Company: RSI
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001793659-25-000047
Chunk: 107

Company: Rush Street Interactive, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1
Chunk 107
---
CETUR. The MINCETUR issues authorizations to operators of remote gaming and/or sports betting. We operate pursuant to authorizations to operate remote gaming and remote sports betting, each issued by the MINCETUR under the RushBet brand in Peru.

Data Protection and Privacy

In addition to our licensing regime for our offerings, we also take significant measures to protect personal information and data which we process on our behalf or on behalf of others. We collect, use, store, receive, transmit, share or disclose, and otherwise process certain personal information of our customers, personnel or job applicants, and third-party vendors and, thus, we are subject to federal, state and foreign laws related to the privacy and protection of such data. Regulations in jurisdictions in which we operate, such as the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Delaware Personal Data Privacy Act, the Maryland Online Data Privacy Act, the Iowa Consumer Data Protection Act, the Biometric Information Privacy Act, the Personal Information Protection Act and the Right to Privacy in the Workplace Act of Illinois, the Indiana Consumer Data Protection Act and Fair Information Practices Act, the Louisiana Consumer Privacy Act, the New Jersey Data Privacy Act, the Maryland Online Data Privacy Act, the Michigan Personal Data Privacy Act (not in effect yet), the New York State Personal Privacy Protection Law and the New York Privacy Act, the Ohio Personal Privacy Act, the Pennsylvania Consumer Data Privacy Act, the Canadian Personal Information and Electronic Documents Act, the Freedom of Information and Protection of Privacy Act (Ontario), Law No. 29733 on the Protection of Personal Data (Ley No. 29733 de Protección de Datos Personales), its Regulation approved by Supreme Decree No. 003-2013-JUS (Decreto Supremo No. 003-2013-JUS) (Peru), the Mexican Federal Law on the Protection of Personal Data held by Private Parties and Colombian Statutory Laws 1266 of 2008 and 1581 of 2012, as amended, and regulations in other jurisdictions where we do not have real-money gaming operations but that could otherwise impact our operations or personnel, such as the California Consumer Privacy Act (the “CCPA”) (as amended by the California Privacy Rights Act together with the CCPA Regulations), may be new or are relatively untested laws (some of which may not yet be effective) that could affect our business, and the potential impact is unknown. We also collect, use, store, receive, transmit, share or disclose