Information We Collect
At Sky Exchange, we only collect the data that is genuinely necessary to provide you with a safe, seamless, and personalised experience. We never harvest data unnecessarily. Here is a transparent breakdown of every category of information we may collect:
1.1 — Information You Provide Directly
Account Registration
Full name, email address, phone number, date of birth, and username when you create an account.
Payment Information
Bank account details, UPI IDs, or wallet information for processing deposits and withdrawals.
Identity Verification (KYC)
Government-issued ID (Aadhaar, PAN, Passport) required for legal compliance and account verification.
Support Communications
Messages, emails, or chat transcripts when you contact our customer support team for assistance.
1.2 — Information Collected Automatically
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage & Behavioural Data: Pages visited, time spent, click-through patterns, search queries within the platform, and feature usage frequency.
- Location Data: General geographic location derived from your IP address. We do not access precise GPS location without explicit permission.
- Transaction Data: Details of all bets placed, wins, losses, deposits, and withdrawals processed through your Sky Exchange account.
- Log Files: Server logs recording access times, error logs, and other diagnostic data to maintain platform stability and security.
Our Commitment: Sky Exchange will never collect sensitive personal data (e.g., medical records, religious beliefs, or political affiliations) unless explicitly required by law and with your clear, informed consent.
How We Use Your Data
Every piece of data we collect has a clear, defined, and lawful purpose. We process your personal information based on the following legal grounds: contract performance, legal obligation, legitimate interest, and your consent.
- Account Management & Service Delivery: To create and manage your account, process transactions, verify your identity (KYC), and deliver the core Sky Exchange experience.
- Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct on the platform.
- Legal & Regulatory Compliance: To meet our obligations under applicable gaming, financial, and data protection laws in all jurisdictions we operate in.
- Customer Support: To respond to your queries, resolve disputes, and provide assistance in a timely and personalised manner.
- Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of our platform.
- Personalisation: To customise your dashboard, recommend relevant features, and tailor notifications based on your usage history and preferences.
- Communications: To send you essential service updates, security alerts, policy change notifications, and (where you've opted in) promotional offers.
- Responsible Gaming: To monitor for signs of problem gambling behaviour and fulfil our duty-of-care obligations to promote safer gambling practices.
We will never use your personal data to make solely automated decisions that produce significant legal or similarly significant effects on you — without providing you the right to request human review.
Cookies & Tracking Technologies
Sky Exchange uses cookies and similar tracking technologies (pixel tags, web beacons) to enhance your experience, measure performance, and keep your account secure. Below is a full breakdown of every cookie type we use:
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | Session | No — Essential |
| Functional | Remember your language, timezone, and UI preferences | 1 Year | Optional |
| Analytical | Anonymised usage stats to improve platform performance | 2 Years | Analytics Consent |
| Marketing | Personalised promotions; only used where you have opted in | 90 Days | Optional — Opt-In |
You can manage or withdraw cookie consent at any time through your browser settings or our Cookie Preference Centre (available in your account settings). Blocking strictly necessary cookies may affect platform functionality.
Data Sharing & Third Parties
Sky Exchange never sells, rents, or trades your personal data. Period. However, to deliver our services, we work with carefully vetted third-party partners who may process your data on our behalf — always under strict contractual obligations and with appropriate data protection safeguards in place.
When We May Share Your Data
- Payment Processors: To securely process deposits, withdrawals, and refunds through authorised payment gateways. These processors are PCI-DSS certified and handle card data under strict security controls.
- Identity Verification Providers: To conduct KYC checks and verify your identity as required by our operating licences and anti-money-laundering (AML) obligations.
- Cloud & Hosting Providers: Our infrastructure partners host the platform and store data on our behalf in secure, ISO-certified data centres.
- Analytics Providers: We use anonymised, aggregated analytics tools to understand platform performance. No individually identifiable data is shared with analytics vendors.
- Regulatory & Law Enforcement Authorities: Where we are legally required to disclose information to government bodies, regulators, or law enforcement — and only to the extent required by law.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. You will be notified of any such transfer with the option to opt out.
All third-party data processors are bound by Data Processing Agreements (DPAs) that require them to maintain equivalent standards of data protection, use your data only as instructed by Sky Exchange, and delete your data upon contract termination.
