Privacy Policy UPDATED AND EFFECTIVE:FEBRUARY 18, 2021 This Privacy Policy applies to the website from which you are accessing this Privacy Policy, and its features, and any applications, widgets, interactive features or online services that post a link to or include this Privacy Policy (however accessed or used, whether via a personal computer, mobile device or otherwise) (collectively, the "Site"). Metro-Goldwyn-Mayer Studios Inc. or one of its subsidiary or affiliated companies (collectively, "MGM" or "we", "us" or "our") owns or operates the Site. This Privacy Policy describes our information and privacy practices with regard to the Site, such as the types of information we may gather from you and other visitors to the Site. This Privacy Policy applies to information you share with us in emails and other messages related to activities on the Site. This Privacy Policy also applies where we expressly state that this Privacy Policy applies to the processing of your information. Please take a moment to review this Privacy Policy. Please also review the Terms of Use, which governs your use of the Site. Please note that certain features or services discussed in this Privacy Policy may not be offered on the Site at any particular time. TABLE OF CONTENTS INFORMATION WE MAY COLLECT THROUGH THE SITE Information You Provide to the Site Community Forums, User Content, and Posting Content to Third-Party Sites Send to a Friend Features Information Third Parties Provide About You and Social Media Interactions Information We Collect Automatically As You Access and Use the Site Cookies & Local Storage Web Beacons Embedded Scripts HOW WE MAY USE THE INFORMATION COLLECTED HOW AND WHEN WE DISCLOSE INFORMATION TO THIRD PARTIES Third Parties Providing Services on Our Behalf When You Agree to Receive Information from Third Parties or Request That We Share Your Information Sweepstakes, Contests and Promotions Employment; EEOC Administrative and Legal Reasons Business Transfers THIRD-PARTY ADVERTISING COMPANIES AND ANALYTICS SERVICES HOW WE RESPOND TO “DO NOT TRACK” SIGNALS CHANGING YOUR PREFERENCES AND ACCESSING, UPDATING OR DELETING YOUR PERSONAL INFORMATION THIRD-PARTY CONTENT, LINKS TO OTHER SITES, AND MGM CONTENT FOUND OUTSIDE OF THE SITE SECURITY JURISDICTION AND CROSS-BORDER TRANSFER RETENTION PERIOD SENSITIVE INFORMATION REVISIONS TO THIS PRIVACY POLICY NOTICE TO NEVADA RESIDENTS – YOUR NEVADA PRIVACY RIGHTS NOTICES TO CALIFORNIA RESIDENTS California Privacy Notice (California Consumer Privacy Act) Your California Privacy Rights (California Shine the Light Law) INFORMATION FOR RESIDENTS OF THE UNITED KINGDOM, EUROPEAN ECONOMIC AREA (EEA) OR SWITZERLAND CONTACTING US INFORMATION WE MAY COLLECT THROUGH THE SITE We may collect information from you directly, automatically when you visit the Site, and sometimes from third parties. Some of this information may be considered “personal information” under various applicable laws. We consider information that identifies you as a specific, identified individual to be personal information (such as your name or email address), and we treat additional information, such as IP addresses and cookie identifiers, as personal information where required by applicable law. If we combine non-personal information with personal information, we will treat the combined information as personal information. We may de-identify personal information so that it is non-personal, such as by aggregating it or converting it to a code, sometimes using a function commonly known as a “hash”. We will treat de-identified information as non-personal to the fullest extent allowed by applicable law. Information You Provide to the Site MGM may ask you to provide information directly, such as contact information (e.g., name, email address or phone number), demographic information (e.g., ZIP code, gender or age), financial information (e.g., payment card information) and information about your interests and preferences. Some of this information is personal information. Where we ask you for personal information, we will tell you if it is optional. Otherwise, we are asking because it is necessary in order for us to provide you with the information or fulfill the transaction you requested. The Site is not intended for persons under age sixteen (16). We do not knowingly collect personal information from children younger than the age of sixteen (16). Community Forums, User Content, and Posting Content to Third-Party Sites The Site may provide you the opportunity to participate and post content publicly in forums, through interactive features and through other communication functionality ("Community Forums"). You may choose, through such features or otherwise, to submit or post photographs, videos, questions, comments, suggestions or other content, (collectively, "User Content"). Please note that certain information, such as your name and state of residence, may be publicly displayed on the Site along with your User Content. Note that anything you post to a Community Forum is public -- others will have access to your User Content and may use it or share it with third parties. If you choose to voluntarily disclose personal information in User Content, that information will be visible to others. If you submit User Content, it may be published online or offline (including without limitation on the Site, on-air, in a DVD or any other format currently existing or later developed). In addition, we may use your User Content and any excerpt from your User Content as set forth in the "User Content Policy" section of our Terms of Use, which governs any content you submit through or to the Site and your use of any Community Forums. You acknowledge that if you choose to post any information publicly (such as on a third-party platform, in Social Media or in Community Forums) about your purchase, the content on the Site or your viewing history, the Video Privacy Protection Act of 1998 (18 U.S.C. § 2710) (the “VPPA”) (or any similar law) does not apply. However, to the extent the VPPA or any