Skybet Privacy Policy – How We Protect Your Personal Data

Skybet does not sell or share your personal data with third parties for marketing or commercial purposes. Data is shared only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT network banks and Visa/Mastercard receive only the data required to process your specific transaction.
• Identity verification providers: When CNIC verification is required, your document and selfie may be processed by a certified identity verification service provider operating under a strict data processing agreement with Skybet.
• Game providers: Casino, live casino and virtual sports game providers receive a session token and your anonymised player ID — not your personal identity data — to manage your game session and calculate results.
• Legal authorities: Skybet will disclose data to law enforcement or regulatory bodies when legally required to do so by valid legal process. Skybet will not resist or delay a valid legal disclosure obligation.
• Fraud prevention networks: Where required to protect the platform and its honest players, Skybet may share anonymised risk signals with industry fraud prevention networks.

All third parties who receive any Skybet player data are bound by data processing agreements that limit their use of that data to the specific purpose for which it was shared.

Skybet uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small files stored in your browser. The cookies Skybet uses fall into the following categories:

• Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, security tokens that protect your account from session hijacking, and preference settings that remember your language and display choices. Essential cookies cannot be disabled without preventing core platform functionality.
• Analytical cookies: Used in anonymised, aggregated form to understand how the Skybet platform is navigated — which pages are visited most, where players encounter errors, and how the mobile versus desktop experience differs. These help Skybet improve the platform for everyone without identifying individual users.
• Functional cookies: Remember your preferences such as your selected sports, favourite markets, and last-visited section to reduce the number of steps needed to reach your preferred content.

Skybet does not use third-party advertising tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain Skybet features from working correctly.

Skybet retains personal data for as long as is necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The general retention schedule is shown in the Quick Reference table at the top of this page. Key principles:

• Financial records (deposit and withdrawal history) are retained for 7 years from the date of each transaction, as required under anti-money-laundering regulations.
• Identity documents are retained for 5 years after account closure to allow for post-closure regulatory review if required.
• Betting and gaming records are retained for 5 years after account closure.
• Technical logs (IP addresses, device information) are retained on a 13-month rolling basis and then deleted or anonymised.
• Support records are retained for 3 years after resolution of the relevant interaction.

When a retention period expires, data is either securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised aggregate data may be retained indefinitely for statistical analysis and platform improvement purposes.

Skybet implements technical and organisational security measures appropriate to the sensitivity of the data processed. These measures include:

• Encryption in transit: All data transmitted between your device and Skybet's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Encryption at rest: Sensitive data stored in Skybet's databases — including identity documents and payment references — is encrypted using industry-standard encryption algorithms.
• Access controls: Access to personal data within Skybet is restricted to staff who genuinely need it to perform their role. Access logs are maintained and reviewed regularly.
• Two-factor authentication: Skybet's internal systems require two-factor authentication for all staff access to production databases containing player data.
• Penetration testing: Skybet's platform and infrastructure are subjected to regular security assessments by independent security professionals.
• Incident response: In the unlikely event of a data breach that poses a risk to player rights, Skybet will notify affected players promptly and implement containment measures without delay.

While Skybet takes every reasonable precaution to protect your data, no internet transmission is 100% secure. Players are encouraged to use strong, unique passwords for their Skybet account and to enable two-factor authentication where available.

As a Skybet player, you have the following rights in relation to your personal data. To exercise any of these rights, contact Skybet support with your account details and a clear description of your request. Skybet will respond within a reasonable timeframe.

• Right of access: Request a copy of all personal data Skybet holds about you. Skybet will provide this in a clear format within a reasonable timeframe.
• Right to rectification: If any of the personal data Skybet holds about you is incorrect or out of date, you have the right to request a correction. Basic details like your mobile number and email can also be updated directly in your account settings.
• Right to erasure: In certain circumstances, you may request that Skybet delete your personal data. Note that some data cannot be deleted while legal retention obligations apply — for example, financial records required by anti-money-laundering regulations must be kept for 7 years regardless of an erasure request.
• Right to data portability: You may request that Skybet provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider if you choose.
• Right to object: You may object to processing based on Skybet's legitimate interests. Skybet will review such objections and cease the relevant processing unless compelling legitimate grounds exist.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

Skybet's services are strictly for individuals aged 18 and above. Skybet does not knowingly collect or retain personal data from anyone under the age of 18. Age is verified at registration through the date of birth provided, and identity documents may be requested to confirm it.

If Skybet discovers that an account was created by or on behalf of a minor, the account will be immediately closed, all bets voided, and any personal data collected will be deleted promptly, subject only to any minimum retention obligations required by law. The matter may be reported to relevant authorities if required.

Parents and guardians who believe a minor has accessed Skybet using their details should contact Skybet support immediately. Skybet will investigate and take appropriate action without delay. Parental control software can be installed on shared devices to prevent access to gambling platforms by minors.

Skybet may update this Privacy Policy from time to time to reflect changes in the platform's data practices, applicable regulations, or the services offered. The "Last Updated" date at the top of this page shows when the most recent revision was made.

Where changes are material — meaning they significantly affect how your data is used or what rights you have — Skybet will notify active account holders by email and/or via an in-platform notification before the changes take effect. Minor clarifications and non-substantive updates may be made without advance notice.

Continuing to use your Skybet account after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any updates, you should stop using Skybet and contact support to discuss your options, including account closure and return of your PKR balance.

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data Skybet holds about you, please contact Skybet's support team through any of the following channels:

• Email: support@skybet-khelo.net — for written privacy requests, data access enquiries and formal complaints
• Live Chat: Available 24/7 directly from the Skybet platform — for immediate questions and initial enquiries

When submitting a data-related request, please include your registered account mobile number or email address and a clear description of your request. This helps Skybet locate your records quickly and process your request efficiently. Skybet aims to respond to all privacy-related enquiries within 7 working days and to resolve formal data subject requests within 30 days.

For general questions about how Skybet works, visit our FAQ page. For information about responsible gaming tools and support, visit our Responsible Gaming page.