draftkingsPrivacy Policy

This page describes what we collect when you use draftkings and how we keep that data protected. We treat your personal information with care—account details, payment records, betting history, and device information all remain encrypted and subject to strict access controls. Our commitment is transparency: you will know what data we hold, why we hold it, and how it is used.

We at draftkings collect information necessary to run our platform and comply with regulatory obligations in supported jurisdictions. When you register, deposit, withdraw, or place a bet, we record transaction details. When you contact customer support, we log your inquiry. When you use our platform, we track technical data to improve performance and detect fraud. All of this data remains within our secure systems unless third-party processors need it to complete your request—for example, payment partners like DANA, e-wallet, mobile banking, local payment, online payment, e-wallet, mobile banking, local payment, online payment, or e-wallet receive only the information necessary to process your deposit or withdrawal.

Your privacy rights under applicable Indonesian law are respected. You may request access to your data, correction of inaccuracies, or deletion under specific circumstances. We provide these rights without charge and respond within 30 days. This policy applies to all users of draftkings, whether you access from Jakarta, Surabaya, Bandung, Medan, Semarang, or other supported regions.

What We Collect on draftkings

We collect data in three categories: identity data, transaction data, and technical data. Identity data includes your name, email address, phone number, date of birth, national ID number, and proof of residence—all required for account registration and verification. We ask for this information because Indonesian law requires identity verification before we permit gaming activity. Transaction data includes all deposits, withdrawals, bets, settlements, and bonus activity tied to your account. We retain this data for seven years to comply with Indonesian record-keeping requirements and to enable dispute resolution. Technical data includes your IP address, device type, browser version, login timestamps, and gameplay patterns. We use this to maintain platform security, prevent fraud, and optimize performance.

How We Use Your Data on draftkings

We use your data for five primary purposes. First, we fulfill your requests: processing deposits through your chosen payment method, settling bets, and processing withdrawals. Second, we comply with law: verifying your identity, reporting to regulatory bodies, and maintaining audit logs. Third, we maintain security: detecting fraud, preventing account takeover, and blocking suspected abuse. Fourth, we improve draftkings: analysing platform performance, fixing bugs, and testing new features. Fifth, we communicate with you: sending account notifications, answering support questions, and informing you of policy changes. We do not sell your data to marketing firms or data brokers. We do not share your betting history with sportsbooks you don't use. We do not use your information for purposes beyond those listed here without your explicit consent.

Third-Party Processors and Data Transfers

Our live-dealer studios broadcast from facilities outside Indonesia. Video and audio feeds travel across international networks. We encrypt this data in transit, and all studio staff are bound by confidentiality agreements. Payment processors—DANA, e-wallet, mobile banking, local payment, online payment, and your bank (e-wallet, mobile banking, local payment, online payment)—receive transaction data necessary to complete your request. Identity verification partners may access your ID and address documents to confirm validity. Fraud-detection services may analyse your gameplay patterns to flag suspicious activity. None of these partners may use your data for their own marketing or analytics without your separate consent.

Your Rights and Data Deletion

You have the right to access all data we hold about you. Submit a request via our customer support team (available 24/7 via live chat, email, or phone), and we will provide a complete extract of your personal information within 30 days. You have the right to correction: if your address, phone number, or other details are wrong, contact support and we will update them immediately. You have the right to deletion: if your account is closed and all bets are settled, we will delete your personal data after the retention period required by law (typically seven years). During this retention period, we keep your data for regulatory compliance and dispute resolution.

Cookies and Tracking

We use cookies to maintain your login session, remember your language preference, and track how you navigate draftkings. These cookies are stored on your device and sent back to us with each request. Session cookies expire when you log out; persistent cookies remain for up to one year. We do not use third-party tracking pixels or behavioural analytics cookies. If you disable cookies in your browser, you will not be able to log in to draftkings. We do not track you across other websites; our tracking is limited to our own platform.

Data Security and Encryption

We encrypt your data in transit using TLS 1.2 or higher. Passwords are salted and hashed; they are never stored in plaintext. Payment information is tokenised and never stored on our servers directly. Backups are encrypted and stored in secure data centres. We conduct regular security audits, penetration tests, and vulnerability assessments. We restrict access to your data to employees who need it to do their jobs. We monitor access logs and lock accounts after multiple failed login attempts. In the event of a data breach, we notify affected users within 24 hours and work with authorities as required by law.

We at draftkings prioritise your data security and privacy above operational convenience. Every technical decision we make includes a privacy impact assessment.

International Data Flows and Jurisdiction

Our platform operates in supported Indonesian jurisdictions. Your data is processed primarily in systems located in regions serving Southeast Asia. Some data processing—such as live-dealer studio operations and identity verification—may occur outside Indonesia. We ensure all international transfers comply with Indonesian data protection law. We do not transfer your data to countries with inadequate data protection unless you explicitly consent or it is necessary to fulfil your request (for example, processing your withdrawal via your bank).

Policy Changes and Contact

We may update this privacy policy periodically. Changes become effective 30 days after publication. We will notify all active account holders of material changes via email and on our platform. Continued use of draftkings after the effective date of updated terms means you accept the new policy. If you have questions about our privacy practices, contact our customer support. We are available via live chat, email, and phone in English and Bahasa Indonesia. Your privacy questions will be answered within 24 business hours.

Related guides

Your Privacy is Our Responsibility

We at draftkings do not view privacy as a legal checkbox—it is a core commitment to the account holders who trust us with their personal data. Every engineer, support agent, and manager on our team understands that privacy breaches damage trust and that trust takes years to rebuild. We invest in encryption, security testing, and staff training because we believe your data deserves the same level of care you expect when you withdraw cash from your bank.

Our privacy policy will evolve as technology and Indonesian law evolve. We remain transparent about these changes and give you time to review them before they take effect. If you have concerns about how we handle your data, we encourage you to contact us. Our privacy team is committed to addressing your questions and fixing any issues you raise. Your privacy matters. Our decisions prove it.