Flutter Entertainment plc

Previous wording

Additionally, inflation has the potential to adversely affect our business, financial condition and results of operations by increasing our overall cost structure. The recent significant inflationary trends have had an adverse effect on our cost of labor expenditure, as well as other operating expenses. Moreover, our business is particularly sensitive to reductions from time to time in discretionary consumer spending, which is driven by socioeconomic factors beyond our control. Demand for entertainment and leisure activities, including betting and iGaming, can be affected by changes in the economy and consumer tastes, both of which are difficult to predict and beyond our control. Unfavorable changes in general economic conditions, including recessions, economic slowdowns, sustained high levels of unemployment and rising prices or the perception by consumers of weak or weakening economic conditions, may reduce our customers’ disposable income or result in fewer individuals engaging in entertainment and leisure activities, such as betting, iGaming or daily fantasy sports. As a result, we cannot ensure that the demand for our product offerings will remain consistent. Adverse developments affecting economies throughout the world, including a general tightening of credit availability, decreased liquidity in certain financial markets, inflation, increased interest rates, foreign exchange fluctuations, increased energy costs, acts of war or terrorism, cyber-attacks, transportation disruptions, natural disasters, adverse weather conditions, power loss, declining consumer confidence, sustained high levels of unemployment or significant declines in stock markets, as well as pandemics, epidemics, public health emergencies and the spread of contagious diseases, including the ongoing impact of COVID-19, could lead to a further reduction in discretionary spending on entertainment and leisure activities, such as betting and iGaming, any of which could have a material adverse effect on our business, financial condition and results of operations.

Current wording

Additionally, inflation has the potential to adversely affect our business, financial condition and results of operations by increasing our overall cost structure. The recent significant inflationary trends have had an adverse effect on our cost of labor expenditure, as well as other operating expenses. Moreover, our business is particularly sensitive to reductions from time to time in discretionary consumer spending, which is driven by socioeconomic factors beyond our control. Demand for entertainment and leisure activities, including betting and iGaming, can be affected by changes in the economy and consumer tastes, both of which are difficult to predict and beyond our control. Unfavorable changes in general economic conditions, including recessions, economic slowdowns, tariffs and trade disputes, sustained high levels of unemployment and rising prices or the perception by consumers of weak or weakening economic conditions, may reduce our customers’ disposable income or result in fewer individuals engaging in entertainment and leisure activities, such as betting or iGaming. As a result, we cannot ensure that the demand for our product offerings will remain consistent. Adverse developments affecting economies throughout the world, including a general tightening of credit availability, decreased liquidity in certain financial markets, inflation, increased interest rates, foreign exchange fluctuations, tariffs, trade disputes, increased energy costs, acts of war or terrorism, cyber-attacks, transportation disruptions, natural disasters, adverse weather conditions, power loss, declining consumer confidence, sustained high levels of unemployment or significant declines in stock markets, as well as pandemics, epidemics, public health emergencies and the spread of contagious diseases, could lead to a further reduction in discretionary spending on entertainment and leisure activities, such as betting and iGaming, any of which could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Our business is exposed to competitive pressures given the international nature of competition in online betting and iGaming.

Current wording

Our business is exposed to competitive pressures given the competition in online betting and iGaming.

Previous wording

If we are unable to compete effectively, we may lose existing customers and we may not be able to attract new customers. The online betting and iGaming market is increasingly competitive. This competition takes place on an international level and operators around the world leverage that scale to attract customers to their websites, with the implication that the barriers to a customer switching between competing operators are low. We may be unable to respond quickly or adequately to changes in the industry brought on by new products and technologies, the availability of products on other technology platforms and marketing channels, and the introduction of new features and functionality or new marketing and promotional efforts by our existing competitors or new competitors and new technology. Such competitors may spend more money and time on developing and testing products and services, undertake more extensive marketing campaigns, adopt more aggressive pricing or promotional policies or otherwise develop more commercially successful products or services than ours, any of which could negatively impact our business, financial condition and results of operations. Our competitors may also develop products, features or services that are similar to ours or that achieve greater market acceptance.

Current wording

If we are unable to compete effectively, we may lose existing customers and we may not be able to attract new customers or reactivate churned customers. The online betting and iGaming market is increasingly competitive. This competition takes place on an international level and operators around the world leverage that scale to attract customers to their websites, with the implication that the barriers to a customer switching between competing operators are low. We may be unable to respond quickly or adequately to changes in the industry brought on by new products and technologies, the availability of products on other technology platforms and marketing channels, and the introduction of new features and functionality or new marketing and promotional efforts by our existing competitors or new competitors and new technology. Such competitors may spend more money and time on developing and testing products and services, undertake more extensive marketing campaigns, adopt more aggressive pricing or promotional policies or otherwise develop more commercially successful products or services than ours, any of which could negatively impact our business, financial condition and results of operations. Our competitors may also develop products, features or services that are similar to ours or that achieve greater market acceptance.

Previous wording

In addition, we are also subject to the risk of further consolidation in the betting and gaming industry, which might result in the formation of a very large or successful competitor to whom we might lose market share. Other competitors may have significantly greater financial, technical and other resources than us in certain jurisdictions or markets in which we operate and they may be able to secure greater liquidity than us. A loss of market share could have a material adverse effect on our business, financial condition and results of operations. Furthermore, betting and gaming faces competition from other entertainment and leisure activities and there can be no assurance that we will be able to increase or maintain our share of customers’ discretionary spending against such other entertainment and leisure activities.

Current wording

We are also subject to the risk of further consolidation in the betting and gaming industry, which might result in the formation of a very large or successful competitor to whom we might lose market share. Other competitors may have significantly greater financial, technical and other resources than us in certain jurisdictions or markets in which we operate and they may be able to secure greater liquidity than us. A loss of market share could have a material adverse effect on our business, financial condition and results of operations. Additionally, in the United States, we face new competition from sports event trading as derivatives products regulated by the Commodity Futures Trading Commission. This new competition purports to be available nationwide and is currently being offered by a growing number of providers. While we believe that we are well positioned to compete with new entrants to the betting and gaming market through our online betting and gaming offerings, the competitive dynamic is evolving and we cannot assure you that our results of operations will not be adversely impacted by the expansion of legalized online gaming and betting.

Previous wording

If we are unable to maintain or increase our customer base or engagement, or effectively monetize our customer base’s use of our products and product offerings, our revenue may be adversely affected. Any decrease in customer retention, growth or engagement, including player liquidity, could render our products less attractive to customers, which is likely to have a material adverse effect on our business, financial condition and results of operations. If our AMP growth rate slows, we become increasingly dependent on our ability to maintain or increase levels of customer engagement and monetization in order to drive revenue growth.

Current wording

If we are unable to maintain or increase our customer base or engagement, or effectively monetize our customer base’s use of our products and product offerings, our revenue may be adversely affected. Any decrease in customer retention, growth or engagement, including player liquidity, could render our products less attractive to customers, which is likely to have a material adverse effect on our business, financial condition and results of operations. If our AMP growth rate slows, we become increasingly dependent on our ability to maintain or increase levels of customer engagement and monetization in order to drive revenue growth. Furthermore, betting and gaming faces competition from other entertainment and leisure activities and there can be no assurance that we will be able to increase or maintain our share of customers’ discretionary spending against such other entertainment and leisure activities.

Previous wording

Although we intend to continue investing in our research and development efforts, if new or enhanced product offerings fail to engage our customers or partners, we may fail to attract or retain customers or generate sufficient revenue, operating margin or other value to justify our investments, any of which may seriously harm our business. In addition, management may not properly ascertain or assess the risks of new initiatives, and subsequent events may alter the risks that were evaluated at the time we decided to execute any new initiative. Developing and creating additional product offerings can also divert management’s attention from other business issues and opportunities. Even if our new product offerings attain market acceptance, those new product offerings have in certain cases cannibalized, and in the future, could continue to cannibalize, the market share of our existing product offerings or share of our customers’ discretionary spending in a manner that could negatively impact our results of operations. Furthermore, such expansion of our business increases the complexity of our business and places an additional burden on our management, operations, technical systems and financial resources, and we may not recover the often-substantialup-front costs of developing and marketing new product offerings, or recover the opportunity cost of diverting management and financial resources away from other potential new product offerings. In the event of continued growth of our operations, product offerings or in the number of third-party relationships, we may not have adequate resources, operationally, technologically or otherwise, to support such growth, and the quality of our technology, product offerings or our relationships with third parties could suffer. In addition, failure to effectively identify, pursue and execute new business initiatives, or to efficiently adapt our processes and infrastructure to meet the needs of our innovations, may adversely affect our business, financial condition and results of operations.

