FanDuel may require you to provide your passport, driver's license, home address, and tax information as a non-optional condition of using certain parts of the platform.
This analysis describes what FanDuel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Government-issued identity documents and tax information are among the most sensitive categories of personal data, and making their submission mandatory means you cannot use those features of the service without providing them, with all associated sharing and retention risks described elsewhere in the policy.
The updated privacy policy no longer explicitly covers the FanDuel Fantasy Picks platform (www.fanduel.com/picks) and its mobile app. Previously, the policy stated it applied to the DFS Site, Skill Games Site, and Picks Site together. Now only the DFS Site and Skill Games Site are listed in the policy scope. This creates ambiguity about what privacy rules, data collection practices, retention periods, and user rights apply to your Fantasy Picks account. You should review FanDuel's website to determine whether a separate privacy policy governs Fantasy Picks data, or contact FanDuel directly to clarify what privacy terms apply to that service.
View change record →To access certain services, you must provide highly sensitive identity documents including your passport or driver's license; refusing to do so means losing access to those features, while providing them subjects that data to FanDuel's full data sharing and retention practices described in this policy.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
FanDuel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"In addition to the above, we may need to verify your identity in order for you to use some aspects of the Services. For purposes of verification, we may also collect the following personal information from you (for compliance reasons, provision of this information, when requested, is a mandatory condition of using our Services): passport information; driving license information; other identification documents; permanent and temporary address; tax-related information; and other information as may be required to verify you in accordance with applicable laws and regulations.— Excerpt from FanDuel's FanDuel Privacy Policy
(1) REGULATORY LANDSCAPE: Collection of government-issued ID documents and tax information engages know-your-customer (KYC) and anti-money laundering (AML) obligations applicable to financial services platforms. The IRS and FinCEN have regulatory interest in how platforms handling gaming deposits and withdrawals collect and retain taxpayer identification information. State gaming regulators impose independent identity verification requirements. Under CCPA and CPRA, government identifiers are classified as sensitive personal information with heightened handling obligations. (2) GOVERNANCE EXPOSURE: High. The mandatory nature of identity document submission means a large volume of highly sensitive data is collected and retained, increasing the value of FanDuel's data holdings as a target for breach and creating ongoing retention and security obligations. The policy's general data retention language does not specify how long identity documents are retained after account closure, which may not satisfy all applicable regulatory requirements. (3) JURISDICTION FLAGS: All US jurisdictions where FanDuel operates are relevant given the intersection of state gaming regulation and federal KYC requirements. California's CPRA requires specific handling of government identifiers as sensitive personal information. States with breach notification laws (New York SHIELD Act, California, Texas, Illinois) create heightened exposure if identity document data is compromised. (4) CONTRACT AND VENDOR IMPLICATIONS: Identity verification may be conducted by third-party vendors (the policy references identity verification services in Section 2.8). Vendor contracts for identity verification services should include strict data minimization, retention limits, and security requirements. Compliance teams should confirm whether identity verification vendors are subject to appropriate data processing agreements. (5) COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether retention periods for government-issued identity documents are defined and consistent with applicable regulatory requirements and state privacy laws. A specific data retention schedule for identity verification data, separate from general user data, is recommended. Breach response plans should account for the elevated sensitivity of government ID data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Government-issued identity documents and tax information are among the most sensitive categories of personal data, and making their submission mandatory means you cannot use those features of the service without providing them, with all associated sharing and retention risks described elsewhere in the policy.
To access certain services, you must provide highly sensitive identity documents including your passport or driver's license; refusing to do so means losing access to those features, while providing them subjects that data to FanDuel's full data sharing and retention practices described in this policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by FanDuel.