NFL RIVALS PRIVACY POLICY

Last Updated: Apr 28, 2022
Please click the following links to learn more about our Privacy Policy:
  1. Overview
  2. Data Collection
  3. How We Use Personal Data
  4. Data Sharing And Disclosures
  5. Cookies
  6. Do-Not-Track-Signals
  7. International Transfer of Personal Data
  8. Children
  9. Data Retention
  10. Your Rights Relating to Your Personal Data
  11. How We Secure Your Personal Data
  12. Changes to This Privacy Policy
  13. Contact Us

Overview

Mythical, Inc. respects the privacy of its online visitors, customers, and gamers (collectively “users”). This Privacy Policy describes how we collect the information on the websites located at https://nfl.rivals.game, and any other websites, games, apps, features, or other services (“Services”) owned and operated by Mythical, Inc., and licensed by the NFL, that direct the viewer or user to this Privacy Policy.

1.1. Scope
In this Privacy Policy, the terms "Mythical," "we," and "us" refers to Mythical, Inc. and its respective subsidiaries and affiliated companies. The term “NFL” collectively refers to NFL Properties, LLC, NFL Enterprises LLC, the National Football League, and the other members of the NFL Family.This notice describes how Mythical and its affiliates, collect and use personal data. For more information about how the NFL uses your personal data on the Services, please refer to the NFL Privacy Policy, available at: https://www.nfl.com/legal/privacy. Please note that websites, apps, features or other services that are owned and operated by Mythical may contain links to digital properties that are owned and operated by other companies. This Privacy Policy does not apply to websites and services that are owned and operated by unaffiliated third parties.

1.2. Data Controller and Transfer
Mythical is the data controller for the personal data collected in connection with use of Mythical’s services. Mythical operates and processes data in the United States. We may also transfer data to countries other than the one where our users live or use Mythical’s services.The NFL is an independent data controller for the personal data collected in connection with the NFL-licensed products and services. For more information about how the NFL uses your personal data, please refer to the NFL Privacy Policy, available at: https://www.nfl.com/legal/privacy.

2. Data Collection


2.1. The Data We Collect
Like many website operators, we collect information that your browser sends whenever you visit our Services. This includes Log Data, such as your computer’s IP address, browser type, browser version, the pages of our websites that you visit, the time and date of your visit, the time spent on those pages and other statistics, and whether you reached our page via a social media or email campaign. This information may be collected via several technologies, including cookies, web beacons, clear GIFs, canvas fingerprinting and other means, such as cookies and pixels. Learn more in our Cookie Policy.

2.2. Data Provided by Users
You may give us information by signing up for the Services, entering information through our online forms or surveys, or contacting us for information or customer service. This includes:
  • User profile: We collect data when users sign up for the Services or enter information through our online forms or surveys.
  • Demographic data: We may collect demographic data about users, including through user surveys. In some countries, we may also receive demographic data about users from third parties.
  • User content: We collect the information users submit when they contact Mythical customer support, provide ratings or otherwise contact Mythical.

2.3. Data from Other Sources
This includes:
  • User feedback.
  • Users or others providing information in connection with claims or disputes.
  • Publicly available sources.
  • Marketing service providers.
Mythical may combine the data collected from these sources with other data in its possession.

3. How We Use Personal Data

Mythical collects and uses data to provide the NFL Rivals site and services. We also use the data we collect:
  • To enhance the safety and security of our users and services;
  • For customer support;
  • For research and development;
  • To send marketing and non-marketing communications to users; and,
  • In connection with legal proceedings.
Mythical does not sell or share user personal data with third parties for their direct marketing, except with users’ consent.Mythical uses the data it collects for purposes including:

3.1. Providing services and features
Mythical uses the data we collect to provide, personalize, maintain, and improve our products and services. This includes using the data to:
  • Provide the Services; and,
  • Perform internal operations necessary to provide our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends.

3.2. Safety and security
We use personal data to help maintain the safety, security, and integrity of our services and users. This includes:
  • Using device, location, profile, usage, and other data to prevent, detect, and combat fraud or unsafe activities.

3.3. Customer support
Mythical uses the information we collect (including recordings of customer support calls with notice to and the consent of the user) to provide customer support, including to:
  • Direct questions to the appropriate customer support person;
  • Investigate and address user concerns; and,
  • Monitor and improve our customer support responses and processes.

3.4. Research and development
We may use the data we collect for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us to improve and enhance the safety and security of our services, improve our ability to prevent the use of our services for illegal or improper purposes, develop new features and products, and facilitate insurance and finance solutions in connection with our services.

3.5. Marketing
Mythical may use the data we collect to market our services to our users. This includes sending users communications about Mythical games, services, features, promotions, sweepstakes, studies, surveys, news, updates, and events.The NFL may also use the data we collect concerning NFL-licensed products and services to market to users of such products and services. For more information about how the NFL uses your personal data, please refer to the NFL Privacy Policy, available at: https://www.nfl.com/legal/privacy. We may also send communications to our users about products and services offered by Mythical’s business partners. Although we may send users communications about Mythical partners’ products and services, we do not sell users’ personal data to, or share it with, such partners or others for purposes of their own direct marketing or advertising, except with users’ consent.We may use the data we collect to personalize the marketing communications (including advertisements) that we send, including based on user location, past use of Mythical’s services, and user preferences and settings.