Current wording

Although we intend to continue investing in our research and development efforts, if new or enhanced product offerings fail to engage our customers or partners, we may fail to attract or retain customers or generate sufficient revenue, operating margin or other value to justify our investments, any of which may seriously harm our business. In addition, management may not properly ascertain or assess the risks of new initiatives, and subsequent events may alter the risks that were evaluated at the time we decided to execute any new initiative. Developing and creating additional product offerings can also divert management’s attention from other business issues and opportunities. Even if our new product offerings attain market acceptance, those new product offerings have in certain cases cannibalized, and in the future, could continue to cannibalize, the market share of our existing product offerings or share of our customers’ discretionary spending in a manner that could negatively impact our results of operations. Furthermore, such expansion of our business increases the complexity of our business and places an additional burden on our management, operations, technical systems and financial resources, and we may not recover the often-substantial up-front costs of developing and marketing new product offerings, or recover the opportunity cost of diverting management and financial resources away from other potential new product offerings. In the event of continued growth of our operations, product offerings or in the number of third-party relationships, we may not have adequate resources, operationally, technologically or otherwise, to support such growth, and the quality of our technology, product offerings or our relationships with third parties could suffer. In addition, failure to effectively identify, pursue and execute new business initiatives, or to efficiently adapt our processes and infrastructure to meet the needs of our innovations, may adversely affect our business, financial condition and results of operations.

Previous wording

A significant proportion of our revenue is derived from fixed-odds betting products where winnings are paid on the basis of the stake placed and the odds quoted. Odds are determined with the objective of providing an average return to the bookmaker over a large number of events. However, there can be significant variation in our results event-by-event andday-by-day. We have systems and controls that seek to reduce the risk of daily losses but there can be no assurance that these will be effective in reducing our exposure, and, consequently, our exposure to this risk in the future. As a result, in the short term, there is less certainty of generating positive results, and we may experience (and we have from time to time experienced) significant losses with respect to individual events or betting outcomes, in particular if large individual bets are placed on an event or betting outcome or series of events or betting outcomes. Odds compilers and risk managers are also capable of human error; thus, even allowing for the fact that a number of betting products are subject to cappedpay-outs, significant volatility can occur. In addition, it is possible that there may be such a high volume of trading during any particular period that even automated systems would be unable to address and eradicate all risks. Any significant losses could have a material adverse effect on our business, financial condition and results of operations.

Current wording

A significant proportion of our revenue is derived from fixed-odds betting products where winnings are paid on the basis of the stake placed and the odds quoted. Odds are determined with the objective of providing an average return to the bookmaker over a large number of events. However, there can be significant variation in our results event-by-event and day-by-day. We have systems and controls that seek to reduce the risk of daily losses but there can be no assurance that these will be effective in reducing our exposure, and, consequently, our exposure to this risk in the future. As a result, in the short term, there is less certainty of generating positive results, and we may experience (and we have from time to time experienced) significant losses with respect to individual events or betting outcomes, in particular if large individual bets are placed on an event or betting outcome or series of events or betting outcomes. Odds compilers and risk managers are also capable of human error; thus, even allowing for the fact that a number of betting products are subject to capped pay-outs, significant volatility can occur. In addition, it is possible that there may be such a high volume of trading during any particular period that even automated systems would be unable to address and eradicate all risks. Any significant losses could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Betfair Exchange, FanDuel’s DFS business, PokerStars’ poker businesses and Junglee Games’ rummy business operate with, and their success is dependent on, high levels of liquidity. A significant reduction of this liquidity, or any legislative or regulatory measures taken to ring-fence that liquidity, could have a material adverse impact on the attractiveness of those products as well as eroding their key competitive strengths. The occurrence of any event causing an adverse impact on the liquidity available to Betfair Exchange, FanDuel’s DFS or PokerStars’ poker businesses could result in a reduction in the number of customers who are willing to use these products and services, which, if it were to arise to a material degree, could have a material adverse effect on our ability to generate revenue from those businesses. While we have taken measures to ensure our liquidity position from time to time, we cannot assure you that similar measures will provide the required results in the future or effectively mitigate the disruption and cost to our business, and that no further liquidity solutions will be necessary.

Current wording

Betfair Exchange, FanDuel’s DFS business, PokerStars’ poker business and Junglee Games’ rummy business operate with, and their success is dependent on, high levels of liquidity. A significant reduction of this liquidity, or any legislative or regulatory measures taken to ring-fence that liquidity, could have a material adverse impact on the attractiveness of those products as well as eroding their key competitive strengths. The occurrence of any event causing an adverse impact on the liquidity available to Betfair Exchange, FanDuel’s DFS or PokerStars’ poker business could result in a reduction in the number of customers who are willing to use these products and services, which, if it were to arise to a material degree, could have a material adverse effect on our ability to generate revenue from those businesses. While we have taken measures to ensure our liquidity position from time to time, we cannot assure you that similar measures will provide the required results in the future or effectively mitigate the disruption and cost to our business, and that no further liquidity solutions will be necessary.

Previous wording

The leadership of our current senior management has been a critical element of our success. The departure, death or disability of any such members of senior management or other extended or permanent loss of any of their services, or any negative market or industry perception with respect to any of them or their loss, could have a material adverse effect on our business, financial condition and results of operations.

Current wording

The leadership of our current senior management team has been a critical element of our success. The departure, death or disability of any such members of senior management or other extended or permanent loss of any of their services, or any negative market or industry perception with respect to any of them or their loss, could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Our acquisition and retention of AMPs depends in certain jurisdictions upon our ability to effectively market to our existing and potential customers, including through affiliate marketing. There are limitations to and, in some cases, prohibitions on the online and offline marketing channels that are available to us as a result of applicable laws and regulations. For example, in Australia, since March 2018, the commonwealth government has upheld bans on gambling advertising during live sports broadcasts between 5:00 am and 8:30 pm (including online streaming of sporting events). Further restrictions on advertising may come into place following a parliamentary inquiry into online gambling and its impacts on those experiencing gambling harm. In Italy, an “advertising ban” entered into force at the beginning of 2019. This included a complete ban on direct and indirect advertising, sponsorship, the use of influencers and all other forms of communications with promotional content relating to games or betting with cash winnings. Other jurisdictions, including, for example, Spain, the Netherlands and Belgium, are also further restricting advertising in their markets.

Current wording

Our acquisition and retention of AMPs depends in certain jurisdictions upon our ability to effectively market to our existing and potential customers, including through affiliate marketing. There are limitations to and, in some cases, prohibitions on the online and offline marketing channels that are available to us as a result of applicable laws and regulations. For example, in Australia, since March 2018, the commonwealth government has upheld bans on gambling advertising during live sports broadcasts (including online streaming of sporting events) between 5:00 am and 8:30 pm. Further restrictions on advertising may come into place following a parliamentary inquiry in 2023 into online gambling and its impacts on those experiencing gambling harm. In Italy, an “advertising ban” entered into force at the beginning of 2019. This included a complete ban on direct and indirect advertising, sponsorship, the use of influencers and all other forms of communications with promotional content relating to games or betting with cash winnings. Other jurisdictions, including, for example, Spain, Ireland and Belgium, are also further restricting advertising in their markets.

Previous wording

We intend to make significant investments to support our business growth and may require additional funds to respond to business challenges, including the need to develop new product offerings and features or enhance our existing platform, improve our operating infrastructure or acquire complementary businesses, personnel and technologies. Accordingly, we may need to engage in equity or debt financings to secure additional funds, which may involve increased funding costs due to rising interest rates. See “—Financial and Banking Risks Relating to Our Operations—Our strategy could be materially adversely affected by our indebtedness.”

Current wording

We intend to make significant investments to support our business growth and may require additional funds to respond to business challenges, including the need to develop new product offerings and features or enhance our existing platforms, improve our operating infrastructure or acquire complementary businesses, personnel and technologies. Accordingly, we may need to engage in equity or debt financings to secure additional funds, which may involve increased funding costs due to rising interest rates. See “—Financial and Banking Risks Relating to Our Operations—Our strategy could be materially adversely affected by our indebtedness.”

