Your Privacy at Skyhills
This Privacy Policy explains what personal data we collect when you play at Skyhills Casino, why we collect it, who we share it with and how long we keep it. We operate under licence OGL/2024/1730/0912 issued by the Curaçao Gaming Control Board, and we handle your data in line with the UK GDPR and the Data Protection Act 2026.
Data We Collect
We collect only the data we need to run your account, meet our legal obligations and keep our platform safe. Since our launch in 2024, the categories below have stayed deliberately narrow.
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: ID document, proof of address and payment method evidence, collected under our KYC process before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses claimed and wagering records across GBP, EUR, USD, BTC and USDT.
- Technical data: device type, operating system, IP address, browser fingerprint and session logs.
- Gameplay behaviour: games played, stakes, session duration, win and loss history.
- Marketing preferences: whether you opted in to bonus emails and SMS, and how you engage with them.
How We Use Your Data
We use your data to open and maintain your account, verify your identity under KYC rules, process deposits and withdrawals through Visa Debit, Mastercard Debit, PayPal, Skrill, Neteller, Trustly and our crypto options, and prevent fraud and bonus abuse.
- Account creation and management of your Skyhills Casino membership.
- Identity, age and payment verification before your first withdrawal, processed within 48 hours.
- Payment processing and dispute handling for transactions from £20 upwards.
- Fraud prevention, anti-money-laundering checks and multi-account detection.
- Responsible-gambling monitoring, including enforcing your deposit and loss limits and reality checks.
- Marketing messages about promotions such as our 25% weekly cashback, sent only with your consent.
- Compliance with legal and regulatory obligations owed to the Curaçao Gaming Control Board.
Our Legal Bases
Contract. We process identity, transaction and gameplay data to perform the player agreement you accepted at registration. Without it we cannot hold funds, settle bets or pay withdrawals.
Legal obligation. Anti-money-laundering and KYC rules oblige us to verify your identity and report suspicious activity. We also retain transaction records for at least five years because the law requires it.
Legitimate interest. Fraud prevention, security monitoring and service improvement rely on our legitimate interest in running a safe casino. This never overrides your rights, and you may object to processing that relies on this basis.
Consent. Marketing communications, optional analytics cookies and some profiling activities run only with your consent. You can withdraw that consent at any time, and withdrawal never affects the lawfulness of processing that already happened.
How Long We Keep It
We keep each data category only as long as necessary, then delete or anonymise it.
Who We Share It With
We never sell your personal data. We share it only with partners who need it to deliver our service, under strict contractual data-protection terms.
Your Rights Under UK GDPR
You control your data. You can exercise any of the rights below at any time, free of charge, by emailing our data protection team.
If we do not respond within one month, or you are unhappy with how we handled your request, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete data where no legal retention duty applies.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing and optional cookies at any time.
- Complain: escalate to the ICO or your local data protection authority.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that load only after you consent in our cookie banner. You can change your choices at any time. Read the full details, including the categories of cookies and their lifespans, on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Card and wallet details are tokenised, so full payment credentials never sit in our systems. Access to player data is role-based, restricted to trained staff who need it, and every access is logged and auditable.
If a personal data breach ever occurs, we will notify the relevant supervisory authority within 72 hours and inform you directly where the breach poses a high risk to your rights.
Contact Our Data Team
Questions about this policy, your data or a rights request? Email our data protection officer at [email protected] or write to Skyhills Gaming N.V., Data Protection Office. We answer within one month, usually far faster through our 24/7 support channel at [email protected]. We may update this policy from time to time; the current version is always published on this page with its revision date.
Frequently asked questions
Does Skyhills Casino sell my personal data?
No. We share data only with payment processors, KYC providers, regulators and service partners who need it to run the casino, always under data-protection contracts.
How long do you keep my KYC documents?
We retain identity and payment verification documents for up to 5 years after your last transaction to meet anti-money-laundering requirements, then destroy them securely.
Can I stop marketing emails?
Yes. Withdraw consent at any time via the unsubscribe link in any email or by contacting our data protection team at [email protected].
How do I request a copy of my data?
Email [email protected] with your request. We will verify your identity and send the data we hold about you within one month, free of charge.