the Company Group or with our business partners, please e-mail us at privacy@mgm.mo, call us at (+853) 8802 8888, or write to us (under the subject “Opt-Out”) at:

MGM Grand Paradise Ltd.

–Legal Department

Avenida do Dr. Sun Yat Sen no. 1101

Edifício MGM Macau

Macau

Although you may opt-out of the use and sharing of personal information for marketing purposes, there might be situations in which we are still allowed (or required) to use and share information we collect for non-marketing purposes.

V. SECURITY

Information collected by us or our website(s) is stored on secure servers, which are protected by firewalls and other industry standard security measures. These security measures are intended to protect these servers from unauthorized access. However, no security system is impenetrable, and these systems could become accessible in the event of a security breach. We have controls in place that are designed to detect potential data breaches, contain and minimize the loss of data, and conduct forensic investigations of a breach.

Our staff is required to take reasonable measures to ensure that unauthorized persons cannot view or access your personal information. Employees who violate our privacy policies are subject to disciplinary action, up to and including termination of employment.

We cannot enforce or control the security of the computers, electronic devices, or electronic communication method that you may use to send e-mails and submit information to us over the Internet. You are responsible for ensuring that the computers, electronic devices and electronic communication methods you use will provide adequate security for communicating with us. We are not responsible for the disclosure or interception of information that you send us before we receive it.

As a standard security practice, we will take reasonable steps which are generally recognized in the industry to ensure that the communication methods used to support our website(s) do not permit connection or communication by methods that have known security weaknesses or vulnerabilities. As such, if you experience trouble using our website(s), it may be an indication that you need to upgrade your Internet browsing tool or application to a newer version that supports more secure communication methods.

In situations where your personal information is collected by third parties under contract with us for performance of their contractual duties and other purposes, we require such third parties to exercise reasonable care to protect that information and restrict the use of your personal information to the purposes for which it was provided.

If you have any concern about the way your personal data has been handled, or otherwise want to report any information with respect to any actual or potential cybersecurity incident, please report a concern through the following: MGM China Integrity Hotline.

MGM China Integrity Hotline: (+853) 8802 3939 or (+853) 8806 3939.

VI. Other Web Sites

We are not responsible for the information collection or privacy practices of other web sites, including web sites operated by our business partners or other third parties. You should review and understand the privacy policies posted on any linked sites you visit before using those sites or providing any personal information on them.

VII. Your Rights and Methods to Exercise Them

As a personal information subject, you have rights accorded by the laws of Macau SAR and/or other applicable jurisdictions, or may request us to explain the rules and activities of personal information processing.

When exercising the above rights, you need to provide valid identification documents and clearly specify in writing the specific rights you wish to exercise. We will adopt reasonable identity verification mechanisms to ensure the security of personal information; typically, we will respond within 10 working days of receiving the request. If we reject your request to exercise rights, we will explain the reasons to you.

VIII. Changes to this Policy

We reserve the right to revise this Policy at any time without notice. When this Policy is revised in a material way, we will notify you by conspicuous means (including but not limited to push notifications, emails, official website announcements, etc.). The revisions shall take effect from the date the notice is delivered or the announcement is published. If you object to the revised Policy, you may stop using our products or services. Continued use shall be deemed as acceptance of the revised Policy.

IX. Effective Date of this Policy

This Policy is effective from 1st May 2026.

X. Contact Us

If you have questions or concerns about this Policy, If you have any questions about this Policy or wish to exercise your personal rights, please feel free to contact us by email at: privacy@mgm.mo. If sending by postal mail, the delivery address is MGM Grand Paradise Ltd.

–Legal Department

Avenida do Dr. Sun Yat Sen no. 1101

Edifício MGM Macau

Macau.

For individuals from Mainland China who provide personal information through Mainland China channels (e.g., WeChat mini-programs, etc.), you may contact the Mainland China contact email at privacy@mgm.mo. If sending by postal mail, the delivery address is Legal Department, 30F, China Oversea Building B, Midtown, No.2021, Jiuzhou Avenue, Zhuhai, China.