Previous wording

We have entered into a number of business combinations in recent years, including the combination with TSG in May 2020, the acquisition of Adjarabet in February 2019, the acquisition of Junglee Games in January 2021, the acquisition of tombola in January 2022, the acquisition of Sisal in August 2022 and the acquisition of MaxBet in January 2024. We regularly evaluate acquisition and other strategic transaction opportunities, which opportunities may be material to our business.

Current wording

We have entered into a number of business combinations in recent years, including the combination with TSG in May 2020, the acquisition of Junglee Games in January 2021, the acquisition of tombola in January 2022, the acquisition of Sisal in August 2022 and the acquisition of MaxBet in January 2024, as well as the planned acquisitions of NSX Group and Snaitech S.p.A., which we expect to complete in 2025. We regularly evaluate acquisition and other strategic transaction opportunities, which opportunities may be material to our business.

Previous wording

We rely on relationships with sports leagues and teams, media partners, casinos, affiliates, high-profile talent, horse racing tracks and other third parties in order to obtain certain licenses, to access certain markets, to promote our brands and our product offerings and to attract customers to our product offerings. These strategic relationships, along with our relationships with providers of online services, search engines, social media, directories and other websites ande-commerce businesses, help drive consumers to our technology and products. For example, we have an ongoing commercial relationship with Sky, which allows us to use the Sky brand (e.g., Sky Betting and Gaming) and to integrate with Sky’s commercial and advertising platforms pursuant to contractual agreements. Certain of the rights granted under these agreements allow us to use Sky Betting and Gaming brands on websites, applications, marketing and promotional materials which also feature our other brands. If customer perception of the Sky brand were to deteriorate (as a result of acts or omissions by Sky, or us, including any acts or omissions which result in a material deterioration in Sky’s reputation), or if Sky was to lose some or all of its material licensing arrangements with respect to sports broadcasting, our ability to attract or retain customers through our Sky Betting and Gaming brand could be negatively impacted, resulting in a consequent loss of revenue and diminishing the value of our arrangements with Sky. Additionally, Sky may terminate the license if we do not comply with the license terms or our contractual arrangements may terminate under certain conditions. Any expiration or termination of our Sky brand license could have a material adverse effect on our ability to generate revenue from the businesses of Sky Betting and Gaming, as well as harm or cause loss of our reputation, brand and associated rights.

Current wording

We rely on relationships with sports leagues and teams, media partners, casinos, affiliates, high-profile talent, horse racing tracks and other third parties in order to obtain certain licenses, to access certain markets, to promote our brands and our product offerings and to attract customers to our product offerings. These strategic relationships, along with our relationships with providers of online services, search engines, social media, directories and other websites and e-commerce businesses, help drive consumers to our technology and products. For example, we have an ongoing commercial relationship with Sky, which allows us to use the Sky brand (e.g., Sky Betting and Gaming) and to integrate with Sky’s commercial and advertising platforms pursuant to contractual agreements. Certain of the rights granted under these agreements allow us to use Sky Betting and Gaming brands on websites, applications, marketing and promotional materials which also feature our other brands. If customer perception of the Sky brand were to deteriorate (as a result of acts or omissions by Sky, or us, including any acts or omissions which result in a material deterioration in Sky’s reputation), or if Sky was to lose some or all of its material licensing arrangements with respect to sports broadcasting, our ability to attract or retain customers through our Sky Betting and Gaming brand could be negatively impacted, resulting in a consequent loss of revenue and diminishing the value of our arrangements with Sky. Additionally, Sky may terminate the license if we do not comply with the license terms or our contractual arrangements may terminate under certain conditions. Any expiration or termination of our Sky brand license could have a material adverse effect on our ability to generate revenue from the businesses of Sky Betting and Gaming, as well as harm or cause loss of our reputation, brand and associated rights.

Previous wording

FanDuel has a strategic partnership with Boyd Gaming (“Boyd”), one of the largest and most experienced gaming companies in the United States. This partnership provides FanDuel with first skin access (i.e., access to the online sports betting and iGaming market of a given state or province through the use of the first skin granted by a state to a land-based gaming entity with an existing license) for online sports betting in all jurisdictions where Boyd holds gaming licenses currently, with the exception of Nevada and California. A “skin” permits a license holder to partner with an online operator to offer online sports betting or iGaming services under that entity’s license. Any failure to maintain and manage this relationship could negatively impact our results of operations. See “—Risks Relating to Regulation, Licensing, Litigation and Taxation—The successful execution of our growth strategy, particularly with respect to our U.S. business, which is critical to our long-term ambitions, will depend on successfully expanding our provision of online betting and iGaming services into certain new and existing jurisdictions and markets where the regulatory status of the provision of such services has been clarified or liberalized.”

Current wording

FanDuel has a strategic partnership with Boyd Gaming Corporation, one of the largest and most experienced gaming companies in the United States. This partnership provides FanDuel with first skin access (i.e., access to the online sports betting and iGaming market of a given state or province through the use of the first skin granted by a state to a land-based gaming entity with an existing license) for online sports betting in all jurisdictions where Boyd Gaming Corporation holds gaming licenses currently, with the exception of Nevada and California. A “skin” permits a license holder to partner with an online operator to offer online sports betting or iGaming services under that entity’s license. Any failure to maintain and manage this relationship could negatively impact our results of operations. See “—Risks Relating to Regulation, Licensing, Litigation and Taxation—The successful execution of our growth strategy, particularly with respect to our U.S. business, which is critical to our long-term ambitions, will depend on successfully expanding our provision of online betting and iGaming services into certain new and existing jurisdictions and markets where the regulatory status of the provision of such services has been clarified or liberalized.”

Previous wording

In addition, our sports betting operations are subject to the seasonal variations dictated by the sporting calendar and are affected by the scheduling and live broadcasting of major sporting events. Disruptions to the scheduling and broadcasting of those events may have a material adverse effect on our ability to generate revenue from betting on those events. In some instances, the scheduling of major sporting events occurs seasonally (e.g., horse racing, the Premier League, the UEFA Champions League, the NBA, the NFL, MLB and the NCAA) or at regular but infrequent intervals (e.g., the FIFA World Cup and the UEFA European Football Championship). Such seasonality or infrequent sporting events tend to impact, among other things, revenues from operations, key metrics and customer activity and may increase the volatility of our financial performance. In addition, certain individuals or teams advancing or failing to advance and their scores and other results within specific tournaments, games or events may impact our financial performance. Furthermore, sporting events may be disrupted or cancelled due to unforeseen circumstances, which may also increase the volatility of our financial performance. For example, government authorities’ and sports governing bodies’ efforts to contain the COVID-19 pandemic manifested in the implementation of restrictions and lockdowns that resulted in the postponement or cancellation of sporting events, which had a material adverse effect on our ability to generate revenue from betting on sporting events that took place during that time. The cancellation, disruption to, or postponement of, the live broadcasting of sporting events, due to an array of issues including those discussed above as well as contractual disputes, technological or communication problems, or the insolvency of a major broadcaster, could have a material adverse effect on our business, financial condition and results of operations.

Current wording

In addition, our sports betting operations are subject to the seasonal variations dictated by the sporting calendar and are affected by the scheduling and live broadcasting of major sporting events. Disruptions to the scheduling and broadcasting of those events may have a material adverse effect on our ability to generate revenue from betting on those events. In some instances, the scheduling of major sporting events occurs seasonally (e.g., the NBA, the NFL, MLB, the NCAA, the Premier League, the UEFA Champions League, and horse racing) or at regular but infrequent intervals (e.g., the FIFA World Cup and the UEFA European Football Championship). Such seasonality or infrequent sporting events tend to impact, among other things, revenues from operations, key metrics and customer activity and may increase the volatility of our financial performance. In addition, certain individuals or teams advancing or failing to advance and their scores and other results within specific tournaments, games or events may impact our financial performance. Furthermore, sporting events may be disrupted or cancelled due to unforeseen circumstances, which may also increase the volatility of our financial performance. The cancellation, disruption to, or postponement of, the live broadcasting of sporting events, due to an array of issues including contractual disputes, technological or communication problems, or the insolvency of a major broadcaster, could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Global economic conditions and geopolitical events, including the ongoing military action between Russia and Ukraine and the recent military tensions between Israel and Hamas, could adversely affect our business, financial condition and results of operations.

