10 Total
4 High severity
6 Medium severity
0 Low severity
Summary

This document establishes DraftKings' policies for collection, use, and sharing of personal information across its fantasy sports, sportsbook, casino, and related platforms. The policy authorizes collection of Social Security numbers, financial account details, geolocation data, betting history, and biometric facial data, with provisions for sharing this information to advertising vendors, analytics companies, and business partners. The policy establishes opt-out mechanisms for residents of California and other eligible states to request non-sale or non-sharing of their personal information.

Technical / Legal Breakdown

This document is DraftKings' Privacy Notice (last updated May 21, 2025), governing the collection, use, and disclosure of personal information across its website, mobile applications, Daily Fantasy Sports, Sportsbook, Casino, and related social networking features, with consent established by continued use of the services. The notice states that DraftKings collects an extensive range of personal data including name, address, Social Security number, financial account information, geolocation, device identifiers, biometric data for identity verification, betting and wagering activity, and contact book data; the terms authorize disclosure of this information to service providers, advertising vendors (including Facebook, TikTok, LiveRamp, and The Trade Desk), analytics companies, business partners, and government or regulatory authorities. The biometric data collection provision is operationally distinct in that it explicitly covers facial geometry and similar biometric identifiers collected via third-party verification providers, with a stated retention period limited to the verification transaction, though the enforceability and adequacy of these disclosures varies by state law, particularly under Illinois BIPA and Texas CUBI. The notice engages multiple U.S. state privacy frameworks including CCPA/CPRA (California), Virginia CDPA, Colorado CPA, Connecticut CTDPA, and additional state consumer privacy laws, as well as gaming-specific regulatory requirements in Massachusetts and North Carolina; Canadian users are addressed under PIPEDA and applicable provincial law. Material compliance considerations include the breadth of third-party advertising data sharing, the contact importer feature that places consent obligations on users rather than DraftKings for third-party contacts, and the notice's assertion that acceptance of the policy constitutes authorization for financial institutions, mobile operators, and government organizations to disclose users' personal information to DraftKings.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 4 provisions
Medium — 6 provisions

Monitoring

DraftKings has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Advertising Data Sharing with Third-Party Vendors and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:33 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000349
Version ID CA-V-000831
SHA-256 8f83a22da9ec125a806cab53456e20997a3ab832a40fb5d6dbf9480d626e3632
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans