Last Updated: 6/4/2026

Purpose

This Privacy Policy (“Policy”) sets out how FanDuel, Inc. and its affiliates (collectively, “FanDuel,” “we,” “us,” or “our”) collect, use, store, disclose or otherwise process personal information (meaning information related to you that can be used to reasonably identify you) about individuals who apply for open positions at FanDuel.

This Policy does not cover our handling of your information in your role as a user of FanDuel’s products and services. If you interact with us in that role, you are covered by our website Privacy Policy, including the relevant privacy notices linked therein for FanDuel’s Sportsbook, Fantasy, Racebook, and Casino services. This Policy also does not cover your interactions with any third-party websites and/or apps that you may use, including those to which we link in our websites. Such third-party offerings are covered by the relevant third party’s policies and terms. You should review the terms and policies for third-party websites and apps before interacting with them.

Please read this Policy to understand how we handle your personal information and the rights you may have regarding your personal information. This Policy contains the following sections:

1. Collection of Personal Information
2. Use of Personal Information
3. Disclosure of Personal Information
4. Retention and Security
5. Your Personal Information Rights
6. International Transfers of Personal Information
7. Changes to This Privacy Policy
8. How to Contact Us

EEO Statement

FanDuel is an equal employment opportunity (EEO) employer.  For more information about FanDuel’s EEO policy, click here.

1.    Collection of Personal Information

We may collect personal information either from you or from other sources. We collect information that you provide to us in any way and medium, including but not limited to information you provide in your job application, through our website or portal, or when you fill out an email survey, communicate with us in any way (including via phone or email), or attend a conference or event that we are running or in which we are participating. We may also collect information about you from other sources, where applicable, such as our affiliates and vendors, employment agencies or consultancies, recruitment or professional networking websites or companies, background check providers, social media and public records, data providers, regulatory agencies, or your professional references.

The type of information we have or will have about you depends on your role with us. We may collect all or some of the following information:

• Identifiers and contact information, such as your name or alias, date of birth, employer identification number, email address, mailing address, phone number, online account and/or social media name, signature, and other similar information.
• Educational information, such as institutions attended, academic record, degrees, qualifications, certifications, and skills, including licenses and professional memberships.
• Professional or employment-related information, such as application forms and information included in a resume, cover letter, references, or otherwise provided through any application and recruitment process, including your position, business contact information, and employment history; work eligibility status; our evaluations of your performance during the interview process; references; and, in accordance with applicable law, background screening information (including, where applicable, criminal records).
• Location information, for example, gathering the IP address from which an applicant logs into our application system may indicate rough geographic region of where the applicant logs in.
• Audio or visual information, such as CCTV footage and other information relating to the security of our premises, and video content, audio recordings, and recordings of meetings or interviews.
• Internet, electronic network, and device activity and device information and related identifiers, such as information about your use of our network, information, devices, and communication systems, including IP addresses, device and user IDs, device type and attributes, operating system, connection logs, and information about how you interact with our systems and website.
• Other information that directly or indirectly identifies you, such as any information you provide during interviews or include in communications with us, information we obtain from regulators (as applicable to your role and which may include records relating to responsible gaming), survey responses, and your interactions with our social media content, including by posting on our social media pages, tagging us in posts, or reacting to our content.

Sensitive Personal Information:

Certain information we collect may be considered “sensitive” under applicable law. We collect and process such information only for our legitimate business purposes and do not process such information for purposes for which the “right to limit” applies under California law. We use the following information that may be considered “sensitive” as legally necessary, in the following ways:

• Sensitive demographic information collected on a purely voluntary basis except where permitted by law, such as your gender, military service, race, ethnicity, national origin, and disability information and used only in compliance with applicable laws and regulations, for diversity and inclusion reporting and related purposes. Certain of this information may be subject to additional legal protections.
• Sensitive identifiers, such as your Social Security number, or other government identification numbers, as necessary for background checks, identity verification, and determining work eligibility.

Please note that we may collect or monitor any information, including communications, transmitted via our networks and systems using any device, such as any emails or text messages sent or received over our WiFi networks. You acknowledge that you have no expectation of privacy in your use of our network or systems, or your use of platforms or services administered or owned by us.

Combining Personal Information from Different Sources. We may combine the personal information we receive from various sources with personal information we collect from you and use it as described in this Policy.

2.    Use of Personal Information

We may use your personal information for our legitimate business purposes, including for:

• Recruiting activities, such as advertising our open roles, interviewing, and selecting hiring new personnel, and communicating with you (including by email, phone, and/or direct mail, as applicable).
• HR management and administration purposes, such as scheduling, providing references, and preparing analyses and reports.
• Business purposes, such as participating in due diligence activities related to our business and conducting internal analyses and audits.
• Security purposes, such as detecting security incidents, debugging and repairing errors, preventing unauthorized access to our networks, information, and other property and assets, monitoring our premises (including through use of CCTV), and otherwise securing and safeguarding our company, premises, services, property, and personnel.
• Compliance with legal obligations, such as health and safety, anti-discrimination, and immigration requirements.
• Protecting the rights, safety, and property of us, our employees, and others.
• Exercising our legal rights, including seeking legal advice from our external lawyers or in connection with litigation.
• Researching, analyzing, improving, and upgrading certain aspects of our business and services.

We may also use personal information for any other legally permitted purpose, with your consent where legally required.

Aggregate and De-Identified Information. We may aggregate or de-identify personal information such that it no longer reasonably identifies you (“Deidentified Information”).  We maintain Deidentified Information in a deidentified form and do not attempt to reidentify it, except we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes ensure that the information cannot be associated with the individual. We may use and disclose such information for any purpose and in any way in our discretion.

