Xtreme Bull Games Ticket Buyer Privacy Policy

Cody Webster's Xtreme Bull Games LLC

Effective Date: November 1, 2026

1. Who We Are and What This Policy Covers

Cody Webster's Xtreme Bull Games LLC ("Xtreme Bull Games," "XBG," "we," "us," or "our") is a for-profit

Oklahoma limited liability company that produces bullfighting and western sports entertainment events.

This Privacy Policy explains how we collect, use, share, and protect personal information from people who buy tickets, attend our events, visit our website at xtremebullgames.com, use our social media pages, sign up for our emails or texts, enter contests, or buy merchandise (together, "you").

This policy applies to information collected online, at the box office, at the gate, and on event grounds.

By buying a ticket, attending an event, or using our website, you acknowledge that you have read this Privacy Policy, including Section 5 (How We Share Information), which describes sharing with our event sponsors.

This Privacy Policy is part of our Ticket Terms and Conditions and Website Terms of Use.

2. Information We Collect

Information you give us. When you buy tickets, register, enter a contest, sign up for updates, or contact us, we may collect:

• Name, email address, phone number, and mailing or billing address

• Ticket details: event, date, seat, quantity, price paid, and purchase history

• Age range or date of birth (for age-restricted areas, contests, and promotions)

• ZIP code, gender, and interests you choose to share (for example, favorite events, western lifestyle interests, or products you use)

• Survey responses, contest entries, and messages you send us

• Accessibility or accommodation requests, which we use only to provide the accommodation you ask for

Payment card information is collected and processed by our ticketing and payment providers. We do not store full card numbers.

Information from our ticketing and service partners. Our ticketing company, payment processors, and marketing platforms share with us the information you provide to them when you buy tickets to our events, including contact details and order history.

Information collected automatically. When you use our website, emails, or ads, we and our partners may use cookies, pixels, and similar tools to collect your IP address, device and browser type, general location, pages viewed, links clicked, referring website, and whether you opened an email.

Information collected at events. At events we may collect ticket scans and entry times, Wi-Fi or app check-ins, and contest or sponsor activation sign-ups. Our events are filmed and photographed (see Section 4).

Information from other sources. We may receive contact, demographic, and interest information from social media platforms, sponsors, data partners, and publicly available sources, and combine it with what we already have.

3. How We Use Information

We use personal information to:

• Sell and deliver tickets, process payments and refunds, and manage your orders

• Run events, including entry, seating, safety, security, and accessibility services

• Send event updates, schedule changes, and weather or cancellation notices

• Market our events, merchandise, and offers by email, text (with your consent), mail, social media, and online ads

• Build and target advertising, including custom and look-alike audiences on platforms such as

Meta, Instagram, Google, YouTube, and TikTok

• Analyze attendance, buyer demographics, and fan interests to plan events, set pricing, and report results to sponsors

• Run contests, giveaways, surveys, and sponsor activations

• Deliver sponsor benefits described in Section 5

• Prevent fraud, ticket scalping, and misuse of our website

• Comply with law and enforce our terms

We may combine information from different sources and create de-identified or aggregate data (for example, "62% of buyers live within 100 miles of the venue"). De-identified and aggregate data is not personal information, and we may use and share it for any purpose.

4. Photography, Filming, and Your Likeness

Our events are photographed, filmed, recorded, livestreamed, and broadcast. By attending, you consent to the use of your image, voice, and likeness, without payment, in photos, video, broadcasts, and recordings made at the event. We and our sponsors, broadcast partners, and licensees may use that content in any media, worldwide, for promotional, advertising, and commercial purposes, including sponsor advertising.

5. How We Share Information

Event sponsors and partners. Sponsors make our events possible. We may share your personal information, including your name, email address, phone number, mailing address, ZIP code, age range, ticket and purchase details, attendance history, and stated interests, with our current and future event sponsors, presenting partners, and promotional partners. Sponsors may use this information for their own business purposes, including to send you marketing emails and mail, show you targeted online ads, invite you to sponsor promotions, and analyze their customer base. We may receive money or other value from sponsors in connection with this sharing. Once shared, a sponsor's use of your information is governed by that sponsor's own privacy policy. You can opt out of sponsor sharing at any time (see Section 6).

We also share aggregate and de-identified attendance and audience reports with sponsors and prospective sponsors. Text message data is not shared. Phone numbers and consent you provide to receive text messages from Xtreme Bull Games are not shared with sponsors or other third parties for their marketing. Health and accessibility information is not shared. Information about a disability, medical need, or accommodation is used only to provide that accommodation, and only with your consent. It is never shared with sponsors or advertisers, and we do not use it for marketing.

Service providers. We share information with companies that work for us, such as ticketing platforms, payment processors, email and text platforms, website hosts, analytics providers, advertising agencies, security staff, and merchandise fulfillment. They may use it only to provide services to us. Venues, promoters, and sanctioning partners. We share information needed to run an event with the host venue, local promoters, and event partners, for example to verify tickets, handle entry, or address safety issues.

