Want to see FLL full AI Analyst Report?
Full House Resorts (FLL) Risk Analysis
Risk Overview Q4, 2025
Risk Change Over Time
- Cyber Security - Risk 1Our information technology and other systems are subject to cybersecurity risk, misappropriation of customer information, other breaches of information security, and evolving state and federal privacy laws and regulations.
We rely extensively on our computer systems to process customer transactions, manage customer data, manage employee data and communicate with third-party vendors and other third parties, and we may also access the Internet to use our computer systems. Our operations require that we collect and store customer data, including credit card numbers and other personal information, for various business purposes, including marketing and promotional purposes. We also collect and store personal information about our employees. Breaches of our security measures or information technology systems or the accidental loss, inadvertent disclosure or unapproved dissemination of proprietary information or sensitive personal information or confidential data about us, or our customers, or our employees including the potential loss or disclosure of such information as a result of hacking or other cyber-attack, computer virus, fraudulent use by customers, employees or employees of third party vendors, trickery or other forms of deception or unauthorized use, or due to system failure, could expose us, our customers, our employees or other individuals affected to a risk of loss or misuse of this information, result in litigation and potential liability for us, damage our reputation or brand names or otherwise harm our business. Additionally, disruptions in the availability of our computer systems, through cyber-attacks or otherwise, could impact our ability to service our customers and adversely affect our sales and the results of operations. We rely on proprietary and commercially available systems, software, tools and monitoring to provide security for processing, transmission and storage of customer information, such as payment card, employee information and other confidential or proprietary information. Our data security measures are reviewed and evaluated regularly; however, they might not protect us against increasingly sophisticated and aggressive threats, and disruptions in our computer systems can occur notwithstanding the data security measures and disaster recovery plans that we have in place. The cost and operational consequences of implementing further data security measures could be significant and there is no certainty that such measures, if purchased, could thwart all threats. Additionally, while we maintain cyber risk insurance to assist in the cost of recovery from a significant cyber event, such coverage may not be sufficient. Additionally, the collection of customer and employee personal information imposes various privacy compliance related obligations on our business and increases the risks associated with a breach or failure of the integrity of our information technology systems. The collection and use of personal information are governed by privacy laws and regulations enacted in the United States and other jurisdictions around the world. Privacy regulations continue to evolve and on occasion may be inconsistent from one jurisdiction to another. Any loss, disclosure of, misappropriation of, or access to customers', employees' or other personal, proprietary information or any other breach of our network or information security could result in extensive legal proceedings or legal claims, including regulatory investigations and actions, or liability for failure to comply with state or federal privacy and information security laws, including for failure to protect personal information or for misusing personal information. These items could disrupt our operations, cause extensive damage to our reputation, and expose us to legal claims from customers, employees, financial institutions, regulators, payment card associations, and other persons, any of which could adversely affect our business, results of operations and financial condition. There are also laws and regulations governing the collection and use of biometric information, such as fingerprints and facial scans. For example, the Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq. ("BIPA") applies to the collection and use of "biometric identifiers" and "biometric information" which include fingerprints and facial scans. BIPA requires written notice and consent before a private entity (like us and our subsidiaries) may collect or disseminate biometric information. It further provides that any private entity in possession of biometric information must establish, publish and comply with a policy regarding its schedule for destroying biometric information and follow reasonable security measures to protect such information. Individuals are afforded a private right of action under BIPA and may recover statutory damages equal to the greater of $1,000 (or $5,000 for reckless violations) or actual damages and reasonable attorneys' fees and costs for each unlawful collection of biometric information, which the Illinois Supreme Court has interpreted to include not only the initial collection of information to create a biometric template, but also, each subsequent scan of biometric information to identify an individual. Many Illinois businesses, including casinos, have been accused of using biometric-enabled devices, including hand or fingerprint scanners for timekeeping or security purposes, and facial recognition technology for security purposes, without the required policy, notice or consent. Any biometric-enabled devices or technologies used by us in Illinois must comply with BIPA's notice, consent, policy and security requirements to avoid potential liability. In addition to BIPA, a number of other proposals exist for new federal and state privacy legislation that, if passed, could increase our potential liability, increase our compliance costs and materially adversely affect our business. Various federal and state legislative or regulatory bodies may adopt new or additional laws and regulations concerning privacy, data retention, data transfer, and data protection. There may be risks and uncertainties associated with these privacy laws and regulations including their interpretation and implementation, as well as the potential extraterritorial effect of certain privacy laws and regulations. Compliance with applicable privacy laws and regulations may increase our operating costs and/or adversely impact our ability to market our products, properties and services to our customers. In addition, non-compliance with applicable privacy laws and regulations by us (or in some circumstances non-compliance by third party service providers engaged by us) may also result in damage of reputation, result in vulnerabilities that could be exploited to breach our systems and/or subject us to fines, payment of damages, lawsuits (including class actions) or restrictions on our use or transfer of personal information (including biometric information).
