Boyd Gaming (BYD) Risk Analysis

Generally, all of our facilities are subject to the risk that operations could be halted for a temporary or extended period of time due to casualty, forces of nature, mechanical failure, or extended or extraordinary maintenance, among other causes. We currently conduct our Par-A-Dice, Blue Chip, Sam's Town Shreveport, Amelia Belle and Belterra Resort gaming operations on riverboats. Each of our riverboats must comply with the United States Coast Guard ("USCG") requirements as to boat design, on-board facilities, equipment, personnel and safety. Each riverboat must hold a Certificate of Inspection for stabilization and flotation and may also be subject to local zoning codes. The USCG requirements establish design standards, set limits on the operation of the vessels and require individual licensing of all personnel involved in the operation of the vessels. Loss of a vessel's Certificate of Inspection would preclude its use as a casino.

We rely extensively on our computer systems to process customer transactions, manage customer and employee data, and communicate with third-party vendors and other third parties, and we may also access the internet to use our computer systems. Our operations require that we collect and store customer and employee data, including credit card numbers and other personal information, for various business purposes, including marketing and promotional purposes. Breaches of our security measures or information technology systems or the accidental loss, inadvertent disclosure or unapproved dissemination of proprietary information or sensitive personal information or confidential data about us, or our customers, or our employees, including the potential loss or disclosure of such information as a result of hacking or other cyber-attack, computer virus, fraudulent use by customers, employees or employees of third party vendors, trickery or other forms of deception or unauthorized use, or due to system failure, could expose us, our customers, our employees or other individuals affected to a risk of loss or misuse of this information, result in litigation and potential liability for us, damage our casino or brand names and reputations or otherwise harm our business, financial condition, and results of operations. We rely on proprietary and commercially available systems, software, tools and monitoring to provide security for processing, transmitting, and storing customer information, such as payment card, employee information and other confidential or proprietary information. Our data security measures are reviewed and evaluated regularly; however, they might not protect us against increasingly sophisticated and aggressive threats, and disruptions in our computer systems can occur notwithstanding the data security measures and disaster recovery plans that we have in place. Further, our systems are not fully redundant, and our disaster recovery planning cannot account for all possible scenarios. The cost and operational consequences of implementing further data security measures could be significant. Any loss, disclosure of, misappropriation of, or access to customers' or other personal, proprietary information or any other breach of our information security could result in extensive legal proceedings or legal claims, including regulatory investigations and actions, or liability for failure to comply with state or federal privacy and information security laws, including for failure to protect personal information or for misusing personal information, which could disrupt our operations, cause extensive damage to our reputation, and expose us to legal claims from customers, financial institutions, regulators, payment card associations, employees, and other persons, any of which could have an adverse effect on our financial condition, results of operations, and cash flow. Additionally, the collection of customer and employee personal information imposes various privacy compliance-related obligations on our business and increases the risks associated with a breach or failure of the integrity of our information technology systems. The collection and use of personal data are governed by privacy laws and regulations enacted by the various states, the United States federal government, and various foreign jurisdictions. Privacy laws and regulations continue to evolve and on occasion may be inconsistent between jurisdictions. For example, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020, collectively, the "CCPA"), provides to California consumers certain access, deletion and opt-out rights related to their personal information, imposes civil penalties for violations and affords, in certain cases, a private right of action for data breaches. Compliance with the CCPA may require us to incur significant costs and expenses. Similar laws have been passed or proposed in other states and at a federal level, reflecting a trend toward more stringent privacy legislation in the United States. In addition to fines and penalties that may be imposed for failure to comply with state law, some states provide for private rights of action to customers for misuse of or unauthorized access to personal information. Compliance with privacy laws and regulations may increase our operating costs and/or adversely impact our ability to market our products, properties, and services to our customers. In addition, non-compliance with applicable privacy laws and regulations by us (or in some circumstances non-compliance by third-party service providers engaged by us) may also result in damage to our reputation, vulnerabilities that could be exploited to breach our systems and/or subject us to fines, payment of damages, lawsuits or restrictions on our use or transfer of personal information.

Consumer demand for entertainment and other amenities at our casino hotel properties is particularly sensitive to downturns in the economy and the corresponding impact on discretionary spending on leisure activities. Changes in discretionary consumer spending or consumer preferences brought about by factors such as inflation, rising interest rates, perceived or actual general economic conditions, effects of declines in consumer confidence in the economy, including any future housing, employment and credit crisis, the impact of high energy and food costs, the increased cost of travel, the potential for bank failures, decreased disposable consumer income and wealth, or fears of war and future acts of terrorism could further reduce customer demand for the amenities that we offer, thus imposing practical limits on pricing and negatively impacting our results of operations and financial condition. In 2008, we experienced a profound reduction in consumer demand as a result of the economic recession in the U.S. economy, and we are now experiencing the impacts of inflation and other economic factors, which are significantly impacting customer visitations and business revenue. Consumer spending habits changed significantly due to the recession in 2008, and we expect that consumer behavior due to inflation and other economic factors may be similarly altered for an extended period of time. Because our business model relies on consumer expenditures on entertainment, luxury and other discretionary items, an ongoing economic downturn could materially adversely affect our operating results and financial condition.

We lease certain property on which our hotels and gaming facilities are located. As a lessee, we have the right to use the leased land, including the structures on such land; however, we do not retain fee ownership in the property. Accordingly, we have no interest in the land or improvements thereon at the expiration of the lease. Moreover, since we do not completely control the land underlying such property, a landowner could take certain actions to disrupt our rights in the land leased under a long-term lease. While such interruption is unlikely, such events are beyond our control. If the entity owning any property chose to disrupt our use either permanently or for a significant period of time, then the value of our assets could be impaired and our business, financial condition and results of operations could be adversely affected. If we were to default on any one or more of these leases, the applicable lessors could terminate the affected leases, and we could lose possession of the affected property, including the underlying land, hotels and casinos. This could have a material adverse effect on our business, financial condition and results of operations. In addition, if some of our leased facilities are unprofitable, we could remain obligated for lease payments and other obligations under the leases even if we withdrew from those locations.