Advertising platforms.

We share hashed or encoded contact information and website activity with advertising and social media platforms so they can show our ads, and our sponsors' ads, to you and to people similar to you.

Legal and safety reasons.

We may disclose information to comply with the law, respond to subpoenas or law enforcement, enforce our terms, or protect the safety, rights, or property of our attendees, athletes, animals, staff, or company.

Business transfers.

If Xtreme Bull Games is sold, merged, reorganized, or transfers some or all of its assets, personal information may be transferred to the new owner.

6. Your Choices

• Our marketing emails: click "unsubscribe" in any email, or contact us.

• Text messages: reply STOP to any text. Message and data rates may apply.

• Sponsor sharing: email ashley@xbullgames.com with the subject "Sponsor Opt-Out," or use the opt-out link on our website. We will stop sharing your information with sponsors going forward.

To stop receiving messages from a sponsor that already has your information, use that sponsor's unsubscribe link or contact the sponsor directly.

• Targeted ads and cookies: use our cookie banner, your browser settings, or industry tools such as the Digital Advertising Alliance's WebChoices page.

Opting out of marketing does not stop transactional messages about tickets you bought, such as event changes or cancellations.

Online tracking.

Our advertising, analytics, and social media partners may collect information about your online activities over time and across different websites when you use our website. Our website does not currently respond to browser "Do Not Track" signals. Where state law requires it, we treat a Global Privacy Control signal as a request to opt out of targeted advertising and sales.

7. Your Privacy Rights

We give the following rights to all U.S. ticket buyers, wherever you live, whether or not your state's law

requires it:

• Confirm whether we process your personal information and access it

• Correct inaccurate information

• Delete information you provided or that we hold about you

• Get a portable copy of your information

• Opt out of the sale of your personal information (including sponsor sharing), targeted

advertising, and profiling

How to make a request.

Our designated request address for all privacy requests, including opt-outs, is ashley@xbullgames.com, or call 405.996.6749. You may also use an authorized agent. We will verify your identity before acting on a request, and respond within 45 days. If we need more time, we will tell you, and may extend by up to 45 more days where the law allows. Appeals. If we deny your request, you may appeal by replying to our decision with the subject "Privacy Appeal." We will respond in writing within the time required by law. We will not discriminate against you for exercising your rights. Deleting certain information may mean we cannot deliver tickets or event notices. 7A. State-Specific Notices Nevada residents. Under Nevada Revised Statutes Chapter 603A, you may submit a verified request directing us not to sell covered information we have collected or will collect about you. Email ashley@xbullgames.com with the subject "Nevada Opt-Out." We will respond within 60 days. Although Nevada defines "sale" narrowly, we treat a Nevada opt-out request as a request to stop all sponsor sharing. The categories of information we collect and the third parties we share it with are listed in Sections 2 and 5. You can review and request changes to your information as described in Section 7. We tell you about changes to this policy as described in Section 12. Oklahoma residents. Beginning January 1, 2027, the Oklahoma Consumer Data Privacy Act gives you the rights described in Section 7, including the right to appeal a denied request. If we deny your appeal, you may contact the Oklahoma Attorney General. California residents. Under California's "Shine the Light" law, you may ask for a list of the categories of personal information we disclosed to third parties for their direct marketing in the prior calendar year, and the names of those third parties. Email ashley@xbullgames.com with the subject "Shine the Light." Residents of other states. If the law where you live gives you rights beyond those in this policy, we will honor them. Contact us at ashley@xbullgames.com.

8. Data Retention

We keep personal information as long as needed for the purposes in this policy, including to maintain your purchase history, run future events, meet sponsor and accounting obligations, and comply with law. When information is no longer needed, we delete it or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is completely secure, and we cannot guarantee the security of information sent to us. If a data breach affects your personal information, we will notify you as required by Oklahoma law and other applicable law.

10. Children

Our website and ticket sales are intended for adults. Children may attend events with a ticket purchased by an adult. We do not knowingly collect personal information online from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it. Information about minors is not shared with sponsors.

11. Third-Party Sites

Our website and emails may link to sponsors, ticketing companies, and social media sites. Their privacy practices are governed by their own policies, not this one.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website with a new effective date, and notify you of material changes as required by law. Continued use of our website or purchase of tickets after an update means you accept the updated policy.

13. Contact Us

Cody Webster's Xtreme Bull Games LLC PO Box 327, Paoli, OK 73074 Email (designated address for privacy and opt-out requests): ashley@xbullgames.com Phone: 405.996.6749

Sources

• Houston Livestock Show and Rodeo Privacy Policy

• California ProRodeo Privacy Policy

• Oklahoma Consumer Data Privacy Act SB 546 Business Guide (Cantrell Law, via Mondaq)

• Oklahoma Enacts Consumer Data Privacy Law (Troutman Pepper Locke, via JD Supra)

• Nevada Data Privacy Laws: SB 220 and Consumer Rights Guide (Recording Law)

• Nevada's New Consumer Health Data Privacy Law: 6 Things to Know (Orrick)