DraftKings · DraftKings Privacy Policy · View original document ↗

Data Collection from External Sources Including Data Brokers

High severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for DraftKings Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

DraftKings purchases or receives data about you from data brokers, data aggregators, and public databases, then combines it with what it already knows about you. This can include your income level, purchase history, risk scores, and activity on other websites.

This analysis describes what DraftKings's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational scope of DraftKings' data sourcing practices and enables the company to maintain a consolidated profile that extends beyond information directly collected from users. By authorizing integration of third-party data including demographic, commercial, and risk assessment information, the clause defines the informational infrastructure supporting the company's risk management and service personalization functions.

Interpretive note: Whether risk scores and fraud indicators used in connection with financial transactions constitute consumer reports under FCRA is a legal question that depends on how they are used in practice, and the document does not provide sufficient detail to resolve this with certainty.

Consumer impact (what this means for users)

DraftKings supplements its knowledge of you with data it purchases from third-party data brokers, including your income level, purchase history, fraud indicators, and risk scores. This enriched profile is used for advertising targeting and service customization without any separate consent required beyond acceptance of this privacy notice.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data access request to privacy@draftkings.com to learn what information DraftKings holds about you, including data sourced from third parties. California residents can also use the dedicated privacy rights request mechanism described in Section 12 of the privacy notice.

How other platforms handle this

Visa Medium

We may collect personal information about you from third parties, such as data brokers, social media platforms, and our business partners. This information may include demographic information, interests, and other information that helps us understand you better and provide you with relevant products...

Anthropic Medium

Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet; Datasets that we obtain through commercial agreements with third party businesses; Data tha...

Roblox Medium

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data collection and use practices described in the Privacy Policy. Roblox collects information you provide directly, information collected a...

See all platforms with this clause type →

Monitoring

DraftKings has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may supplement the information we have about you with information received from other sources, including, but not limited to, our vendors, our pages on certain social networking sites (e.g., Discord), the social networking sites themselves, and commercially available sources (e.g., data aggregators, data brokers, and public databases). Your activity on other websites and applications may be associated with your personal information in order to evaluate risk and to provide, improve, and customize our Services and the ads delivered on our Website and Applications. The information we collect may include demographic data such as age, gender, and income level, email address, username, online identifiers, your preferences, interests, associations, photos, commercial information (including, but not limited to, records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies, fraud indicators, and risk scores assessing your ability to complete a transaction).

— Excerpt from DraftKings's DraftKings Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages CCPA/CPRA, which grants California residents rights to know about and opt out of sale or sharing of personal information collected from data brokers. The FTC has regulatory authority over data broker practices under the FTC Act. The Financial Data Transparency Act and potential federal data broker legislation are evolving frameworks. Risk scores and fraud indicators derived from third-party data may engage FCRA obligations if used in connection with credit or financial determinations. GOVERNANCE EXPOSURE: Medium to High. The combination of gaming behavioral data with third-party data broker profiles, particularly risk scores assessing transaction completion ability, raises questions about whether this information constitutes a consumer report under FCRA, which would impose additional disclosure and adverse action obligations. The breadth of data categories purchased (income, purchasing tendencies, associations) creates significant profiling risk. JURISDICTION FLAGS: California CPRA grants specific rights regarding information collected by or about a consumer from third-party sources. Vermont and Nevada have data broker registration requirements. The inclusion of income and financial risk scores may trigger financial privacy law considerations in multiple states. EU/EEA users would have rights under GDPR Articles 13 and 14 requiring disclosure of data sources and purposes. CONTRACT AND VENDOR IMPLICATIONS: Procurement agreements with data brokers and aggregators should be reviewed to confirm data provenance, consent chains, and representations regarding the lawful basis for selling consumer data. CCPA/CPRA requires that data received from third parties be governed by appropriate data sharing agreements. Risk score and fraud indicator data sourced from commercial vendors may carry additional obligations if the data is used in financial eligibility determinations. COMPLIANCE CONSIDERATIONS: Legal teams should conduct a FCRA analysis of risk scores and fraud indicators used in connection with financial transactions or account eligibility decisions. Data mapping should document all commercial data sources and the categories of data received from each. The opt-out mechanisms for sale and sharing should be tested to confirm they apply to data originally sourced from third parties.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data broker practices and unfair or deceptive data collection, and has conducted rulemaking and enforcement actions related to data aggregation and profiling practices
    File a complaint →
  • CFPB
    If risk scores or fraud indicators sourced from commercial data vendors are used in connection with financial eligibility or transaction completion determinations, FCRA obligations enforced by the CFPB may apply
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
TCPA
United States Federal
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
DraftKings Privacy Policy
Entity
DraftKings
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-009848
Document ID
CA-D-00349
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
746a0af91f91549a4cccc84c53383f8b4aafe001e33d9588879ca505f067613c
Analysis generated
May 8, 2026 11:19 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: DraftKings
Document: DraftKings Privacy Policy
Record ID: CA-P-009848
Captured: 2026-05-08 11:19:01 UTC
SHA-256: 746a0af91f91549a…
URL: https://conductatlas.com/platform/draftkings/draftkings-privacy-policy/data-collection-from-external-sources-including-data-brokers/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does DraftKings's Data Collection from External Sources Including Data Brokers clause do?

This provision establishes the operational scope of DraftKings' data sourcing practices and enables the company to maintain a consolidated profile that extends beyond information directly collected from users. By authorizing integration of third-party data including demographic, commercial, and risk assessment information, the clause defines the informational infrastructure supporting the company's risk management and service personalization functions.

How does this clause affect you?

DraftKings supplements its knowledge of you with data it purchases from third-party data brokers, including your income level, purchase history, fraud indicators, and risk scores. This enriched profile is used for advertising targeting and service customization without any separate consent required beyond acceptance of this privacy notice.

Is ConductAtlas affiliated with DraftKings?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DraftKings.