Last Updated: September 12, 2022 | What’s New?
Table of Contents
This privacy policy (the “Policy”) explains what data the NBA Family collects from you through our interactions with you and through our products, services, events and programs – including our websites, apps and digital platforms (each a “Service,” and collectively, the “Services”).
“The NBA Family” means the National Basketball Association (“NBA”), the Women’s National Basketball Association (“WNBA”), the NBA Gatorade League (“G-League”), the NBA 2K League, the Basketball Africa League, their respective teams, and each of their respective affiliates (also referred to as “we,” “our” or “us”).
By using any of the Services, you consent to the terms of this Policy.
When you interact with us through the Services, we may collect data from you or from other sources. This “data” may be information that you directly provide to us, such as personal information you provide when you visit the Services, or information that is passively or automatically collected from you, such as anonymous information collected from your browser or device. The categories of other sources from which we collect personal data include our affiliates, partners, vendors, data brokers and public sources.
The data we collect consists of personal identifiers, commercial information, Internet/other electronic network activity information, geolocation data, professional or employment-related information, characteristics of protected classifications, and inferences drawn from this information. More specifically, the data we collect includes:
We use the data we collect for the following purposes:
Operating our business. We use the data we collect to operate our business, including providing, tailoring, and improving the Services. Specifically:
Communicating with you. We use the data we collect to communicate with you, including responding to your requests or inquiries. Specifically:
Marketing and advertising. We use the data we collect for marketing or advertising purposes, on behalf of ourselves, as well as our partners and other parties who advertise on the Services. Specifically:
Security, compliance and enforcement. We use the data we collect for security, legal, regulatory, compliance and enforcement purposes. Specifically:
We may also use your data in any other manner as disclosed at the time of collection, or when we have otherwise obtained consent. Please also note that this Policy is not intended to place any limits on what we do with aggregated, pseudonymized or anonymized data. We may also merge, co-mingle, or otherwise combine data about you, including personal information, in furtherance of the uses above.
There are times when the data we collect may be shared by the NBA Family. We share your data for the following purposes:
Providing the Services. We sometimes engage or partner with other companies to operate the Services or perform certain functions on our behalf – for example, maintaining and enhancing our fan databases, delivering messages and advertising, operating our websites and digital platforms. We may provide these companies with access to your data as needed for them to perform these functions in a manner consistent with this Policy. For more information about who these companies are, and how they use your data, please see the “Third Party Sites and Sections” section of this Policy below.
With Partners and Third Parties. We may share your information with certain business partners so that they can provide you with special offers, promotional and other materials that may be of interest to you. We share personal data with partners and third parties as part of marketing and advertising on and off of the Services. We may use third-parties to serve advertisements on the Services. These third parties may set their own cookies or similar web technologies to collect information about users’ online activities over time and across websites. For more information about how these third parties use your data and how you can manage these technologies, please see the “Cookies and Similar Technologies” section of this Policy below.
Among the NBA Family. We share personal data among the companies within the NBA Family to provide and improve the Services, to build predictive models to better understand our fans, to send promotional messages and advertisements about products and services that may be of interest to you, and for other purposes consistent with this Policy.
As part of a change in business structure. In the event of a sale, merger, acquisition, reorganization or similar event, or in contemplation of such an event (e.g., due diligence), your data may be among the transferred assets.
When necessary under certain circumstances. We may disclose your personal data when we believe that disclosure is necessary to:
We may also share your data for any other purpose as disclosed at the time of collection, or when we have otherwise obtained consent. Please note that this Policy is not intended to limit our ability to share or disclose aggregated, pseudonymized or anonymized data.
You have many choices about how we collect, use and share your data.
Communications choices. You can choose whether you wish to receive promotional messages from the NBA Family and which types of messages you wish to receive. If you receive promotional messages from us and would like to opt out, you may do so by following instructions within those messages. You may also adjust your communications preferences by logging into your NBA account and viewing your preferences. Please note that these preferences do not apply to informational or transactional communications regarding the Services or other communications that have their own unsubscribe method.
