Privacy Policy

This Privacy Policy explains how Casino Sky, operated under the Casino Sky brand via the website casinoskai.com, collects, uses, discloses and protects your personal data. It applies to players, registered account holders and all visitors who access or use our online gambling services and related websites. This Policy is effective and up to date as of 6 November 2025 and is intended to meet the requirements of UK data protection and gambling regulation.

Who We Are

The data controller responsible for your personal data in connection with Casino Sky is:

Bonne Terre Limited, a limited company forming part of the Flutter Entertainment group, operating online gambling services under the Casino Sky brand via casinoskai.com for customers in the United Kingdom.

Bonne Terre Limited is licensed and regulated by the UK Gambling Commission under account number 38718 (details available at the UKGC public register: https://gamblingcommission.gov.uk/public-register/business/detail/38718). The company also holds a licence from the Alderney Gambling Control Commission.

Corporate registration details and legal address are recorded with the relevant company registry and gambling regulators; the most up-to-date information can be obtained via the UK Gambling Commission public register entry for licence 38718.

Data Protection Contact

We have appointed a data protection contact (and, where legally required, a Data Protection Officer) for privacy and data protection matters relating to Casino Sky on casinoskai.com:

Email: dpo@casinoskai.com
Postal contact: Data Protection Officer, Bonne Terre Limited (Casino Sky - casinoskai.com), at the registered office address as listed in the UKGC public register
Website: https://casinoskai.com (privacy/contact section)

If your account or access is provided through a related Sky Betting & Gaming platform, you may also find additional corporate and privacy information through the Sky group support resources, including https://support.skybet.com/s/article/Privacy-Policy, but this Privacy Policy governs the processing carried out for Casino Sky on casinoskai.com.

What Personal Data We Collect

We collect and process different categories of personal data when you use Casino Sky on casinoskai.com. The exact data collected depends on how you interact with us, the services you use and the choices you make in your account settings and device.

Identification and Contact Data

Account details: full name, username, password (stored in hashed form), date of birth, gender (where provided).
Contact details: email address, telephone number, residential address, country of residence, preferred language.
Verification data: copies or details of identity documents (passport, national ID card, driving licence), proof of address (utility bill, bank statement), and other KYC (Know Your Customer) information supplied to verify your identity and age.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, operating system, browser type and version, screen resolution, settings and configurations.
Log data: dates and times of logins and logouts, session duration, pages viewed, clicks, navigation paths, error logs, and interaction with customer support.
Security and integrity data: failed login attempts, unusual access patterns, device fingerprinting information and similar data used for fraud detection and system security.

Payment and Financial Data

Payment details: partial payment card details (such as masked card numbers), card type, expiry date, payment method, and payment tokens provided via our payment processors.
Transaction data: deposits, withdrawals, bonus credits, chargebacks, account balances, and payment history.
Anti-money laundering (AML) data: information obtained from AML checks, sanctions screening and other financial risk assessments carried out in accordance with applicable law.

Behavioral and Profile Data

Gaming data: betting history, game selections, stakes, wins and losses, frequency and volume of play, responsible gambling limits and self-exclusion status.
Interaction data: communications with us via email, live chat or other channels, including call recordings where permitted by law.
Marketing and preference data: your marketing consents, opt-out choices, interests or segments derived from your use of casinoskai.com, and participation in promotions or loyalty programmes.

Cookies and Similar Technologies

Cookies: small text files stored on your device when you access casinoskai.com, including session cookies, persistent cookies and cookies placed by third parties (such as analytics or advertising partners).
Similar technologies: web beacons, pixels, SDKs and local storage used to recognise your device, understand usage patterns, personalise content and measure the performance of our services and marketing campaigns.

More detailed information on how we use cookies and similar technologies is provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

We process your personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, and, where applicable, the EU GDPR and other relevant laws. Depending on the context, we rely on one or more of the following legal bases:

Performance of a Contract

Account set-up and management: we process your identification, contact, verification, payment and usage data to create and operate your Casino Sky account on casinoskai.com, provide access to games, process deposits and withdrawals, and manage bonuses and loyalty rewards.
Customer support: we use your contact and account data to respond to your queries, handle complaints and deliver service communications related to Casino Sky.

