PRIVACY POLICY

Updated: April 21, 2026

OUR COMMITMENT TO PRIVACY - DRAFTKINGS SPORTSBOOK & CASINO

DraftKings strives to offer the most innovative and entertaining games found anywhere on the Internet. To ensure the trustworthiness of our games and the quality of your experience, we collect and process information about our consumers. We are committed to handling your information with respect, because your privacy is important to us. Crown DK CAN Ltd. ("DraftKings," "DK," "we," "us," or "our") provides this privacy policy to explain how we collect and use information about consumers of our websites located at http://sportsbook.draftkings.com/ and http://casino.draftkings.com/ ("Website"), our mobile applications ("Applications"), and our online gaming products and related services including, but not limited to, those available through the Website and the Applications (collectively, "Services"). This privacy policy does not apply to websites, applications, or services that do not display or link to this statement or that display or link to different privacy statements.

Our Website, Applications, and other Services are provided as part of the open and regulated Internet gaming market in Ontario conducted and managed by iGaming Ontario ("iGO") and we collect, use, and disclose personal information on behalf of, and as an agent to, iGO.

TABLE OF CONTENTS

  1. YOUR ACCEPTANCE OF THIS PRIVACY POLICY
  2. APPLICATION OF THIS PRIVACY POLICY
  3. iGO CENTRALIZED SELF-EXCLUSION (iGOCSE)
  4. THE PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT
    1. Information You Provide To Us
    2. Information Collected Via Technology
    3. Information Collected From Or About Friends
    4. Information Collected from Other Sources
  5. INTERACTION WITH THIRD-PARTY SITES AND SERVICES
  6. ADDITIONAL USES OF PERSONAL INFORMATION
  7. ADDITIONAL DISCLOSURES OF PERSONAL INFORMATION
  8. BIOMETRIC VERIFICATION
  9. SECURITY AND RETENTION OF PERSONAL INFORMATION
  10. BREACH OF SECURITY SAFEGUARDS
  11. OPTIONS REGARDING PERSONAL INFORMATION
  12. HOW WE RESPOND TO DO NOT TRACK SIGNALS
  13. PROHIBITED USERS
  14. MINORS
  15. INTERNATIONAL INFORMATION HOSTING/DATA STORAGE
  16. LODGING A COMPLAINT
  17. CHANGES AND UPDATES TO THIS PRIVACY POLICY
  18. HOW TO CONTACT US

1. YOUR ACCEPTANCE OF THIS PRIVACY POLICY

By opting in and using our Website, Application(s), or other Services, you agree to accept this privacy policy, including its terms and conditions that relate to the ways we collect, use, and disclose your personal information. By opting in, you consent to our collection, use, and disclosure of your personal information in the ways described in this privacy policy. You can withdraw your consent to the collection, use, and disclosure of your personal information at any time. If you choose to withdraw your consent, we may not be able to provide you with access to, or use of, our Website, Applications, and other Services.

2. APPLICATION OF THIS PRIVACY POLICY

DK is collecting personal information pursuant to Ontario's Freedom of Information and Protection of Privacy Act ("FIPPA"), Ontario Regulation 722/21 made under the Alcohol and Gaming Commission of Ontario Act, DK's Operating Agreement with iGO and applicable Canadian federal and provincial privacy laws.

3. iGO CENTRALIZED SELF-EXCLUSION (iGOCSE)

iGO offers a voluntary centralized self-exclusion service ("iGOCSE") whereby individuals may register to self-exclude from all regulated igaming sites in Ontario and opt out of certain marketing. iGOCSE is offered subject to the iGOCSE privacy policy.

In connection with iGOCSE, iGO, DraftKings, and their respective authorized suppliers may collect, use, share, disclose, retain, or otherwise process your Personal Information to develop, operate, maintain, sustain, update and modify iGOCSE. This information may be used to verify your identity, enable your self-exclusion from regulated igaming sites, or for any other lawful purpose under the iGOCSE privacy policy and the iGOCSE terms and conditions. Personal Information will be retained only for the period allowed by the iGOCSE privacy policy and Applicable Law.

For further information please review the applicable iGOCSE Privacy Policy.

4. PERSONAL INFORMATION WE COLLECT AND HOW WE USE IT

In this section we describe the types of personal information that we collect, the sources from which we collect it, and the specific reasons why we collect it. As a general rule, we collect your personal information to perform our obligations to iGO under our Operating Agreement with iGO. We will not collect personal information from you for purposes that are not permitted under the Operating Agreement or applicable law.

