Legal & Compliance

Sky Exchange Privacy Policy

We believe privacy is a right, not a privilege. This page explains — in plain, honest language — exactly what data we collect, why we collect it, how we protect it, and the rights you have as a Sky Exchange user.

Last Updated: May 1, 2025 GDPR Aligned ~8 min read
Effective Date: January 1, 2023 Last Reviewed: May 1, 2025 Applies to: skyexchangeco.com and all sub-domains
Important: By accessing or using Sky Exchange's platform, website, or mobile applications, you confirm you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use and contact us at privacy@skyexchangeco.com.
01

Information We Collect

At Sky Exchange, we only collect the data that is genuinely necessary to provide you with a safe, seamless, and personalised experience. We never harvest data unnecessarily. Here is a transparent breakdown of every category of information we may collect:

1.1 — Information You Provide Directly

Account Registration

Full name, email address, phone number, date of birth, and username when you create an account.

Payment Information

Bank account details, UPI IDs, or wallet information for processing deposits and withdrawals.

Identity Verification (KYC)

Government-issued ID (Aadhaar, PAN, Passport) required for legal compliance and account verification.

Support Communications

Messages, emails, or chat transcripts when you contact our customer support team for assistance.

1.2 — Information Collected Automatically

  • Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
  • Usage & Behavioural Data: Pages visited, time spent, click-through patterns, search queries within the platform, and feature usage frequency.
  • Location Data: General geographic location derived from your IP address. We do not access precise GPS location without explicit permission.
  • Transaction Data: Details of all bets placed, wins, losses, deposits, and withdrawals processed through your Sky Exchange account.
  • Log Files: Server logs recording access times, error logs, and other diagnostic data to maintain platform stability and security.

Our Commitment: Sky Exchange will never collect sensitive personal data (e.g., medical records, religious beliefs, or political affiliations) unless explicitly required by law and with your clear, informed consent.

02

How We Use Your Data

Every piece of data we collect has a clear, defined, and lawful purpose. We process your personal information based on the following legal grounds: contract performance, legal obligation, legitimate interest, and your consent.

  • Account Management & Service Delivery: To create and manage your account, process transactions, verify your identity (KYC), and deliver the core Sky Exchange experience.
  • Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the platform.
  • Legal & Regulatory Compliance: To meet our obligations under applicable gaming, financial, and data protection laws in all jurisdictions we operate in.
  • Customer Support: To respond to your queries, resolve disputes, and provide assistance in a timely and personalised manner.
  • Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of our platform.
  • Personalisation: To customise your dashboard, recommend relevant features, and tailor notifications based on your usage history and preferences.
  • Communications: To send you essential service updates, security alerts, policy change notifications, and (where you've opted in) promotional offers.
  • Responsible Gaming: To monitor for signs of problem gambling behaviour and fulfil our duty-of-care obligations to promote safer gambling practices.

We will never use your personal data to make solely automated decisions that produce significant legal or similarly significant effects on you — without providing you the right to request human review.

03

Cookies & Tracking Technologies

Sky Exchange uses cookies and similar tracking technologies (pixel tags, web beacons) to enhance your experience, measure performance, and keep your account secure. Below is a full breakdown of every cookie type we use:

Cookie TypePurposeDurationConsent Required
Strictly NecessarySession management, login authentication, security tokensSessionNo — Essential
FunctionalRemember your language, timezone, and UI preferences1 YearOptional
AnalyticalAnonymised usage stats to improve platform performance2 YearsAnalytics Consent
MarketingPersonalised promotions; only used where you have opted in90 DaysOptional — Opt-In

You can manage or withdraw cookie consent at any time through your browser settings or our Cookie Preference Centre (available in your account settings). Blocking strictly necessary cookies may affect platform functionality.

04

Data Sharing & Third Parties

Sky Exchange never sells, rents, or trades your personal data. Period. However, to deliver our services, we work with carefully vetted third-party partners who may process your data on our behalf — always under strict contractual obligations and with appropriate data protection safeguards in place.

When We May Share Your Data

  • Payment Processors: To securely process deposits, withdrawals, and refunds through authorised payment gateways. These processors are PCI-DSS certified and handle card data under strict security controls.
  • Identity Verification Providers: To conduct KYC checks and verify your identity as required by our operating licences and anti-money-laundering (AML) obligations.
  • Cloud & Hosting Providers: Our infrastructure partners host the platform and store data on our behalf in secure, ISO-certified data centres.
  • Analytics Providers: We use anonymised, aggregated analytics tools to understand platform performance. No individually identifiable data is shared with analytics vendors.
  • Regulatory & Law Enforcement Authorities: Where we are legally required to disclose information to government bodies, regulators, or law enforcement — and only to the extent required by law.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. You will be notified of any such transfer with the option to opt out.

All third-party data processors are bound by Data Processing Agreements (DPAs) that require them to maintain equivalent standards of data protection, use your data only as instructed by Sky Exchange, and delete your data upon contract termination.

05

How We Protect Your Data

We invest heavily in state-of-the-art security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our layered security approach includes:

256-bit SSL/TLS Encryption

All data transmitted between your browser and our servers is encrypted using industry-standard TLS 1.3 encryption.

Two-Factor Authentication

We offer and strongly recommend 2FA for all accounts using OTP-based verification to prevent unauthorised access.

Access Controls

Strict role-based access controls mean only authorised staff can access your personal data, on a need-to-know basis.

Continuous Monitoring

Real-time intrusion detection systems and 24/7 security monitoring protect our infrastructure around the clock.

Secure Data Centres

Data is stored in ISO 27001-certified data centres with physical security controls, redundancy, and disaster recovery.