similar law does apply in any manner, you are providing your informed, written consent to the disclosure of that information pursuant to the VPPA and any similar law. Send to a Friend Features If you send a friend a communication from the Site, the information you provide (names, email addresses, etc.) is used on a one-time basis to facilitate the communication and is not used for any other marketing purpose, unless we obtain consent from that person. If you disclose any personal information relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy. Information Third Parties Provide About You and Social Media Interactions We may receive information about you from third parties. For example, if you are on another website and you agree to receive information from MGM, that website will forward your information to us so that we may contact you. We also may supplement the information we collect with outside records from third parties, such as public databases, publicly available Social Media pages or joint marketing partners, for various purposes, such as to provide you with information, services or products, to tailor our content and the offers we show you, or to enhance our products and services. The Site may permit or facilitate interactions with an interactive third-party website or service ("Social Media"), such as enabling you to “like” or “share” content. If you choose to share content or otherwise post information from or via the Site to Social Media, that information may be public and the third party may have access to information about you and your use of our Site. You may also choose to participate on Social Media in a way that connects that third-party service with our Site (such as posting to one of our pages on a Social Media site or signing into the Site with your credentials from another website or service). Doing so may allow us to collect (or the third party to share) information about you. We may also receive information about you if other users of Social Media give us access to their profiles and you are one of their “connections.” The information we collect is subject to this Privacy Policy. The information collected and stored by the third party remains subject to the third party’s privacy practices, including without limitation whether the third party continues to share information with us, the types of information shared, and your choices with regard to what is visible to others on that third-party website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected. We may combine the information we receive from third parties with information we collect through the Site. In those cases, this Privacy Policy will apply to the combined information. Information We Collect Automatically As You Access and Use the Site In addition to any personal information or other information you choose to submit to the Site, we, and our third-party business partners (including without limitation third-party advertising companies and content or analytics providers), may use a variety of technologies that automatically or passively collect certain website usage information whenever you visit or interact with the Site ("Site Usage Information"). This Site Usage Information may include the browser and operating system you are using, the URL or advertisement that referred you to our Site, the search terms you entered into a search engine that led you to our Site (if applicable), all of the areas within our Site that you visit, and the time of day, among other information. We may use this Site Usage Information for a variety of purposes, including without limitation enhancing or otherwise improving the Site. Site Usage Information is generally non-personal, but it may contain personal information, and if we associate it with your personal information, we will treat it as personal information. As you use the Site, we will also track the videos you watch (including without limitation which videos, how often you view the videos, and where you may pause or stop watching). In addition, we automatically collect your IP address or other unique identifier ("Device Identifier") for your computer, mobile phone, or other device (any, a "Device") used to access the Site. We may be able to collect or infer your approximate location through information we collect, such as an IP address. A Device Identifier is a number that is automatically assigned to your Device used to access the Site, and our servers identify your Device by its Device Identifier. We may directly collect specific location information from your Device if you have opted-in to such collection through one of our mobile applications. You may be able to turn off the collection of location information through your Device settings. However, please note that we may still be able to collect or infer your approximate location through other information we collect, such as IP address. In addition, some mobile service providers may also provide us or our third-party service providers or business partners with information regarding the physical location of the Device used to access the Site. The methods used to collect Site Usage Information may include, without limitation, the following: Cookies & Local Storage. A cookie is a data file placed on a Device when it is used to visit the Site or otherwise access our online content. Certain web browsers and certain browser add-ons, such as Adobe Flash, may provide additional local data storage mechanisms that are used in a manner similar to cookies, and some of the content included on our Site may make use of this local storage. For example, a Flash cookie is a data file placed on a Device via the Adobe Flash plugin that may be built-in to or downloaded by you to your Device. For more information about Flash and the privacy choices Adobe offers, visit www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html. Cookies, Flash cookies, and other local storage devices may be used for a variety of purposes (e.g., to identify your Device when you revisit our Site, to recall your authentication