  1. Information You Provide To Us
    • You may choose voluntarily to provide or direct third parties to provide certain personal information to us. Personal information is recorded information about an identifiable individual, such as your name, username, address, email address, phone number, date of birth, age, payment card information, banking and other financial information, billing information, identity verification information such as your driver's license number, an image of your ID card, social insurance number, and profile or other photograph. For example, when you create an account to log in to our Services ("Account"), you may decide to share your full legal name, alias, date of birth, location, email address, personal and business phone number, username and password, street address, country of residence, occupation, name and address of your employer, along with an attestation as to whether you are a politically exposed person ("PEP"), head of an international organization ("HIO"), or a family member or close associate of a PEP or HIO and, if so, the sources of your funds and wealth and the nature of your connection to the PEP or HIO. We need this information to set up your Account, verify your identity, detect and prevent fraud, comply with our legal obligations, and provide you with our Services.
    • When you use our Website, Applications, or other Services, or deposit or withdraw funds from your Account, we may collect all information necessary to complete the transaction, provide you with the Services, and comply with our legal obligations, including your name, address, email address, phone number, payment card information and other billing information, social insurance number, and records of the products and Services you purchased, obtained, or considered.
    • In the event you provide us feedback or contact us via email, chat, phone call, or text message, we will collect your name, email address/phone number, and any message content, in order to send you a reply, provide customer and technical support, develop improve and optimize our Services, satisfy our legal obligations, enforce our contracts and legal rights, and address any existing or anticipated disputes. We and our vendors may record, monitor, and retain emails, chats, calls, and texts. By communicating with us, you consent to this recording, monitoring, and retention. We may use chatbot technology and other automated methods of communication.
    • We will collect the profile photo you upload and username you choose for your public profile page ("Profile") to give you a personalized experience of our Services. When you participate in any game or other gaming-related product or promotion through the Website, Application(s), or other Services (each, a "Game" or, collectively, "Games"), other participants may be able to see the information you selected for your Profile. Participation in Games is completely voluntary and you may choose whether to participate and, therefore, disclose the personal information required by the Games.
    • If you tell us where you are by allowing your device to send us your location or by otherwise permitting us to geolocate you, we may store and use that information to verify your eligibility to use certain Services, to comply with relevant laws, and for fraud detection and prevention purposes.
    • We may use the personal information we collect from you, including, but not limited to, your name and address, for purposes of direct mail marketing. This means that you may receive postal mailings from us about our products, Services, promotions, and/or other marketing materials that we believe may be of interest to you.
    • When you participate in one of our surveys, we may collect additional information about your Profile, activity, usage, and preferences related to the Website, Applications and other Services, so that we can evaluate your interest in and the quality of our Services and provide you customer and technical support. Participation in surveys is voluntary and you may choose whether to participate and, therefore, disclose the personal information required by the survey.
    • If you participate in a sweepstakes, giveaway, promotion, or Game through our Services, we may collect your email address, username, and phone number to notify you if the event you win. We may also ask for consumers' names and addresses, in order to verify their identities and fulfill any applicable prizes. In some situations, we may need to collect other information about consumer preferences as part of the entry process, such as a prize selection, or in connection with the award of prizes over a certain dollar amount. Such sweepstakes, giveaways, promotions, and Games are voluntary and you may choose whether to participate and, therefore, disclose the personal information required. We recommend that you read the rules associated with any sweepstakes, giveaway promotion, or Game before entering.
    • If you use our social networking features, including those on DK Social and DK Network, we may collect, and other DraftKings consumers may be able to see, your Profile information, including, but not limited to, your username, real name, photo, location, the content you post on your social feed and the social feeds of other DraftKings consumers, and any other information you choose to upload or share. We may also collect, and other consumers may also be able to see, information about the Games you participate in, including, but not limited to, wagers and betting feed data. In the event you elect to sync, upload, or import data about your contacts from your device's address book, we may collect and use that information to provide you and your contacts with our Services, including, but not limited to, helping you find and connect with your contacts and helping your contacts connect with you. In general, the information you choose to provide when using our social networking features is public, and you should exercise caution and good judgment before you post, sync, upload, import, or otherwise share information with us and others in order to avoid disclosing sensitive, harmful, or unlawful information. You are solely responsible for the content you post, upload, or share and other information you provide, whether by syncing, uploading, importing, or otherwise, when you choose to use our social networking features. You may control the information you upload or share through our social networking features by using our social privacy settings. The social privacy settings allow you to determine: who is able to see your Profile and your gaming activity through our social networking features; who can add you as a friend; who can find you in a username search; who is able to see your real name and friends lists; whether you will receive notifications of replies and reactions to your posts; whether you will receive notifications that someone has posted content to your feed or posted about you; and who can see your posts.
  2. Information Collected Via Technology
    • Information Collected by our Services

      In order to improve and personalize our Services and meet our legal obligations, we may automatically track certain information about your visits to and usage of our Website, Applications, and other Services, including your browser type, operating system, IP address, device identifier, domain name, clickstream data, referring/exist pages, geolocation data, and a date/time stamp for your visits. We also use this information to analyze trends, administer the Services, gather demographic information about our user base, deliver advertising, perform research, provide technical and customer support, inform our product development efforts, protect our legal rights, address disputes, and prevent our Services from being used to commit harmful or unlawful activities, including, but not limited to, fraud. Some of this information may also be collected so that when you use the Website, Applications, or other Services again, we will be able to recognize you and optimize your experience accordingly.

    • Device Information

      We may collect information about the devices you use to access our Website, Application and Services, including the hardware models, operating systems and versions, software, file names and versions, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion information, and mobile network information. If you have downloaded our Application(s), we may also collect certain information from your mobile device, including information about how you use the Application(s). This information is generally used to help us deliver relevant information to you and to detect and prevent fraud and other unlawful activity. In the event our Application crashes on your mobile device, we will also receive information about your mobile device model software version and device carrier, which allows us to identify and fix bugs, provide other technical support, and improve the performance of our Applications.

