FanDuel Prediction Markets LLC Privacy Notice

Effective: December 22, 2025

Overview

FanDuel Prediction Markets LLC, the operator of the FanDuel Predicts platform, and each of its affiliates (collectively "FanDuel Predicts," "we," "us," "our") respect your privacy and are committed to protecting the personal data we hold about you.

By using FanDuel Predicts, you understand and acknowledge that you are using FanDuel Predicts to intentionally interact with and disclose personal data to CME Group Inc. and FanDuel Group Inc., who have formed FanDuel Predictions LLC as a joint venture.

This Privacy Notice explains our practices with respect to the personal data we collect and process about you. This includes information we collect through, or in association with, our websites, our mobile applications that we may provide, our products and services that we may offer from time to time via our website and/or related apps, social media sites, or otherwise through your interactions with us (collectively, the "Services"). This Privacy Notice applies to users of our Services.

If you have questions, comments, or concerns about this Privacy Notice or our processing of personal data, please see Section 9 of this Privacy Notice for information about how to contact us.

Please review the following to understand how we process personal data about you. By using any of our Services, whether by visiting our website or otherwise, and/or by voluntarily providing personal data to us, you acknowledge that you have read and understand the practices contained in this Privacy Notice. This Privacy Notice may be revised from time to time, so please ensure that you check this Privacy Notice periodically to remain fully informed.

Personal Data We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device or household ("personal data").

Categories of Personal Data We Collect

The types of personal data we collect about you depends on your interactions with us and your use of the Services. We generally collect the below categories of personal data from our customers:

Identifiers. Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, email address, account name, date of birth, or other similar identifiers.

Commercial Information. Records of transactions, deposit and withdrawal information, or other purchasing history.

Internet or other Electronic Network Activity Information. Browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement.

Geolocation Data. Device Identifier (UDID/unique identifier), device functionality (browser type, operating system, hardware, mobile network information), device location, time of day, and referrer data.

Professional or Employment-Related Information. Your job role and title, income, net worth, job function, business contact information, and details of the organization you work for.

Audio, Electronic, Visual, Thermal, Olfactory, or Similar information. Footage from CCTV systems at our locations.

Inferences. Inferences drawn from any of the information above to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive Personal Data or Special Categories of Data. Government issued identification (such as social security number, passport, or driver's license), precise geolocation, and criminal convictions.

How We Use Your Personal Data

We collect and process your personal data for the following business and commercial purposes:

  • Opening, maintaining, or servicing accounts, providing customer service, processing, or fulfilling orders and transactions, verifying customer information, tracking transactions, and maintaining account security.
  • Performing anti-money laundering ("AML") and know-your-client ("KYC") compliance checks.
  • Marketing our products and services to you, including sending you messages about the products and services we offer, which may include contests, rewards, events, and special offers for products and services.
  • Communicating with you by email, newsletters, text message (SMS, MMS), telephone, push notification, and other methods of communication, about products, services, order status, and information tailored to your requests or inquiries.
  • Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
  • Detecting security incidents, preventing, and protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
  • Debugging to identify and repair errors that impair existing intended functionality.
  • Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction.
  • Undertaking activities to verify or maintain the quality or safety of the services or devices owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the services or devices owned, manufactured, manufactured for, or controlled by us.
  • Complying with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, or for other purposes, as permitted or required by law.
  • Enforcing our and applicable Customer Agreements.
  • As necessary or appropriate to protect the rights, property, and safety of our users, us, and other third parties.

How We Obtain Your Personal Data

We collect your personal data from the following categories of sources:

Directly from you. When you provide it to us directly, such as when you create an account, verify your identity, communicate with us by phone or email, participate in promotions, or engage with customer support.

Automatically or indirectly from you. For example, through logging and analytics tools, cookies, pixel tags, and as a result of your use of and access to the Services, or through your interactions with us on social media websites.

From Service Providers. We receive information from vendors and contractors who perform services on our behalf, such as payment processing, background checks, identity verification services, anti-fraud services and other service providers.

We may also obtain information from publicly available government or non-government data sources and other entities such as former employers or reference providers. We use this information to supplement data we collect directly to verify identity, perform compliance checks, and support legitimate business operations.

How We Disclose Your Personal Data

We may disclose each category of your personal data that we collect to each of the following categories of third parties:

  • Our affiliates.
  • Credit reference agencies.
  • Service providers such as our IT Suppliers, professional advisors, and third-party payment providers.
  • Third parties such as data analytics providers.
  • Third parties that you may have a relationship with, such as your former employer or references that you have provided.
  • Prospective and current business partners.
  • Government agencies or regulators when permitted or required to do so by law; in response to a subpoena or request from a law enforcement agency or authority or any regulatory authority; and/or to protect the integrity of the Services or our interests, rights, property, or safety, and/or that of our users and others.

Such potential disclosures include disclosing personal data and device identifiers to designated contract market regulators, sports leagues, associations, governing bodies, sports teams, colleges or oversight agencies or boards (or their designated vendors) in relation to the enforcement of our and their rules governing designated contract markets, including in connection with identifying or overseeing athletes, employees, personnel, or members. We may also use IP address or other device identifiers to identify individuals, either acting alone or in cooperation with third parties such as copyright owners, internet service providers, wireless service providers and/or law enforcement agencies. Such identifying information may be disclosed pursuant to this Section.

Your Rights Regarding Personal Data

You may have certain rights regarding the collection and processing of personal data. You may exercise these rights, to the extent they apply to you, by contacting us at the email address provided at the end of this Privacy Notice, or by following instructions provided in this Privacy Notice or in communications sent to you.