Regular Security Audits

We commission annual third-party penetration tests and vulnerability assessments to proactively identify and resolve weaknesses.

In the unlikely event of a data breach that affects your rights and freedoms, Sky Exchange will notify you and the appropriate supervisory authority within 72 hours of becoming aware of the breach, as required by law.

06

Your Privacy Rights

You have significant and enforceable rights over your personal data. Sky Exchange fully respects and supports the exercise of these rights. Here is what you are entitled to:

✓ Right to Access

Request a copy of all personal data we hold about you at any time.

✓ Right to Rectification

Ask us to correct inaccurate or incomplete data about you.

✓ Right to Erasure

Request deletion of your data where we no longer have a lawful basis to hold it.

✓ Right to Restriction

Ask us to restrict processing of your data in certain circumstances.

✓ Right to Portability

Receive your data in a structured, machine-readable format to transfer elsewhere.

✓ Right to Object

Object to processing based on our legitimate interests or for direct marketing.

✓ Withdraw Consent

Withdraw previously given consent at any time without affecting prior processing.

✓ Lodge a Complaint

File a complaint with your local data protection authority if unsatisfied with our response.

To exercise any of these rights, please contact our Data Protection Officer at privacy@skyexchangeco.com. We will respond to all valid requests within 30 calendar days. In complex cases, we may extend this to 60 days with prior notice.

07

Data Retention

We do not keep your data longer than necessary. Our retention periods are determined by legal requirements, the nature of the data, and the purpose for which it was collected. Key retention periods include:

Data CategoryRetention PeriodReason
Account & Registration DataDuration of account + 5 yearsLegal obligation, contract
Transaction & Financial Records7 years from transaction dateAML, tax & regulatory compliance
KYC / Identity Documents5 years post-account closureAnti-money laundering law
Customer Support Communications3 years from last interactionDispute resolution, service improvement
Marketing Preferences & Opt-insUntil withdrawn + 1 yearConsent records
Server Logs & Technical Data90 days rollingSecurity monitoring
Analytics Data (anonymised)26 monthsPlatform improvement

After the applicable retention period, your data is securely deleted or irreversibly anonymised. You may request early deletion of certain data types subject to applicable legal requirements.

08

Children's Privacy

Sky Exchange is strictly an adults-only platform. Our services are intended solely for individuals who are 18 years of age or older (or the legal age of majority in their jurisdiction). We do not knowingly collect, store, or process personal data from anyone under the age of 18.

We implement robust age verification measures during the registration process to prevent minors from accessing our platform. If you believe a minor has registered on Sky Exchange or that we have inadvertently collected data from a person under 18, please contact us immediately at privacy@skyexchangeco.com. We will promptly investigate and delete any such data.

Parents and guardians are encouraged to monitor their children's online activity and utilise parental controls where appropriate.

09

Third-Party Websites & Links

Our platform may contain links to third-party websites, partner pages, or affiliated services for your convenience or information. This Privacy Policy applies exclusively to Sky Exchange and does not extend to any external websites or services, even if linked from our platform.

We strongly recommend reviewing the privacy policies of any third-party site before providing your personal information. Sky Exchange accepts no liability for the data practices, security, or content of external websites.

10

Changes to This Privacy Policy

Sky Exchange reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, technology, or applicable laws. We will always be transparent about any changes we make.

When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Send you a notification via the email address associated with your account.
  • Display a prominent notice on the Sky Exchange homepage or within your account dashboard for at least 30 days.
  • Where required by law, seek your renewed consent before applying material changes to how we process your data.

Your continued use of Sky Exchange after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.

11

Frequently Asked Questions

We know privacy policies can feel overwhelming. Here are answers to the questions our users ask most often:

Sky Exchange collects information such as your name, email address, phone number, IP address, device data, and transaction history when you register, use our platform, or contact our support team. Full details are in Section 1 of this policy.
Absolutely not. Sky Exchange never sells, rents, or trades your personal information to third parties for marketing or commercial purposes. Your data is used solely to provide, improve, and secure our services.
You can request deletion of your account and personal data by contacting our Data Protection Officer at privacy@skyexchangeco.com. We will process your request within 30 days in compliance with applicable data protection laws. Note that some data may be retained as required by law (e.g., for AML compliance).
Yes. Sky Exchange uses essential, analytical, and functional cookies. You can manage your cookie preferences via your browser settings or our Cookie Preference Centre in your account settings. Note: disabling strictly necessary cookies may impair platform functionality.
We use 256-bit SSL/TLS encryption, two-factor authentication, ISO-certified data centres, role-based access controls, 24/7 security monitoring, and annual third-party penetration tests to protect your data. Full details are in Section 5 of this policy.
Yes. All security measures described in this policy apply equally to the Sky Exchange mobile application. App-based data transmission is encrypted, and we recommend enabling device-level security (e.g., biometric lock) for additional protection.
For all privacy-related queries and complaints, contact our Data Protection Officer at privacy@skyexchangeco.com. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
12

Contact Our Privacy Team

Your privacy matters to us. If you have any questions, concerns, or requests regarding this Privacy Policy or how Sky Exchange handles your personal data, please reach out to us through any of the following channels. Our dedicated privacy team is committed to responding within 2 business days.

Email (DPO)

For all data protection requests and privacy queries

privacy@skyexchangeco.com

Support Helpline

Speak directly with our customer support team

85328 61876

Live Chat

24/7 live chat support available in your account

Open Live Chat →

Registered Office

Sky Exchange Ltd.
123 Exchange Tower
New Delhi, India 110001