Electronic Arts Privacy and Cookie Policy changes — 20231101_rev01

199

## 5\. Where We Hold Your Information

200

201

ⓘ We store and process your information in the United States and other countries where we operate. When we do this, we utilize technical, physical, and administrative safeguards to meet data transfer requirements set by various privacy laws, such as the European General Data Protection Regulation.

202

203

When you access EA Services, including when available on third-party platforms, your personal information is generally collected by EA directly and processed in the United States. Personal information we collect may be subsequently stored and processed for the purposes set out in this Privacy and Cookie Policy in the United States or any other country in which EA, its subsidiaries, or third-party agents operate. By consenting to the transfer of your personal data outside of your country of residence, you acknowledge that your personal information may be transferred to recipients in the United States and other countries that may not offer the same level of privacy protection as the laws in your country of residence or citizenship.

204

205

EA's privacy practices comply with the APEC (Asia-Pacific Economic Cooperation) Cross-Border Privacy Rules (CBPR) System. The APEC CBPR System provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework is available on [cbprs.org](http://www.cbprs.com/).

205

EA's privacy practices comply with the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System (APEC CBPR). The APEC CBPR System provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework is available here: [https://www.apec.org/about-us/about-apec/fact-sheets/what-is-the-cross-border-privacy-rules-system](https://www.apec.org/about-us/about-apec/fact-sheets/what-is-the-cross-border-privacy-rules-system).

206

207

Electronic Arts Inc. holds certifications under the EU-US and the Swiss-US Privacy Shield, which are available at [www.privacyshield.gov](https://www.privacyshield.gov/). When Electronic Arts Inc. transfers information from the European Economic Area (EEA) and Switzerland to other affiliates, agents, or service providers that are outside the EEA and Switzerland, it will do so in compliance with the 'Accountability for Onward Transfer' principle of the Privacy Shield. To learn more, visit [our Privacy Shield disclosures](https://tos.ea.com/legalapp/WEBPRIVACYSHIELD/US/en/PC/).

207

EA complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. EA has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. EA has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/).

208

209

In line with the July 16, 2020 decision of the Court of Justice of the European Union in relation to the EU-US Privacy Shield, as well as guidance from the European Data Protection Board, the UK Information Commissioner's Office, and other relevant regulators, EA may also rely on EU Standard Contractual clauses, the UK International Data Transfer Agreement, and other safeguards to enable transfers outside of the EEA, United Kingdom, Switzerland, and other countries where needed. EA continues to assess the legal regime of the countries to which data is being transferred and, as necessary, updates measures to ensure that we provide adequate levels of protection.

209

EA is responsible for the processing of personal data it receives, under the EU-U.S. DPF and Swiss-U.S. DPF, and subsequently transfers to a third party acting as an agent on its behalf. EA complies with the EU-U.S. DPF and Swiss-U.S. DPF Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.

210

211

The Federal Trade Commission has jurisdiction over EA's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, EA may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

212

213

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, EA commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [U.S.-based third-party dispute resolution provider](https://feedback-form.truste.com/watchdog/request) for more information or to file a complaint. The services of TrustArc are provided at no cost to you**.**

214

215

Under certain conditions, more fully described on the Data Privacy Framework [website](https://www.dataprivacyframework.gov/), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

216

211

217

## 6\. How We Protect Your Information

212

218

213

219

ⓘ We use a range of security measures to secure and protect your information.

214

220

215

221

Security of your information is a priority at EA and we take a range of technical and organizational measures to help protect it, including encryption of sensitive information. Even so, please be aware that no security measure is perfect. Thus we cannot guarantee the security of your information at all times. You should always be diligent when it comes to the protection of your personal information. Learn more about [EA Security](https://www.ea.com/security).