    • Cookies

      Like many online services, we use "cookies" to collect technical information. Cookies are small pieces of information that a website sends to your computer's hard drive while you are viewing the website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Website, Applications, and other Services. We may use cookies to collect information about your IP address, browser type, operating system, device type and identifiers, platform type, as well as your usage of and activity on our Website and Applications and the performance of our Services. These types of information are collected to make the Website, Applications, and other Services more useful to you and to tailor your online experience to meet your interests and expectations. You can use the options in your web browser to notify you when you receive a cookie or you may change your cookie preferences in your Internet browser or with third parties. You can control and/or delete cookies used by our Services at any time. You can delete all existing cookies on your computer and adjust settings for most browsers to prevent cookies from being received.

    • Pixel Tags

      In addition, we use "pixel tags" (also referred to as clear gifs, web beacons, or web bugs). Pixel tags are tiny graphic images with a unique identifier, similar in function to cookies, that are used to track online movements of consumers. In contrast to cookies, which are stored on a computer's hard drive or web browser, pixel tags are embedded invisibly in web pages. Pixel tags are often used in combination with cookies to trigger the placing of cookies and/or to transmit information to us or our vendors. This enables two websites to share information. The resulting connection can include information such as IP address, the time a person viewed the pixel, an identifier associated with the browser or device, the type of browser being used and the URL of the web page from which the pixel was viewed. Pixel tags also allow us to send email messages in a format that consumers can read, tell us whether emails have been opened, and help to ensure we are sending messages that may be of interest to our consumers. We may also use information collected through pixel tags to reduce or eliminate messages sent to a consumer.

    • Threat Detection

      We use certain service providers, such as ThreatMetrix, to provide threat detection, user authentication, and fraud prevention services. These service providers may automatically collect certain information about your visits to the Website and Applications, as well as the device you use to connect to our Services, in order to monitor for potential threats and bad actors. This information may include, among other things, your IP address and your device's unique identifiers. If you would like to know more about ThreatMetrix's data privacy practices, please review the Lexis Nexis ThreatMetrix Processing Notice.

    • Collection of Data in Connection with Advertising

      We may use certain vendors to serve ads on our Services, as well as on other websites, applications, and social media networks. In connection with the delivery of advertising, certain vendors, including, but not limited to, Facebook, LiveRamp, Reddit, Snapchat, The Trade Desk, TikTok, TruSignal, and X may collect information about you and your visits to the Website and Application and other websites and applications. That information may include your IP address, Internet service provider, personal identifiers (e.g., name, email address), the browser you use to visit the Website and Applications and other websites and applications, and commercial information such as records of products or services purchased, obtained, or considered. They may do this by using cookies, beacons, pixel tags, clear gifs, or other technologies. The information collected may be used, among other purposes, to deliver advertising targeted to your interests and to better understand your usage of, preferences on, and visitation of our Website, Applications, and other Services as well as other sites, social media networks, and applications tracked by such vendors. This privacy policy does not apply to, and we are not responsible for, cookies, pixel tags and other technologies used in connection with other parties' ads, and we encourage you to check the privacy policies of advertisers and ad services to learn about their use of such technologies. In the event you would like more information about these practices to understand your options for not having your information collected and used by such companies, please click http://www.aboutads.info/choices and https://www.networkadvertising.org/.

    • Measurement Data and Third-Party Analytics

      We use a number of vendors, including, but not limited to, Google, Hulu, and Roku to help analyze and measure how consumers use our Services ("Analytics Companies"). Analytics Companies may use cookies, pixel tags, and other technologies to collect information pertaining to how people use our Website, Applications and Services, what pages they visit, and what other sites they may have used prior to using our Services. We use the information we obtain from Analytics Companies to improve and optimize our Website, Applications, and Services and to measure the effectiveness of our ads.

    • Referral Affiliates

      We may enter into agreements with companies that refer consumers to our Services via hyperlinks available on the referring party's website. We may automatically collect certain information, such as your IP address, other identifiers, and the identity of the referring website via cookies, pixel tags and other technologies that are provided to us in connection with your use of the referring party's website.

    • Location Information

      We may collect your location information, including your geolocation records, for purposes of verifying whether you are eligible to participate in a Game, sweepstakes, promotion, or giveaway or to determine whether you are otherwise permitted to use our Services. We may also use such information to comply with our legal obligations, protect our legal rights, and address existing or anticipated disputes.

  3. Information Collected From Or About Friends
    • Refer-a-Friend

      Our Services may enable you to invite your friends to join in the fun. We offer several ways to invite friends to play on the Website and Applications. All options include the use of a unique URL link provided to you by DraftKings that you must use to direct people who do not have an existing Account to the Website and Applications to become a referred friend ("Link"). You may share the Link with friends via email, text, X, Facebook, and other ways. When a friend uses the Link to register an Account on DraftKings, the Link enables us to associate that friend with the referrer, primarily for the purpose of awarding bonuses. The Link and the terms and conditions of the Refer-a-Friend program are available at DraftKings Refer a Friend Terms. We also employ techniques to facilitate invitations to friends using the Link, including a contact importer tool that allows you to add your contacts in your address book, so that you can ask them to join DraftKings and communicate with you through the Website, Applications, and Services. Our contact importer tool may not be available to consumers in certain regions, countries, and other jurisdictions. In the event it is available, with your permission, we will access your address book and import your contacts' names, email addresses, phone numbers, locations, and associated details to determine which of your friends have not registered an Account on DraftKings. We rely upon you to obtain any consents from your friends that may be required by law to allow us to access, upload, and use their personal information for this purpose. You or your friends or contacts may reach us at privacy@draftkings.com to request the removal of this information from our database.