How We Protect Your Data
We invest heavily in state-of-the-art security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our layered security approach includes:
256-bit SSL/TLS Encryption
All data transmitted between your browser and our servers is encrypted using industry-standard TLS 1.3 encryption.
Two-Factor Authentication
We offer and strongly recommend 2FA for all accounts using OTP-based verification to prevent unauthorised access.
Access Controls
Strict role-based access controls mean only authorised staff can access your personal data, on a need-to-know basis.
Continuous Monitoring
Real-time intrusion detection systems and 24/7 security monitoring protect our infrastructure around the clock.
Secure Data Centres
Data is stored in ISO 27001-certified data centres with physical security controls, redundancy, and disaster recovery.
Regular Security Audits
We commission annual third-party penetration tests and vulnerability assessments to proactively identify and resolve weaknesses.
In the unlikely event of a data breach that affects your rights and freedoms, Sky Exchange will notify you and the appropriate supervisory authority within 72 hours of becoming aware of the breach, as required by law.
Your Privacy Rights
You have significant and enforceable rights over your personal data. Sky Exchange fully respects and supports the exercise of these rights. Here is what you are entitled to:
Request a copy of all personal data we hold about you at any time.
Ask us to correct inaccurate or incomplete data about you.
Request deletion of your data where we no longer have a lawful basis to hold it.
Ask us to restrict processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format to transfer elsewhere.
Object to processing based on our legitimate interests or for direct marketing.
Withdraw previously given consent at any time without affecting prior processing.
File a complaint with your local data protection authority if unsatisfied with our response.
To exercise any of these rights, please contact our Data Protection Officer at privacy@skyexchangeco.com. We will respond to all valid requests within 30 calendar days. In complex cases, we may extend this to 60 days with prior notice.
Data Retention
We do not keep your data longer than necessary. Our retention periods are determined by legal requirements, the nature of the data, and the purpose for which it was collected. Key retention periods include:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years | Legal obligation, contract |
| Transaction & Financial Records | 7 years from transaction date | AML, tax & regulatory compliance |
| KYC / Identity Documents | 5 years post-account closure | Anti-money laundering law |
| Customer Support Communications | 3 years from last interaction | Dispute resolution, service improvement |
| Marketing Preferences & Opt-ins | Until withdrawn + 1 year | Consent records |
| Server Logs & Technical Data | 90 days rolling | Security monitoring |
| Analytics Data (anonymised) | 26 months | Platform improvement |
After the applicable retention period, your data is securely deleted or irreversibly anonymised. You may request early deletion of certain data types subject to applicable legal requirements.
Children's Privacy
Sky Exchange is strictly an adults-only platform. Our services are intended solely for individuals who are 18 years of age or older (or the legal age of majority in their jurisdiction). We do not knowingly collect, store, or process personal data from anyone under the age of 18.
We implement robust age verification measures during the registration process to prevent minors from accessing our platform. If you believe a minor has registered on Sky Exchange or that we have inadvertently collected data from a person under 18, please contact us immediately at privacy@skyexchangeco.com. We will promptly investigate and delete any such data.
Parents and guardians are encouraged to monitor their children's online activity and utilise parental controls where appropriate.
Third-Party Websites & Links
Our platform may contain links to third-party websites, partner pages, or affiliated services for your convenience or information. This Privacy Policy applies exclusively to Sky Exchange and does not extend to any external websites or services, even if linked from our platform.
We strongly recommend reviewing the privacy policies of any third-party site before providing your personal information. Sky Exchange accepts no liability for the data practices, security, or content of external websites.
Changes to This Privacy Policy
Sky Exchange reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, technology, or applicable laws. We will always be transparent about any changes we make.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send you a notification via the email address associated with your account.
- Display a prominent notice on the Sky Exchange homepage or within your account dashboard for at least 30 days.
- Where required by law, seek your renewed consent before applying material changes to how we process your data.
Your continued use of Sky Exchange after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.
Frequently Asked Questions
We know privacy policies can feel overwhelming. Here are answers to the questions our users ask most often:
Contact Our Privacy Team
Your privacy matters to us. If you have any questions, concerns, or requests regarding this Privacy Policy or how Sky Exchange handles your personal data, please reach out to us through any of the following channels. Our dedicated privacy team is committed to responding within 2 business days.
Registered Office
Sky Exchange Ltd.
123 Exchange Tower
New Delhi, India 110001