Advertising choices. You can opt out of interest-based advertising as described in this section and in the “Cookies and Similar Technologies” section of this Policy. When you opt out, your selection is stored on a cookie on your device. If you delete the cookie from that device or sign in from a different device, you will need to opt out again.
Because the data used for interest-based advertising is also used for other necessary purposes (including providing the Services and for authentication and security purposes), opting out of interest-based advertising does not stop the data from being collected nor reduce the number of advertisements you will see. However, the data will not be used for interest-based advertising, which means the advertisements you do see may be less relevant to you.
When using a mobile application, you may receive interest-based in-application advertisements. Depending on your device, you may be able to reset your mobile device’s advertising identifier at any time by accessing the privacy settings on your device. In addition, each operating system (e.g., iOS for Apple devices, Android for Android devices and Windows for Microsoft devices) provides its own instructions on how to prevent the delivery of interest-based in-application advertisements. You may review the support materials and/or the privacy settings for the respective operating system in order to opt-out of interest-based in-application advertisements. For any other devices and/or operating systems, please visit the privacy settings for the applicable device or contact (or review the applicable privacy web page of) the applicable platform operator.
Other choices. You also have choices about the data you provide directly to us when you register for or use the Services. Please note, however, that if you choose not to provide data that is necessary to provide certain features of the Services, your use of the Services may not include those features.
You can access, edit or remove information in your user account by visiting https://secure.nba.com/membership/user/login/. If you cannot access your account, or if you would like to request that we delete other personal data referenced in this Policy, you may visit us at http://privacy.nba.com or contact us using any of the methods described in the “How to Contact Us” section of this Policy.
You can choose not to share certain location data by adjusting the settings on your device. Please note, however, that if you choose not to share this data, you may not be able to access or use location-based Services.
You can choose to limit the data that third party services (e.g., social media platforms) share with us using the options provided to you by the applicable third party service (for example, the options provided by a third party social media platform when you connect your social media account with the Services). You can also disconnect your use of the Services from the third party service at any time using the options provided to you by the applicable third party service. Please note, however, that if you disconnect from the third party service, that will not delete the data we may have previously collected while you were connected.
We use cookies and similar technologies (collectively, “Tracking Technologies”) to provide the Services and to collect data. In addition, third parties may also use Tracking Technologies when you use the Services; for example, if we engaged a third party to operate the Services, or because the Services contain content or advertisements delivered by third parties. These Tracking Technologies consist of:
We use Tracking Technologies for the following purposes:
In some cases, we may work with third parties (for example, third party operators of the Services) to synchronize our unique, anonymous identifiers (such as those associated with Tracking Technologies) with the third party’s own identifiers. This enables us to better achieve each of the purposes described above.
Managing Tracking Technologies. Most web browsers give you the ability to manage Tracking Technologies used on a website, including blocking or deleting them. Please note that if you choose to block Tracking Technologies, you may not be able to use certain features that depend on those Tracking Technologies (such as keeping you signed in or remembering your preferences). If you choose to delete Tracking Technologies, any settings and preferences that were associated with those Tracking Technologies will also be deleted and may need to be reset.
You also have the following options to manage Tracking Technologies and opt out of interest-based advertising:
Please note that opting out of interest-based advertising does not mean you will stop seeing, or see fewer, advertisements. It does, however, mean that the advertisements you do see will not be interest-based and may be less relevant to your interests.
Some browsers have incorporated “Do Not Track” features that send an automated signal to the websites that you visit using that browser. At this time, the Services do not recognize or respond to these signals. However, you can adjust your preferences regarding the data we collect using the tools and methods described above.
The NBA Family takes security seriously. We take a number of steps to protect your data from unauthorized access, use or disclosure. These steps take into account the sensitivity of the data we collect and use, as well as the current state of technology. This includes, for example, storing your data on systems that have limited access and are maintained in controlled facilities. We also use, and require our vendors to use, industry standard security protocols when processing any payments for your use of the Services.
It is important to remember that no system can be guaranteed to be 100% secure. We recommend that you help us keep your data safe by taking reasonable steps such as keeping your passwords private and not disclosing sensitive personal data in places that can be accessed publicly.
We work with a number of third parties to operate the Services. When we engage third parties in connection with operating the Services, those third parties may only collect, use or access your data as needed for them to perform these functions. These third parties include:
These third parties are only authorized to use your data as permitted under this Policy, or as disclosed to you at the time your data is collected. Please note, however, that these third parties may supplement data collected or received in connection with the Services with data they collect or receive through other websites, platforms and services, in accordance with the policies and disclosures posted on those websites, platforms and services. Within the past twelve months, we have disclosed the following categories of personal information: personal identifiers, commercial information, Internet/other electronic network activity information, geolocation data, characteristics of protected classifications, and inferences drawn from this information.
The Services may also contain links to, or integrations with, other websites, platforms or services that are not operated or controlled by the NBA Family (each a “Third Party Site,” and collectively, the “Third Party Sites”). Please note that this Policy does not apply to those Third Party Sites. For more information on how those Third Party Sites collect, use and share data, we suggest that you contact the operators of those Third Party Sites directly.
Although there are NBA fans of all ages, the Services are not directed at children under the age of 16, and our policy is to not knowingly collect personal data from children under the age of 13, nor to sell personal data of individuals under the age of 16. We encourage parents and guardians to monitor their children’s online behavior, put parental control tools in place, and teach children not to provide their personal data through the Services without parental consent. For certain activities in which children are allowed to participate (e.g., Jr. NBA clinics), any request for personal data (such as registration data) is intended for and directed to the parent or legal guardian.
If you have reason to believe that a child under the age of 13 has provided personal data to us without parental consent, please visit us at http://privacy.nba.com or contact us using any of the methods described in the “How to Contact Us” section of this Policy, and we will endeavor to delete that data from our systems.
For children located in jurisdictions within the EU, we comply with the age limits applicable in each Member State. In these instances, the references above to the age of 13 will be deemed to be references to the age limits applicable in each Member State. Where this Policy refers to consent, this will require the consent of a parent or legal guardian in relation to any person under the age limits applicable in each Member State.
Personal data collected by the NBA Family may be stored and processed in the region in which it is collected, in the United States, and in any other region where we maintain major operations. We maintain offices in Brazil, Canada, China, Hong Kong, India, Mexico, the Philippines, South Africa, Spain, Taiwan, the United Kingdom and the United States. We take steps to ensure that the data we collect under this Policy is stored and processed in accordance with this Policy regardless of where the data is located. By providing personal data in connection with the Services, you acknowledge and agree that such personal data may be transferred from your current location to the offices and servers of the NBA Family and our authorized third party service providers located in the United States. Our practice when transferring personal data is to rely on standard data protection contract clauses or individual consent.
We retain personal data for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other necessary purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these factors vary for different types of personal data, actual retention periods may vary. The criteria we use to determine the appropriate retention periods include:
This section supplements our Privacy Policy with additional information for California residents only. As noted above, we collect data that you provide directly when you register for or use the Services, user credentials that you supply directly when you register for or update your login information to use the Services, demographic data, payment data, device data, usage data, location data, information about your interests and preferences, third party integrations, and other third party data. In accordance with the California Consumer Privacy Act (“CCPA”), California residents have the right to request that we disclose the following information about our collection and use of personal information over the twelve months prior to your request:
You also have the right to request that we delete any of your personal information. In some circumstances we may not be able to honor your request for deletion – for example, if we need to hold on to your information to protect the security or functionality of our operations, to service your account, or to comply with legal obligations.
To ask for a record of the information we hold about you, or to ask us to delete your information, please visit us at http://privacy.nba.com or call us at (866) 622-7674. You must provide enough information that we can verify who you are and that you are a California resident. We will only use personal information provided in a request to verify the requester’s identity and authority to make the request.
You also have the right to direct us not to sell your personal information at any time. We have sold the following categories of personal information within the last twelve months: personal identifiers, commercial information, Internet/other electronic network activity information, geolocation data, characteristics of protected classifications, and inferences drawn from this information. To opt out of the sale of your personal information, you may submit a request to us at Do Not Sell My Personal Information.