Compliance with Legal Obligations

Gambling and licensing rules: we are required by the UK Gambling Commission and other regulators to verify your age and identity, monitor transactions, prevent criminal activity and maintain appropriate records.
KYC/AML and financial regulations: we process identification, financial and transactional data to comply with anti-money laundering, counter-terrorist financing, tax, reporting and other regulatory obligations.
Legal claims and investigations: we may process and retain relevant data where necessary to establish, exercise or defend legal claims, respond to lawful requests from authorities, or comply with court orders.

Legitimate Interests

Security and fraud prevention: we process technical, usage and behavioural data to protect our systems, prevent fraud, detect suspicious activity, ensure game integrity and enforce our terms and conditions.
Service improvement and analytics: we analyse aggregated and anonymised or pseudonymised data to improve the performance, usability, security and content of casinoskai.com and Casino Sky.
Internal administration: we use data for internal reporting, risk management, auditing and business continuity, to the extent these interests are not overridden by your rights and freedoms.

Consent

Marketing communications: we send email, SMS or online marketing material about Casino Sky and related offers on casinoskai.com where you have given your explicit consent or where permitted by applicable law, and you can withdraw this consent at any time.
Optional cookies and tracking: we use non-essential cookies (for example, advertising or advanced analytics cookies) only with your consent obtained through our cookie banner or settings tool.
Special categories of data: where we process any special category data (for example, information you choose to share about your health in the context of safer gambling tools), we do so only with your explicit consent or where otherwise lawfully permitted.

Purpose of Processing

We use your personal data for clearly defined purposes aligned with our legal obligations and our role as a licensed gambling operator.

Provision of Casino Services

Operating your account: opening, maintaining and closing your account, enabling you to log in securely, verify your identity and age, and manage your preferences for Casino Sky on casinoskai.com.
Delivering games and features: providing you with access to casino games, processing your bets and stakes, settling outcomes, and crediting winnings and bonuses.

Payments, Risk and Compliance

Funds management: processing deposits, withdrawals and refunds, administering payment methods and complying with accounting requirements.
Regulatory compliance: performing KYC and AML checks, monitoring transactions and behaviour for suspicious activity, and fulfilling reporting obligations to regulators and relevant authorities.

Service Improvement and Analytics

Usage analysis: understanding how Casino Sky on casinoskai.com is used, identifying technical issues, optimising performance and enhancing user experience.
Product development: evaluating new features, promotions and game content based on aggregated or pseudonymised data.

Marketing and Personalisation

Direct marketing: sending offers, promotions and information about Casino Sky that may be of interest to you, in accordance with your marketing preferences and legal requirements.
Personalised content: tailoring on-site content, bonuses and recommendations based on your previous activity, preferences and responsible gambling settings, where permitted by law.

Fraud Prevention and Security

Account and system protection: protecting your account from unauthorised access, preventing fraud, collusion, money laundering and other prohibited activities.
Incident management: detecting and investigating security incidents, breaches or suspicious behaviour, and implementing corrective and preventive measures.

Disclosure & Sharing

We treat your personal data as confidential and only share it with carefully selected third parties where there is a lawful basis and an appropriate safeguard in place.

Service Providers and Partners

Payment providers: banks, card schemes, e-wallets and other payment processors that handle your deposits, withdrawals and payment-related services in accordance with applicable financial regulations.
Technical and hosting providers: companies that provide IT infrastructure, platform hosting, data storage, security services, communications tools and customer support systems.
Game and content providers: third-party software suppliers delivering games and related functionality, where limited data may be shared to operate those products and detect fraudulent play.
Professional advisers: auditors, lawyers, consultants and other professional service providers engaged to support our business, subject to strict confidentiality obligations.