    • Find-a-Friend

      Our Services may also enable you to invite your friends who already have an Account to participate in our Services. In order to invite friends with Accounts to join the Services, you may: (i) enter your friend's username associated with their Account to find and locate them; or (ii) in the event you are using our Application(s), use our contact importer tool to import and search through your contacts in your address book to match those of your friends who are also registered DraftKings consumers. Our contact importer tool may not be available to users in certain regions, countries, and other jurisdictions. In the event it is available, with your permission, we will access your address book and import your contacts' names, email addresses, phone numbers, location, and associated information to facilitate the connection with your friends. Again, it is your responsibility to obtain any consents from your friends and contacts that may be required by law to allow us to access, upload, and use their personal information for this purpose.

  4. Information Collected From Other Sources

    We may supplement the information we have about you with information received from other sources including, but not limited to, our vendors, our pages on certain social networking sites (e.g., Discord), the social networking sites themselves, and commercially available sources (e.g., data aggregators, data brokers, and public databases). Your activity on other websites and applications may be associated with your personal information in order to evaluate risk and to provide, improve, and customize our Services and the ads delivered on our Website and Applications. The information we collect may include demographic data such as age, gender and income level, email address, username, online identifiers, your preferences, interests, associations, commercial information (including, but not limited to, records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies, fraud indicators, and risk scores assessing your ability to complete a transaction), as well as information regarding your interaction with various websites and applications, including, but not limited to, the Services. This information is used to create and deliver advertising, provide and improve our VIP and marketing Services, perform consumer verification, evaluate risk, detect and prevent fraud, and comply with our legal obligations.

    By accepting this privacy notice and using our Services, you authorize third parties, which may include your mobile operator(s), Internet service provider(s), financial institution(s), as well as government organizations and other authoritative data sources, to disclose to us and our vendors your personal information for the purposes of validating your identity and detecting and preventing fraud. This information may include, but is not limited to, your credit record number, IP address, device identifier, browser type, operating system, location, and data regarding your interaction with an Internet website or application.

5. INTERACTION WITH THIRD-PARTY SITES AND SERVICES

Certain products, services, or other materials displayed on the Website, Applications, and other Services may integrate with, be integrated into, or be provided in connection with certain third-party services and content. We do not control those third-party services and content and our terms of use and this privacy policy do not apply to those services and content. You should read the third-party terms of use agreements and privacy policies that apply to such services and content. We are not responsible for the practices used by any third-party websites or services linked to or from our Website or Applications, including, but not limited to, the information or content contained within them. By using our Website, Applications, or other Services, you acknowledge and agree that we are not responsible for and do not have control over any third-party services and content that you authorize to access the information you provide to them. If you are using a third-party website or service and allow it to access your personal information, you do so at your own risk.

6. ADDITIONAL USES OF PERSONAL INFORMATION

User Feedback

We may post consumer feedback on the Website and Applications from time to time. To the extent you share your feedback, we will do so with your first name and last initial only. In the event we wish to post your first and last name along with your feedback, we will obtain your consent prior to posting. If you make any comments on a blog or forum associated with the Website, Applications, or other Services, you should be aware that any personal information you submit there can be read, collected, or used by other consumers of the blog or forum and might be used to send you unsolicited messages. We are not responsible for any personal information you choose to submit in these blogs and forums.

Creation of Aggregated, Anonymized, or De-Identified Data.

We may create aggregated or anonymized data (i.e., data that is not reasonably capable of being associated with or linked to you) from personal information we collected from or about you. We use such data to analyze request and usage patterns, so that we may improve or enhance our Services and optimize our consumers' experience with and ability to navigate our Website and Applications. We reserve the right to use aggregated or anonymized data for any purpose and disclose it to third parties for any reason.

Responsible Play

As part of our commitment to responsible play, we may use the information collected about you to assess whether you are responsibly playing Games. In the event we identify potentially problematic information, we may contact you to provide resources to help ensure that you are playing Games responsibly. By using our Website, Applications, or other Services, you consent to our use of your information for these purposes.

Delivery of Complimentary Products and Services

As part of our Dynasty Rewards Program, under certain circumstances, we may provide VIPs and other consumers with complimentary products and Services, including, but not limited to, apparel, memorabilia and other goods, gift cards, tickets to sports and entertainment events, tailgates, watch parties, and/or other unique experiences from DraftKings or our vendors. By using our Website, Applications, or other Services, you consent to our use of your personal information and disclosure of it to our vendors for such purposes, including fulfillment and delivery of such products and Services.

SMS Text Communications and Transcription Services

We may use the telephone number(s) we collect from you for the purpose of one-to-one calls and text messages. By accepting this privacy policy, you consent to receive calls and text messages from us, including, but not limited to, from our customer support and VIP personnel. This means we may contact you via call or text message to:

  • Provide customer support and respond to your inquiries;
  • Inform you about important updates and changes to our Services; and
  • Offer personalized assistance and VIP Services tailored to your interests.

You may opt out of receiving calls and text messages from us by following the instructions in the communications you receive, by contacting customer support at support@draftkings.com, or by visiting your Communication Settings at https://myaccount.draftkings.com/accountcenter/notificationpreferences or the Notification Preferences under your Profile settings in our Applications.

