FanDuel Prediction Markets

"Our Services use precise location-based services (e.g., location collected through GPS technology) in order to locate you so we may verify your location, process payments, perform analytics, deliver you relevant content and ads based on your location, share your location with our vendors as part of the location-based services we offer, and for purposes of legal and regulatory compliance. We also collect non-precise geolocation data (i.e., the city and state in which your device is located based on its IP address). Both precise and non-precise geolocation may be disclosed to third party entities pursuant to Section 4.10 below."

FanDuel collects precise GPS-level location data and non-precise IP-based geolocation, uses both for advertising and analytics, and discloses both to third parties.

"When you use our mobile apps, we also may collect mobile device information like operating system and hardware type, numbers or codes that are unique to your particular device (such as IDFA or an Android Ad ID), device information, default device language, the location of your device (at a GPS level), and app usage information. This data also may be linked to your other information, including your location data."

FanDuel collects device-unique advertising identifiers (IDFA, Android Ad ID), hardware information, app usage data, and links it all together with location data. They also collect contacts users "choose to submit" (Section 2.1.5).

"We may disclose the information we collect or receive from you to our subsidiaries, affiliated companies, agents, or other businesses, or service providers who process your information on our behalf in order to provide or operate the Service. In addition, we may disclose to third parties various types of your information for targeted online or mobile advertising, as further described in the Section titled "Third Party Advertising and Analytics.""

FanDuel shares user data broadly with subsidiaries, affiliates, service providers, advertising partners, gaming regulators, leagues, sports teams, and law enforcement, with few meaningful limits on the scope of sharing.

"Some of these partners may use mobile device identifiers, such as Apple IDFAs and Google/Android Advertising IDs. Doing this allows the ad companies to recognize your computer or device each time they send you an online or mobile advertisement. In this way, the ad companies may compile information about where you, or others who are using your computer or device, saw their advertisements and measure your interaction with each ad. Sometimes, these identifiers may be derived from a hashed or encrypted version of personal information such as your email address. We may use this information to measure the performance of our advertising as well. In addition, sometimes we or an advertising partner may tailor advertising to you across different devices."

FanDuel and its advertising partners track users across websites, apps, and devices using cookies, device identifiers, and hashed email addresses to build cross-device advertising profiles.

"We will retain personal information and the contents of our communications with you as long as necessary to fulfill these purposes unless the law requires us to keep it for a longer period of time. To provide security and business continuity for the activities described here, we make backups of certain data, which we may retain for longer than the original data."

FanDuel retains personal information indefinitely with no specific deletion timeline, and backups may be retained even longer than original data with no stated expiration.

"This Privacy Policy may be revised periodically and this will be reflected by the "Last update posted" date above. Please revisit this page to stay aware of any changes. If a revision to this Privacy Policy, in our sole discretion, is material, we will notify you by contacting you through the email address associated with your account."

FanDuel reserves sole discretion to determine whether changes are "material" enough to warrant notification, and otherwise expects users to periodically check for updates themselves.

"We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. If we are unable to verify your identity, we may be unable to respond to your requests. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you."

Deletion requests require identity verification that FanDuel controls, and the company reserves broad exemptions to deny deletion based on service necessity and legal obligations.