information, to store information related to your navigation throughout our Site, or to enable certain features on our Site). Some cookies are essential to the functioning of the Site, and, without them, some features and services you have requested cannot be provided. Other cookies help us to understand and improve how the Site works or allow us to personalize it for you. You may be able to refuse or remove some or all of these cookie and local storage technologies, such as through your browser settings. If you choose to do so, some features of the Site may not function properly. You can find more information about cookies and how they work at www.allaboutcookies.org. Web Beacons. Small graphic images or other web programming code called web beacons (also known as “pixels”, "1x1 GIFs" or "clear GIFs") may be included in our web pages and email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Site, to monitor how users navigate the Site, to count how many emails that were sent were actually opened or to count how many particular articles or links were actually viewed. Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on. The code is temporarily downloaded onto your Device from our web server or a third-party service provider or business partner, is active only while you are connected to the Site, and is deactivated or deleted thereafter. In addition, we may use a variety of other technologies that collect similar information for security and fraud detection purposes. HOW WE MAY USE THE INFORMATION COLLECTED MGM may use information collected through the Site, including without limitation your personal information and Site Usage Information, as follows: (1) in accordance with our legitimate interests, for example as is necessary for the following purposes: (a) to allow you to participate in the Site and features offered through the Site and to provide customer service, including without limitation to resolve any billing or payment processing inquiries; (b) to tailor content, recommendations, advertisements, and offers we display to you, both on the Site and elsewhere online (including without limitation keeping track of how and which videos you watch); (c) to send you emails with advertisements, promotions and other offers; (d) to use for internal business purposes such as to improve the Site or our products and services and for security and fraud prevention; (e) to process your registration with the Site, including without limitation verifying that your email address is active and valid; (f) to provide you with services or information or fulfill transactions that you have requested or otherwise agreed to receive, including without limitation authorizing and processing your payments and orders; (g) to contact you with regard to your use of the Site or similar administrative communications, including, without limitation and in our discretion, changes to the Site’s policies; (h) the purposes disclosed to you at the time you provided your information; or (i) to exercise our legal rights or defend ourselves from legal claims; (2) to fulfill our contractual obligations to you, such as to make available content that you have purchased a subscription to view; (3) to protect the vital interest of you or another person; (4) to comply with regulatory and legal obligations; (5) as necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; or (6) with your consent. We may use, for any purpose, information that does not identify you or relate to an identified or identifiable person, except where we are required to do otherwise under applicable law. If we combine such information with personal information, then we will treat the combined information as personal information under this Privacy Policy. HOW AND WHEN WE DISCLOSE INFORMATION TO THIRD PARTIES MGM may share with third parties, in our discretion, information that does not identify you or relate to an identified or identifiable person. We do not share your personal information with third parties for those third parties’ marketing purposes unless we provide you the opportunity to opt-in or opt-out prior to such sharing, as required by applicable law. In addition, MGM may share the information we have collected about you as disclosed at the time you provide your information or otherwise with your consent, as described in this Privacy Policy and in the following circumstances: Third Parties Providing Services on Our Behalf. We sometimes use other businesses to perform services for us, such as website hosting, conducting website usage analysis, sending email or other communications, fulfilling orders, providing marketing assistance and data analysis, processing payments (including without limitation clearing and processing credit card payments), or performing other services. We may provide access to your personal information to such third parties in order for them to complete a requested transaction or otherwise to perform these services. When You Agree to Receive Information from Third Parties or Request That We Share Your Information. You may be presented with an opportunity to receive information or marketing offers from one or more third parties. If you agree at that time to have your personal information shared, your personal information will be disclosed to that third party (or parties) and will be subject to the privacy policy and practices of that third party. We are not responsible for the privacy policies and practices of third parties, and, if you later decide that you no longer want to receive communications from a third party, you will need to contact that third party directly. You also may request, sometimes through your use of an interactive feature or third-party application, that we share information about you with a third party, and we will typically do so under those circumstances. Sweepstakes, Contests and Promotions. We may offer sweepstakes, contests or other promotions (any, a “Promotion”), that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern that Promotion, which may contain specific