Regulators and Authorities

Gambling regulators: the UK Gambling Commission, Alderney Gambling Control Commission and other competent regulators, to demonstrate compliance with licensing conditions and regulatory requirements.
Law enforcement and public bodies: police, tax authorities, courts and other public authorities where we are required or permitted by law to share information, for example in relation to crime prevention or regulatory investigations.

Group Companies and Affiliates

Group entities: other companies within the Flutter Entertainment group that provide shared services (such as technology, security, risk management or analytics) as part of our operating model.
Affiliates and marketing partners: selected partners who promote Casino Sky and casinoskai.com, where limited data is shared for attribution, analytics or, where you have consented, targeted advertising.

Advertising and Analytics Networks

Analytics providers: third-party analytics services that help us understand how users interact with casinoskai.com, using aggregated or pseudonymised data wherever possible.
Advertising networks: partners who help us deliver and measure advertising campaigns online, using cookies and similar technologies only with your consent and in accordance with applicable laws.

We do not sell your personal data. Where we share data with third parties acting as our processors, they are bound by contract to process the data only on our instructions and to apply appropriate security measures.

International Transfers

Casino Sky primarily serves customers located in the United Kingdom, and we aim, where feasible, to store and process personal data within the UK or the European Economic Area ("EEA"). However, some of our service providers, group companies or partners may be located in or may process data from other countries, including but not limited to Alderney, Ireland and other jurisdictions outside the UK and EEA.

UK and EEA locations: where data is processed in the UK or EEA, it benefits from an equivalent high level of protection under the UK GDPR or EU GDPR.
Adequate jurisdictions: where data is transferred to countries recognised by the UK government (or, where applicable, the European Commission) as providing an adequate level of data protection, we rely on that adequacy decision.
Other international transfers: where data is transferred to a country that does not have an adequacy decision, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses or other standard contractual clauses approved by the relevant authorities.
Additional safeguards: where appropriate, we supplement contractual protections with technical and organisational measures (for example, encryption and access controls) and transfer impact assessments.

You can obtain more information about the specific safeguards used for international transfers by contacting us at dpo@casinoskai.com.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory requirements, and to protect our legitimate interests (for example in relation to disputes or investigations).

Retention Periods by Category

Account and identification data: generally kept for the duration of your relationship with us and normally for up to 5 years after account closure, unless a longer retention period is required by law or justified by ongoing legal or regulatory needs.
KYC/AML and verification records: retained for the periods required under applicable anti-money laundering, counter-terrorist financing and gambling regulations, which may require retention for several years after the end of the business relationship or the date of a particular transaction.
Transaction and gaming data: betting history, payments, and related records are retained for regulatory, accounting and tax purposes, typically for a period aligned with statutory limitation periods and audit requirements.
Customer support communications: stored for a period necessary to manage your queries and to maintain an audit trail for quality assurance and dispute resolution.
Marketing and preference data: retained as long as you remain opted in to marketing communications or until you object or withdraw consent; certain records of your opt-out or withdrawal may be retained to honour your choice.
Technical logs and security data: retained for a shorter period needed for security monitoring, diagnostics and incident management, unless a longer retention is required in connection with a specific investigation.

Deletion and Anonymisation

Deletion: when data is no longer required for the purposes described in this Privacy Policy and no longer needs to be retained by law, we securely delete it or render it permanently anonymous.
Anonymisation: we may continue to use aggregated or anonymised data (which no longer identifies you) for analytics, reporting and statistical purposes.
User requests: where you exercise your right to erasure, we will delete or anonymise your personal data in accordance with applicable law and our retention obligations, as explained in the "Your Rights" section.

Your Rights

As a user of Casino Sky on casinoskai.com, you have several rights in relation to your personal data under the UK GDPR and the Data Protection Act 2018, and, where applicable, under the EU GDPR and analogous privacy regimes such as Mexican data protection law.