3.6. Non-Marketing Communications
Mythical may use the data we collect to inform users of changes to our terms, services, or policies; or send other communications that aren’t for the purpose of marketing the services or products of Mythical or its partners.

3.7. Legal Proceedings and Requirements
We may use the personal data we collect to investigate or address claims or disputes relating to use of Mythical’s services, or as otherwise allowed by applicable law, or as requested by regulators, government entities, and official inquiries.

3.8. Automated Decision-Making
We use personal data to make automated decisions relating to use of our services. This includes:
  • Deactivating users who are identified as having engaged in fraud or activities that may otherwise harm Mythical, its users, and others.
To object to a decision resulting from these processes, please contact us using the information in the “Contact Us” section below.

4. Data Sharing and Disclosure

Some of Mythical’s products, services, and features require that we share data with other users or at a user’s request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.Mythical may share the data we collect:

4.1. At the User’s Request or for Jointly-Offered Services
This includes sharing data with:

  • Other people at the user’s request

  • Mythical service and platform partners
    • For example, if a user requests a service through a partnership or promotional offering made by a third party, Mythical may share certain data with those third parties. This may include, for example, other services, wallets, platforms, apps, or websites with an API or service with which we integrate.

  • The NFL
    • We may also provide personal information to business partners with whom we jointly offer Services or with whom we offer licensed products and services. These partners include the companies that provide the NFTs, promotions, contests, or specialized services on our platform, such as the NFL.

4.2. With the General Public
Questions or comments from users submitted through public forums such as Mythical blogs and Mythical social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.

4.3. With Mythical Subsidiaries and Affiliates
We share data with our subsidiaries and affiliates to help us provide our services or conduct data processing on our behalf.

4.4. With Mythical Service Providers and Business Partners
Mythical provides data to vendors, consultants, marketing partners, research firms, and other service providers or business partners.These include:
  • Payment processors and facilitators;
  • Cloud storage providers;
  • Marketing partners and marketing platform providers, including social media advertising services;
  • Data analytics providers;
  • Game development partners;
  • Research partners, including those performing surveys or research projects in partnership with Mythical or on Mythical’s behalf;
  • Vendors that assist Mythical to enhance the safety and security of its services;
  • Consultants, lawyers, accountants, and other professional service providers; and,
  • Insurance and financing partners.

4.5. For Legal Reasons or in the Event of a Dispute
Mythical may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns. This includes sharing personal data with law enforcement officials, public health officials, other government authorities, or other third parties as necessary to enforce our user agreements or other policies; to protect Mythical’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services.This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

4.6. With Consent
Mythical may share a user’s personal data other than as described in this notice if we notify the user and they consent to the sharing.

5. Cookies And Third-Party Technologies


Mythical and its partners use cookies and other identification technologies on our games, apps, websites, emails, and online ads for purposes described in this notice.Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. Mythical uses cookies and similar technologies for purposes such as:
  • Authenticating users;
  • Remembering user preferences and settings;
  • Determining the popularity of content;
  • Delivering and measuring the effectiveness of advertising campaigns; and,
  • Analyzing site traffic and trends, and generally understanding the online behaviors and interests of people who interact with our services.
We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online websites and services.

Google Analytics.
We may use Google Analytics. We use the information we get from Google Analytics only to improve our websites. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Please refer to Google’s Privacy Policy for more information. You may also choose to download the Google Analytics opt-out browser add-on. You may wish to restrict the use of cookies. Please be aware that some of the features of our Site may not function correctly if you disable cookies.Most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser. To understand these settings, the following links for commonly used browsers may be helpful:
Personalized Advertising.
We may also use targeted advertising cookies, such as Google Ads and Facebook Pixel, to deliver tailored advertising on our websites and other websites that you may visit. You can learn more about how to control advertising cookies by visiting the Network Advertising Initiative’s Consumer Opt-Out link, the DAA’s Consumer Opt-Out link for browsers, or the DAA’s opt-out link for mobile devices. Please note that electing to opt-out will not stop advertising from appearing in your browser or applications and may make the ads you see less relevant to your interests. Please see our Cookie Policy for more information regarding the use of cookies and other technologies described in this section.

6. Do-Not-Track-Signals

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.

7. International Transfer of Personal Data

Any data that you provide to us may be accessed, shared or processed by our offices, located in the United States, and service providers located in the United States, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail a transfer of your personal information across international borders. The data protections standards may differ and be lower than the standards enforced in your jurisdiction.

8. Children

Our websites are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us using the contact details provided in the “Contact Us” section below. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

9. Data Retention

We may retain your personal data for a period of time consistent with the original purpose of collection (see the “Purposes for which we process personal data” section above) or as long as required to fulfill our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorized use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will implement appropriate measures to prevent any further use of or access to such data.