7. ADDITIONAL DISCLOSURES OF PERSONAL INFORMATION

In addition to the sharing practices discussed above, we may disclose your personal information as follows:

Parties You Share With

When you use the Website, Applications or other Services, the personal and other information you choose to provide will be shared with parties you allow to receive such information. For example, you may choose to communicate personal information to your friends and other consumers, including those who are participating in the same Game as you.

Service Providers

We may share your personal information with certain service providers to provide you with our Services; conduct quality assurance testing; facilitate the creation of Accounts; process payments; provide account authentication and user verification services; provide technical and customer support; geolocate consumers; personalize, customize, and improve your use and experience of the Services; process financial transactions in connection with your Account, including, but not limited to, e-wallet deposits and/or withdrawals, either online or through selected retail locations; send email and push notifications; enable security support and technical maintenance; send newsletters, surveys, messages, and promotional materials related the Services or on behalf of other companies; provide loyalty rewards and VIP benefits, including, but not limited to, the complimentary products and Services described in Section 6 of this privacy policy; verify your identity; prevent unlawful uses of our Services; deliver customized or personalized content, information, and advertising; understand when consumers have installed our Applications; monitor the health and performance of code on consumers' devices; request feedback; send consumers links to download our Applications; monitor the health of our servers; manage search engine optimization; and improve and optimize the performance of our Services. We also use the personal information we collect in connection with your use of our Services to detect and prevent harmful, abusive, fraudulent, and other malicious activity. We may share this information with vendors and service providers including Sift Science, Inc. (d/b/a Sift) to assist us with this effort. To learn more about Sift, please review the Sift Service Privacy Notice.

Fraud Detection and Prevention, Risk Analysis, and Identity Verification Vendors

We may use fraud detection and prevention, risk analysis, and identity verification vendors including, but not limited to, LexisNexis, Onfido, Socure, and TransUnion, to detect and prevent fraud, evaluate risk (including, but not limited to, regarding your ability to successfully complete a transaction), confirm your identity, and/or enhance or assist your Account opening and onboarding experience. By using our Services, you also authorize us to disclose your full name, date of birth, address, phone number, identification information, transaction details, and decisions and returns information directly to such vendors for purposes of detecting and preventing fraud, evaluating risk, and/or verifying your identity. By using our Services, you also agree to permit such vendors to verify your identity with a credit bureau and access your credit file solely for the purpose of identity verification, which will not affect your credit score. This data will be maintained for the duration of our business relationship with such vendors and any applicable retention period. For more information about our fraud detection and prevention, risk analysis, and identity verification vendors' privacy practices, please review the following privacy statements: LexisNexis Privacy Policy, Onfido, Socure Privacy Statement, and TransUnion Privacy Notice.

Revenue Agency and Other Taxing Authorities

In the event your earnings or winnings from a sweepstakes, giveaway, promotion, or Game exceed a certain threshold, and if required by applicable law, we will disclose the amount of your earnings or winnings and related personal information to any appropriate taxing authority.

Professional Financial and Legal Advisers. From time to time, we may also need to share your information with professional advisers, including lawyers, auditors, bankers, insurers and consultants, in order to obtain advice or other professional services from them. Such advisers are bound by legal and/or contractual duties of confidentiality and other prohibitions against disclosure of personal information.

Co-Branded Companies

"Co-Branded Companies" are entities with which we may jointly offer a service or feature. You can tell when you are accessing a service or feature offered by a Co-Branded Company because the Co-Branded Company's name will be featured prominently. You may be asked to provide information about yourself to register for a service offered by a Co-Branded Company. In doing so, you may be providing your information to both us and the Co-Branded Company, or we may share your information with the Co-Branded Company. Please note that the Co-Branded Company's privacy policy and terms of use may also apply to its use of your information and you should familiarize yourself with the privacy policy and terms of use of any Co-Branded Company you access. We are not responsible for the practices used by Co-Branded Companies. In addition, by using our Website, Application(s), and other Services, you acknowledge and agree that we are not responsible for and do not have control over any Co-Branded Companies.

DK Promotions

When you participate in a sweepstakes, giveaway, promotion, or Game, we may use your name, likeness, voice, opinions, and biographical information for publicity, advertising, trade, or promotional purposes without further payment, consideration, notice, or approval.

Dynasty Rewards

When you open an Account with us, we use your personal information to automatically enroll you in our Dynasty Rewards Program to earn crowns and advance your Dynasty status. In the event you redeem your crowns for rewards, we will use your personal information to fulfill and ship your applicable rewards to you.

Social Networking Sites

Our Website, Applications, and other Services may enable you to post content to social networking services (e.g., Facebook) ("SNS"). In the event you choose to do this, we will provide information to such SNS in accordance with your choices. In such event, you acknowledge and agree that you are solely responsible for your use of those SNS and that it is your responsibility to review the terms of use and privacy policy of those SNS and/or companies providing such SNS. We will not be responsible or liable for: (i) the availability or accuracy of any SNS's terms of use or privacy policy; (ii) the content, products, or services on or availability of such SNS; or (iii) your use of any such SNS.

Corporate Affiliates

We may share some or all of your personal information with our corporate affiliates, including, but not limited to, our subsidiaries, joint venturers and other companies under a common control ("Affiliates"), in which case we will require our Affiliates to respect this privacy policy.