Current wording

Global economic conditions and geopolitical events could adversely affect our business, financial condition and results of operations.

Previous wording

Our results of operations are influenced by global economic and geopolitical events, including the ongoing Russia-Ukraine conflict and the recent military tensions between Israel and Hamas. The continued military conflict between Ukraine and Russia, which commenced on February 24, 2022, has led to, and could continue to lead to, significant market and other disruptions, including significant volatility in commodity prices and supply of energy resources, instability in financial markets, supply chain interruptions, political and social instability, changes in customer preferences and discretionary spending and increases in cyberattacks and espionage.

Current wording

For example, the ongoing Russia-Ukraine conflict has led to, and could continue to lead to, significant market and other disruptions, including significant volatility in commodity prices and supply of energy resources, instability in financial markets, supply chain interruptions, political and social instability, changes in customer preferences and discretionary spending and increases in cyberattacks and espionage.

Previous wording

Following the escalation of the military conflict between Russia and Ukraine and the introduction of related sanctions, in March 2022 we closed our operations in Russia and the areas in Ukraine subject to sanctions, namely the Crimea Region, Donetsk and Luhansk Region of Ukraine. Our products are no longer available to residents in Russia or these regions of Ukraine, and we do not have any operations on the ground in either Russia or Ukraine. As a result, our revenue from the Russian and Ukrainian markets declined from $17 million in fiscal 2022 to $13 million in fiscal 2023 (representing less than 0.3% and less than 0.2% of our revenue for fiscal 2022 and 2023, respectively).

Current wording

Additionally, in response to the conflict between Russia and Ukraine, the U.S. government and other governments have imposed a series of sanctions against certain Russian government, government-related, and other entities and individuals, together with enhanced export controls on certain products and financial and economic sanctions on certain industry sectors and parties in Russia. The governments of other jurisdictions in which we operate, such as the United Kingdom, the European Union and Canada, have also implemented additional sanctions or other restrictive measures. Following the escalation of the military conflict between Russia and Ukraine and the introduction of related sanctions, in March 2022 we closed our operations in Russia and the areas in Ukraine subject to sanctions, namely the Crimea Region, Donetsk and Luhansk Region of Ukraine. Our products are no longer available to residents in Russia or these regions of Ukraine, and we do not have any operations on the ground in either Russia or Ukraine.

Previous wording

While we continue to actively monitor the situation in Ukraine and Gaza, there can be no way to predict the progress or outcome of the conflict in Ukraine or its impacts in Ukraine, Russia or Belarus as the conflict, and any resulting government reactions, are rapidly developing and beyond our control, or the impact of the rising conflict between Israel and Hamas. The extent and duration of the military action, sanctions and resulting market disruptions could be significant and could potentially have substantial impact on our business and the global economy for an unknown period of time. Any of the abovementioned factors could have a material adverse effect on our business, financial condition and results of operations, and any such disruptions may also magnify the impact of other risks described in this Annual Report.

Current wording

The extent and duration of any current or future conflict, sanctions and resulting market disruptions could be significant and could potentially have a substantial impact on our business and the global economy for an unknown period of time. Any of the above mentioned factors could have a material adverse effect on our business, financial condition and results of operations, and any such disruptions may also magnify the impact of other risks described in this Annual Report.

Previous wording

Our ability to provide uninterrupted services is dependent on these systems. While we have certain incident and disaster recovery plans, business contingency plans andback-up procedures in place designed to minimize, mitigate, manage and recover from the risk of an interruption or failure of our critical IT systems, there is no guarantee that such plans and procedures will be able to adequately anticipate or plan for all such risks and we cannot eliminate the risk of a system failure, interruption or disruption occurring. Such failures may arise for a wide variety of reasons such as software malfunctions, insufficient capacity, including network bandwidth in particular during peak activity times, as well as hardware and software malfunctions or defects, or complications experienced in connection with the operation of such systems, including system upgrades.

Current wording

Our ability to provide uninterrupted services is dependent on these systems. While we have certain incident and disaster recovery plans, business contingency plans and back-up procedures in place designed to minimize, mitigate, manage and recover from the risk of an interruption or failure of our critical IT systems, there is no guarantee that such plans and procedures will be able to adequately anticipate or plan for all such risks and we cannot eliminate the risk of a system failure, interruption or disruption occurring. Such failures may arise for a wide variety of reasons such as software malfunctions, insufficient capacity, including network bandwidth in particular during peak activity times, as well as hardware and software malfunctions or defects, or complications experienced in connection with the operation of such systems, including system upgrades.

Previous wording

To compete effectively, we must be able to anticipate and respond, in a timely and effective manner, to the need for new and enhanced technology. This may include new software applications or related services based on artificial intelligence, machine learning, or robotics. The markets in which we compete are characterized by rapidly changing technology, evolving industry standards, frequent enhancements to existing products and services, the introduction of new services and products and changing customer demands. We may not be successful in anticipating or responding to these developments on a timely and cost-effective basis. Additionally, the effort to gain technological expertise and develop new technologies in our business requires us to incur significant expenses. If we cannot offer new technologies as quickly as our competitors, or if our competitors develop more cost-effective or better-functioning technologies or product offerings, we could experience a material adverse effect on our operating results, client relationships, growth and compliance programs. There can also be no assurance that our current systems will be able to support any new or emerging technologies, industry standards or enhanced products or services, or be able to accommodate a significant increase in online traffic, increased customer numbers, or modified usage patterns arising as a result of any such technologies, standards or products or services. If our systems are unable to expand to meet increased demand, are disrupted or otherwise fail to perform, or the adoption of new technologies requires greater investment than anticipated, this could have a material adverse effect on our business, financial condition and results of operations, and could increase our operating expenses.

Current wording

To compete effectively, we must be able to anticipate and respond, in a timely and effective manner, to the need for new and enhanced technology. This may include new software applications or related services based on AI, machine learning, or robotics. The markets in which we compete are characterized by rapidly changing technology, evolving industry standards, frequent enhancements to existing products and services, the introduction of new services and products and changing customer demands. We may not be successful in anticipating or responding to these developments on a timely and cost-effective basis. Additionally, the effort to gain technological expertise and develop new technologies in our business requires us to incur significant expenses. If we cannot offer new technologies as quickly as our competitors, or if our competitors develop more cost-effective or better-functioning technologies or product offerings, we could experience a material adverse effect on our operating results, client relationships, growth and compliance programs. There can also be no assurance that our current systems will be able to support any new or emerging technologies, industry standards or enhanced products or services, or be able to accommodate a significant increase in online traffic, increased customer numbers, or modified usage patterns arising as a result of any such technologies, standards or products or services. If our systems are unable to expand to meet increased demand, are disrupted or otherwise fail to perform, or the adoption of new technologies requires greater investment than anticipated, this could have a material adverse effect on our business, financial condition and results of operations, and could increase our operating expenses.

Previous wording

We use artificial intelligence, machine learning and similar technologies in our business. These technologies may present business, compliance, and reputational risks.

Current wording

We use artificial intelligence (“AI”), machine learning and similar technologies in our business. These technologies may present business, compliance, and reputational risks.

Previous wording

Recent technological advances in artificial intelligence and machine-learning technology both present opportunities and pose risks to us. If we fail to keep pace with rapidly evolving technological developments in artificial intelligence, our competitive position and business results may suffer. Our competitors or other third parties may incorporate artificial intelligence in a similar or different manner, and may do so more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. At the same time, use of artificial intelligence has recently become the source of significant media attention and political debate. If our use of artificial intelligence becomes controversial, we may experience brand, reputational or competitive harm. In addition, the introduction of these technologies, particularly generative artificial intelligence, into new or existing offerings may also result in new or expanded risks and liabilities, including due to enhanced governmental or regulatory scrutiny, litigation, compliance issues, ethical concerns, confidentiality or security risks, as well as other factors that could adversely affect our business, reputation, and financial results.*** ***The rapid evolution of artificial intelligence, including with respect to compliance with existing and potential government regulation of such technology, may also require significant resources, including to develop, test and maintain platforms, offerings, services, and features to help us implement artificial intelligence in accordance with applicable law, and to minimize other adverse effects on our results of operations.