requirements of you (including, without limitation and except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, personal information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, as required by law or permitted by the Promotion's terms or official rules (such as on a winners list). Employment; EEOC. If you apply for a job with us via the Site, we may ask you to provide us with self-identifying information (such as veteran status, gender and ethnicity) in connection with laws and regulations enforced by the Equal Employment Opportunity Commission ("EEOC"), the Office of Federal Contract Compliance Programs ("OFCCP") and similar state and local regulatory agencies. Providing such self-identifying information is voluntary, but if you do provide us with such information, we may submit that information to the EEOC, the OFCCP and similar state and local regulatory agencies for business-related purposes, including, but not limited to responding to information requests, fulfilling regulatory reporting requirements and defending against employment related complaints. Administrative and Legal Reasons. MGM may transfer and disclose information, including without limitation your personal information, Site Usage Information and Device Identifier (e.g., IP address), to third parties to comply with a legal obligation; when we believe in good faith that the law requires it; at the request of governmental authorities conducting an investigation; to verify or enforce our Terms of Use or other applicable Site policies; to respond to an emergency; or otherwise to protect our rights, property, safety, or security or that of other Site visitors or the public. We may also use Device Identifiers to identify users, and may do so in cooperation with copyright owners, Internet service providers, wireless service providers or law enforcement agencies, in our discretion. Such disclosures may be carried out without notice to you. Business Transfers. In the event that MGM goes through a transition such as being sold, has all or a portion of its assets acquired or transferred, whether voluntary or involuntary (such as through bankruptcy), or merges or becomes affiliated with any other division, individual or entity (including, without limitation, during the course of any due diligence process), any customer information owned or under the control of MGM will likely be one of the transferred assets. We reserve the right, as part of this type of transaction, to assign or otherwise transfer your information and other information we have collected from users of the Site. By providing your personal information, you agree that we may transfer such information to the acquiring entity without your further consent. THIRD-PARTY ADVERTISING COMPANIES AND ANALYTICS SERVICES MGM may work with third party business partners (including, without limitation, network advertisers, advertising agencies, analytics providers, and other vendors) to serve third-party advertisements on the Site; to serve our advertisements elsewhere online; and to provide us with information regarding use of and traffic on the Site (including without limitation the pages viewed and the actions users take when visiting the Site) and the effectiveness of our advertisements. For example, if you click on an advertisement for MGM, these third parties may be able to tell us the advertisement you clicked on and where you were viewing the advertisement. Likewise, if you click on an advertisement you see on our Site, these third parties may be able to tell which page you were visiting on our Site and pass that information to the advertiser. The advertisements you see may be served by one or more third parties (including, without limitation, online advertising companies and social media networks), who may use information about your activities on the Site, and other websites and services you visit, across the various devices you use, to provide you targeted advertising based upon your interests. These third parties may collect certain information about your visits to and activity on the Site and other websites and services and may use this information to target advertising to you on our behalf, on their behalf and on others’ behalf. Those third parties may use information they collect through our Site in accordance with their privacy policy and your settings on their services. These third parties may set and access their own tracking technologies on your Device (including without limitation cookies and web beacons) and may otherwise collect or have access to information about you (such as your Site Usage Information and Device Identifier). Some of these companies may collect personal information over time when you visit the Site or other online websites and services. Cookies and web beacons, including without limitation those set by third-party network advertisers, may be used to (among other things): target advertisements, prevent you from seeing the same advertisements too many times, and conduct research regarding the usefulness of certain advertisements to you. We may share certain information such as Device Identifiers, Site Usage Information and de-identified information with third-party advertising companies, analytics providers and other vendors for advertising and analytics purposes. We use a variety of third parties to perform advertising and analytics services, and some of these companies may be members of the Network Advertising Initiative (“NAI”) or Digital Advertising Alliance (“DAA”). You may wish to visit optout.networkadvertising.org, which provides information regarding targeted advertising and the opt-out procedures of NAI members. You may also want to visit optout.aboutads.info, which provides information regarding targeted advertising and offers an opt-out for participating companies. If you are a California resident, please see our “California Privacy Notice” for more information. The European Digital Advertising Alliance (“EDAA”) has developed a guide to online behavioral advertising and has developed an opt-out page for