KVIG Informative

A California regulator fined PlayOn Sports $1.1 million this year for tracking students and families without real consent, then routing tickets they’d already paid for behind a forced-consent screen. PlayOn is the same KKR-backed company that now runs ticketing and postseason streaming for Nevada’s high school sports through the NIAA. Nevada’s privacy law is structurally weaker than California’s, and no public record shows the state has ever looked.

KKR, the private equity firm behind the 1989 leveraged buyout of RJR Nabisco, spent four years quietly consolidating the streaming rights, ticketing, and athlete data of American high school sports into a single company, PlayOn Sports, with Nevada’s own high school association among its member accounts. The open question in May was what the firm’s platforms actually did with the data they collected on students and families. A California regulator has now answered a version of that question, finding the company mishandled that data — and Nevada has a materially weaker law to catch the same conduct here.

What California found

The California Privacy Protection Agency issued a $1.1 million administrative penalty against PlayOn Sports in a Feb. 27, 2026 order, covering conduct from January 2023 through December 2024 and finding multiple violations of the California Consumer Privacy Act. The agency’s order describes a company that routed opt-out requests to third-party industry self-regulatory tools, the Network Advertising Initiative and the Digital Advertising Alliance, rather than providing a direct compliant opt-out, which the agency found does not satisfy state law.

The order also describes cookie banners that offered only an Agree option, with the banner covering the portion of the screen needed to access an already-purchased ticket, meaning a parent or student who wanted to redeem a ticket they had already paid for had to consent to tracking first. PlayOn’s privacy policy went unchanged from July 2022 to February 2024 and stated during that period that the company did not sell personal information, while the order found it was in fact sharing data with advertising, social media, and analytics partners. The order also found PlayOn failed to configure its platforms to recognize Global Privacy Control signals, the browser-level opt-out preference signal California law requires companies to honor. PlayOn holds contracts with roughly 1,400 California schools; this is the CPPA’s fourth enforcement action under the CCPA since the agency gained enforcement authority, not its first action of any kind, though it is among its first to target a platform serving K-12 schools specifically.

Settlement terms require PlayOn to conduct ongoing privacy risk assessments reviewed by its board, redesign its notices to be age-appropriate and understandable, and publish annual reporting on consumer privacy-request metrics. PlayOn had already revised its policy in December 2024, before the fine was announced, to permit opt-outs.

Nevada’s law is weaker, and no one appears to be checking

Nevada’s state privacy statute, NRS 603A, requires companies to provide an opt-out mechanism for the sale of personal information, but unlike California’s law it grants no private right of action. Enforcement runs exclusively through the Nevada Attorney General’s office, which can seek injunctions and civil penalties of up to $5,000 per violation. Nevada’s general internet-privacy provisions also do not include a right to access, correct, or delete the personal information a company holds on a consumer, rights California’s law does provide. A separate, more recent section of NRS 603A covering consumer health data does include access and deletion rights, but that section applies specifically to health-related information, not the ticketing and viewership data at issue with PlayOn’s platforms.

No public record indicates the Nevada Attorney General’s office has received a complaint about or opened any inquiry into PlayOn Sports, GoFan, MaxPreps, or the NFHS Network. The same company, fined in California for the same conduct, operates under Nevada’s NIAA contract with no public sign anyone in Nevada has looked.

The Nevada contract itself remains undisclosed

PlayOn’s GoFan subsidiary and the NIAA announced a formal partnership on July 8, 2026, naming GoFan the official digital ticketing provider for NIAA postseason championships and tournaments statewide. NIAA Executive Director Tim Jackson was quoted in the company’s own announcement describing the arrangement in terms of convenience and operations. The announcement discloses no fee structure, revenue share, or exclusivity terms — a public statement about who processes payment for public high school postseason events that says nothing about the money involved.

