DraftKings Predictions GLBA Privacy Notice

DraftKings · agreement dated August 4, 2026 · Official agreement

Read the agreement

7 of 70 cards in Security & Safeguards

Security & Safeguards · Company commitment

The GLBA notice describes safeguards against unauthorized access and use

GUS III LLC says it uses security measures that comply with federal law, including computer safeguards and secured files and buildings, to protect personal information against unauthorized access and use.

Details not recorded for this card

Supporting quotations

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

Cross-references

Security & Safeguards · Company practice

Threat-detection providers may automatically collect visit and device information

Providers such as ThreatMetrix supply threat detection, authentication and fraud prevention. They may automatically collect website/app visit and device information, including IP addresses and unique device identifiers, to monitor threats and bad actors. The linked ThreatMetrix processing notice is not supplied here.

Details not recorded for this card

Supporting quotations

We use certain service providers, such as ThreatMetrix, to provide threat detection, user authentication, and fraud prevention services. These service providers may automatically collect certain information about your visits to the Website and Applications, as well as the device you use to connect to our Services, in order to monitor for potential threats and bad actors. This information may include, among other things, your IP address and your device's unique identifiers.

Qualifications & exceptions

  • For threat detection, authentication and fraud prevention.

Security & Safeguards · Company practice

Sift and other providers may receive data to combat harmful activity

Predictions uses information from service use to detect and prevent harmful, abusive, fraudulent and other malicious activity, and may share it with vendors such as Sift Science for that effort. Sift’s linked service privacy notice is not supplied here.

Details not recorded for this card

Supporting quotations

We also use the personal information we collect in connection with your use of our Services to detect and prevent harmful, abusive, fraudulent, and other malicious activity. We may share this information with vendors and service providers including Sift Science, Inc. (d/b/a Sift) to assist us with this effort.

Qualifications & exceptions

  • For detecting and preventing the described harmful activity.
Also annotated in the same passage (1)

Security & Safeguards · Permission or license

Vendors may access your credit file solely to verify identity

Using the Services permits identity vendors to verify you with a credit bureau and access your credit file solely for identity verification. The notice says this will not affect your credit score. This is distinct from the GLBA table’s no-sharing statement for affiliates’ everyday-business creditworthiness information.

Details not recorded for this card

Supporting quotations

By using our Services, you also agree to permit such vendors to verify your identity with a credit bureau and access your credit file solely for the purpose of identity verification, which will not affect your credit score.
For our affiliates' everyday business purposes— information about your creditworthiness No We don't share

Qualifications & exceptions

  • Credit-file access is solely for identity verification and is stated not to affect your credit score.

Cross-references

Also annotated in the same passage (4)

Security & Safeguards · Company commitment

Reasonable safeguards are promised, but information security is not guaranteed

Predictions describes reasonable administrative, technical and physical safeguards against unauthorized access, use, alteration, exfiltration or destruction. It also says no information system is completely secure and does not guarantee security; outages, attacks, human error, failures, unauthorized use or other factors can compromise information.

Details not recorded for this card

Supporting quotations

We use reasonable administrative, technical, and physical procedures, practices, and safeguards designed to protect personal information we collect from unauthorized access, use, alteration, exfiltration, or destruction.
Although we work hard to ensure the integrity and security of our systems, it must be recognized that no information system is 100% secure and, therefore, we cannot guarantee the security of such information. Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of consumer information at any time.

Qualifications & exceptions

  • Safeguards are described as reasonable; security is not guaranteed.

Cross-references

Also annotated in the same passage (2)

Security & Safeguards · Company commitment

Devices are erased with reasonable efforts or destroyed before disposal

Predictions undertakes reasonable efforts to erase consumer information securely from disks, tapes, solid-state memory and other devices before disposal. If secure erasure is not possible, it says the devices will be destroyed.

Details not recorded for this card

Supporting quotations

We undertake reasonable efforts to securely erase consumer information from hard disks, magnetic tapes, solid state memory, and other devices before we dispose of them, and in the event this is not possible the devices will be destroyed.
Also annotated in the same passage (2)

Security & Safeguards · Procedure

The notice recommends private, strong, unique passwords and periodic changes

Predictions strongly suggests keeping Account information private and following its password practices: at least ten characters with mixed case, numbers, punctuation and special characters; avoid guessable words, slang and personal information; keep passwords confidential; do not write them down or store them online unencrypted; change them every three months; and do not reuse them on other sites or apps. These are the notice’s recommendations, not a statement of a mandatory password rule.

Details not recorded for this card

Supporting quotations

To protect your personal information while accessing or using our Services, we strongly suggest that you do not share your Account information and that you adhere to the following password practices:
Use a strong password that is at least ten (10) alphanumeric characters long, and contains upper and lower-case characters, numbers, punctuation marks, and special characters such as !@#$;
Use a password that is not easily guessed and is not a word in any language, slang, or is based on personal information such as a family name;
Treat your password as confidential and do not disclose it to anyone else;
Do not write down your password;
Do not store your password online in unencrypted form;
Change your password every three (3) months; and
Choose a password that is unique, not one that you use for any other website or application.