participating EDAA member companies available at www.YourOnlineChoices.com. We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Site and report on activities and trends. This service may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by going to google.com/policies/privacy/partners, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout. For mobile apps, you may be able to limit certain advertising practices using the settings on your phone, tablet or other mobile device. You may download the AppChoices app at youradchoices.com/appchoices to opt out of the delivery of interest-based advertisements in mobile apps. Please note opting out through these mechanisms does not opt you out of being served advertising. You will continue to receive non-targeted advertisements while online or on your Device. HOW WE RESPOND TO “DO NOT TRACK” SIGNALS Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, the Site does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser except as specifically required by law. To find out more about “Do Not Track,” please visit www.allaboutdnt.com. CHANGING YOUR PREFERENCES AND ACCESSING, UPDATING OR DELETING YOUR PERSONAL INFORMATION The Site may contain web pages or features through which you can correct or update some of the personal information you have provided to us through registration through the Site. In addition, if you would like to review, correct, update, suppress, restrict or delete personal information that you have provided to us, you may contact us as set forth under “Contacting Us” below. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. MGM will make good faith efforts to respond to your request as soon as reasonably practicable, consistent with applicable law. Please note that it is not always possible to completely remove or delete all of your information from our databases and that residual data may remain on backup media or within our other records. Also, please note that we may need to retain certain information for our administrative or legal purposes. You are responsible for maintaining the accuracy of the information you submit to us. The Site may contain web pages or features through which you may be able to unsubscribe or modify the email newsletters or similar communications we send to you. Also, users who receive a newsletter or other marketing emails from us and who wish to remove themselves from the mailing list (i.e., opt out) can do so by following the link provided in each such email received. However, please note that we reserve the right to send you certain communications relating to your use of our Site, service announcements, notices of changes to this Privacy Policy or our Terms of Use or similar administrative or transactional messages, and these messages may be unaffected if you choose to opt out from marketing communications. If you sign up to receive SMS or MMS messages that may be offered on the Site, you may unsubscribe from any text messages received by replying “STOP”. If you access the Site through one of our mobile apps, we may, with your permission, send push notifications to your Device. You may opt-out of receiving these at any time by turning push notifications off in your Device settings. Other Privacy Rights. If you are a California resident, please see our “Notices to California Residents” for additional information about how to exercise your privacy rights. If you are a Nevada resident, please see our “Notice to Nevada Residents” for more information on additional rights you may have. If you are in the United Kingdom, European Economic Area (EEA) or Switzerland, please see “Your Rights Under Applicable Laws in the United Kingdom, EEA and Switzerland” below for more information on additional rights you may have. THIRD-PARTY CONTENT, LINKS TO OTHER SITES, AND MGM CONTENT FOUND OUTSIDE OF THE SITE Certain content on the Site may be hosted and served by third parties, and the Site may contain links to third-party websites that MGM does not control. For example, our Site may provide links to third-party sites through which you can purchase merchandise, products or services or which link to a product or service offered by a third party. The Site may also contain certain third-party applications, such as email, web browser toolbars, wallpapers or other downloads or software applications. These links and applications may include, without limitation, those that use an MGM logo as part of a co-branding agreement. In addition, MGM widgets or other MGM content may be included, among other places, on web pages and websites that are not associated with MGM and over which we have no control. These third parties may collect Site Usage Information through the use of their own cookies and web beacons, independently collect data or solicit personal information, and may have the ability to track your use of their sites and services. MGM is not responsible for the privacy or other practices employed by any third party. SECURITY While MGM takes commercially reasonable steps designed to secure your personal information, no data transmission over the Internet, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. MGM cannot ensure or warrant the security of any information we collect. You use our Site and provide us information at your own risk. JURISDICTION AND CROSS-BORDER TRANSFER The Site is controlled and operated by MGM from the United States of America. Visitors who use the Site and reside outside the United States of America do so on their own initiative and are responsible for compliance with local laws, if and to the extent local laws are applicable. Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers or business partners, and, by using the Site, you consent to the transfer of information to countries outside of your country of residence, including without limitation the United States of America, which may have data protection rules that are different from those of your country. RETENTION PERIOD We keep personal information as long as needed for the purposes for which it was collected or for which you subsequently authorized it and additionally for as long as we are required to keep it because of legal obligations, professional accounting and audit standards, legal or insurance claims, or regulatory proceedings. Except as noted differently on specific pages or mobile apps, we retain your personal information while you have an account with us, or while you are using our app or continuing to visit us. Residents of the United Kingdom, European Economic Area or Switzerland please see additional information here. SENSITIVE INFORMATION We ask that you not send us and not disclose any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, sex life or sexual orientation, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Site or otherwise to us, unless we specifically request that information. REVISIONS TO THIS PRIVACY POLICY To the fullest extent allowed by applicable law, MGM reserves the right to make changes to this Privacy Policy and will notify you of material changes by posting the revised Privacy Policy on our Site. We may also provide notice to you in other ways in our discretion, such as through contact information you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified. Your continued use of the Site after the effective date of the revised Privacy Policy (or such other act as specified in the revised Privacy Policy) will constitute your consent to those changes to the extent allowed by applicable law. NOTICE TO NEVADA RESIDENTS MGM does not currently sell your covered information as those terms are defined under applicable Nevada law. However, you may still submit an opt-out request and we will honor that request as required by Nevada law if MGM were ever to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of future sales of your covered information, please submit your request to privacy@mgm.com. Your request must include your full name, city, state and an email address so that we can contact you if needed regarding this request. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and the authenticity of the request. MGM will respond to your request within 60 days either confirming that your request has been processed or indicating that we need an additional 30 days to complete the request. NOTICES TO CALIFORNIA RESIDENTS California Privacy Notice (California Consumer Privacy Act) This California Privacy Notice is effective July 21, 2020. This notice supplements MGM’s Privacy Policy and applies only to California residents. The California Privacy Notice sets forth disclosures and rights for California consumers regarding their personal information, as required by the California Consumer Privacy Act (the “CCPA”). Terms used in this California Privacy Notice have the same meanings given in the CCPA and the regulations implementing the CCPA, unless otherwise defined. INFORMATION MGM COLLECTS Categories of Personal Information We Collect We may collect some or all of the personal information described below. The personal information we collect about you will depend upon how you use our Site and other factors. In the past 12 months, the categories of personal information we may have collected from California residents are: Identifiers, such as name, address, IP address, email address and online identifier; the categories of “personal information” described in California Civil Code Section 1798.80(e) including, without limitation, some of the identifiers previously listed; characteristics of protected classifications under California or federal law, such as gender, veteran status and disability; commercial information, such as products or services purchased and records of personal property; internet or other electronic network activity information, including, but not limited to, information regarding your interaction with the Site; geolocation data; audio, electronic, visual or similar information; professional or employment-related information; education information; and inferences reflecting your preferences and characteristics and other information about you derived from the other categories of information above. Notice to MGM Employees, Contractors and Employment Applicants; Notice to Participants in MGM Productions If you are an MGM employee, contractor or employment applicant, or if you are a participant in an MGM production, click here for the Privacy Notice applicable to you. The Privacy Notice describes the information we collect about you, the purposes for which we collect it and additional information, and the Privacy Notice applies to information collected about you through the Site and to information collected about you offline. Categories of Sources from Which We Collect Personal Information We collect the personal information described above from the following sources: consumers; consumers’ use of the Site (through cookies and other tracking technology, for example); our third-party service providers; our third-party business partners (such as data analytics providers, data brokers, advertising networks, co-producers and marketing partners, for example); and third-party social media companies. Business and Commercial Purposes for Which We Collect Personal Information We use the personal information described above for the following business and commercial purposes: in accordance with our legitimate interests, for example as is necessary for the following purposes: (a) to allow you to participate in the Site and features offered through the Site and to provide customer service, including without limitation to resolve any billing or payment processing inquiries; (b) to tailor content, recommendations, advertisements, and offers we display to you, both on the Site and elsewhere online (including without limitation keeping track of how and which videos you watch); (c) to send you emails with advertisements, promotions and other offers; (d) to use for internal business purposes such as to improve the Site or our products and services and for security and fraud prevention; (e) to process your registration with the Site, including