216

222

 ### Privacy and Cookie Policy
+Your privacy is important to EA and we take our responsibility of caring for it seriously. This policy describes how Electronic Arts Inc. ( "EA") processes the personal information we collect about you when you use our products and services or when you attend live events hosted by or in connection with EA (collectively, "Services" or "EA Services"). In some cases, our subsidiaries may be considered data controllers, either together with EA or by themselves.
+Your privacy is important to EA and we take our responsibility of caring for it seriously. This policy describes how Electronic Arts Inc. ("EA") processes the personal information we collect about you when you use our products and services or when you attend live events hosted by or in connection with EA (collectively, "Services" or "EA Services"). In some cases, our subsidiaries may be considered data controllers, either together with EA or by themselves.
 ## 1\. Information We Collect
 The information we collect depends on what Services you use and how you use them.
 ### A. Information You Give Us Directly
 Third-party advertising companies may combine the information collected in the context of delivering an offer to you via our Services with other information they have independently collected over time and/or across different websites. Many of these companies collect and use information pursuant to their own privacy policies. A list of ad serving companies that operate their own networks on our Services, their privacy notices, as well as how to opt-out to the extent applicable can be found at [privacyappendix.ea.com](https://tos.ea.com/legalapp/WEBPRIVACYAPPENDIX/US/en/PC/).
 To learn more about some of these ad networks' practices, or to opt-out of third-party targeted advertising, you can also visit [www.networkadvertising.org](https://www.networkadvertising.org/), [www.aboutads.info/choices](https://www.aboutads.info/choices/), [youradchoices.ca](https://youradchoices.ca/), or [www.youronlinechoices.eu](https://www.youronlinechoices.eu/). Note that opting-out does not mean you won't see ads; rather, it means that the advertising you see may not be as relevant to you.
 ### D. Anti-Cheat and Fraud Prevention Technologies
+We strive to provide a safe and fair gaming environment for all players. When you use our Services, we or third parties may use cookies and similar technologies and collect data about your machine or device, to create a machine "fingerprint" or "hash" of your machine components, for fraud prevention, security and authentication purposes. We may also monitor publicly-available information, third-party sites, and/or use anti-cheat technology within our Services, including automated anti-fraud and abuse algorithms. If you believe your access to our games and/or Services was blocked by this technology in error, please contact us through [EA Help](https://help.ea.com/).
+We strive to provide a safe and fair gaming environment for all players. When you use our Services, we or third parties may use cookies and similar technologies and collect data about your machine or device, to create a machine "fingerprint" or "hash" of your machine components, for fraud prevention, security and authentication purposes. We may also monitor publicly-available information, third-party sites, and/or use anti-cheat technology within our Services, including automated anti-fraud and abuse algorithms. If you believe your access to our games and/or Services was blocked by this technology in error, please contact us at [EA Help](https://help.ea.com/).
 ## 3\. How We Use Your Information
 ⓘ We use your information to operate our Services, to improve your game experience, to provide you customer support, to serve and measure the effectiveness of advertising, and to personalize our communications with you.
 We use your personal information, both individually and combined together, in the following ways.
 ## 5\. Where We Hold Your Information
 ⓘ We store and process your information in the United States and other countries where we operate. When we do this, we utilize technical, physical, and administrative safeguards to meet data transfer requirements set by various privacy laws, such as the European General Data Protection Regulation.
 When you access EA Services, including when available on third-party platforms, your personal information is generally collected by EA directly and processed in the United States. Personal information we collect may be subsequently stored and processed for the purposes set out in this Privacy and Cookie Policy in the United States or any other country in which EA, its subsidiaries, or third-party agents operate. By consenting to the transfer of your personal data outside of your country of residence, you acknowledge that your personal information may be transferred to recipients in the United States and other countries that may not offer the same level of privacy protection as the laws in your country of residence or citizenship.
+EA's privacy practices comply with the APEC (Asia-Pacific Economic Cooperation) Cross-Border Privacy Rules (CBPR) System. The APEC CBPR System provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework is available on [cbprs.org](http://www.cbprs.com/).
+EA's privacy practices comply with the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System (APEC CBPR). The APEC CBPR System provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC framework is available here: [https://www.apec.org/about-us/about-apec/fact-sheets/what-is-the-cross-border-privacy-rules-system](https://www.apec.org/about-us/about-apec/fact-sheets/what-is-the-cross-border-privacy-rules-system).
+Electronic Arts Inc. holds certifications under the EU-US and the Swiss-US Privacy Shield, which are available at [www.privacyshield.gov](https://www.privacyshield.gov/). When Electronic Arts Inc. transfers information from the European Economic Area (EEA) and Switzerland to other affiliates, agents, or service providers that are outside the EEA and Switzerland, it will do so in compliance with the 'Accountability for Onward Transfer' principle of the Privacy Shield. To learn more, visit [our Privacy Shield disclosures](https://tos.ea.com/legalapp/WEBPRIVACYSHIELD/US/en/PC/).
+EA complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. EA has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. EA has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/).
+In line with the July 16, 2020 decision of the Court of Justice of the European Union in relation to the EU-US Privacy Shield, as well as guidance from the European Data Protection Board, the UK Information Commissioner's Office, and other relevant regulators, EA may also rely on EU Standard Contractual clauses, the UK International Data Transfer Agreement, and other safeguards to enable transfers outside of the EEA, United Kingdom, Switzerland, and other countries where needed. EA continues to assess the legal regime of the countries to which data is being transferred and, as necessary, updates measures to ensure that we provide adequate levels of protection.
+EA is responsible for the processing of personal data it receives, under the EU-U.S. DPF and Swiss-U.S. DPF, and subsequently transfers to a third party acting as an agent on its behalf. EA complies with the EU-U.S. DPF and Swiss-U.S. DPF Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
+The Federal Trade Commission has jurisdiction over EA's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, EA may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
+In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, EA commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [U.S.-based third-party dispute resolution provider](https://feedback-form.truste.com/watchdog/request) for more information or to file a complaint. The services of TrustArc are provided at no cost to you**.**
+Under certain conditions, more fully described on the Data Privacy Framework [website](https://www.dataprivacyframework.gov/), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
 ## 6\. How We Protect Your Information
 ⓘ We use a range of security measures to secure and protect your information.
 Security of your information is a priority at EA and we take a range of technical and organizational measures to help protect it, including encryption of sensitive information. Even so, please be aware that no security measure is perfect. Thus we cannot guarantee the security of your information at all times. You should always be diligent when it comes to the protection of your personal information. Learn more about [EA Security](https://www.ea.com/security).
 ⓘ We provide you with choice and control about our use of your information, including your ability to exercise your data privacy rights.
 We give you meaningful choices when it comes to our collection and use of your information. For example, if you no longer want to receive marketing emails from EA, you may click the unsubscribe link included in the footer of any marketing email we send.
 You can learn how to exercise any of your privacy rights by visiting our [My Privacy Rights](https://www.ea.com/legal/privacy-portal) portal.
+You may appeal our decision regarding your privacy rights. To do so, please visit our [My Privacy Rights](https://www.ea.com/legal/privacy-portal) portal and click on "Other privacy enquiries".
 **Verification of account ownership.** To protect your account security and personal information, you may be asked to verify your account ownership prior to us processing your request to exercise your data privacy rights. Verification methods include being logged into your EA Account, confirming ownership and access to the email address associated with your account, and/or confirming other unique account details.
 **Authorized agents.** You can use an authorized agent to make a request to exercise your data privacy rights. Please contact us at [EA Help](https://help.ea.com/) to initiate that request. If you use an authorized agent to exercise your right to deletion, access, or correction, we will require that you verify your account ownership directly with us, unless you have provided your agent with a valid power of attorney consistent with California law that includes a comparable proof of account ownership.
 If you use an authorized agent to submit a request to opt-out of the sale or sharing of your personal information for targeted marketing purposes, we will require your signed permission demonstrating that you have authorized the agent to act on your behalf.
 ● If you opt-out of having your information shared for purposes of targeted advertising on PC and console through your EA Account, your choice will take effect for any PC and console games that you have logged into with your EA Account.
 ● If you opt-out of having your information shared for purposes of targeted advertising through one of our mobile game settings, your choice will take effect for that mobile game.
 ● If you opt-out of having your information shared for purposes of web targeted advertising through our cookies controls, your choice will take effect when visiting our websites through the browser and device on which you made that choice.
+Global Privacy Control. In certain regions, we recognize an opt-out preference signal sent by your web browser (sometimes referred to as the Global Privacy Control or "GPC") as a valid request to opt-out of the sale and sharing of the personal information processed via the browser you are using. In practice this controls whether your browser loads third-party cookies on our Services' websites that are used for targeted advertising, or may otherwise be considered a "sale" of personal information. We process this signal only based on browser settings, so you would need to set them separately for different browsers on the same device and across devices. Please review the [list of browsers that support GPC and associated instructions](https://globalprivacycontrol.org/) on how to enable it. GPC does not control targeted advertising in our PC, console, or mobile games and must be changed via your account or the game"s settings, as described above.
+Global Privacy Control. In certain regions, we recognize an opt-out preference signal sent by your web browser (sometimes referred to as the Global Privacy Control or "GPC") as a valid request to opt-out of the sale and sharing of the personal information processed via the browser you are using. In practice this controls whether your browser loads third-party cookies on our Services' websites that are used for targeted advertising, or may otherwise be considered a "sale" of personal information. We process this signal only based on browser settings, so you would need to set them separately for different browsers on the same device and across devices. Please review the [list of browsers that support GPC and associated instructions](https://globalprivacycontrol.org/) on how to enable it. GPC does not control targeted advertising in our PC, console, or mobile games and must be changed via your account or the game's settings, as described above.
 You have a right not to receive discriminatory treatment for the exercise of these privacy rights.
 ## 9\. Third-Party Services
 ⓘ Our websites and Services may contain ads or links to third-party services and sites.
 ● [UK authority](https://ico.org.uk/global/contact-us/).
 Where appropriate, your local data protection authority may also forward the matter to the Department of Commerce or FTC for consideration.
 If you have an unresolved concern over our data practices that we have not addressed satisfactorily, please contact our [U.S.-based third-party dispute resolution provider](https://feedback-form.truste.com/watchdog/request) (free of charge).
+**Last Updated: June 30, 2023**
+**Last Updated: October 10, 2023**
 ## Available in additional languages:
 - [العربية (Arabic)](https://tos.ea.com/legalapp/WEBPRIVACY/US/ar/PC/)
 - [Ελληνικά (Greek)](https://tos.ea.com/legalapp/WEBPRIVACY/US/el/PC/)
 - [हिन्दी (Hindi)](https://tos.ea.com/legalapp/WEBPRIVACY/US/in/PC/)

Privacy and Cookie Policy

Full text changes — 20231002_rev01 to 20231101_rev01