DRAFTKINGS SPORTSBOOK PRIVACY POLICY

1. Scope, Purpose & Organizational Commitment

At DraftKings Sportsbook, respecting customer autonomy and safeguarding user confidential records is the cornerstone of our player relationship. This document governs all digital platforms, mobile web applications, and authenticated interfaces operated by our organization, including access through our secure member portal and promotional routes at the /go/ registration hub.

By registering an account, depositing real currency, or placing wagers on athletic events and casino table games, you acknowledge the terms outlined in this Privacy Policy. We maintain strict fidelity to applicable federal and state privacy statutes, including the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and standard gaming commission regulatory requirements across all operating states.

2. Information Categories We Collect

To maintain statutory Know Your Customer (KYC) standards and prevent identity theft, DraftKings Sportsbook collects specific categories of player data:

We never collect unnecessary medical records, genetic data, or political affiliation details. Every record collected is directly tied to platform operations, anti-fraud enforcement, or statutory compliance.

3. Mandatory Geolocation & Location Tracking

United States federal gaming statutes (including the Interstate Wire Act) require operators to verify that every patron placing a real-money sports wager or casino bet is physically situated within the physical borders of an authorized, licensed state or jurisdiction.

When logging into the DraftKings Sportsbook member center, our system initiates a non-invasive geolocation query utilizing Wi-Fi signal triangulation, cell tower IDs, and GPS coordinates. If location services are disabled, you may browse lines and manage account settings, but live betting actions will be restricted until valid jurisdictional boundary verification occurs.

4. Purposeful Utilization of Gathered Records

Your personal information is leveraged strictly for legitimate operational purposes:

• Wagering Processing: Executing real-time odds calculations, bet slips, parlay payouts, and progressive slot prize allocations.
• Identity Verification & Anti-Money Laundering: Confirming player age (21+) and conducting automated sanctions, PEP (Politically Exposed Persons), and fraud checks.
• Responsible Gaming Safeguards: Monitoring gaming velocity to enforce player-configured deposit caps, cooling-off intervals, and self-exclusion lists.
• Customer Service Resolution: Empowering our 24/7 technical help desks to locate your account, verify your identity, and restore sessions.

5. Third-Party Disclosures & Non-Sale Policy

DraftKings Sportsbook does not sell or lease player personal data to third-party data brokers.

We disclose records solely to vetted service providers operating under binding data protection contracts:

• Regulated financial institutions, card processors (Visa, MasterCard), and banking corridors (PayPal, Trustly).
• Official state gaming enforcement divisions (NJDGE, PGCB, MGCB, etc.) during mandatory compliance audits and tax reporting.
• Accredited identity verification and geofencing vendors (e.g., GeoComply, LexisNexis) for real-time age and territory validation.

6. Data Security, Cryptographic Architecture & Retention

All sensitive customer data stored in our environment is defended with AES-256 bit encryption at rest and TLS 1.3 Transport Layer Security during transit. We enforce strict role-based access control (RBAC), multi-factor hardware security key mandates for staff, and regular vulnerability assessments performed by independent CREST-accredited ethical penetration testing teams.

Financial and wagering transaction logs are retained for a minimum statutory period—typically 5 to 7 years—as dictated by state gaming authorities and federal tax codes. Once statutory retention limits lapse, records are securely scrubbed via cryptographic erasure procedures.

7. Consumer Privacy Rights & State Disclosures

Depending on your jurisdiction of residence (e.g., California, Colorado, New Jersey), you are entitled to exercise specific consumer data rights:

• Right of Access: Request a complete summary of personal records held within our player registry.
• Right to Rectification: Promptly correct inaccurate or obsolete contact and residential details.
• Right to Erasure (Deletion): Request data purging, subject to non-waivable regulatory retention mandates.
• Non-Discrimination: We will never penalize, adjust betting odds, or alter payout structures if you exercise your lawful rights.

8. Contact Information & Data Protection Officer

For privacy-related inquiries, data subject access requests (DSAR), or concerns regarding your account security, please reach out to our dedicated privacy counsel: