Legal
Privacy policy
What we collect, why we collect it, how long we keep it and what you can tell us to do with it — in plain language, with no defined-terms maze.
Who we are and who is responsible
ApostaMax Daily Resorts LLC ("ApostaMax Daily", "we", "us") operates APOSTAMAX DAILY Resort & Casino at 1200 Vista Sendero, Henderson, NV 89011, and is the controller of the personal information described here. You can reach our privacy team at [email protected] or by writing to the postal address above, marked for the attention of the Privacy Office.
This policy covers this website, our reservations line, the resort itself, the casino floor and the Lumen Rewards programme. Where a third party collects information directly from you under their own policy — a payment processor, for instance — we say so.
What we collect
We group the information we hold into five categories.
- Information you give us
- Your name, contact details, the dates and details of your stay, dietary and accessibility requirements, the preferences you tell us about, and anything you write in a message to us.
- Information created by your stay
- Folio and billing records, restaurant and spa bookings, room entries recorded by your key, and correspondence with our teams.
- Gaming information
- If you use a Lumen Rewards card on the floor, we record rated play — the games, the duration and the theoretical value. This is what determines your tier, and Nevada gaming regulation requires us to retain parts of it.
- Technical information
- IP address, device and browser type, pages viewed and the path you took through the booking flow, held in aggregate and never joined to your reservation.
- Images and safety records
- CCTV covers public areas and the gaming floor, as gaming regulation requires. Cameras are not installed in guest rooms, lavatories or changing areas, and never will be.
We do not ask for, and ask you not to send us, information about your health beyond what is necessary for an accessibility request, or any other special-category information.
Children
This website and the casino floor are intended for adults. We do not knowingly collect personal information from anyone under 13, and we do not knowingly market to anyone under 21. Guests under 21 may stay at the resort as additional occupants on an adult's reservation; the information we hold about them is limited to a name and an age band. If you believe a child has given us information, write to [email protected] and we will delete it.
Why we use it, and on what legal basis
| Purpose | Basis |
|---|---|
| Taking and honouring your reservation | Performance of a contract with you |
| Running the property safely and preventing fraud | Our legitimate interests, balanced against your rights |
| Anti-money-laundering, tax and gaming records | Legal obligation |
| Analytics and measuring the site | Your consent, given through the cookie banner |
| Marketing email, SMS and personalised offers | Your consent, which you can withdraw at any time |
| Responding to a complaint or a legal claim | Our legitimate interests and, where relevant, legal obligation |
We do not use automated decision-making that produces legal or similarly significant effects about you. Tier calculation in Lumen Rewards is automated but is a straightforward arithmetic total, and you can ask a human to review it.
Who we share it with
We share personal information with: payment processors, to take payment; the reservation and property-management platforms we run on; email and SMS providers, where you have consented; professional advisers; and law enforcement or regulators where we are legally required to. Each is bound by contract to use the information only on our instructions.
We do not sell personal information for money. Under some US state laws, showing you an advertisement on another website based on what you looked at here counts as "sharing" or as "targeted advertising" even though no money changes hands. If you consent to personalised offers, that is what happens. You can refuse or withdraw that consent at any time — see your privacy choices.
How long we keep it
- Reservation and folio records — seven years from the end of your stay, for tax and accounting.
- Gaming and rated play records — as required by Nevada gaming regulation, generally five years.
- CCTV — 30 days, unless retained for a specific incident or investigation.
- Marketing consent and preferences — until you withdraw consent, plus three years so that we can prove you were removed when you asked.
- Self-exclusion records — for the full term of the exclusion and afterwards, because that is the only way an exclusion can be enforced.
- Website analytics — 14 months in aggregate form.
Your rights
Depending on where you live, you may have the right to: know what we hold and get a copy of it; correct it; delete it; restrict or object to how we use it; receive it in a portable format; opt out of sale, sharing or targeted advertising; limit the use of sensitive information; and withdraw consent at any time without affecting what we did before you withdrew it.
To exercise any of these, write to [email protected] or use your privacy choices. We will verify who you are — usually by asking about a recent stay — and answer within 45 days, or tell you why we need longer. An authorised agent may act for you with written permission.
We will never treat you worse for exercising a right. Your rates, your rewards tier and the service you receive do not change because you asked us to delete something.
If you are unhappy with our answer you can complain to your state Attorney General, or, in the EEA or UK, to your local supervisory authority.
How we protect it
Personal information is encrypted in transit and at rest. Access is limited to staff who need it for their role and is logged. We test our systems at least annually, require multi-factor authentication for staff, and run a documented incident-response plan with breach notification timelines built in. No system is perfectly secure, and we will not pretend otherwise: if something happens that puts you at risk, we will tell you promptly and plainly.
International transfers
We are based in the United States and our systems are hosted there. If you contact us from outside the US, your information will be transferred to the US. Where the law of your country requires a transfer mechanism, we rely on the European Commission's standard contractual clauses or the equivalent, and we will send you a copy on request.
Changes to this policy
We will post any change here and update the date at the top. If a change materially affects your rights we will tell you directly — by email if we have one for you — and, where consent is the basis, ask you again rather than assume. The version you agreed to when you booked continues to govern that booking.
Last updated September 1, 2026.