skym3u Privacy Policy — Your Data, Your Rights

Information We Collect

skym3u collects personal information in three principal ways: directly from you during registration and gameplay, automatically through platform technology, and from trusted third-party verification partners.

The following table summarises the categories of personal data we collect, the source of that data, and the legal basis on which we process it:

We do not collect any special category data (sometimes called "sensitive personal data") such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is required for standard identity verification.

How We Use Your Data

Every piece of personal data processed by skym3u serves a specific, documented purpose. We do not process your data beyond what is necessary for those stated purposes.

skym3u uses the personal data we collect for the following purposes:

• Account creation and management: Registering your account, verifying your identity through the KYC process, and maintaining your account in good standing throughout your relationship with skym3u.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment channels in Bangladesh Taka. Verifying that payment instruments belong to the registered account holder in compliance with anti-money-laundering requirements.
• Delivering platform services: Enabling access to casino games, sports betting markets including BPL, IPL, T20 World Cup, and other cricket events, live dealer games, slots, and all other features available on the skym3u Platform.
• Customer support: Responding to support enquiries, resolving disputes, processing withdrawal requests, and providing assistance with account issues through our support team reachable at [email protected].
• Fraud prevention and security: Monitoring account and transaction activity to detect, investigate, and prevent fraudulent behaviour, money laundering, collusion, bonus abuse, and other prohibited conduct as described in the Terms & Conditions.
• Responsible gaming compliance: Monitoring gameplay patterns to identify indicators of problem gambling, enforcing self-exclusion and deposit limit requests, and fulfilling our obligations under responsible gaming best practices.
• Legal and regulatory compliance: Meeting our obligations under applicable international gaming licence conditions, anti-money-laundering regulations, and any applicable data protection frameworks.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to improve game selection, interface design, performance, and new feature development.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time by contacting [email protected].

Data Sharing & Third Parties

skym3u shares personal data with third parties only where there is a clear legal basis or operational necessity for doing so.

We do not sell, rent, or trade your personal information to third-party marketing organisations. The following categories of third parties may receive your personal data for specific, limited purposes:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other approved payment partners receive the transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy frameworks and are not permitted to use your data for any purpose beyond payment processing.
• Identity verification partners: Third-party KYC and AML screening providers receive identity and verification data to assist in confirming the identity, age, and eligibility of registered players. These partners are contractually bound to process data only for verification purposes.
• Game software providers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as session tokens and bet records) necessary to deliver their games on the Platform. No additional personal data is shared beyond what is required for game delivery and fair-play auditing.
• Analytics and platform infrastructure providers: Cloud hosting, content delivery, and analytics technology providers may process technical and usage data as part of delivering and improving Platform services. These providers act as data processors under our instructions and are subject to data processing agreements.
• Legal and regulatory authorities: In circumstances required by law, court order, or direction from a relevant regulatory authority, skym3u may be required to disclose personal data without prior notice to you. We will notify you of such disclosures where we are legally permitted to do so.

All third-party service providers who process personal data on behalf of skym3u are vetted for security and data protection practices and are bound by contractual obligations that require them to maintain appropriate technical and organisational security measures and to use your data solely for the purposes for which it was shared.

Cookies & Tracking Technologies

skym3u uses cookies and similar technologies to keep the Platform running correctly, to understand how it is used, and to maintain your session securely.

A cookie is a small text file placed on your device when you visit a website. skym3u uses the following categories of cookies:

skym3u does not use third-party advertising or behavioural retargeting cookies. We do not share cookie data with external advertising networks or social media platforms for the purpose of serving targeted advertisements outside the skym3u Platform.

Most web browsers allow you to control cookie settings through the browser's privacy preferences panel. Disabling strictly necessary or fraud prevention cookies will impair your ability to use the Platform and may prevent login. If you have questions about specific cookies in use, contact [email protected].

Data Retention & Storage

skym3u retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law.

The following retention periods apply to the main categories of personal data held by skym3u:

• Account and identity data: Retained for the duration of your active account relationship with skym3u and for a minimum of 5 years following account closure, in accordance with standard anti-money-laundering record-keeping requirements applicable to licensed gaming operators.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with AML compliance obligations. This includes deposit records, withdrawal records, and any records of declined or reversed transactions.
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later. Documents are stored in an encrypted, access-controlled environment.
• Customer support communications: Retained for 3 years from the date of the communication, or longer if the communication is relevant to an ongoing dispute, investigation, or legal proceeding.
• Technical and usage data: Aggregated analytics data may be retained indefinitely in anonymised form. Raw session logs and device data are retained for a maximum of 12 months.
• Marketing consent records: Retained for 3 years from the date consent was given or last renewed, to provide evidence of valid consent in the event of a query.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Where data is anonymised rather than deleted, the resulting anonymised dataset cannot be used to re-identify you and is no longer considered personal data under applicable data protection frameworks.

Your Privacy Rights

skym3u recognises and respects your rights over your personal data. The following rights are available to all registered players.

You may exercise any of the following rights by submitting a written request to [email protected] with the subject line "Privacy Rights Request" and sufficient information to verify your identity. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

Please note that certain rights may be limited where we are required to retain or process your data to comply with a legal obligation — for example, AML record-keeping requirements. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

Data Security Measures

skym3u implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, and destruction.

The security measures in place at skym3u include, but are not limited to, the following:

• Transport encryption: All data exchanged between your device and the skym3u Platform is protected using TLS 1.3 / SSL 256-bit encryption. This applies to all pages, forms, payment flows, and API communications.
• Data-at-rest encryption: Personal data stored in our databases — including identity documents, financial records, and account credentials — is encrypted using AES-256 at the storage layer.
• Access controls: Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented business need may access personal data, and all access is logged and audited.
• Password security: Account passwords are stored as salted cryptographic hashes. skym3u staff cannot retrieve your password in plaintext under any circumstances. If you forget your password, a secure reset process is initiated rather than a password retrieval.
• Two-factor authentication: Two-factor authentication (2FA) is available and strongly recommended for all skym3u accounts to provide an additional layer of protection against unauthorised access.
• Penetration testing and vulnerability management: The skym3u Platform undergoes regular security assessments including penetration testing and vulnerability scanning. Identified vulnerabilities are tracked and remediated according to a risk-based priority framework.
• Incident response: skym3u maintains a formal data breach incident response procedure. In the event of a data breach that is likely to result in a risk to affected individuals, we will notify affected players and relevant authorities within applicable timeframes.

While skym3u takes every reasonable technical and organisational measure to protect your data, no internet-based platform can guarantee absolute security. You also have a responsibility to protect your account by using a strong, unique password, enabling 2FA, and keeping your login credentials confidential. If you believe your account has been compromised, contact [email protected] immediately.

Policy Updates & Contact

This Privacy Policy is reviewed regularly and updated as needed to reflect changes in our services, technology, and applicable legal requirements.

skym3u reserves the right to amend this Privacy Policy at any time. When material changes are made, we will post an updated version on this page and update the effective date shown at the top of the document. For significant changes that materially affect how your data is processed, we will make reasonable efforts to notify active account holders via email or an in-platform notification.

Your continued use of the skym3u Platform following any posted update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised policy, you should discontinue use of the Platform and contact us to request account closure.

This Privacy Policy was last reviewed and updated in January 2026. The governing language of this document is English. In the event of any discrepancy between this English version and any translation, the English version prevails.

If you are not satisfied with our response to a privacy concern, you may escalate the matter through the dispute resolution process described in the skym3u Terms & Conditions, or seek independent legal advice on your available remedies under applicable data protection law.