Current wording

Additionally, use of AI has become the source of significant media attention and political debate. The introduction of these technologies, particularly generative AI, into new or existing offerings may also result in new or expanded risks and liabilities, including due to enhanced governmental or regulatory scrutiny, intellectual property claims, litigation, compliance issues, ethical concerns, confidentiality or security risks, negative user perceptions as to automation and AI, as well as other factors that could adversely affect our business, reputation, and financial results. AI technologies, including generative AI, may create content that is factually inaccurate or flawed, or otherwise unlawful, harmful or policy-violating. Such content may expose us to brand or reputational harm and/or legal liability. The rapid evolution of AI, including with respect to compliance with existing and potential government regulation of such technology, may also require significant resources, including to develop, test and maintain platforms, offerings, services, and features to help us implement AI in accordance with applicable law, and to minimize other adverse effects on our results of operations.

Previous wording

The secure collection, maintenance, processing and transmission of confidential and sensitive information, including personal data, is a critical element of our operations. We rely on encryption and authentication technology licensed from third parties in an effort to securely transmit certain confidential and sensitive information, including credit card numbers. Our information technology and other systems, and those of our third-party service providers, that collect, maintain, process and transmit customer, employee, service provider and business partner information are susceptible to increasing threats of continually evolving cybersecurity risks. For example, we have received notice that certain of our customer and employee data was involved in the global incident involving the MOVEit file transfer software, which began when the third-party provider who administers the software announced that it had identified a previously unknown vulnerability in the application that is used by businesses across the world to share data and manage file transfers. Once we discovered this, we promptly undertook responsive measures, including restricting access to the affected application, launching an internal investigation in partnership with outside independent cybersecurity forensic experts and notifying the relevant regulators and law enforcement agencies, as well as our employees and customers, impacted by the incident. Based on this investigation and information currently known at this time, we do not expect that this incident will have a material impact on our operations or financial results. However, we have incurred, and may continue to incur, expenses related to this incident, and we have become subject to claims in relation thereto; accordingly, we remain subject to risks and uncertainties as a result of this incident.

Current wording

The secure collection, maintenance, processing and transmission of confidential and sensitive information, including personal data, is a critical element of our operations. We rely on encryption and authentication technology licensed from third parties in an effort to securely transmit certain confidential and sensitive information, including credit card numbers. Our information technology and other systems, and those of our third-party service providers, that collect, maintain, process and transmit customer, employee, service provider and business partner information are susceptible to increasing threats of continually evolving cybersecurity risks. For example, in 2023, we received notice that certain of our customer and employee data was involved in the global incident involving the MOVEit file transfer software, which began when the third-party provider who administers the software announced that it had identified a previously unknown vulnerability in the application that is used by businesses across the world to share data and manage file transfers. Once we discovered this, we promptly undertook responsive measures, including restricting access to the affected application, launching an internal investigation in partnership with outside independent cybersecurity forensic experts and notifying the relevant regulators and law enforcement agencies, as well as our employees and customers, impacted by the incident. Based on this investigation and information currently known at this time, we do not expect that this incident will have a material impact on our operations or financial results. However, we have incurred, and may continue to incur, expenses related to this incident, and we have become subject to claims in relation thereto; accordingly, we remain subject to risks and uncertainties as a result of this incident.

Previous wording

Moreover, these types of risks may increase over time as the complexity and number of technical systems and applications we use also increases. Advances in computer capabilities, new technological discoveries or other developments may result in the whole or partial failure of this technology to protect transaction data or other confidential and sensitive information from being breached or compromised. As cybersecurity threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, third parties may attempt to fraudulently induce employees or customers to disclose information in order to gain access to our data or our customers’ data. Third parties may attempt to create false or undesirable user accounts and advertisements or take other actions on our platform for objectionable ends, and compromised credentials, including those obtained through phishing and credential stuffing, may be used to attack our websites and may result in an interruption, disruption or malfunction of our websites or IT systems, or the loss or compromise of data. Our security measures, and those of our third-party service providers, may not detect or prevent all attempts to breach our IT systems or data. Distributed denial-of-service (“DDoS”) attacks, “Trojan horse” attacks, computer malware, ransomware, viruses, malicious software, break-ins, phishing attacks, social engineering, security breaches, general hacking or other attacks and similar disruptions may jeopardize the confidentiality, integrity and security of information stored in, processed or transmitted by our websites, networks and systems, or that we or such third parties otherwise maintain, including payment card systems, which may subject us to fines or higher transaction fees or limit or terminate our access to certain payment methods. Further, sensitive, personal or other regulated data and information may be lost, disclosed, accessed, altered or taken without appropriate consent, which could subject us to liability and could have a material adverse effect on our business, financial condition and results of operations. In addition, we cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss. Further, techniques used to obtain unauthorized access to or sabotage systems change frequently and may not be known until launched against us or our third-party service providers and may be difficult to detect for long periods of time. Although we have developed systems and processes that are designed to protect our data and customer data, to prevent data loss, to disable undesirable accounts and activities on our platform, and to prevent or detect security breaches, we cannot assure you that such measures will be successful, that we will be able to anticipate or detect all cyber-attacks or other breaches, that…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Moreover, these types of risks may increase over time as the complexity and number of technical systems and applications we use also increases. Advances in computer capabilities, new technological discoveries (including the use of AI) or other developments may result in the whole or partial failure of this technology to protect transaction data or other confidential and sensitive information from being breached or compromised. As cybersecurity threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, third parties may attempt to fraudulently induce employees or customers to disclose information in order to gain access to our data or our customers’ data. Third parties may attempt to create false or undesirable user accounts and advertisements or take other actions on our platform for objectionable ends, and compromised credentials, including those obtained through phishing and credential stuffing, may be used to attack our websites and may result in an interruption, disruption or malfunction of our websites or IT systems, or the loss or compromise of data. Our security measures, and those of our third-party service providers, may not detect or prevent all attempts to breach our IT systems or data. Distributed denial-of-service (“DDoS”) attacks, “Trojan horse” attacks, computer malware, ransomware, viruses, malicious software, break-ins, phishing attacks, social engineering, security breaches, general hacking or other attacks and similar disruptions may jeopardize the confidentiality, integrity and security of information stored in, processed or transmitted by our websites, networks and systems, or that we or such third parties otherwise maintain, including payment card systems, which may subject us to fines or higher transaction fees or limit or terminate our access to certain payment methods. Further, sensitive, personal or other regulated data and information may be lost, disclosed, accessed, altered or taken without appropriate consent, which could subject us to liability and could have a material adverse effect on our business, financial condition and results of operations. In addition, we cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss. Further, techniques used to obtain unauthorized access to or sabotage systems change frequently and may not be known until launched against us or our third-party service providers and may be difficult to detect for long periods of time. Although we have developed systems and processes that are designed to protect our data and customer data, to prevent data loss, to disable undesirable accounts and activities on our platform, and to prevent or detect security breaches, we cannot assure you that such measures will be successful, that we will be able to anticipate or detect all cyber-attac…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

While our insurance policies include liability coverage for certain of these matters, if we experience a significant security incident, we could be subject to liability or other damages that exceed our insurance coverage and we cannot be certain that such insurance policies will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible orco-insurance requirements, could have a material adverse effect on our business, financial condition and results of operations.

Current wording

While our insurance policies include liability coverage for certain of these matters, if we experience a significant security incident, we could be subject to liability or other damages that exceed our insurance coverage and we cannot be certain that such insurance policies will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

For example, the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation) (the “GDPR”) which went into effect on May 25, 2018 has resulted in, and will continue to result in, significant compliance burdens and costs for companies with customers and/or operations in the European Economic Area (“EEA”). The GDPR and national implementing legislation in EEA member states impose a strict data protection compliance regime including obligations concerning the rights of data subjects, the transfer of personal data out of the European Economic Area, security breach notifications and safeguarding the security and confidentiality of personal data. Under the GDPR, fines of up to €20 million or 4% of the annual global revenues, whichever is greater, can be imposed for violations. Data protection supervisory authorities also have extensive powers under the GDPR, including the power to impose a temporary or definitive ban on processing activity. The GDPR also includes a right to compensation for data subjects who have suffered material ornon-material damage as a result of an infringement of the GDPR and in certain cases, civil litigation can be brought bynon-profit privacy advocacy groups. In addition, EU Directive 2020/1828 on representative actions for the protection of the collective interests of consumers (the Directive on Representative Actions) applied from June 25, 2023, and it is expected to increase “class action”-type cases being brought by qualified entities in respect of certain GDPR infringements. Liability can attach to us not only for our ownnon-compliance, but also due to the acts, errors or omissions of those who process personal data in the course of providing services for us, as the GDPR includes joint and several liability provisions in certain cases.