Legal Basis for Processing Personal Information. If applicable law requires a legal basis for processing, our legal basis for processing the personal information described in this Policy depends on the type of personal information concerned and the specific context in which we process it.

Our legal bases for processing personal information as described above are (1) steps to enter into an employment contract; (2) where the processing is in our or another party’s legitimate interests (e.g., monitoring compliance with internal policies, managing IT security, accounting or business and financial planning); (3) to comply with a legal obligation (e.g., to comply with laws and regulations related to minimum wage, working time, tax, health and safety or anti-discrimination); (4) to protect your vital interests or those of another person; or (5) in some cases, to the extent permitted by law, where you have consented to the processing. Depending on the jurisdiction in which you live, there may be other applicable legal bases that are not listed here.

3.    Disclosure of Personal Information

Subject to applicable law, we may disclose personal information to the following types of entities and in the following circumstances:

• Internally and to Affiliates. We may disclose personal information within FanDuel (e.g., to your interviewers and human resources personnel) and to our corporate affiliates (e.g., Flutter Group, our subsidiaries).
• Vendors. We may disclose personal information to vendors that provide us with services, such as providers of employment, background check, analytics, shipping and fulfillment, data storage and web hosting, security, and IT services, and professional advisors, such as legal advisors and consultants.
• Recruiters. To the extent you are working with a recruiter in connection with your application for employment and your recruiter is authorized by you to obtain feedback from us regarding your application and interview process.
• Legal Compliance and Exercising Legal Rights. We may disclose personal information when required by law or regulation (including as necessary to comply with certain employee licensing obligations), in response to a request for assistance by the police or other law enforcement agency, in response to legal process (e.g., a court order, subpoena, government audit, or search warrant), to seek legal advice from our external lawyers or in connection with litigation with you or a third party, to enforce our legal rights (including to enforce our agreements), and as otherwise necessary to exercise our legal rights or protect the rights or safety of us, our employees, or others.
• Corporate Transactions. We may disclose or transfer personal information to relevant third parties in the event of, or as part of due diligence in anticipation of, any proposed or actual reorganization, sale, merger, consolidation, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding).
• Consent. We may disclose your personal information in any other way permitted by law if you direct us to do so or have given consent.

4.    Retention and Security

We retain your personal information for as long as we determine it is necessary to fulfill the purposes for which it is processed and our legal obligations. The length of time for which we retain personal information depends on the purposes for which we collected and use it and any applicable legal requirements. We determine retention periods by evaluating our legal obligations and legitimate business interests (such as backing up systems or maintaining our organizational history).

We use a variety of technical, physical, and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction of information. Please keep in mind that no security measures are perfect or impenetrable.

5. Your Personal Information Rights

Depending on the jurisdiction where you live, you may have certain rights related to your personal information, such as the right to request:

• Access to the personal information we process about you, including the categories of personal information we have or will collect about you and why we are processing it.
• Correction of certain personal information we hold about you that is inaccurate, incomplete, or outdated.
• Deletion of certain personal information we hold about you.
• To object to certain processing of your personal information.
• To restrict certain processing activities, such as when you dispute the accuracy of personal information.
• In some jurisdictions, where technically feasible, transfer your personal information to a third party or have the information provided to you in a structured, commonly used and machine-readable form.

Where we rely on your consent to process your personal information, you have the right to withdraw consent at any time, in accordance with applicable law. This will not affect the lawfulness of processing prior to the withdrawal of your consent. You have the right not to be discriminated against (as provided for in California law) for exercising your rights. You also have the right to lodge a complaint with your local data protection authority if you believe we have processed your personal information in violation of applicable data protection law.

Exceptions to Your Rights. There are certain exceptions to the above rights. For instance, we may retain your personal information if it is reasonably necessary for us or our service providers to administer our employment relationship with you, provide you with a service you requested, comply with law, detect security incidents, or to protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for that activity.

Exercising Your Rights. Subject to any exceptions, if you wish to exercise any of these rights, please visit this link: Privacy Request Form or contact us toll-free at +1 (855) 734-7720.  EU or UK applicants may contact us at [email protected] to exercise their rights under GDPR.  Depending on your request, we may require you to provide certain information for identity verification purposes. You may authorize an agent to make a request to us on your behalf by providing them with a written authorization or power of attorney, and we will verify the identity of your agent and their authority to submit the request on your behalf. We may also follow up with you to verify your agent’s identity or process your request. If we are unable to verify you, we have the right, but not the obligation, to request additional information.

California law places certain obligations on businesses that “sell” personal information to third parties or “share” personal information with third parties for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (“CCPA”). We do not “sell” or “share” the personal information covered by this Policy and have not done so in the twelve months prior to the effective date of this Policy.

We will not discriminate or retaliate against you for exercising your rights.

6. International Transfers of Personal Information

Subject to applicable law, we may transfer, process, and store your personal information outside of your jurisdiction of residence, including in the United States and other jurisdictions where we or our vendors are located. If we transfer, or allow our vendors to transfer, some of your personal information to jurisdictions not deemed to be “adequate” by the relevant authorities (such as jurisdictions that are deemed not to provide a level of protection to personal information that is equivalent to that of the EEA, UK, or Switzerland), we will transfer such personal information in compliance with applicable law and using a legally recognized transfer mechanism, including the European Commission’s Standard Contractual Clauses, and equivalent transfer mechanisms in the UK and Switzerland.

7.    Changes to This Privacy Policy

This Policy does not form part of any contract between us, including any employment contract we may enter into, and we may update it from time to time. We will post any changes to this Policy here and update the “Last updated” date above.

8.    How to Contact Us

If you have questions or complaints about our processing of your personal information or this Policy, you may contact us at [email protected] or mail us at FanDuel Inc., 1 Madison Avenue, 23^rd Floor, New York, NY 10010