Corporate Restructuring

We may share some or all of your personal information in connection with or during negotiation of any merger, financing, acquisition, corporate divestiture, dissolution transaction, or other proceeding involving the sale, transfer, divestiture or disclosure of all or a portion of our business or assets. In such event, the parties involved will be subject to confidentiality restrictions. In the event of insolvency, bankruptcy, or receivership, your personal information may also be transferred as a business asset.

Other Disclosures

Regardless of the choices you make regarding your personal information (as described below), we may disclose your personal information in the event we, in good faith, believe that such disclosure is necessary: (i) to comply with relevant laws or to respond to discovery requests, subpoenas, or warrants served on us; (ii) in connection with any legal investigation; (iii) to protect or defend the rights or property of DraftKings or consumers of the Website, Applications, or other Services; (iv) to investigate or assist in preventing any violation or potential violation of law, this privacy policy, or our terms of use; or (v) in the event we believe that an emergency involving the danger of death or serious injury to any person requires or justifies disclosure of information. We may also disclose your personal information without your consent to collect a debt that is owed to us.

8. BIOMETRIC VERIFICATION

With your consent, we may use facial image scan services provided by our vendors (including, for example, Socure) to help verify your identity. These biometric identity verification providers and their contractors compare facial scan data extracted from your photo in your ID (e.g., driver's license) to the facial scan data extracted from the selfie photo or video you upload, and then report back to us whether or not there is a match. We will use these results to help verify your identity. These scans and associated results may constitute biometric information or biometric identifiers under certain laws. Any biometric identifier/information or representation of it will be processed based on your consent and collected, stored, and managed by Socure or the applicable biometric identity verification provider. Please note that biometric verification options may not be available to consumers in certain regions, countries, and other jurisdictions. For more information please see the Socure Document & Biometric Verification Privacy Notice, and the Socure Privacy Statement.

Biometric data collected and processed for our verification purposes is scheduled to be retained until the earlier of when verification is complete or for up to three (3) years following your last interaction with the biometric identity verification provider, unless otherwise set forth at the time you provide consent or unless otherwise required by law or legal process. After this period, such biometric data is scheduled to be deleted. You may decline to use the biometric verification process, but this may limit our ability to complete the verification process required to use our Services. You may revoke your consent at any time by emailing us at privacy@draftkings.com.

9. SECURITY AND RETENTION OF PERSONAL INFORMATION

The security of your information is important to us. We use reasonable administrative, technical, and physical procedures, practices, and safeguards designed to protect personal information we collect from unauthorized access, use, alteration, exfiltration, or destruction. Payment card information that we collect from you will be held by us or our payment processors and other vendors in encrypted form. Consumer information will be securely erased from hard disks, magnetic tapes, solid state memory, and other devices before we dispose of the device; and in the event this is not possible, the device will be destroyed. We will keep your information for as long as it is needed to achieve its purpose and meet our legal obligations, including, but not limited to, any applicable retention periods, after which we will make reasonable efforts to dispose of it in accordance with our records retention policy and schedule.

We make concerted, good faith efforts to maintain the security of your information. Although we work hard to ensure the integrity and security of our systems, it must be recognized that no information system is 100% secure and, therefore, we cannot guarantee the security of such information. Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of consumer information at any time.

You can also play a role in protecting your personal information. To protect your personal information while using our Website, Applications and other Services, we strongly suggest that you do not share your Account information and that you adhere to the following password practices:

  • Use a strong password that is at least ten (10) alphanumeric characters long, and contains upper and lower-case characters, numbers, punctuation marks and special characters such as !@#$;
  • Use a password that is not easily guessed and is not a word in any language, slang or is based on personal information such as a family name;
  • Treat your password as confidential and do not disclose it to anyone else;
  • Do not write down your password;
  • Do not store your password online in unencrypted form;
  • Change your password every three (3) months; and
  • Choose a password that is unique, not one that you use for any other website or application.

10. BREACH OF SECURITY SAFEGUARDS

In the event that we suffer a breach of security safeguards resulting in the unauthorized access to or loss of any of personal information where there is a resulting real risk of significant harm to an individual, we will notify the affected individual(s) and applicable governmental authorities having jurisdiction, if required by applicable law. This notification will include notification to iGO. We will work closely with iGO and other applicable governmental authorities having jurisdiction to contain and remediate the breach.

11. OPTIONS REGARDING PERSONAL INFORMATION

  1. Your Choices Regarding Your Personal Information
    • Email Communication

      We will periodically send you free newsletters and emails that contain information about our various products and Services, or other products and services we feel may be of interest to you. At any time you can easily indicate your preference to stop receiving such communications from us, and you may opt out of receiving further marketing from DK, by emailing us at or by following the unsubscribe instructions provided in the email you receive. Despite your indicated email preferences, we may send you service-related communications, including notices of any updates to our terms of use and this privacy policy.

    • Direct Mail

      In the event you prefer not to receive direct mail marketing, you can opt out by following the opt-out instructions provided in the mailings, by visiting your Communication Settings on the Website at and switching the Postal Mail toggle to "Off", or by contacting us directly at . https://myaccount.draftkings.com/accountcenter/notificationpreferences and switching the Postal Mail toggle to "Off", or by contacting us directly at support@draftkings.com.