10. Your Rights Relating to Your Personal Data


10.1. Your Rights
You may have certain rights relating to your personal data, subject to local data protection laws. Depending on the applicable laws these rights may include the right to:
  • Access your personal data held by us;
  • Know more about how we process your personal data;
  • Erase or delete your personal data, to the extent permitted by applicable data protection laws;
  • Restrict our processing of your personal data, to the extent permitted by law;
  • Object to our processing of your personal data. Where we process your personal data for direct marketing purposes or share it with third parties for their own direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection;
  • Opt-out of certain disclosures of your personal data to third parties; and
  • Not be discriminated against for exercising your rights described above.

10.2. Additional Disclosures for California, Colorado or Virginia Residents
We have listed the privacy rights for several U.S. state jurisdictions below, but we understand you may have additional rights in your jurisdiction. You may contact us directly at any time about exercising your data protection rights. We will consider your request in accordance with applicable laws.Certain state laws require that we detail the categories of personal data that we disclose for certain “business purposes,” such as to service providers that assist us with securing our services or marketing our products.We disclose the following categories of personal data for our business purposes:
  • Identifiers;
  • Personal information under California Civil Code section 1798.80;
  • Commercial information;
  • Internet activity information;
  • Inferences drawn from any of the above information categories.
Several jurisdictions grant state residents certain rights, including the right to access specific types of personal data, the right to learn how we process personal data, the right to know whether and how we disclose or sell personal data, the right to opt out of any sale of personal data, the right to request deletion of personal data in certain circumstances, and the right not to be denied goods or services for exercising these rights.

Third Party Marketing.
California law further permits you to request information regarding the disclosure of your personal information to third parties for the third parties’ direct marketing purposes. We do not disclose your personal information to third parties for the third parties’ direct marketing purposes.

Do Not Sell My Personal Information.
In the preceding twelve months we have not sold personal information for monetary consideration, but we recognize that some state privacy laws define “personal information” in such a way that some sharing of personal information necessary to provide you with personalized ads may be considered a “sale,” even if no money is exchanged. Please use our cookie banner or refer to our Cookie Policy on how to opt out of personalized ads.

Authorized Agents.
If you are an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information in the “Contact us” section below and provide us with a copy of the consumer’s written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request.

10.3. Additional Disclosures for Data Subjects in the EEA and the U.K.
Residents in the European Economic Area and the United Kingdom (together, for purposes of this section of the Privacy Policy, “EEA”), as well as certain other jurisdictions, are entitled to certain rights and disclosures with respect to their personal data.Our legal bases for collecting and using your personal data include:
  • The performance of your contract or to enter into the contract and to take action on your requests. For example, the processing of your account registration, providing our services and products to you, providing customer service to you.
  • Our legitimate business interests. For example, fraud prevention, maintaining the security of our network and services, direct marketing to you, and maintaining, analyzing, and improving our products and services.
  • Compliance with a mandatory legal obligation. For example, maintaining administrative records which are subject to mandatory retention periods. We may also collect your personal data to record your requests to exercise your rights and to verify your identity for such requests.
  • Consent you provide where we do not rely on another legal basis. Consent may be withdrawn at any time.

In some countries, and in particular if you are located in the EEA, you may have the right to:
  • Access your personal data;
  • Correct inaccurate personal data;
  • Request erasure of your personal data without undue delay;
  • Request the restricted processing of your personal data;
  • Request portability of the personal data that you have given us; and
  • To object to the processing of your personal data.

To exercise any of these rights, please contact us as set forth in the “Contact Us” section below and specify which privacy right(s) you wish to exercise. We may need to verify your identity in order to honor your request.If you have any issues with our compliance, you have the right to lodge a complaint with an EEA supervisory authority. We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry first to us per the “Contact us” section below.

10.4. How to Exercise Your Rights
To exercise your rights, please contact us by using the information in the “Contact Us” section below. Your personal data may be processed in responding to these rights. We will respond to all legitimate requests in a timely manner and in accordance with applicable laws, and will contact you if we need additional information from you in order to honor your request or verify your identity.

10.5. Your Preferences for Marketing Communications
We may use your personal data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all of these communications from us by following the unsubscribe instructions provided in any email we send, or you can contact us using the contact details provided in the “Contact Us” section below. You will still continue to receive service-related messages concerning products and services you have purchased (unless we have indicated otherwise).

11. How We Secure Your Personal Data

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. However, no website, application, or transmission can guarantee security. Thus, while we have established and maintain what we believe to be reasonable procedures to protect the confidentiality, security, and integrity of personal information obtained through the websites, we cannot ensure or warrant the security of any information you transmit to us.

12. Changes to This Privacy Policy

We may change our Privacy Policy at any time. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to periodically review this Privacy Policy to ensure you are familiar with the most current version.

13. Contact Us

If you wish to contact us or have any questions about or complaints in relation to this Privacy Policy, please contact us at: legal@rivals.game