Data Protection Rights

Right of access: you can request confirmation as to whether we process your personal data and obtain a copy of your data and certain information about how we process it.
Right to rectification: you can ask us to correct inaccurate data and to complete incomplete data, for example updating your contact details or address.
Right to erasure: you may request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and there is no other legal basis, or where the data has been unlawfully processed. This right is subject to legal and regulatory retention obligations, particularly in the gambling and AML context.
Right to restriction: you can ask us to restrict the processing of your data in specific cases, such as when you contest its accuracy or object to processing, while we verify or consider your request.
Right to object: you have the right to object to processing carried out on the basis of our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims. You can always object to direct marketing at any time.
Right to data portability: you can request certain personal data in a structured, commonly used and machine-readable format and ask us to transmit it to another controller where technically feasible, where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: where we rely on your consent (e.g. for marketing or optional cookies), you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

Alignment with Mexican Privacy Law (Where Applicable)

While Casino Sky on casinoskai.com is primarily directed at users in the United Kingdom and the British Isles, we recognise that individuals in other jurisdictions, including Mexico, may occasionally access our services. Where Mexican data protection law applies (for example, the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations), we endeavour to align our practices with the ARCO rights framework (Access, Rectification, Cancellation and Opposition) in a manner consistent with our obligations under the UK GDPR and EU GDPR.

How to Exercise Your Rights

Submission of requests: you can exercise your rights by contacting us at dpo@casinoskai.com and indicating that your request concerns Casino Sky on casinoskai.com. Where available, you may also use any privacy tools or request forms provided in your account settings.
Verification: to protect your privacy, we may need to verify your identity before responding to a request, which may involve asking you to log into your account or provide additional information.
Response timeframe: we aim to respond to your request within one month (30 days) of receipt. This period may be extended by up to a further two months for complex or numerous requests, in which case we will inform you of the extension and the reasons for it.
Charges: we handle rights requests free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with applicable law.

You also have the right to lodge a complaint with a supervisory authority, as explained in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

Casino Sky on casinoskai.com uses cookies and similar tracking technologies to ensure the website functions correctly, to enhance your experience, and to support our analytics and marketing activities in compliance with applicable e-privacy and data protection laws.

Types of Cookies We Use

Strictly necessary cookies (session and persistent): required for the operation of casinoskai.com, enabling functions such as logging in, maintaining your session, processing transactions, keeping your bet slip and providing security features. These cookies are typically set by us and expire when you end your session or after a defined period.
Functional cookies: used to remember your preferences, such as language, region, display settings and responsible gambling tools, so that your experience is consistent across visits.
Analytics and performance cookies: first- and third-party cookies that collect information about how visitors use casinoskai.com (for example, pages visited, time spent, errors encountered) to help us understand and improve site performance and usability.
Advertising and targeting cookies: cookies placed by us or our advertising partners to deliver relevant advertisements on our site or on third-party websites, to measure the effectiveness of campaigns, and to limit how often you see a particular ad. These are used only with your consent.

Similar Technologies

Web beacons and pixels: small graphic files or code snippets used together with cookies to track usage patterns, conversion events and the performance of our marketing activities.
SDKs and local storage: technologies used in mobile or web applications to remember your device, store settings and support analytics and security features.

Managing Cookies

Cookie banner and settings: when you first visit casinoskai.com, and periodically thereafter, you are presented with a cookie banner that allows you to accept or reject non-essential cookies. You can change your cookie preferences at any time using our cookie management tool (where available) or via the link in the website footer.
Browser controls: most web browsers allow you to block, delete or disable cookies via their settings. Please note that disabling strictly necessary or functional cookies may impact the operation of Casino Sky and prevent you from using certain features.
Third-party opt-outs: for some third-party advertising and analytics cookies, you may also manage preferences directly through the provider's opt-out tools or industry schemes, where available.

Data Security

We take the security of your personal data very seriously and implement technical and organisational measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Technical Measures

Encryption: data transmitted between your device and casinoskai.com is protected using modern transport layer security (such as TLS 1.2 or higher). Where appropriate, sensitive data is encrypted at rest using industry-standard encryption algorithms.
Access controls: access to personal data is restricted to authorised personnel and service providers on a need-to-know basis, protected by authentication, authorisation controls and, where appropriate, multi-factor authentication.
Secure development and testing: systems and applications are developed and maintained following secure coding practices, with regular testing, vulnerability scanning and patch management.

