Skypoker Privacy Policy

Every wager, deposit and login at Skypoker generates data, and understanding how that data is collected, stored and protected is part of managing your bankroll intelligently. This independent review breaks down the operator’s documented privacy practices so UK players know exactly what happens to their personal information from registration to withdrawal.

Information We Collect

Skypoker collects the personal data required to run a licensed real-money poker account under UK Gambling Commission licence no. 065519. Because the operator — Bonne Terre Gaming Limited, part of Sky Betting and Gaming within The Stars Group, wholly owned by Flutter Entertainment Plc — must verify every player is 18 or over and holds only one account, the data collected is broader than a typical e-commerce signup.

Personal Data Categories

The operator documents the following categories of information:

• Identity data: full name, date of birth, residential address and nationality, collected to satisfy age and identity verification before any withdrawal is permitted.
• Contact data: email address and telephone number used for account communications and security alerts.
• Account data: username, Poker Nickname, password, login history and account preferences.
• Financial data: payment instrument details tied to deposits and withdrawals via Visa debit card, Mastercard, PayPal, Pay by Phone, Pay by Bank, Apple Pay, Revolut Pay and Bank Transfer, plus transaction histories such as deposits from the £5 minimum and withdrawals from the £10 minimum.
• Gameplay data: cash game and tournament activity, including hands played, rake generated, SPs earned through Sky Poker Rewards and use of Twisters, Sit & Go and Multi-Table Tournaments.
• Technical data: IP address, device identifiers, browser type and usage logs from the browser client and the iPhone and iPad app.
• Verification documents: copies of photographic ID and proof of address submitted to complete KYC checks, which are mandatory before the first withdrawal.

Collection Methods

Data reaches Skypoker through several channels. Registration forms capture identity and contact details directly. Cookies and similar technologies record technical and session data as players move between the lobby, tables and the cashier. Payment providers confirm transaction data when a deposit or withdrawal is processed. Verification data arrives when players upload documents, and gameplay data is logged automatically by the proprietary software developed by Orbis Technology whenever a hand is dealt.

How We Use Your Data

The operator processes player data for three broad purposes: running the poker service, marketing its products and meeting its legal duties as a UK-licensed gambling business. Each purpose has a distinct legal basis under UK data protection law, which matters because it determines what players can object to.

Service Provision

Core processing covers everything needed to operate the account: authenticating logins, seating players at cash games and tournaments, crediting deposits, paying withdrawals through the advertised rails (instant card withdrawals typically within 1-4 hours on Visa and participating Mastercards, Pay by Bank appearing in your bank immediately, and PayPal often completed within 24 hours), and enforcing the £250,000 maximum winnings cap per wager or gameplay transaction. Loyalty processing, including the six Sky Poker Rewards tiers and monthly rakeback of up to 20%, also falls under service provision.

Marketing Communications

Skypoker uses account and gameplay data to tailor promotions, including bonus offers such as the welcome package of up to £50 worth of tournament tickets and weekly rewards bonuses. Players can adjust marketing preferences in their account settings or unsubscribe from email communications at any time without affecting the underlying service. Data may also be shared across sister brands — Sky Bet, Sky Vegas, Sky Casino, Sky Bingo and Sky Bet Games — where consent settings allow.

Legal Obligations

As a licensee of the UK Gambling Commission (licence no. 065519) and HM Government of Gibraltar (Remote Gambling Licence No. 156), the operator must process data for anti-money laundering checks, fraud detection, age verification, self-exclusion schemes and reporting duties. This processing cannot be opted out of; it is a condition of holding a UK licence and of players being able to withdraw. Details of safer gambling tools sit on the dedicated page: Skypoker responsible gambling.

Data Protection and Security

Skypoker states that it applies technical and organisational measures to protect player data against unauthorised access, loss or disclosure. For a payments-heavy product handling card details, PayPal credentials and identity documents, these controls are the line between a recoverable inconvenience and a compromised bankroll.

Security Measures

• Encryption of data in transit between the player device, the browser client and the operator’s servers, including traffic from the iPhone and iPad app.
• Access controls limiting which staff and systems can view identity and financial records.
• Account-level protections such as password authentication and monitoring for unusual login or withdrawal patterns.
• Segregated payment processing so that full card details are handled through the deposit and withdrawal rails rather than stored in plain form.

Data Retention Periods

The operator retains personal data for as long as the account remains active and, after closure, for the period required by gambling regulation, tax law and anti-money laundering rules. Verification documents and transaction records are typically kept for several years after the relationship ends because the UK Gambling Commission requires licensees to demonstrate historical compliance. Players cannot demand immediate erasure of records the operator is legally obliged to keep; deletion rights apply only to data held on consent or contractual bases once the account is closed and statutory periods expire.

Your Rights

UK players hold enforceable rights over their Skypoker data under UK GDPR and the Data Protection Act 2018. Exercising them costs nothing, and the operator must respond within the statutory timeframe.

Access and Correction

Players may request a copy of the personal data Skypoker holds about them, including account records, transaction histories and gameplay logs. If any detail is inaccurate — a mistyped address or an outdated phone number — the player can require correction. Keeping identity data accurate matters financially: a mismatch between account details and verification documents is one of the most common causes of delayed withdrawals.

Deletion Requests

Players can ask for their data to be erased once the account is closed, subject to the retention obligations described above. Data processed for marketing can be deleted or suppressed immediately on request. Data held to satisfy licensing, AML and tax duties remains for the legally mandated period, after which it is deleted or anonymised.

Contact Information

Privacy requests are handled through the customer support channels listed on the operator’s help pages, and players may also complain to the UK Information Commissioner’s Office if they believe their data has been mishandled. The full contractual picture, including privacy-related clauses, is covered here: Skypoker terms and conditions.

Frequently Asked Questions about Skypoker