Cookies and similar technologies

Who this policy is from

This site, casinodraftkings.com, is operated by Crown DK CAN Ltd, registered with the Alcohol and Gaming Commission of Ontario (AGCO) under Internet Gaming Operator Registration No. OPIG1238029. We are responsible for the cookies and similar technologies described here.

Our Privacy Officer is the contact for anything on this page and can be reached at privacy@casinodraftkings.com.

What a cookie is

A cookie is a small file a site asks your browser to store and send back on later visits. We also use closely related technologies, and everything on this page applies to all of them equally:

localStorage and sessionStorage

Small values stored by your browser rather than sent with every request. We use them for your age answer, your cookie choice and display preferences. sessionStorage is discarded when the tab closes.

Pixels and tracking beacons

A tiny image or script embedded in a page or an email that records that the page was opened or the message was read. We use them only in the analytics and advertising categories, and only after you consent.

Device and browser fingerprinting

Building an identifier from characteristics your browser reveals — device type, operating system, screen size, time zone, language, installed fonts. We use fingerprinting signals for security and regulatory purposes only: detecting duplicate accounts, account takeover, bots, and attempts to disguise a location. We do not use fingerprinting for advertising or for building a marketing profile of you, and it cannot be disabled while you are using the real-money area, because it is part of how the account is kept safe and the market is kept honest.

Server logs

Request records containing your IP address, timestamp and user agent, kept for security and fraud prevention.

On your first visit we show a banner with three choices: Accept All, Reject Non-Essential and Manage Preferences. Nothing outside the essential category runs until you have made a choice.

Legal basis and consent

Personal information collected through cookies and similar technologies is handled in accordance with PIPEDA, the Personal Information Protection and Electronic Documents Act, while electronic marketing communications and related consent mechanisms are managed in accordance with CASL, Canada's Anti-Spam Legislation.

In practice that means express consent is obtained before any functional, analytics or advertising technology runs, through the banner described above; consent is never bundled, never pre-ticked, and refusing costs you nothing but convenience. Essential and geolocation technologies operate without consent because the site and its regulatory obligations cannot function without them, and we tell you about them here instead. CASL consent for marketing messages is separate from the choices on this page, is recorded with its date and source, and every message we send carries our identity and a working unsubscribe. You can withdraw either consent at any time, and withdrawal takes effect going forward.

How the information itself is used, retained and protected is set out in our Privacy Policy.

Essential cookies

Required for the site to work. These do not need consent, because without them there is no site to consent to.

casino_sid

Your session. Keeps you signed in and ties your requests together. Session cookie; also expires after a period of inactivity.

CSRF token

Held inside the session. Proves a form submission came from a page we served, which is what stops another site submitting requests as you.

cdk.age.v1

Your answer to the age and location question, stored on your device so we do not ask on every page.

cdk.consent.v1

Your cookie choice. Slightly paradoxical, but we have to remember that you declined in order to keep declining.

Geolocation technologies

Ontario's regulated market is open only to players who are physically in the province at the moment they play. The AGCO requires us to confirm that, so location technologies are their own category: they are mandatory rather than optional, and they are not part of the analytics or advertising categories.

Browser location check

Before real-money play we ask your browser for a location fix, and your browser asks you to allow it. The coordinates and their accuracy are sent to our server, tested against the Ontario boundary, and the answer is kept as a pass or fail with a timestamp. Declining the browser prompt is your right, but real-money play cannot be enabled without a successful check.

Result cookie

The outcome of a passed check is held against your session so you are not asked again on every page. It expires, and a new check is required once it does.

IP address and network signals

Used alongside the location fix to detect VPNs, proxies, remote desktop tools and other attempts to disguise where you are.

Your answer to the 19+ and Ontario question is stored separately on your device as cdk.age.v1, listed under Essential cookies above.

Location data is used to decide whether play is permitted, to meet our regulatory record-keeping obligations, and for fraud prevention. It is not used for advertising, and it is not sold. Retention is covered in the Privacy Policy.

Functional cookies

Remember preferences that make the site more convenient: your selected game filter, notices you have dismissed, display choices. Declining them costs you convenience, not access.

Analytics cookies

Aggregate measurement: which pages are visited, how people move through the site, where something breaks. We use this to fix and improve pages. Analytics data is reported in aggregate and is not used to make decisions about you individually.

Advertising cookies

Measure marketing campaigns and limit how often you see the same message. These are set only with your explicit consent, and consent can be withdrawn at any time.

We do not target advertising at people who have self-excluded, and self-exclusion removes you from marketing regardless of the cookie choices on this page.

Third-party technologies

Where a third party sets a cookie through this site — an analytics or advertising provider, or an embedded payment page — it does so under our instructions and only within the category you consented to. Fonts on this site are served from our own domain rather than a font network, so no third party is contacted merely to render a page.

Transfers outside Canada

Some of the providers behind the technologies described here operate outside Canada, which means information collected by a cookie, pixel or similar technology — typically an IP address, a device identifier and a record of pages viewed — may be stored or processed in another country, most often the United States or the European Union.

While information is in another country it is subject to that country's laws, including lawful access by its courts, law enforcement and national security authorities, and those laws may differ from Canada's. We remain accountable for it under PIPEDA regardless of where it is held: we choose providers that offer a comparable level of protection, bind them contractually to use the information only on our instructions, and limit what leaves the country to what the provider actually needs. Declining the analytics and advertising categories prevents those transfers from happening in the first place; essential and geolocation processing is carried out on our own infrastructure.

How long they last

Managing your consent

You can change your mind at any time, and there is no penalty for declining.

Loading your current choice.

Change cookie preferences

Browser controls

Your browser can block or delete cookies independently of the choices above, usually under Settings → Privacy. Blocking essential cookies will sign you out and prevent the site from working. If you use a shared computer, clearing site data also clears your age answer and your consent choice.

Changes to this policy

We may update this Cookie Policy from time to time — when we add or remove a technology, change a provider, or when the law changes. Material changes will be communicated through the website or other appropriate means, and where a change affects what you have consented to, we will ask for your consent again rather than assume it carries over. The effective date at the top of this page always shows the current version, and continuing to use the site after a change takes effect means the updated policy applies to you.

Contact and complaints

Questions about this policy, or a request about the information collected through these technologies, go to our Privacy Officer at privacy@casinodraftkings.com. For anything else — your account, a payment, a complaint about play — contact customer support at support@casinodraftkings.com.

Crown DK CAN Ltd, 222 Berkeley Street, Boston, MA 02116, United States.

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada (OPC), which oversees compliance with PIPEDA: priv.gc.ca, 1-800-282-1376. Complaining to the OPC costs you nothing and does not affect your other rights.