You have the right to designate an authorized agent to make any of these requests under the CCPA on your behalf. We will not deny services, charge different prices, offer a different quality of service or otherwise discriminate against you for exercising your rights under the CCPA.
CCPA Metrics. CCPA regulations require us to disclose metrics for the previous calendar year regarding the requests we receive. Those metrics are available at https://www.nba.com/dsar-reporting.
We are providing you with this Notice of Financial Incentive, consistent with California law, to explain the material terms of the NBA’s financial incentive so that you may make an informed decision about whether to create an online account with us.
Material Terms of the Financial Incentive
We offer fans the opportunity to create an NBA ID to be eligible for certain perks and benefits such as rewards, badges for fan engagement, exclusive offers, and discounts. Creating an NBA ID is free and all benefits to you are free.
When you create an NBA ID, or if you already have an NBA ID, we will collect and keep the personal information you provide, or that you’ve previously provided, including your date of birth, country, and email address, which are required. You may also choose to provide your first name, last name, favorite team(s), and favorite player(s) when creating your account. To enhance your experience with the NBA and reward you, and to provide you with tailored benefits, such as the ability to participate in All Star Games votes, coupons for NBA merchandise, badges, and partner offers we will also collect and use the categories of personal information listed below, including personal information we’ve previously collected about you.
We collect this information through your interactions with the NBA and our partners, as further detailed in this Privacy Policy. We will also use this information to send you messages about benefits and rewards, and to send you tailored marketing messages from the NBA and its partners. We may sell your personal information to others within the NBA Family and our partners, and you can opt out of this sale by using Do Not Sell My Personal Information. The NBA will continue to honor your preferences regarding marketing communications, including whether you have previously asked the NBA not to use your personal information for the NBA to send you messages and advertisements about products and initiatives of the NBA and NBA partners.
We collect and use the following categories of information about you in connection with creating an NBA ID and offering you the benefits described herein:
The Value of your Personal Information
The NBA values the data of its accountholders because it allows us to engage with loyal fans and reward those fans with benefits, content, and promotions tailored to their purchase history and interests. The benefits to you are reasonably related to the value of your personal information. The value of your personal information to us varies by individual and is related to the value of the rewards and discounts provided to accountholders, minus the costs of providing those benefits.
How to Opt-in or Withdraw from Participation
By registering for an account online on the NBA website, our Pick’Em website, or via our NBA and NBA Events mobile apps, you will be opting in to receive these benefits. You may withdraw from participation at any time by deleting your user account by contacting us using any of the methods described in the “How to Contact Us” section of this Policy. Withdrawal will also result in deletion of your NBA account and any services linked to your account.
Additional Information
If you have any questions, you may contact us using any of the methods listed under the “How to Contact Us” section of the Policy.
We adhere to applicable data protection laws in the European Union (“EU”). In accordance with the General Data Protection Regulation (“GDPR”), users who are located in the EU have the following rights:
You may contact NBAP at http://privacy.nba.com or by using any of the methods described in the “How to Contact Us” section of this Policy. You may also contact our London office by any of the following methods:
We adhere to the Brazilian General Data Protection Law (“LGPD”), which applies to data processing operations carried out in Brazil, individuals located in Brazil, and personal data collected in Brazil. In accordance with the LGPD, Brazilian data subjects have the following rights:
You may contact NBAP at http://privacy.nba.com or by using any of the methods described in the “How to Contact Us” section of this Policy. You may also contact our Data Privacy Officer, Isabel Hungria, by any of the following methods:
By calling us at +55-21-3206-6419.
We may change this Policy from time to time to reflect changes in our business, the Services, or our practices and procedures. If we do make changes, we will post any changes on this page and indicate the date on which the Policy was last revised. We encourage you to review this Policy periodically, especially before you provide personal data directly to us through the Services. Your continued use of the Services after any changes to this Policy are in effect constitutes your acceptance of the revised Policy
Although we strive to make this Policy as comprehensive as possible, we know you may still have questions or concerns about how we collect, use and share data. If you have a question, concern or complaint regarding our data privacy practices, you may contact us by any of the following methods: