Dave & Buster's privacy policy (Nov 4, 2026): sells data to data brokers, CCTV video, keystroke tracking
Dave & Buster's replaced its 2020 privacy notice on Nov 4. The old one opened with "We do not sell"; the new one says it sells or shares data with ad networks and data brokers, and adds CCTV video and ID details.
The wording
What changed
Dave & Buster's posted a new privacy policy marked "Effective Date: November 4, 2026". It replaces a notice marked "Effective Date: January 1, 2020", which was still live when the Wayback Machine captured the page on October 15, 2026. We compared that capture with the live page on November 11, 2026. This is a full rewrite, not a few edits. It now covers the website, the app, and anyone who will "play games or enjoy other digital experiences at our locations", which means the arcade floor as well as the website.
Change 1: from "We do not sell" to naming data brokers
The 2020 notice's sharing section began: "We do not sell or otherwise share personal information about you, except as described in this Privacy Notice." Its California section did say that ad partners' access "may be considered a sale under CCPA under certain circumstances" and that D&B "engages in online advertising practices that may potentially be considered 'sales' under the CCPA." The new policy states it outright: "We sell or share this information with advertising networks, data brokers and other companies involved in digital advertising to assist us in delivering personalized ads to you." The data in question is "personal identifiers (including email address; phone number; and unique identifier) and internet or other electronic activity information." The policy says this happens "by allowing third parties to place cookies or other tracking technologies on our website" and "by sharing information with our advertising partners." It lists "Advertising companies and data brokers" as the third parties that receive personal information, and "advertising companies and data brokers" among the places D&B gets information from. (The 2020 notice already listed "Third-party data resellers" as a source.)
Change 2: tools that capture keystrokes
A new cookies section says D&B lets third parties use tracking tools "so that they can provide analytics information and deliver targeted ads tailored to you", and that "This may include tools that capture your keystrokes, mouse clicks, screen touches, and information about when, how and from where you accessed our Sites." It names one tool: "Among other tools, we use Google Ads." The 2020 notice didn't mention keystrokes. It only said data "might be collected by us or 3rd parties, such as Smartlook.com, s.r.o.", without saying what that company collects.
Change 3: CCTV video, IDs and in-store data
The list of what D&B collects now includes "Video of you captured on CCTV security cameras installed in our locations", "drivers' license or other identification card information", "status as a first responder", "Power Card and Rewards accounts information and balances", and "information collected electronically from you in our stores." The 2020 notice mentioned Power Card purchases but none of the others. The policy says it has "collected these same categories of personal information in the 12 months before the date of this Policy", so this describes what D&B was already doing, not only what it plans to do. It also lists "Inferences drawn from personal information", and says D&B has disclosed "video of you captured on CCTV security cameras" for business purposes in the past 12 months, without saying to whom.
What D&B says your data is worth
The policy adds a "Notice of Financial Incentive" for the Dave & Buster's Rewards program. It says D&B collects "your name and phone number and track your associated purchases so we can send you personalized offers". Then it puts a price on it: "We estimate the value of personal information as less than a dollar, based upon the value of bonus Game Chips."
What got better
Some of the changes help you. Opt-outs must be honored "no later than 15 business days after receipt of your request", down from "no later than 45 days" in the 2020 notice. D&B now says "We recognize the Global Privacy Control signal when sent from IP addresses in states with privacy laws that apply to us", although only "for that browser only". It says that "if we know you are under the age of 18, we won't knowingly sell or share your personal information for targeted advertising". The 2020 notice only promised not to knowingly sell the data of children under 13. The policy now lists rights for residents of 17 states, and says rights for Alabama, Louisiana and Oklahoma residents come when those laws take effect in 2027.
Odd details
The SMS section ends: "You can also reach us at privacy@mainevent.com." Main Event is the family-entertainment chain Dave & Buster's has owned since 2022 (Wikipedia). Main Event's own privacy policy, "Effective January 1, 2026", doesn't contain the data-broker, CCTV or keystroke language. D&B also says "We do not respond to the DNT or 'Do Not Track' signal."
Why this matters now
In October 2025, two California residents filed a proposed class action in federal court in the Northern District of California. They allege that daveandbusters.com kept sending browsing data to Meta, Google, TikTok, Microsoft and X after visitors clicked "Reject All" on the cookie banner (National Law Review, October 30, 2025). These are allegations, not findings. The new policy describes in much more detail the tracking that suit is about.
Coverage (checked Nov 11, 2026): we found no news coverage of the November 4 policy. Search results show only the policy itself.
Who it affects
Anyone who uses daveandbusters.com or the Dave & Buster's app, plays with a Power Card, is in the D&B Rewards program, or visits a Dave & Buster's location.
Quick answers
When did Dave & Buster's change its privacy policy?
The new policy is marked "Effective Date: November 4, 2026". It replaced a notice dated January 1, 2020, which was still on the site in an October 15, 2026 Wayback Machine capture.
Does Dave & Buster's sell my data?
Its policy now says so. It says D&B may "sell" (as some state laws define it) personal identifiers such as email, phone number and a unique identifier, plus internet activity, and that it shares them "with advertising networks, data brokers and other companies involved in digital advertising". It says it doesn't sell or share other categories this way.
How do I opt out of Dave & Buster's selling my data?
Use the opt-out form linked from "Your Privacy Choices" at the bottom of daveandbusters.com, email guest.relations@daveandbusters.com, or call 1-888-300-1515. D&B also honors the Global Privacy Control signal, per browser, from states with privacy laws that apply to it. It says it will act on opt-outs within 15 business days.
Does Dave & Buster's record video of customers?
The policy lists "Video of you captured on CCTV security cameras installed in our locations" as personal information it collects. It also says it disclosed CCTV video for business purposes in the past 12 months.
What does Dave & Buster's say my data is worth?
In its Rewards program notice: "We estimate the value of personal information as less than a dollar, based upon the value of bonus Game Chips."
Does the website record my keystrokes?
The policy says third-party tools on its sites "may include tools that capture your keystrokes, mouse clicks, screen touches, and information about when, how and from where you accessed our Sites." It doesn't say which tools or which pages.
Source
Detected on the Dave & Buster's privacy page: https://www.daveandbusters.com/us/en/terms-of-use/privacy-policy. Always check the source; this summary is not legal or financial advice.
Other sources:
- Dave & Buster's Privacy Policy (effective Nov 4, 2026)
- Dave & Buster's Privacy Notice (effective Jan 1, 2020), Wayback Machine capture Oct 15, 2026
- Dave & Buster's Rewards Program Official Rules
- Main Event Privacy Policy (effective Jan 1, 2026)
- National Law Review: CIPA class action complaint filed against Dave & Buster's (Oct 30, 2025)
- Wikipedia: Dave & Buster's (Main Event acquisition)
Provenance: detected in our Nov 11 snapshot of the Dave & Buster's privacy page. Excerpts marked "Quoted from the documents" come from the sources linked above.
Published by QuietlyChanged: pages tracked automatically, each change reviewed by a person before publishing. About · Contact & corrections
Keep reading
- Same thread · Ads and trackingBeReal: Inactive accounts kept 5 years, and ad partners can now measure store visits
- Same thread · Ads and trackingMicrosoft 365: Microsoft adds outside "workplace and productivity data" companies as a data source, and age checks for logged-out users
- Same thread · Ads and trackingGoogle: Gmail, Photos and Drive data you share with Search or Gemini can now shape ads
Full Dave & Buster's change history · All privacy policy changes · Report for November 11, 2026 · All reports