    • Verification

      When we receive a privacy request, we will take reasonable steps to verify the identity of the requestor in accordance with applicable law. In the event the requestor has a password-protected Account with us, we may verify the requestor's identity through our existing authentication practices and may require the requestor to re-authenticate themself before disclosing, correcting, or deleting the Account holder's data. In the event a requestor does not have a password-protected Account, we will take reasonable steps to verify their identity in accordance with applicable law prior to responding to a request. The verification steps may vary depending on the sensitivity of the personal information and the jurisdiction where the requestor is located. In the event we cannot verify a requestor's identity using these methods, we may use an appropriate third-party verification service.

    • Opt-Out of Personal Information Sharing.

      As described above, we and certain other companies may place tracking technologies on our Website and Applications, which allow us and such companies to receive information about your activity on our Services associated with your browser or device. You request to opt out of the disclosure of your personal information to third parties for certain non-required purposes such as marketing and analytics by clicking the Do Not Sell or Share My Personal Information link in the footer of our Website and following the instructions on the page that appears (in certain jurisdictions, the link may be labeled Do Not Share My Personal Information). Please also keep in mind that your cookie and tracking tool preferences are specific to the device, website, and browser you are using to access the Website and may be deleted when you clear your browser's cache. You may also opt out of having your personal information disclosed to third parties for certain non-required purposes such as marketing and analytics by visiting the Login & Security tab of your My Account or Profile page on the Website or Applications and switching the Data Sharing: Do Not Sell or Share My Personal Information toggle to "Off." In the event you do not have an Account or are not logged into your Account when you make an opt-out selection, your request to opt out of the sale or sharing of your information will only be linked to your browser identifier and not linked to any Account information because the connection between your browser and your Account is unknown to us. Please note that after you opt out of the sale or sharing of your personal information, your use of our Website and Application(s) may still be tracked by us and our service providers.

    • Advertising Alliances Opt Out

      In addition to adjusting the appropriate settings in your browser, many advertising companies that may collect information for targeted advertising purposes are also members of the Digital Advertising Alliance, Digital Advertising Alliance of Canada, or the Network Advertising Initiative. These organizations provide directions on how you can opt out of targeted advertising by their members. You can find more information on these options at www.aboutads.info, http://www.youradchoices.ca, and www.networkadvertising.org.

    • Applications

      You may stop all collection of information by our Application(s) by uninstalling the Application(s). You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

  2. Additional Rights Regarding Your Personal Information

    You may have certain rights under applicable privacy laws regarding your personal information. Subject to exceptions under applicable law, you may have the right to:

    • Request access to your personal information in our custody and control;
    • Request information about the use and disclosure of your personal information;
    • Request deletion of your personal information in our custody and control; and
    • Request to update, rectify or correct any inaccuracies in your personal information in our custody or control.

    You also have the right to withdraw consent to the use and disclosure of their personal information, subject to legal and contractual restrictions and reasonable notice.

    • Accessing Your Personal Information

      You may access certain personal information by viewing it within your Account. Depending on the applicable law of your jurisdiction, you may also request access to personal information that we have collected about you during the past twelve (12) months (or during a longer period in the event provided by applicable law) by using the methods specified below. Depending on the applicable law of your jurisdiction, where technically feasible, you may also request a portable copy of your personal information in a readily usable format.

    • Correcting Your Personal Information

      We take reasonable steps to ensure that the information we collect and process about an individual is complete, up-to-date and accurate, consistent with the requirements of FIPPA and other applicable privacy laws. However, you also have a responsibility to inform us in the event any of your personal information that we hold is incomplete, outdated, or inaccurate. In the event you believe the personal information we hold about you is incomplete, outdated, or inaccurate, you may request that we amend your personal information.

    • Deleting Your Personal Information

      You may delete certain personal information by editing it within your Account. You may also request deletion of certain personal information we maintain about you, and we will use commercially reasonable efforts to honor your request, but please note that we may be legally or otherwise required or permitted to retain such information and not delete it for a certain time, in which case we will make reasonable efforts to comply with your deletion request after we have fulfilled such requirements or completed such permitted uses. When we delete information, it will be deleted from the active database but may remain in our archives. We may also retain your information to detect and prevent fraud or other unlawful or harmful activity or otherwise based on our legal rights or obligations.

    • How to Submit Requests to Access, Delete, or Correct Personal Information

      To submit a request to access, delete, or correct your personal information, please visit DraftKings Privacy Center by clicking here. When submitting a request through DraftKings Privacy Center, please ensure you are logged into your Account. If you have additional questions or requests, please contact us at privacy@draftkings.com. Please note that we may be required to collect certain personal information for the purpose of verifying your identify before fulfilling your request. Please also note that we may deny or fulfill a request only in part based on our legal rights and obligations. With respect to deletion requests, as a regulated entity, we may be required to retain numerous categories of personal information for periods prescribed by law, which may often span several years. In the event we deny a request or part of a request, we will provide information about the reason for the denial. In the event you wish to close your Account, please email us at support@draftkings.com.

12. HOW WE RESPOND TO DO NOT TRACK SIGNALS

Various browsers, including Internet Explorer, Firefox and Safari, currently offer a "Do Not Track" or "DNT" option that relies on a technology known as a DNT header, which sends a signal to websites visited by the consumer about the user's browser DNT preference setting. Please note that, at this time, we do not honor "DNT" signals or other mechanisms that may allow you to opt out of the collection of information across networks of websites and online services as there is no standard for how online services should respond to such signals. As standards evolve, we may develop policies for responding to DNT signals that would be described in future versions of this privacy policy. For more information on DNT options, please visit www.allaboutdnt.org.

