1. INTRODUCTION
FanDuel Group and its affiliates (collectively, "FanDuel", "we", "us", or "our") are committed to respecting and protecting your privacy. This Privacy Policy ("Policy") describes how we collect, use, disclose, and safeguard your personal information when you visit our website, use our mobile applications (the "App"), or engage with our online casino and sportsbook services (collectively, the "Services").
We understand that by using our Services, you are placing your trust in us to handle your personal and financial data with the highest level of security and confidentiality. We take this responsibility seriously. This Policy applies to all users of our Services in the United States and other jurisdictions where we operate. By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Use.
2. INFORMATION WE COLLECT
To provide you with a seamless, secure, and compliant gaming experience, we collect various types of information. This data helps us verify your identity, process transactions, and improve our platform.
2.1 Information You Provide Directly
- Account Registration: When you sign up for a FanDuel account, we collect personal identifiers such as your full name, physical address, email address, telephone number, and date of birth.
- Identity Verification (KYC): To comply with federal and state regulations regarding real-money gaming, we require additional information to verify your identity. This may include your Social Security Number (SSN) or the last four digits, and copies of government-issued identification (e.g., driver's license or passport).
- Financial Information: When you make deposits or withdrawals, we collect payment information such as credit/debit card numbers, bank account details, routing numbers, or third-party payment processor credentials (e.g., PayPal, Venmo). Note that sensitive payment data is tokenized and processed by secure payment gateways.
- Communications: We collect information when you contact our Customer Support team, participate in surveys, or engage with us on social media. This includes the content of your messages and any attachments.
2.2 Information Collected Automatically
When you access our Services, our servers and third-party tools automatically record certain information:
- Device Data: Information about the device you use to access the Services, including hardware model, operating system, unique device identifiers (UDID), IP address, and mobile network information.
- Geolocation Data: As a regulated real-money gaming operator, we are legally required to verify your physical location to ensure you are within a jurisdiction where we are licensed to operate. We collect precise geolocation data via GPS, Wi-Fi, and Bluetooth signals.
- Usage Data: Information about your interactions with our Services, such as the pages or screens you view, your gaming history, betting patterns, access times, and the links you click.
3. HOW WE USE YOUR INFORMATION
We use the information we collect for specific business and commercial purposes, including:
- Service Provision: To create and manage your account, process your wagers, facilitate deposits and withdrawals, and provide customer support.
- Compliance and Legal Obligations: To verify your identity and age, prevent fraud, detect money laundering, and ensure compliance with state gaming regulations and federal laws (e.g., The Bank Secrecy Act).
- Geolocation: To enforce geographic restrictions and ensure that real-money wagers are only placed from permitted locations.
- Marketing and Promotions: To send you newsletters, promotional offers, and updates about new features or games. You can opt-out of marketing communications at any time.
- Product Improvement: To analyze user trends, test new features, and personalize your experience on our platform (e.g., recommending games you might like).
- Security: To monitor for unauthorized access, combat bot activity, and protect the integrity of our gaming platform.
4. INFORMATION SHARING AND DISCLOSURE
FanDuel does not sell your personal information to third parties for money. However, we may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party vendors who perform services on our behalf, such as payment processing, identity verification, geolocation services, data analytics, email delivery, and hosting services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Affiliates
We may share information within the FanDuel Group corporate family (e.g., Flutter Entertainment plc) for business operational purposes, such as consolidated reporting and cross-product promotions (e.g., connecting your Fantasy and Sportsbook accounts).
4.3 Regulatory Bodies and Law Enforcement
We may disclose your information to gaming regulators, law enforcement agencies, or other government authorities if required by law, court order, or subpoena. This includes reporting suspicious activity as required by anti-money laundering (AML) regulations.
4.4 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
5. DATA SECURITY
We employ administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption: Sensitive data, such as financial information and SSNs, is encrypted in transit using Transport Layer Security (TLS) technology and at rest using industry-standard encryption standards.
- Access Controls: Access to personal data is restricted to authorized employees who need the information to perform their job duties. We utilize Multi-Factor Authentication (MFA) for internal systems.
- Regular Audits: We conduct regular security assessments and vulnerability scans to identify and mitigate potential risks.
While we strive to protect your information, no system is completely impenetrable. We cannot guarantee the absolute security of your data transmitted over the internet.
6. YOUR PRIVACY RIGHTS AND CHOICES
You have certain rights regarding your personal information, subject to local laws:
- Access and Correction: You can review and update your profile information by logging into your account settings. You may also request a copy of the personal data we hold about you.
- Marketing Preferences: You can opt-out of receiving promotional emails by clicking the "unsubscribe" link in the email footer. You can also manage push notification preferences within your device settings.
- Account Closure: You may close your FanDuel account at any time by contacting Customer Support. Note that we may be required by law to retain certain account information for a specific period after closure (typically 5-7 years) for regulatory and audit purposes.
- Location Data: You can stop sharing geolocation data by adjusting the permissions on your mobile device. However, doing so will prevent you from placing real-money wagers.
7. COOKIE POLICY
We use cookies, pixel tags, and similar technologies to improve our Services. Cookies are small text files stored on your device that help us remember your preferences, keep you logged in, and analyze site traffic.
We use the following types of cookies:
- Strictly Necessary Cookies: Essential for the operation of the website (e.g., login authentication, secure areas).
- Performance Cookies: Collect anonymous data on how visitors use our site to help us improve performance.
- Functionality Cookies: Remember choices you make (e.g., language, odds format) to provide a personalized experience.
- Targeting Cookies: Used to deliver advertisements relevant to your interests.
You can manage your cookie preferences through your browser settings. Blocking certain cookies may impact the functionality of the Services.
8. CHILDREN'S PRIVACY
Our Services are strictly intended for individuals aged 21 and over (or 18+ depending on the specific state regulations for DFS). We do not knowingly collect personal information from individuals under the legal gaming age. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete such information and terminate the account. Parents who believe their child has provided us with personal information should contact us immediately.
9. YOUR US STATE PRIVACY RIGHTS
Residents of certain states (such as California, Colorado, Connecticut, Virginia, and Utah) may have additional rights under state-specific privacy laws (e.g., CCPA/CPRA).
California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to:
- Know what personal information we collect, use, disclose, and sell.
- Request the deletion of your personal information (subject to regulatory retention requirements).
- Opt-out of the sale or sharing of your personal information.
- Not receive discriminatory treatment for exercising your privacy rights.
To exercise these rights, please visit our "Do Not Sell or Share My Personal Information" link in the footer or contact our support team.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email, by posting a notice within the Services, or by updating the "Last Updated" date at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.