Current wording

Privacy laws are increasingly prevalent across the world, with countries implementing strict regulations to protect personal data and safeguard individuals' rights in the digital age. For example, the GDPR which went into effect on May 25, 2018 has resulted in, and will continue to result in, significant compliance burdens and costs for companies with customers and/or operations in the European Economic Area (“EEA”). The GDPR and national implementing legislation in EEA member states impose a strict data protection compliance regime including obligations concerning the rights of data subjects, the transfer of personal data out of the European Economic Area, security breach notifications and safeguarding the security and confidentiality of personal data. Under the GDPR, fines of up to €20 million or 4% of the annual global revenues, whichever is greater, can be imposed for violations. Data protection supervisory authorities also have extensive powers under the GDPR, including the power to impose a temporary or definitive ban on processing activity. The GDPR also includes a right to compensation for data subjects who have suffered material or non-material damage as a result of an infringement of the GDPR and in certain cases, civil litigation can be brought by non-profit privacy advocacy groups. In addition, EU Directive 2020/1828 on representative actions for the protection of the collective interests of consumers (the Directive on Representative Actions) applied from June 25, 2023, provides the ability for “class action”-type cases to brought by qualified entities in respect of certain GDPR infringements. Liability can attach to us not only for our own non-compliance, but also due to the acts, errors or omissions of those who process personal data in the course of providing services for us, as the GDPR includes joint and several liability provisions in certain cases.

Previous wording

Regulatory guidance, case law and enforcement activity concerning data protection regulatory standards in the European Economic Area are increasing and further changes are likely to occur that will further enhance the data protection rights of individuals and have a commensurate impact upon our ability to process personal data in a manner that maximizes its commercial value. For example, while the European Commission recently issued an adequacy decision regarding transfers of personal information from the European Economic Area to the United States pursuant to the EU-U.S. Data Privacy Framework, there remains complexity and uncertainty regarding such transfers to the United States and other jurisdictions, which could lead to additional costs, complaints, and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services or the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

Current wording

Regulatory guidance, case law and enforcement activity concerning data protection regulatory standards in the European Economic Area are increasing and further changes are likely to occur that will further enhance the data protection rights of individuals and have a commensurate impact upon our ability to process personal data in a manner that maximizes its commercial value. For example, while the European Commission issued an adequacy decision regarding transfers of personal information from the European Economic Area to the United States pursuant to the EU-U.S. Data Privacy Framework, there remains complexity and uncertainty regarding such transfers to the United States and other jurisdictions, which could lead to additional costs, complaints, and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services or the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

Previous wording

Further, the UK GDPR came into effect on January 1, 2021, and, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law following the United Kingdom’s withdrawal from the European Union (“Brexit”). The UK GDPR mirrors the fines under the GDPR (up to £17.5 million or 4% of the annual global revenues, whichever is greater). The relationship between the United Kingdom and the European Union in relation to certain aspects of data protection law remains uncertain, and it is unclear how UK data protection laws and regulations will develop in themedium-to-longer term and how data transfers to and from the United Kingdom will be regulated in the long term. Compliance with the GDPR and the UK GDPR may require us to modify our data processing practices and policies and incur compliance-related costs and expenses and these changes may lead to other additional costs and increase our overall risk exposure.

Current wording

Further, the UK GDPR came into effect on January 1, 2021, and, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law following the United Kingdom’s withdrawal from the European Union Brexit. The UK GDPR mirrors the fines under the GDPR (up to £17.5 million or 4% of the annual global revenues, whichever is greater). The relationship between the United Kingdom and the European Union in relation to certain aspects of data protection law remains uncertain, and it is unclear how UK data protection laws and regulations will develop in the medium-to-longer term and how data transfers to and from the United Kingdom will be regulated in the long term. Compliance with the GDPR and the UK GDPR may require us to modify our data processing practices and policies and incur compliance-related costs and expenses and these changes may lead to other additional costs and increase our overall risk exposure.

Previous wording

Many jurisdictions outside of the United Kingdom and the European Union are enacting more robust data protection laws, in many cases following similar principles to those set out in the GDPR. For example, in the United States, our largest and fastest growing market, all 50 states, the District of Columbia, and several U.S. territories have some form of data breach notification laws, while individual states have introduced broader consumer privacy legislation. For example, in California, the California Consumer Privacy Act, which was further expanded by the California Privacy Rights and Enforcement Act of 2020, or CPRA, which took effect in most material respects on January 1, 2023 (with application to data collected beginning on January 1, 2022) (the “CCPA”) established a new privacy framework for covered businesses such as ours. The CCPA also provides for regulatory penalties for violations, as well as a private cause of action for data breaches, and the CPRA imposed even stricter obligations on companies and established a state regulatory agency to enforce those requirements. It remains unclear how various provisions of the CCPA will be interpreted and enforced. At least twelve additional U.S. states have enacted comprehensive privacy legislation. Most of these statutes impose less stringent obligations than the CCPA but generally align to the same principles. These laws may require substantial modifications to covered companies’ data processing practices and policies, impose compliance-related costs and expenses to provide updated notices to employees and customers, and we may be required to negotiate or renegotiate contractual obligations with third-party service providers. Such laws will restrict processing activities, likely limiting our ability to market to customers and/or increasing operational and compliance costs. The introduction of new or further data protection laws or regulations in jurisdictions in which we currently operate, including in Canada, modify our data processing activities and/or increase our operational and compliance costs, which could have a material adverse effect on our business, financial condition and results of operations. In addition, the U.S. Federal Trade Commission (the “FTC”) and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination, and security of data.

Current wording

In the United States, since California passed the California Consumer Privacy Act in 2018, seventeen additional U.S. states have enacted comprehensive privacy legislation. The result is a complex and onerous patchwork of inconsistent legal obligations, with nuances across states in terminology and definitions. It largely remains unclear how these laws will be interpreted and enforced, and in California, certain implementing regulations have yet to be finalized. These laws may require substantial modifications to in-scope companies’ data processing practices and policies, impose compliance-related costs and expenses to provide updated notices, conduct privacy impact assessments, and fulfill privacy rights requests, and we may be required to negotiate or renegotiate contractual obligations with third-parties. Such laws will restrict processing activities, likely limiting our ability to market to customers and/or increasing operational and compliance costs. The introduction of new or updated data protection laws or regulations in jurisdictions in which we currently operate, including in Canada and Brazil, may modify our data processing activities and/or increases our operational and compliance costs, which could have a material adverse effect on our business, financial condition and results of operations. In addition, the FTC and many state attorneys general are interpreting federal and state consumer protection laws to impose standards for the online collection, use, dissemination, and security of data. Finally, there has been a significant increase in privacy litigation related to cookies, pixels, and other common analytics technologies. Plaintiffs claim that personal data is collected and/or shared with third parties without the requisite user consent under laws such as the California Invasion of Privacy Act or the federal Video Privacy Protection Act. Should these legal theories succeed in the courts, we could see material adverse effects on our business or financial condition as costs to defend and/or settle litigation increase.

Previous wording

We cannot yet determine the impact future laws, regulations and standards may have on our business. For instance, in addition to the variety of existing laws and regulations governing our use of personal data, there are a wide variety of other laws which are currently being enacted or under development and which may have a material impact on whether, and how, we can operate our online services in certain jurisdictions. For example, the Digital Services Act came into full effect in the European Union in February 2024, resulting in changes to the regulation of online content that is deemed to be illegal or harmful. Similarly, the AI Act will likely have implications for how AI technology is used in our business and across the industry generally.