Your rights vary depending on the laws that apply to you, but may include:

Your California Privacy Rights

This Section provides California residents with additional information regarding our collection, use, disclosure, and retention of their personal data, as well as the rights that California residents may have under applicable law.

We use your personal information for a number of "business purposes" as defined in the California Consumer Privacy Act of 2018, Cal. Civ. Code § 1798.100 et seq. and its implementing regulations (the "CCPA"), as modified by the California Privacy Rights Act (the "CPRA"). These "business purposes" are listed in Section 2.b of this Privacy Notice.

Contact us by email at fanduelpredictsprivacy@cmegroup.com

In order to protect your privacy and security, we must verify your identity prior to completing any request that you may submit with respect to your personal data. We will verify your identity by asking you to provide certain information that we have already collected from you to confirm that it matches our records.

While we will make reasonable efforts to accommodate your request, we also reserve the right to impose certain restrictions and requirements on such requests, if allowed or required by applicable law.

You may designate an authorized agent to make a request on your behalf pursuant to this Privacy Notice or applicable law. Prior to completing a request made by such an authorized agent, we require that you provide your authorized agent with written permission to submit such a request and require that you or your authorized agent provide us with a copy of such written permission. Additionally, we require that you verify your identity pursuant to the procedure described above.

Additionally, California's "Shine the Light" law permits our users who are California residents to request and obtain from us a list of what personal data (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge.

We do not sell personal data in exchange for monetary compensation or other valuable consideration and have not sold any personal information in the past twelve (12) months. We do not share personal data for cross-contextual behavioral advertising purposes and have not done so in the past twelve (12) months.

Your Nevada Privacy Rights

Nevada law permits our users who are Nevada consumers to request that their personal data not be sold (as defined under applicable Nevada law), even if their personal data is not currently being sold. However, we do not sell your data. Requests may be sent to the email address in Section 9 of this Notice.

Your Choices

You have choices about certain information we collect about you, how we communicate with you, and how we process certain personal data. When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services. In addition, it is possible to change your browser settings to block the automatic collection of certain information.

Email Communications Opt-Out. You may opt out of receiving marketing or other communications from us at any time through a given communications channel by following the opt-out link or other unsubscribe instructions provided in any email message received.

Note that if you do business with us, you may not, subject to applicable law, opt out of certain automated notifications, such as order confirmations.

Location Information. The Services require access to your device's location to confirm that you are accessing them from within the United States. If you deny or disable location access, you will not be able to use the Services.

Cookies, Web Tracking, and Advertising. We use technologies including cookies, pixel tags, web beacons and other tracking technologies, to personalize and enhance your experience in regard to our Services, to collect data about your visit to our Services, to help diagnose problems with our servers, to administer the Services, to evaluate the effectiveness of our marketing and advertising campaigns, to permit analytics providers to gather information about your visit to the Services, and to gather broad demographic information about our users. A "cookie" is a text file that websites send to a visitor's computer or other Internet-connected device to uniquely identify the visitor's browser or to store information or settings in the browser. A "web beacon," also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies and may be used to transmit information collected through cookies back to a web server. The information we collect by automated means may include, without limitation, your IP address, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken on our site, and dates and times of website visits. Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all of the features of our Site.

Protecting Personal Data

We use commercially reasonable and appropriate physical, technical, and organizational safeguards designed to promote the security of our systems and protect the confidentiality, integrity, availability, and resilience of personal data. Moreover, we are not responsible for the security of information that you transmit to us over networks that we do not control, including Internet and wireless networks.

Retention of Personal Data

We retain personal data for a period we deem necessary to carry out the processing activities described above, including but not limited to compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and to the extent we reasonably deem necessary to protect our and our partners' rights, property, or safety, and the rights, property, and safety of our users and other third parties.

The retention period for your personal data is determined based on the purpose of processing the particular data.

Other Important Information About Personal Data and the Services

Collection of Personal Data from Children. The Services are geared toward a general audience, not directed to children under 13 years of age and we do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under the age of 13, we will promptly delete the information, unless we are legally obligated to retain such information. If you believe a child under the age of 13 may have provided us with personal information, please contact us as specified in the "How to Contact Us" section of this Privacy Notice.

Third-Party Websites and Services. As a convenience, we may reference or provide links to third-party websites and services, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Notice does not apply to any third-party services; please refer to the Privacy Notices or policies for such third-party services for information about how they collect, use, and process personal data.

Business Transfer. We may, in the future, sell or otherwise transfer some or all of our business, operations or assets to a third party, whether by merger, acquisition or otherwise. Personal data we obtain from or about you via the Services may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

Do Not Track. We do not currently process or comply with any web browser's "do not track" signal or similar mechanisms.

International Use. This section applies to individuals located in the EEA and the UK. Your personal data may be transferred to, stored, and processed in any country in which we operate, including Singapore, Ireland, the UK, Scotland, and India.

These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries, we will comply with applicable legal requirements providing adequate protection for the transfer of personal data to recipients in countries other than the one in which you provided the data.

Modifications and Updates to this Privacy Notice

This Privacy Notice replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Notice to reflect any changes to our information practices or to comply with applicable laws or regulations, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Notice. Your continued use of the Services following our posting of any revised Privacy Notice will constitute your acknowledgement of the amended Privacy Notice.

We will indicate at the top of the Privacy Notice when it was most recently updated.

How To Contact Us

If you have any questions or concerns about this Privacy Notice and/or how we process personal data, please contact us at:

ATTN:
300 Vesey Street – 7th Floor
New York, NY 10282

fanduelpredictsprivacy@cmegroup.com

For more information about how users with disabilities can access this Privacy Notice in an alternative format, please contact us.