13. PROHIBITED USERS

As indicated in our terms of use, members, employees, operators, or consultants of, and other individuals affiliated with, a sports-governing body may be prohibited from participating in certain Games where such member, employee, operator, consultant or other affiliated individual is prohibited from participating in Games by such sports-governing body ("Prohibited Users"). For clarity, examples of sports-governing bodies include, but are not limited to, the National Football League, the National Basketball Association, Major League Baseball, and the National Hockey League. Subject to applicable law, we may report any suspected participation in the Services or in any Game by any Prohibited Users to the applicable sports-governing body. Subject to applicable law, we may also report any participation in the Services or in any Games suspected of involving illegal or harmful activity affecting the integrity of the sporting or other event, including, but not limited to, match fixing, fraud, or game manipulation, to one or more gaming integrity organizations (e.g., the International Tennis Integrity Agency) and/or the applicable sports-governing body.

14. MINORS

The Website, Applications and other Services are not directed towards minors (i.e. persons who have not reached the age of majority in the province or territory where they reside) ("Minors") and we do not knowingly collect or maintain personal information from Minors through the Website, Applications or other Services. Subject to applicable law, if we become aware that a Minor has provided us with personal information through the Website, Applications or other Services, we will delete the information from our files. If you are the parent or legal guardian of a Minor who you believe has provided personal information to DK through the Website, Applications or other Services, please contact our privacy team at privacy@draftkings.com and we will delete the Minor's personal information, unless we are legally required to retain it.

15. INTERNATIONAL INFORMATION HOSTING/DATA STORAGE

The Website, our Applications and other Services are intended for and directed solely to consumers in the Province of Ontario, Canada. The Website, our Applications and other Services are not intended to subject DK to the laws or jurisdiction of any state, province, country or territory other than those of the Province of Ontario. If you are located outside of the province of Ontario and are a visitor to our Website or have downloaded any of our Applications, please be aware that the use of our Website, Applications, Games and other Services is not available to you. However, as described in this privacy policy, even if you are not able to use our Services and Games due to your location, there may be some personal information that we may automatically collect through your visiting our Website or downloading our Applications.

The Website, Applications, and other Services are hosted, and your personal information will be stored and processed in the United States and other countries where we have facilities or in which we engage vendors. Please note that the United States and such other countries may have different data protection rules than those of your jurisdiction of residence. By using or visiting the Website, downloading or using the Applications or using our Games and other Services, you are transferring your personal information to the United States and other countries as described above and you consent to the transfer.

16. LODGING A COMPLAINT

  • If you wish to complain about an alleged breach of the privacy of your personal information, or if you wish to complain about any other aspect of how we handle your personal information, you may make a complaint to us. The complaint should be made in writing to us and addressed to the attention of our Data Privacy Officer. The details on how to contact our Data Privacy Officer are provided in Section 18 below.
  • We will promptly acknowledge receipt of your complaint and we will endeavor to deal with your complaint and to provide you with a response within a reasonable time period following our receipt of your complaint (generally within thirty (30) days of receipt). Where the complaint requires a more detailed investigation, it may take longer to resolve. If this is the case, then we will provide you with progress updates.
  • We reserve the right to verify your identity and to seek (where appropriate) further information from you in connection with your complaint. Where required by law, we will provide our determination on your complaint to you in writing via email.
  • Please note that, in accordance with Canadian privacy laws, your right to access information is not absolute. We may refuse your request as permitted by Canadian law, including in situations where the requested information is protected by solicitor/client privilege or where the requested information would reveal confidential commercial information.
  • If you are not satisfied with the outcome of your complaint, you may write to us seeking an internal review of our decision. Such internal review will be completed by an officer not previously involved in the investigation or resolution of your complaint. If you remain dissatisfied following the outcome of our internal review, you may escalate the complaint to iGO via email to igaming@igamingontario.ca.

17. CHANGES AND UPDATES TO THIS PRIVACY POLICY

This privacy policy may be revised periodically in our sole discretion, and any changes will be effective upon the revised privacy policy being posted to our Website or Applications. You are solely responsible for reviewing this privacy policy for any changes. In the event we make material changes to this privacy policy, as determined by us in our sole discretion, we will notify you and/or request accept our updated privacy policy.

You are solely responsible for updating your personal information to provide us with your most current email address. In the event the last email address you provided is not valid or for any reason is not capable of delivering notifications to you, then in the event we provide you notification via email, our dispatch of the email containing such notification will constitute effective notification of the changes made to the privacy policy. In the event you do not wish to permit changes in our use of your personal information, you must notify us that you wish to deactivate your Account. Your continued use of our Services following any changes to this privacy notice will indicate your acknowledgement of and consent to such changes, with the understanding that the updated privacy notice applies to all of your personal information, including the personal information collected before the changes went into effect.

HOW TO CONTACT US

Any inquiries or comments regarding your personal information and privacy rights, our data privacy practices, this privacy policy, or any reports regarding suspected or known security violations or harmful or unlawful activity, including, but not limited to, fraud on your Account should be directed to our Data Privacy Officer via email to privacy@draftkings.com.

Effective: April 21, 2026