Current wording

We cannot yet determine the impact future laws, regulations and standards may have on our business. For instance, in addition to the variety of existing laws and regulations governing our use of personal data, there are a wide variety of other laws which are currently being enacted or under development and which may have a material impact on whether, and how, we can operate our online services in certain jurisdictions. For example, the Digital Services Act came into full effect in the European Union in February 2024, resulting in changes to the regulation of online content that is deemed to be illegal or harmful. Similarly, the AI Act will have implications for how AI technology is used in our business and across the industry generally.

Previous wording

Although we make reasonable efforts to comply with all applicable data protection and digital services laws and regulations, our interpretations and such measures may have been or may prove to be insufficient or incorrect. If we fail to adhere to applicable data protection, privacy and digital services laws, we may be subject to enforcement action, investigations, fines, regulatory proceedings and/or civil litigation. Any fines, investigations, regulatory proceedings, civil litigation or license revocations or refusals arising from a breach of applicable data protection, data security, privacy or digital services laws could have a material adverse effect on our business, financial condition and results of operations. If we are held directly responsible for a data security breach, or if we are deemed to be jointly responsible for a data security or other data protection breach by one of our service providers, then the resultant losses suffered by us could have a material adverse effect on our business, financial condition and results of operations. There can be no assurance that we would be able to recoup such losses, whether in whole or in part, from our service providers or insurers. Additionally, breaches of the GDPR, the CCPA or other applicable data protection or digital services laws could also result in reputational damage to our brands, resulting in the loss of the goodwill of customers and the potential to deter new and existing customers, or could result in our brands being subject to the revocation of existing licenses and/or the refusal of new applications for licenses. Furthermore, we or our third-party service providers could be required to fundamentally change our business activities and practices or modify our products and services to comply with existing and future data privacy and digital services laws and regulations, which could be costly, time-consuming and have an adverse effect on our or our third-party service providers’ business, results of operations or financial condition. Any of the foregoing could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business, results of operations or financial condition.

Current wording

Although we make reasonable efforts to comply with all applicable data protection, AI and digital services laws and regulations, our interpretations and such measures may have been or may prove to be insufficient or incorrect. If we fail to adhere to applicable data protection, privacy and digital services laws, we may be subject to enforcement action, investigations, fines, regulatory proceedings and/or civil litigation. Any fines, investigations, regulatory proceedings, civil litigation or license revocations or refusals arising from a breach of applicable data protection, data security, privacy or digital services laws could have a material adverse effect on our business, financial condition and results of operations. If we are held directly responsible for a data security breach, or if we are deemed to be jointly responsible for a data security or other data protection breach by one of our service providers, then the resultant losses suffered by us could have a material adverse effect on our business, financial condition and results of operations. There can be no assurance that we would be able to recoup such losses, whether in whole or in part, from our service providers or insurers. Additionally, breaches of the GDPR, the CCPA or other applicable data protection or digital services laws could also result in reputational damage to our brands, resulting in the loss of the goodwill of customers and the potential to deter new and existing customers, or could result in our brands being subject to the revocation of existing licenses and/or the refusal of new applications for licenses. Furthermore, we or our third-party service providers could be required to fundamentally change our business activities and practices or modify our products and services to comply with existing and future data privacy and digital services laws and regulations, which could be costly, time-consuming and have an adverse effect on our or our third-party service providers’ business, results of operations or financial condition. Any of the foregoing could result in additional cost and liability to us, damage our reputation, inhibit sales, and adversely affect our business, results of operations or financial condition.

Previous wording

We increasingly rely on licenses with third parties to access certain data used in our business, and we depend on third-party suppliers for data and content, including data received from sporting bodies and various data partners, that is used in the supply of our products and services. Some of this data is provided exclusively by particular suppliers and may not be obtainable from other suppliers. If these third parties were to discontinue providing products or services to us for any reason or fail to provide the agreed type of service, we may experience significant disruptions to our business. The general trend toward consolidation in the information services industry may increase the risk that such products or services, insofar as they relate to information services, may not be available to us in the future, or may only be available to us at increased cost. In addition, in the future, our data suppliers could enter into exclusive contracts with our competitors without our knowledge.

Current wording

We increasingly rely on licenses with third parties to access certain data used in our business, and we depend on third-party suppliers for data and content, including data received from sporting bodies and various data partners, that is used in the supply of our products and services. Some of this data is provided exclusively by particular suppliers and may not be obtainable from other suppliers. If these third parties were to discontinue providing products or services to us for any reason or fail to provide the agreed type of service, we may experience significant disruptions to our business. The general trend toward consolidation in the data and content industry may increase the risk that data and content products or services may not be available to us in the future, or may only be available to us at increased cost. In addition, in the future, our data suppliers could enter into exclusive contracts with our competitors without our knowledge.

Previous wording

In particular, we depend on payment and multi-currency processing providers to facilitate the movement of funds between us and our customers and any deterioration in the quality of the payment processing services we use, any interruption to those services, any increase in the cost of such services or any reduction in the availability of such services to betting and iGaming providers could have a material adverse effect on our ability to accept customers’ funds or significantly increase the costs of doing so. See “—Financial and Banking Risks Relating to Our Operations—We depend on the ongoing support of payment processors and international multi-currency transfer systems.”

Current wording

In particular, we depend on payment and multi-currency processing providers to facilitate the movement of funds between us and our customers and any deterioration in the quality of the payment processing services we use, any interruption to those services, any increase in the cost of such services or any reduction in the availability of such services to betting, iGaming and iCasino providers could have a material adverse effect on our ability to accept customers’ funds or significantly increase the costs of doing so. See “—Financial and Banking Risks Relating to Our Operations—We depend on the ongoing support of payment processors and international multi-currency transfer systems.”

Previous wording

We cannot be certain that our products and our business do not, or will not, infringe the intellectual property rights of third parties. Third parties may assert claims against us, or our third-party licensors, alleging that we are infringing, misappropriating or otherwise violating their intellectual property rights. Litigation or other legal proceedings relating to intellectual property claims, regardless of merit, may cause us to incur significant expenses and could distract our technical and management personnel from their normal responsibilities. In addition, the outcome of litigation is uncertain and third parties asserting claims could secure a judgment awarding substantial damages, as well as injunctive or other equitable relief against us, which could require us to redesign or reengineer our product offerings, and/or effectively block our ability to make, use, sell, distribute or market our products. In addition, even in instances where we believe that claims and allegations of intellectual property infringement against us are without merit, the damages or other remedies awarded, if any, may not be commercially meaningful. Regardless of whether any such proceedings are resolved in our favor, such proceedings could cause us to incur significant expenses and could distract our personnel from their normal responsibilities. In the event that a claim relating to intellectual property is asserted against us or our third-party licensors, or third parties not affiliated with us hold pending or issued patents that relate to our products or technology, we may seek licenses to such intellectual property or challenge those patents. Even if we were able to obtain a license, it could benon-exclusive, thereby giving our competitors and other third parties access to the same technologies licensed to us. In addition, we may be unable to obtain these licenses on commercially reasonable terms, if at all, and our challenge of third party patents may be unsuccessful. If we are unable to obtain the necessary licenses or other rights, we may be forced to acquire or develop alternate technology, which may require significant time and effort and may be of lower quality or performance standards. This would limit and delay our ability to provide new or competing product offerings and increase our costs. If alternate technology cannot be obtained or developed, we may not be able to offer certain functionality as part of our product offerings, which could materially and adversely affect our business, financial condition and results of operations.

Current wording

We cannot be certain that our products and our business do not, or will not, infringe the intellectual property rights of third parties. Third parties may assert claims against us, or our third-party licensors, alleging that we are infringing, misappropriating or otherwise violating their intellectual property rights. Litigation or other legal proceedings relating to intellectual property claims, regardless of merit, may cause us to incur significant expenses and could distract our technical and management personnel from their normal responsibilities. In addition, the outcome of litigation is uncertain and third parties asserting claims could secure a judgment awarding substantial damages, as well as injunctive or other equitable relief against us, which could require us to redesign or reengineer our product offerings, and/or effectively block our ability to make, use, sell, distribute or market our products. In addition, even in instances where we believe that claims and allegations of intellectual property infringement against us are without merit, the damages or other remedies awarded, if any, may not be commercially meaningful. Regardless of whether any such proceedings are resolved in our favor, such proceedings could cause us to incur significant expenses and could distract our personnel from their normal responsibilities. In the event that a claim relating to intellectual property is asserted against us or our third-party licensors, or third parties not affiliated with us hold pending or issued patents that relate to our products or technology, we may seek licenses to such intellectual property or challenge those patents. Even if we were able to obtain a license, it could be non-exclusive, thereby giving our competitors and other third parties access to the same technologies licensed to us. In addition, we may be unable to obtain these licenses on commercially reasonable terms, if at all, and our challenge of third party patents may be unsuccessful. If we are unable to obtain the necessary licenses or other rights, we may be forced to acquire or develop alternate technology, which may require significant time and effort and may be of lower quality or performance standards. This would limit and delay our ability to provide new or competing product offerings and increase our costs. If alternate technology cannot be obtained or developed, we may not be able to offer certain functionality as part of our product offerings, which could materially and adversely affect our business, financial condition and results of operations.

