Company: SKLZ
Filing Date: 2025-11-06
Form Type: 10-K
Source: 0001801661-25-000050
Chunk: 59

Company: Skillz Inc.
Filing Date: 2025-11-06
Form: 10-K
Item: Item 1A
Chunk 59
---
 which will require us to devote additional significant operational resources and incur additional significant expenses related to our compliance, monitoring, and control obligations and will also increase our exposure to risks of claims by our players that we have not complied with all applicable data privacy laws.

We strive to comply with applicable laws, policies, legal and contractual obligations and certain industry codes of conduct relating to privacy and data protection, to the extent reasonably attainable. However, it is possible that these obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices. It is also possible that new laws, policies, legal obligations or industry codes of conduct may be passed, or existing laws, policies, legal obligations or industry codes of conduct may be interpreted in such a way that could require us to take further compliance steps and/or could prevent us from being able to offer services to citizens of a certain jurisdiction or may make it costlier or more difficult for us to do so. Any failure or perceived failure by us to comply with our privacy policy and terms of service, our privacy-related obligations to players or other third parties, or our privacy-related legal obligations, or any compromise of security that results in the unauthorized release or transfer of personally identifiable information or other player data, may result in governmental enforcement actions, investigations, litigation or public statements against us by consumer advocacy groups or others and could cause our players to lose trust in us, which could have an adverse effect on our business, financial condition, results of operations, reputation or prospects. Additionally, if third parties we work with, such as players, vendors or developers violate applicable laws or our policies, such violations may also put our players’ information at risk and could in turn have an adverse effect on our business, financial condition, results of operations, reputation or prospects.

Our data practices are subject to a complex and evolving framework of federal, state, and international privacy, data protection, and security laws, including the GDPR, UK GDPR, CCPA, CPRA, COPPA, and similar laws in other jurisdictions. Failure, or perceived failure, to comply with applicable privacy and data protection laws, contractual commitments, or our own policies—or any actual or suspected data breach or misuse of personal information—could result in regulatory investigations, litigation, fines, penalties, loss of player trust, and reputational harm. In particular, international data transfer restrictions and heightened enforcement of data protection requirements in the United States, European Union, and United Kingdom could increase our compliance burden, limit our ability to operate