DRAFTKINGS CASINO PRIVACY POLICY

1. Regulatory Scope & Intent

This Privacy Policy applies to the real-money online gaming applications, desktop websites, and unified wallet accounts provided by DraftKings Casino (referred to herein as "DraftKings," "we," "us," or "our") accessible at en-draftkingscasino.org.

DraftKings operates under rigorous statutory oversight from legal American gambling authorities, including the New Jersey Division of Gaming Enforcement (NJDGE), Pennsylvania Gaming Control Board (PGCB), Michigan Gaming Control Board (MGCB), West Virginia Lottery Commission, Connecticut Department of Consumer Protection, and the Delaware/Rhode Island state lotteries. We are dedicated to ensuring that your private data is managed in strict alignment with state gaming standards, federal privacy statutes, and consumer protection frameworks.

2. Information We Collect

To deliver legal real-money wagering and prevent identity theft, we gather several classes of information:

• Personal Identification Information: Legal full name, date of birth, residential address, email address, phone number, and the last four digits of your Social Security Number (SSN) required for Know-Your-Customer (KYC) compliance.
• Financial & Banking Tokens: Bank routing/account numbers, debit card hashes, PayPal account identifiers, and transaction history. Full credit card numbers are tokenized by PCI-DSS compliant payment gateways and never stored in plain text on our servers.
• Technical Telemetry: IP addresses, browser specifications, operating system versions, device hardware fingerprints, and login timestamps.
• Gameplay & Wagering Records: Detailed logs of every slot spin, live dealer bet, Dynasty Crown accrual, payout velocity, and session duration as mandated by gaming record-keeping regulations.

3. Geolocation Data Mandates

Federal law and state gaming statutes strictly require that real-money casino wagers can only be accepted from individuals physically located inside authorized state borders.

When you launch the DraftKings Casino application or web client, our software utilizes Global Positioning System (GPS) signals, Wi-Fi network triangulations, and cellular tower coordinates to determine your precise physical location. This location validation is executed before your first wager and periodically throughout your active session. If you cross out of an authorized state border, real-money wagering is automatically suspended. Location data is retained solely for regulatory audit logging.

4. Purpose of Data Processing

We process your personal information exclusively for lawful, regulated objectives:

• Validating that you meet the statutory 21-year age minimum to participate in real-money iGaming.
• Executing deposits, bank payouts, and tax compliance documentation (such as generating IRS Form W-2G).
• Operating the Dynasty Rewards loyalty system, calculating Crown point redemptions, and delivering promotional site credits.
• Enforcing mandatory responsible gaming exclusions, voluntary cool-off periods, and deposit ceilings.

5. Information Sharing & Third Parties

DraftKings does not sell, rent, or trade your personal data to third-party data brokers for commercial advertising. We only disclose information to trusted partners in the following authorized capacities:

• Regulatory Bodies & Law Enforcement: Complying with subpoenas, statutory audits, state gaming commissions, and anti-money laundering (AML) reporting.
• Independent Testing Laboratories: Entities such as Gaming Laboratories International (GLI) during game validation audits.
• Licensed Banking Processors: Secured payment gateways (PayPal, Play+, Visa, Mastercard, ACH networks) for completing balance transactions.

6. 256-Bit SSL Data Security

All customer sessions, identity validation checks, and payment transmissions are secured with 256-bit SHA-2 cryptographic SSL encryption. Customer escrow funds are held in segregated, federally insured domestic banking institutions separate from operational capital.

We employ automated intrusion detection systems (IDS), continuous penetration testing by third-party cybersecurity engineers, and strict internal role-based access protocols to eliminate unauthorized access.

7. Your Consumer Privacy Rights

Depending on your state of residence (including under the California Consumer Privacy Act/CCPA, Colorado Privacy Act, and Virginia CDPA), you possess specific rights regarding your personal information:

• The right to request a complete copy of the personal data we maintain about you.
• The right to request the correction of inaccurate or outdated records.
• The right to opt-out of promotional marketing communications at any time.
• The right to request account deletion, subject to state gaming retention mandates that require financial records to be preserved for statutory audit periods.

8. Contact Data Protection Officer

If you have inquiries, access requests, or concerns regarding our privacy standards, please reach out to our dedicated compliance team:

Data Protection Officer

DraftKings Casino Legal & Compliance Division

Email: privacy@en-draftkingscasino.org