without limitation verifying that your email address is active and valid; (f) to provide you with services or information or fulfill transactions that you have requested or otherwise agreed to receive, including without limitation authorizing and processing your payments and orders; (g) to contact you with regard to your use of the Site or similar administrative communications, including, without limitation and in our discretion, changes to the Site’s policies; (h) the purposes disclosed to you at the time you provided your information; or (i) to exercise our legal rights or defend ourselves from legal claims; to fulfill our contractual obligations to you, such as to make available content that you have purchased a subscription to view; to protect the vital interest of you or another person; to comply with regulatory and legal obligations; as necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; and for the purposes described to you when we obtain your consent. Categories of Third Parties to Whom We Share Personal Information We share personal information with the following categories of third parties: our third-party service providers (third parties as needed to complete a transaction, third parties who assist with our information technology and security programs, and third parties who assist with loss and fraud prevention, for example); our third-party business partners (such as data analytics providers, data brokers, advertising networks, co-producers and marketing partners, for example); third-party social media companies; third parties who provide professional services to MGM; law enforcement, government entities, or others if required by law (such as pursuant to subpoenas or court orders); our affiliates; companies that may or do acquire our assets, or companies that may or do lend us money; and other third parties when you agree to or request that we share your information with them. We may sell personal information to the following categories of third parties: Third-party advertising, analytics and similar companies, including to better serve you more relevant and sometimes location-based advertisements, which may be considered a sale under CCPA under certain circumstances. EXERCISING YOUR CALIFORNIA ACCESS, DELETION AND OPT OUT RIGHTS California residents have the right to request information about what personal information we collect, use, disclose or sell, including without limitation the right to request that we provide to you the specific pieces of personal information we have collected about you over the past 12 months (“Request to Know”). California residents may also request that we delete their personal information we have collected (“Request to Delete”). California residents also have the right to opt out from the sale of their personal information. These rights are subject to some limitations, such as when we are retaining data to comply with our own legal obligations. More information on each of these rights is below. If you are an agent submitting a request on a user’s behalf, please send an email to privacy@mgm.com with a declaration signed by the individual who is the subject of the request authorizing you to make the request on that individual’s behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and needs to be clear about the permission granted. Alternatively, you may submit a copy of a power of attorney under Probate Code sections 4000-4465. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit a request. If we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request. Response Timing When you request access to the personal information we have collected or deletion of your personal information, we will typically provide the requested information within 45 days, and we will notify you within that time period if we need additional time to process your request. How to Make a Request to Know or Request to Delete If you are a California resident and would like to request information about the personal information we have collected about you in the prior 12 months or to request that we delete your information, please contact us at privacy@mgm.com or call us toll-free at (888) 364-9521. Verifying Requests To verify your identity, when you contact us with your request, please provide us your first and last name, the email address you have used to interact with MGM, your mailing address, and your phone number. We may also request additional proof of identity (e.g., government identification) or other information as needed. If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on the individual’s behalf), we will not be able to process the request. Other Important Information Request to Know In order to have us provide specific pieces of information, we will require a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. Request to Delete To ensure that we do not delete your personal information in response to a fraudulent request, once you submit the request, we may follow up to confirm that you want your information to be deleted. RIGHT TO OPT-OUT OF THE SALE OF PERSONAL INFORMATION The CCPA provides a right to California residents to request to opt-out of the sale of personal information. MGM does not sell your personal information for monetary or other direct compensation. However, as indicated above, we may allow third-party advertising companies to collect data from visitors to our Site, including, without limitation, to serve you more relevant advertisements. These online advertising activities (and certain analytics or similar activities) may potentially be considered “sales” under the CCPA under certain circumstances. Depending on the types of activities on the Site, MGM may provide a tool to opt-out of certain cookies and other tracking technology. To opt-out of cookies and other tracking technologies set by MGM and its third-party business partners that are potentially “sales” under the CCPA, you may use the opt-out tool, if any, available on the applicable MGM website. In some cases we may provide an opt-out tool even