The underlying contract between NIAA and PlayOn does not appear to be public. Colorado’s high school athletics association remains the only state association found with a published, itemized penalty schedule for streaming postseason games outside the NFHS Network: $500 for an unauthorized live stream of a football game, $250 for on-demand, with lower fees for basketball. Whether Nevada has an equivalent fee schedule is unconfirmed. Colorado’s numbers remain a documented example of how these rights structures work elsewhere, not a confirmed match to Nevada’s own terms, until NIAA’s contract or fee schedule surfaces publicly.

A documented complaint pattern

The NFHS Network, the subscription streaming service families pay to watch postseason games, has 112 complaints filed with the Better Business Bureau over the past three years, 49 of them in the last 12 months, and is not BBB-accredited. Recurring complaints include recurring charges continuing months or years after a customer believed they had canceled, including one complaint describing three years of billing with no logins since 2022; a stated no-refund policy with partial courtesy refunds inconsistently offered, typically capped around three months; games advertised as available for streaming that failed to play with no reliable refund path; and single-device streaming limits that prevent separated or extended families from sharing one paid subscription. Customer service is reachable mainly through chat routed to automated responses, with a disconnected phone number cited in at least one complaint.

The portfolio pattern

KKR reported $796 billion in total assets under management as of June 30, 2026, up 16 percent year-over-year, with fee-paying assets under management of $638 billion, according to the firm’s second-quarter earnings release. KKR’s own investor-facing financial disclosures make no specific mention of PlayOn Sports, MaxPreps, GoFan, or Varsity Brands by name; those holdings are disclosed only through press releases and trade coverage, not the company’s own reporting to investors, even as the youth-sports sector has been covered in industry trade press as a market opportunity exceeding $100 billion.

KKR closed its acquisition of Arctos Partners on May 4, 2026, in a deal with an initial consideration of $1.4 billion in cash and equity, with additional performance-based equity through 2031 that could bring the deal’s total value to roughly $1.95 billion, according to KKR’s own securities filing. Arctos holds minority stakes in more than 20 professional sports properties, including the Golden State Warriors, Sacramento Kings, LA Dodgers, Boston Red Sox, Chicago Cubs, Houston Astros, San Diego Padres, Buffalo Bills, LA Chargers, Liverpool FC, Paris Saint-Germain, and Aston Martin F1, along with the Utah Jazz and Real Salt Lake through its 2022 minority investment in Ryan Smith’s Smith Entertainment Group.

In April 2026, KKR and Major League Soccer formed Hometown Soccer Holdings to fund MLS NEXT Pro, the league’s developmental league that has produced 255 alumni now playing in MLS, according to the league. KKR’s investment has been reported in the $150 million to $200 million range across cash, equity, and guaranteed operating-loss coverage; KKR’s own announcement does not disclose a specific figure. Combined with Arctos, it is the clearest direct link so far between KKR’s professional-sports investing and its youth and development-level sports holdings.

KKR’s 2025 pursuit of British healthcare property company Assura, previously an open bid, has since been resolved: it failed. Rival bidder Primary Health Properties raised its offer to £1.79 billion, beating KKR and co-bidder Stonepeak’s final £1.7 billion offer; PHP’s revised offer was declared unconditional on Aug. 12, 2025, and Assura was delisted from the London Stock Exchange on Oct. 6, 2025 following completion. KKR’s push into British healthcare real estate did not succeed.

Varsity Brands, the KKR-owned company acquired for $4.75 billion in August 2024, was reported in January 2025 to be nearing acquisition of an apparel company serving private club soccer teams, extending its BSN Sports retail arm from school athletics into club-level youth soccer.

NIAA’s media policy, which would show Nevada’s actual postseason streaming and penalty terms, currently returns an access error on the association’s own site, and the underlying PlayOn/GoFan contract has never been made public. California families got a number, $1.1 million, and a paper trail describing exactly how their children’s data was handled, because a regulator with real authority went and got it. Nevada families get a press-release quote about convenience and no visibility into the terms, the fees, or whether anyone in state government has so much as asked the question California already answered.