Previous wording

Moreover, if any of the third-party platforms used for distribution of our product offerings were to limit or disable advertising on their platforms, either because of technological constraints or because the owner of these distribution platforms wished to impair our ability to publish advertisements on them, our ability to grow and retain our customer-base and generate revenue could be harmed. Also, technologies have been, and may continue to be, developed by companies, such as Apple and Google, that, among other things, block or limit the display of our advertisements and some or all third-party cookies on mobile and desktop devices, limit cross-site and cross-device attribution, prevent measurement outside a narrowly-defined attribution window and prevent advertisementre-targeting and optimization. These developments could require us to make changes to how we collect information on, and track the actions of, our customers and impact our marketing activities. These changes could materially impact the way we do business, and if we or our advertising partners are unable to quickly and effectively adjust to new changes, there could be a material adverse effect on our business, financial condition and results of operations.

Current wording

Moreover, if any of the third-party platforms used for distribution of our product offerings were to limit or disable advertising on their platforms, either because of technological constraints or because the owner of these distribution platforms wished to impair our ability to publish advertisements on them, our ability to grow and retain our customer-base and generate revenue could be harmed. Also, technologies have been, and may continue to be, developed by companies, such as Apple and Google, that, among other things, block or limit the display of our advertisements and some or all third-party cookies on mobile and desktop devices, limit cross-site and cross-device attribution, prevent measurement outside a narrowly-defined attribution window and prevent advertisement re-targeting and optimization. These developments could require us to make changes to how we collect information on, and track the actions of, our customers and impact our marketing activities. These changes could materially impact the way we do business, and if we or our advertising partners are unable to quickly and effectively adjust to new changes, there could be a material adverse effect on our business, financial condition and results of operations.

Previous wording

We have used “open source” software in connection with the development and deployment of our software platform, including in connection with our customer-facing applications and ourback-end service components, and we expect to continue to use open source software in the future. Open source software is licensed by its authors or other third parties under open source licenses, which in some instances may subject us to certain unfavorable conditions, including requirements that we offer our products that incorporate the open source software for no cost, that we make publicly available all or part of the source code for any modifications or derivative works we create based upon, incorporating or using the open source software, or that we license such modifications or derivative works under the terms of the particular open source license.

Current wording

We have used “open source” software in connection with the development and deployment of our software platform, including in connection with our customer-facing applications and our back-end service components, and we expect to continue to use open source software in the future. Open source software is licensed by its authors or other third parties under open source licenses, which in some instances may subject us to certain unfavorable conditions, including requirements that we offer our products that incorporate the open source software for no cost, that we make publicly available all or part of the source code for any modifications or derivative works we create based upon, incorporating or using the open source software, or that we license such modifications or derivative works under the terms of the particular open source license.

Previous wording

Furthermore, there are an increasing number of open source software license types, almost none of which have been interpreted by courts, resulting in a dearth of guidance regarding the proper legal interpretation of such licenses. As a result, there is a risk that open source software licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to market or provide our products and services. If we are held to have breached or failed to fully comply with all the terms and conditions of an open source software license, we could face infringement claims or other liability, or be required to seek costly licenses from third parties to continue providing our product offerings on terms that are not economically feasible, if at all, tore-engineer all or a portion of our platform, to discontinue or delay the provision of our product offerings ifre-engineering could not be accomplished on a timely basis or to make generally available, in source code form, our proprietary code. Further, in addition to risks related to license requirements, use of certain open source software carries greater technical and legal risks than those associated with the use of third-party commercial software.

Current wording

Furthermore, there are an increasing number of open source software license types, almost none of which have been interpreted by courts, resulting in a dearth of guidance regarding the proper legal interpretation of such licenses. As a result, there is a risk that open source software licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to market or provide our products and services. If we are held to have breached or failed to fully comply with all the terms and conditions of an open source software license, we could face infringement claims or other liability, or be required to seek costly licenses from third parties to continue providing our product offerings on terms that are not economically feasible, if at all, to re-engineer all or a portion of our platform, to discontinue or delay the provision of our product offerings if re-engineering could not be accomplished on a timely basis or to make generally available, in source code form, our proprietary code. Further, in addition to risks related to license requirements, use of certain open source software carries greater technical and legal risks than those associated with the use of third-party commercial software.

Previous wording

We have customers in numerous jurisdictions around the world, namely, the United States, the United Kingdom, Ireland, Italy, other countries in the European Union, Australia, India, Canada, Brazil, Georgia and Armenia, among others. We are generally subject to laws and regulations relating to betting and iGaming in the jurisdictions in which we conduct our business or, in some circumstances, of those jurisdictions in which our services are offered or available, as well as the general laws and regulations that apply to alle-commerce businesses, such as those related to privacy and personal data, tax and consumer protection. These laws and regulations vary from one jurisdiction to another and are dynamic and subject to potentially differing interpretations. Future legislative and regulatory action, court decisions or other governmental action, which may be affected by, among other things, political pressures, attitudes and climates, as well as personal biases, may have a material impact on our operations and financial results.

Current wording

We have customers in numerous jurisdictions around the world, namely, the United States, the United Kingdom, Ireland, Italy, other countries in the European Union, Australia, India, Canada, Brazil, Georgia and Armenia, among others. We are generally subject to laws and regulations relating to betting and iGaming in the jurisdictions in which we conduct our business or, in some circumstances, of those jurisdictions in which our services are offered or available, as well as the general laws and regulations that apply to all e-commerce businesses, such as those related to privacy and personal data, tax and consumer protection. These laws and regulations vary from one jurisdiction to another and are dynamic and subject to potentially differing interpretations. Future legislative and regulatory action, court decisions or other governmental action, which may be affected by, among other things, political pressures, attitudes and climates, as well as personal biases, may have a material impact on our operations and financial results.

Previous wording

Furthermore, in January 2019, legal counsel for the U.S. Department of Justice (“DOJ”) issued a legal opinion on the Interstate Wire Act of 1961, as amended (“Wire Act”), which stated that the Wire Act bans any form of iGaming if it crosses state lines and reversed a 2011 DOJ legal opinion that stated that the Wire Act only applied to interstate sports betting. However, the U.S. Court of Appeals for the First Circuit ruled in January 2021 that the Wire Act does not apply to iGaming. The U.S. federal courts’ stance on the applicability of the Wire Act with respect to interstate iGaming may be subject to potential changes in the future, and any such changes may be detrimental to our business operations. If the Wire Act is ultimately determined by courts to be applicable to iGaming and we are required to restrict our iGaming transactions in each state in which we operate to within such state, our costs will increase and it will become more difficult for us to scale our operations in the United States.

Current wording

For example, in January 2019, legal counsel for the U.S. Department of Justice (“DOJ”) issued a legal opinion on the Interstate Wire Act of 1961, as amended (“Wire Act”), which stated that the Wire Act bans any form of iGaming if it crosses state lines and reversed a 2011 DOJ legal opinion that stated that the Wire Act only applied to interstate sports betting. However, the U.S. Court of Appeals for the First Circuit ruled in January 2021 that the Wire Act does not apply to iGaming. The U.S. federal courts’ stance on the applicability of the Wire Act with respect to interstate iGaming may be subject to potential changes in the future, and any such changes may be detrimental to our business operations. If the Wire Act is ultimately determined by courts to be applicable to iGaming and we are required to restrict our iGaming transactions in each state in which we operate to within such state, our costs will increase and it will become more difficult for us to scale our operations in the United States