Threat-detection providers may automatically collect visit and device identifiers
Providers such as ThreatMetrix support threat detection, authentication and fraud prevention. They may automatically collect visit and device information, including IP addresses and unique device identifiers, to monitor potential threats and bad actors. The notice links to a separate ThreatMetrix processing notice, whose additional terms are not supplied here.
Details not recorded for this card
Supporting quotations
We use certain service providers, such as ThreatMetrix, to provide threat detection, user authentication, and fraud prevention services. These service providers may automatically collect certain information about your visits to the Website and Applications, as well as the device you use to connect to our Services, in order to monitor for potential threats and bad actors. This information may include, among other things, your IP address and your device's unique identifiers.
Qualifications & exceptions
For threat monitoring, authentication and fraud prevention.
Security & Safeguards · Company practice
Service-use information may be shared with Sift and others to prevent abuse
DraftKings uses information collected in connection with service use to detect and prevent harmful, abusive, fraudulent or other malicious activity. It may share that information with vendors and service providers, including Sift, for that effort. Sift’s separately linked privacy notice is not supplied here.
Details not recorded for this card
Supporting quotations
We also use the personal information we collect in connection with your use of our Services to detect and prevent harmful, abusive, fraudulent, and other malicious activity. We may share this information with vendors and service providers including Sift Science, Inc. (d/b/a Sift) to assist us with this effort.
Qualifications & exceptions
For detection and prevention of harmful or malicious activity.
DraftKings promises reasonable safeguards but does not guarantee security
DraftKings uses reasonable administrative, technical and physical safeguards against unauthorized access, use, alteration, exfiltration or destruction. Payment card data is held by DraftKings or its processors and vendors in encrypted form. It makes good-faith security efforts but says no system is fully secure; outages, attacks, errors, failures and unauthorized use can compromise data.
Details not recorded for this card
Supporting quotations
We use reasonable administrative, technical, and physical procedures, practices, and safeguards designed to protect personal information we collect from unauthorized access, use, alteration, exfiltration, or destruction.
Payment card information that we collect from you will be held by us or our payment processors, service providers, and other vendorsin encrypted form.
Although we work hard to ensure the integrity and security of our systems, it must be recognized that no information system is 100% secure and, therefore, we cannot guarantee the security of such information.
Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of user information at any time.
Qualifications & exceptions
Safeguards are described as reasonable, not a security guarantee.
Devices must be securely erased or destroyed before disposal
DraftKings says consumer information will be securely erased from hard disks, tapes, solid-state memory and other devices before disposal; if that is impossible, the device will be destroyed.
Details not recorded for this card
Supporting quotations
Consumer information will be securely erased from hard disks, magnetic tapes, solid state memory, and other devices before we dispose of the device; and in the event this is not possible, the device will be destroyed.
Qualifications & exceptions
Before device disposal; destruction substitutes when secure erasure is impossible.
The notice recommends account confidentiality and specific password practices
DraftKings strongly suggests not sharing account information and recommends a unique, hard-to-guess password of at least ten characters with upper and lower case, numbers and symbols. It advises avoiding words, slang or personal information, keeping passwords confidential, not writing them down or storing them online unencrypted, and changing them every three months. These are the notice’s recommendations, not a claim that they are mandatory account conditions.
Details not recorded for this card
Supporting quotations
To protect your personal information while using our Website, Applications, and other Services, we strongly suggest that you do not share your Account information and that you adhere to the following password practices:
Use a strong password that is at least ten (10) alphanumeric characters long, and contains upper and lower-case characters, numbers, punctuation marks, and special characters such as !@#$;
Use a password that is not easily guessed and is not a word in any language, slang, or is based on personal information such as a family name;
Treat your password as confidential and do not disclose it to anyone else;
Do not write down your password;
Do not store your password online in unencrypted form;
Change your password every three (3) months; and
Choose a password that is unique, not one that you use for any other website or application.