FanDuel states it does not knowingly sell the personal information of users under 16 years old without legally required consent.
This analysis describes what FanDuel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy's protection applies only where FanDuel has actual knowledge that a user is a minor, and the first sentence's reference to 'without legally-required affirmative authorization' introduces a conditional that may narrow the protection in some contexts.
Interpretive note: The first instance of the sentence includes the clause 'without legally-required affirmative authorization,' which may permit sale with appropriate consent, while the repeated sentence omits this qualifier; the interaction between these two formulations introduces minor ambiguity about the scope of protection.
The updated privacy policy no longer explicitly covers the FanDuel Fantasy Picks platform (www.fanduel.com/picks) and its mobile app. Previously, the policy stated it applied to the DFS Site, Skill G…
If a minor accesses FanDuel's platform, the policy states their data will not be sold without the legally required authorization, but the protections are limited to known minors and do not describe active age verification mechanisms beyond identity document collection.
How other platforms handle this
You must not sell, license, or purchase User Data obtained from us. You must not transfer User Data obtained from us without our prior written permission except when: transferring to your service provider acting on your behalf and in compliance with this Policy; transferring as part of a merger, acq...
You must not pre-fetch, cache, index, or store any Content, except that you may store: (i) limited amounts of Content for the purpose of improving the performance of your Maps API Implementation, but only for a temporary period as specified in the Maps APIs Documentation; and (ii) any content that G...
You may not use Runway's tools to create content that promotes, glorifies, or facilitates acts of terrorism, mass violence, or genocide, or that could be used to provide material support to individuals or organizations engaged in such activities.
Monitoring
FanDuel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally-required affirmative authorization. Please note that we do not knowingly sell the personal information of minors under 16 years of age.— Excerpt from FanDuel's FanDuel Privacy Policy
(1) REGULATORY LANDSCAPE: CCPA and CPRA require opt-in consent for the sale of personal information of consumers between 13 and 16 years of age, and parental consent for those under 13, consistent with COPPA. The policy's reference to 'legally-required affirmative authorization' tracks this framework. COPPA is enforced by the FTC for users under 13. State gaming regulations in all jurisdictions where FanDuel operates independently prohibit minors from participating in paid contests, which interacts with the privacy framework around age verification data collection. (2) GOVERNANCE EXPOSURE: Medium. The 'knowingly' qualifier is standard but places the burden of age verification on FanDuel's systems. If age verification is inadequate and minors access the platform, both the gaming regulatory violation and the data privacy violation could arise simultaneously. The duplication of the statement in the policy (the sentence appears twice verbatim) does not alter its legal significance. (3) JURISDICTION FLAGS: All US jurisdictions where FanDuel operates are relevant given state gaming age restrictions. California's CPRA creates the most specific data privacy obligations for users aged 13-16. COPPA applies federally for users under 13. (4) CONTRACT AND VENDOR IMPLICATIONS: Advertising and data sharing agreements with third-party partners should include explicit prohibitions on using data of users identified or suspected to be minors for commercial purposes. (5) COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether FanDuel's age verification procedures are sufficient to support the 'knowingly' standard and whether any gaps in those procedures create exposure under COPPA, CCPA, or state gaming regulations.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy's protection applies only where FanDuel has actual knowledge that a user is a minor, and the first sentence's reference to 'without legally-required affirmative authorization' introduces a conditional that may narrow the protection in some contexts.
If a minor accesses FanDuel's platform, the policy states their data will not be sold without the legally required authorization, but the protections are limited to known minors and do not describe active age verification mechanisms beyond identity document collection.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by FanDuel.