Risk Highlights Q4, 2025
Risk Word Cloud
Risk Factors Full Breakdown - Total Risks 54
- Share Price & Shareholder Rights - Risk 1Stockholders may be required to dispose of their shares of our common stock if they are found unsuitable by gaming authorities.
While gaming authorities generally focus on stockholders with more than 5% and often 10% of a company's shares, such authorities generally can require that any beneficial owner of our common stock and other securities file an application for a finding of suitability. If a gaming authority requires a record or beneficial owner of our securities to file a suitability application, the owner must apply for a finding of suitability within 30 days or at an earlier time prescribed by the gaming authority. The gaming authority has the power to investigate an owner's suitability and the owner must pay all costs of the investigation. If the owner is found unsuitable, then the owner may be required by law to dispose of our securities. Our certificate of incorporation also provides us with the right to repurchase shares of our common stock from certain beneficial owners declared by gaming regulators to be unsuitable holders of our equity securities. The price we may pay to any such beneficial owner may be below the price such beneficial owner would otherwise accept for his or her shares of our common stock.
- Share Price & Shareholder Rights - Risk 2The market price for our common stock may be volatile, and investors may not be able to sell our stock at a favorable price or at all.
Many factors could cause the market price of our common stock to rise and fall, including: - actual or anticipated variations in our quarterly results of operations;- change in market valuations of companies in our industry;- change in expectations of future financial performance;- regulatory changes;- fluctuations in stock market prices and volumes;- issuance of common stock market prices and volumes;- the addition or departure of key personnel; and - announcements by us or our competitors of acquisitions, investments, dispositions, joint ventures or other significant business decisions. In addition, the stock market in general has experienced extreme price and volume fluctuations that have often been unrelated or disproportionate to companies' operating performance, for example, as a result of the coronavirus epidemic, changes in U.S. and global trade policies, or changes in the borrowing rates set by the Federal Reserve. Broad market and industry factors may materially harm the market price of our common stock, regardless of our operating performance. In the past, following periods of volatility in the market price of a company's securities, stockholder derivative lawsuits and/or securities class-action litigation has sometimes been instituted against that company, sometimes irrespective of whether the company took any action contributing to such volatility. Such litigation, if instituted against us, could result in substantial costs and a diversion of management's attention and resources.
- Share Price & Shareholder Rights - Risk 3The exercise of outstanding options to purchase common stock may result in substantial dilution and may depress the trading price of our common stock.
If our outstanding options to purchase shares of our common stock are exercised and the underlying shares of common stock issued upon such exercise are sold, our stockholders may experience substantial dilution and the market price of our shares of common stock could decline. Further, the perception that such securities might be exercised could adversely affect the trading price of our shares of common stock. During the time that such securities are outstanding, they may adversely affect the terms on which we could obtain additional capital.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.