where we are not sharing your personal information in exchange for valuable consideration. The Digital Advertising Alliance also offers tools for California consumers to send requests under the CCPA to opt out of the sale of personal information by some or all of the participating companies (https://www.privacyrights.info/). You can also limit this type of tracking through industry opt-outs (http://networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/choices/), and by limiting ad tracking on your mobile device through your mobile device settings. Also, for information about the DAA’s AppChoices application, click here. You may also be able to limit the access these third-party advertising companies have to information about you when you use our Site by installing a browser or browser extension that can enable you to block the functionality of some tracking technologies. If you use different computers or browsers, you may need to indicate your opt-out choices across those computers and browsers. Also, if you delete cookies from your computer or browser, you may need to reset your opt-out choices. Users Younger than 16 MGM does not knowingly sell personal information of consumers younger than 16 years of age without affirmative authorization from the consumer (or, in the case of consumers younger than 13 years of age, the consumer’s parent or guardian). Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights California consumers have the right to not receive discriminatory treatment for exercising CCPA rights. We will not discriminate against you for exercising your CCPA rights. Contact for More Information For more information, you may contact us using the information in the “Contacting Us” section below. Your California Privacy Rights (California Shine the Light Law) California residents have the right to request from companies conducting business in California certain information relating to third parties to which the company has disclosed certain categories of personal information during the preceding year for the third parties’ direct marketing purposes. Alternatively, the law provides that a company may comply, as MGM does, by disclosing in its privacy policy that it provides consumers choice (opt-out or opt-in) regarding sharing personal information with third parties for those third parties’ direct marketing purposes, and information on how to exercise that choice. MGM will provide you choice prior to sharing your personal information with third parties for their direct marketing purposes. If you do not opt-in or if you choose to opt-out at the time MGM offers that choice, MGM will not share your personal information with that third party for its direct marketing purposes. If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please contact us at privacy@mgm.com or Metro-Goldwyn-Mayer Studios Inc., Attn: Data Protection Officer, 245 N. Beverly Drive, Beverly Hills, CA 90210. You must include the statement "Your California Privacy Rights" in the subject field of your communication to us and include your contact information in your communication to us. INFORMATION FOR RESIDENTS OF THE UNITED KINGDOM, EUROPEAN ECONOMIC AREA (EEA) OR SWITZERLAND The following companies are controllers of personal information processed in connection with the Site: Metro-Goldwyn-Mayer Studios Inc., MGM and UA Services Company, Metro-Goldwyn-Mayer Pictures Inc., MGM Domestic Television Distribution LLC, MGM Domestic Branded Services LLC, MGM International Television Productions (Germany) GmbH, MGM International Television Productions LLC, MGM Television (Europe) Limited, MGM UK Alternative TV Productions Ltd., MGM UK TV Productions LLC, One Three Television (UK) Ltd., United Artists Corporation Limited, Orion TV Productions, Inc., Orion Pictures Corporation, Orion Distribution Company LLC, Orion Releasing LLC, Lightworkers Media Limited, LW Media Holdings LLC, Lightworkers Media OTT, LLC, UAMG Content LLC, UAMG Holdings LLC, UAMG, LLC, Thirteen Enterprises, LLC, EFT Media Productions LLC and EFT Media Holdings LLC (collectively, “MGM”) is a data “controller,” and You may contact us here: Data Protection Officer Address: Metro-Goldwyn-Mayer Studios Inc. Attn: Data Protection Officer 245 N. Beverly Dr. Beverly Hills, CA 90210 United States of America Email: privacy@mgm.com Representative in the United Kingdom Address: United Artists Corporation Limited Attn: UK Data Protection Representative 7 Air Street 5th Floor London W1B 5AD United Kingdom Email: privacy@mgm.com Representative in the EEA Address: MGM International Television Productions (Germany) GmbH Attn: EEA Data Protection Representative Sonnenstraße 14 80331 München Germany Email: privacy@mgm.com Your Rights Under Applicable Laws in the United Kingdom, EEA and Switzerland You have certain rights under the applicable laws in the United Kingdom, EEA and Switzerland. You can access information about you and update or correct it. In some cases, you can also ask us to erase it, restrict or stop processing, or provide data in a “portable” form, if feasible. You may withdraw consent (“opt out”) if you have previously consented to any particular use of your information, such as receiving marketing emails or text messages. For all such requests, contact privacy@mgm.com. If you reside in the United Kingdom, EEA or Switzerland, you have the right to make a complaint to your national data protection supervisory authority. As noted in this Privacy Policy, we operate the Site in the United States of America and you consent to collection, transfer and processing of your data in the United States of America and other jurisdictions. CONTACTING US If you have any questions about this Privacy Policy, please contact us at privacy@mgm.com or: Metro-Goldwyn-Mayer Studios Inc. Attn: Data Protection Officer 245 N. Beverly Drive Beverly Hills, CA 90210 United States of America MGM STUDIOS MOVIES TELEVISION MGM COMPANIES CORPORATE CAREERS LEGAL PRIVACY POLICY TERMS OF USE CONTACT US MGM Studios 245 N Beverly Dr. Beverly Hills, CA 90210 CONNECT