Organisational Measures

Policies and training: we maintain internal policies and procedures covering data protection, information security and acceptable use, and we provide ongoing training and awareness to staff involved in processing personal data.
Risk management and audits: we perform risk assessments, security reviews and periodic audits of our systems and key suppliers to assess and enhance the effectiveness of our controls.
Incident response: we operate incident response processes to detect, respond to and remediate security events. Where required by law, we will notify the relevant supervisory authority and, when necessary, affected individuals of a personal data breach without undue delay.

We aim to align our security programme with recognised international information security standards and good practice frameworks (such as ISO/IEC 27001 and SOC 2) to the extent appropriate for our operations, while not implying formal certification unless explicitly stated elsewhere.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data in connection with Casino Sky on casinoskai.com, you have several options to contact us and, if necessary, escalate your concerns.

Contacting Us

Primary contact (email): dpo@casinoskai.com - for all privacy-related queries and rights requests.
Website contact: where available, you may use the help or contact section within your Casino Sky account on casinoskai.com to submit a request or complaint.
Postal contact: Data Protection Officer, Bonne Terre Limited (Casino Sky - casinoskai.com), at the registered office address shown in the UK Gambling Commission public register (licence 38718).

Complaint Handling Procedure

Submission: send us your complaint, clearly describing your concern, the affected account (if applicable) and any supporting information.
Acknowledgement: we will acknowledge receipt of your complaint as soon as reasonably practicable, usually within a few working days.
Investigation: your complaint will be reviewed by an appropriate team, which may include our data protection contact or other specialists depending on the issue.
Response: we aim to provide a substantive reply or an update within one month (30 days). For complex matters, we may need more time; if so, we will let you know and keep you informed of progress.
Further steps: if you remain dissatisfied, you may escalate your concern to the relevant supervisory authority as described below.

Supervisory Authorities and External Escalation

United Kingdom (primary supervisory authority): you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. Further information is available at https://ico.org.uk.
European Union (where EU GDPR applies): if you are located in the EU and the EU GDPR applies to the processing in question, you may raise a complaint with your local EU data protection authority.
Mexico (where Mexican law applies): if Mexican data protection law applies to you, you may have the right to lodge a complaint with the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Information about INAI is available at https://www.inai.org.mx.

Nothing in this Privacy Policy limits any rights you may have under applicable gambling dispute resolution processes. For certain gambling-related disputes, you may be able to seek help from an independent dispute resolution body such as IBAS; information about registering a dispute is available at https://ibas-uk.com/consumers/register-with-ibas/. Please note that such mechanisms address betting and gaming disputes and do not replace your data protection rights.

Updates

We may update this Privacy Policy from time to time, for example to reflect changes in law, regulatory guidance, our services, or our data processing practices in relation to Casino Sky on casinoskai.com.

How We Will Inform You

Website publication: the current version of this Privacy Policy is always available on casinoskai.com. The "Last updated" date at the end of the Policy indicates when it was most recently revised.
Direct notifications: for material changes, we will take additional steps to inform you, which may include email notifications, messages displayed within your account dashboard, or prominent notices (such as banners) on casinoskai.com.

Advance Notice and Your Options

Advance notice for significant changes: where we make changes that significantly affect how we process your personal data or your rights, we will, where reasonably practicable, provide you with at least 30 days' notice before the changes take effect.
Reviewing changes: during the notice period, you should review the updated Privacy Policy carefully. If you continue to use Casino Sky on casinoskai.com after the effective date, you will be deemed to have acknowledged the updated Policy.
Right to object or close your account: if you do not agree with a material change, you may object where permitted by law, adjust your privacy or marketing settings, or close your Casino Sky account in accordance with our terms and conditions.

Last updated: 6 November 2025.