DraftKings Inc. and its regulated operating subsidiaries ("DraftKings", "we", "us", or "our") are committed to protecting the privacy, confidentiality, and security of our patrons' personal information. This Privacy Policy details our procedures regarding the collection, transmission, storage, and processing of user data across our sports entertainment, sports betting, and real-money casino platforms.
1. Information We Collect
In accordance with state gaming regulations and federal Know-Your-Customer (KYC) requirements, DraftKings collects specific categories of personal data when you interact with our websites, mobile applications, and support channels:
- Identity & Profile Data: Full legal name, date of birth, residential address, email address, phone number, and Social Security Number (SSN) or equivalent national taxpayer identification for identity verification and tax reporting compliance.
- Financial & Payment Data: Bank account numbers, routing details, credit/debit card numbers, payment processor identifiers (e.g., PayPal, Venmo, Apple Pay), and comprehensive deposit and withdrawal history.
- Geolocation & Telemetry Data: Precise physical geolocation coordinates, Wi-Fi network parameters, cell tower triangulation data, and IP addresses, collected via certified geo-fencing technology to comply with state boundary mandates.
- Wagering & Activity Records: Detailed logs of betting selections, sports lines wagered, casino slot spins, table game outcomes, tournament participations, bonus redemptions, and Dynasty Rewards tier activity.
- Technical Device Metrics: Operating system versions, unique device identifiers, hardware profiles, browser configurations, crash logs, and network performance indicators.
2. How We Utilize Your Information
DraftKings processes personal and technical data for explicit legal and operational purposes:
- Statutory Verification: Validating that patrons meet the minimum legal gambling age (21+ in most jurisdictions, 18+ in select fantasy domains) and are not listed on state self-exclusion or involuntary exclusion registries.
- Geolocation Compliance: Confirming that real-money sports bets and casino wagers are placed exclusively from within authorized US state borders.
- Omnichannel Wallet Management: Facilitating rapid, secure fund transfers, deposits, withdrawals, and Dynasty Rewards accruals across our integrated gaming verticals.
- Fraud Prevention & Integrity: Detecting collusion, bot scripts, multi-accounting, syndicate betting patterns, and money-laundering attempts via automated heuristics.
- Personalized Communication: Providing personalized odds boosts, promotional bonuses, account status advisories, and transactional receipts.
3. Geolocation & Geofencing Compliance
United States federal and state laws prohibit real-money wagering across state lines unless explicitly sanctioned by multi-state compacts. Consequently, DraftKings implements mandatory geolocation technologies powered by certified third-party vendors (such as GeoComply).
When accessing sports betting or digital casino lobbies, your mobile device or desktop computer must share precise physical location coordinates. If geolocation permissions are revoked or if proxy servers, virtual private networks (VPNs), or location spoofing mechanisms are detected, real-money wagering capabilities will be immediately suspended.
4. Disclosure of Data to Third Parties
DraftKings does not sell, rent, or trade your personal information to unauthorized third-party brokers. We disclose data solely under strict data processing agreements to:
- State Gaming Regulatory Authorities: Agencies including the New Jersey Division of Gaming Enforcement, Pennsylvania Gaming Control Board, Michigan Gaming Control Board, and Ohio Casino Control Commission for routine compliance audits and mandatory reporting.
- Financial Institutions & Processors: Tier-one banking partners, payment gateways, and clearing houses that handle encrypted deposit and withdrawal workflows.
- Identity Verification Providers: Credit reference bureaus and KYC verification services that confirm patron identities without impacting personal credit ratings.
- Sports Governing Bodies: League integrity monitors (e.g., NFL, NBA, MLB, NHL) when investigating irregular wagering patterns or suspicious betting behavior.
- Legal & Law Enforcement: Competent judicial courts and statutory law enforcement agencies pursuant to valid subpoenas, warrants, or court orders.
5. Data Storage, Retention & Security Protocols
DraftKings employs industry-leading technical, physical, and administrative safeguards to protect your personal and financial data. All web and app transmissions are encrypted using minimum 256-bit Transport Layer Security (TLS). Sensitive credentials and payment vectors are stored within isolated, SOC 2 Type II certified data centers with multi-factor access protocols.
We retain account records for the mandatory duration prescribed by state gaming statutes and anti-money laundering (AML) legislation, typically ranging from five to seven years following account closure.
6. User Privacy Rights & State Provisions
Depending on your state of residence (including California, Colorado, Connecticut, Virginia, and others), you may possess specific rights regarding your personal information under state privacy acts (e.g., CCPA/CPRA):
- The right to request disclosure of the specific pieces of personal information collected about you.
- The right to request the correction of inaccurate or incomplete personal records.
- The right to request deletion of personal information, subject to mandatory regulatory gaming record-keeping exemptions.
- The right to opt out of targeted marketing communications and non-essential analytical cookies.
7. Responsible Gaming & Self-Exclusion Confidentiality
DraftKings takes problem gambling prevention seriously. If you submit a request for self-exclusion, timeout intervals, or deposit limits, this information will be handled with strict discretion. Responsible gaming data is shared exclusively with certified compliance personnel and regulatory bodies to enforce wagering suspensions across platforms.
8. Updates to This Privacy Policy
We may periodically amend this Privacy Policy to reflect modifications in gaming laws, operational changes, or technical advancements. We will notify patrons of material updates via prominent website notices, application push messages, or direct email correspondence. Continued use of DraftKings services after changes become effective signifies your acceptance.
9. Contacting Our Data Protection Officer
If you have questions, complaints, or inquiries regarding this Privacy Policy or wish to exercise statutory data rights, please contact our Data Protection Office:
- Email: [email protected]
- Mailing Address: DraftKings Inc., Attention: Privacy & Legal Compliance Office, 222 Berkeley Street, 5th Floor, Boston, MA 02116
- Support Portal: Accessible 24/7 through your DraftKings account profile dashboard