Privacy Policy

1. Introduction

Skybox Finance (“Skybox Finance,” “Company,” “we,” “us,” or “our”) is committed to safeguarding the privacy and confidentiality of the personal information of our clients, prospective clients, and website visitors, including professional and amateur athletes and other counterparties (collectively, “you”). This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our athlete lending products and related services provided through our websites, online portals, and other channels (collectively, the “Services”).

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with any part of this Privacy Policy, you should not use the Services.

2. Information We Collect

We may collect the following categories of information, to the extent permitted by applicable law:

• Identification and contact information: Name, mailing address, email address, telephone number, date of birth, government-issued identification numbers, and related identifiers.
• Athlete and professional information: Team or club affiliation, league or association membership, contract details and compensation information, endorsement and sponsorship information, performance and career data, and other information relevant to our athlete lending underwriting.
• Financial and transactional information: Bank account and routing numbers, income and asset information, credit history and credit scores, payment history, transaction records, account balances, internal risk ratings, and other information used to evaluate and service loans or other credit products.
• Compliance and verification information: Information obtained for identity verification, anti-money laundering (AML), know-your-customer (KYC), sanctions screening, and other regulatory checks, including information from third-party verification providers and public records.
• Technical and usage information: Internet protocol (IP) address, browser type, device identifiers, operating system, pages viewed, access times, referring websites, and other information collected via cookies, pixels, and similar technologies.
• Communications: Records of communications with us, including emails, messages submitted through our website, call logs, and notes of discussions with our representatives.

Where required by law, certain information (for example, biometric or health-related data, if ever collected) will be treated as sensitive and afforded additional protections.

3. Sources of Information

We may collect information from the following sources:

• Directly from you, when you apply for a product, create an account, execute transaction documents, or communicate with us.
• From our counterparties, including agents, advisors, business managers, and other authorized representatives acting on your behalf.
• From sports teams, leagues, federations, player associations, and similar organizations, to the extent permitted by contract and law.
• From credit bureaus and consumer reporting agencies.
• From service providers and data vendors that assist us with identity verification, fraud prevention, underwriting, and compliance.
• From public sources, such as publicly available databases, social media (where permitted), and official league or team publications.
• Automatically, through your use of our websites and online Services via cookies and similar technologies.

4. How We Use Your Information

We may use your information for the following business and operational purposes, to the extent permitted by applicable law:

• Providing and administering the Services: Processing applications, evaluating eligibility, underwriting and structuring athlete lending and related products, originating and servicing credit, and maintaining your accounts.
• Executing and managing transactions: Funding loans, processing payments, monitoring performance, managing collateral (including contractual payment streams), and performing ongoing portfolio management.
• Risk management and compliance: Performing credit and risk assessments, conducting KYC/AML and sanctions screening, complying with applicable laws, regulations, supervisory guidance, and requests from governmental and regulatory authorities.
• Communications: Responding to inquiries, providing account statements and notices, sending transaction confirmations, and communicating about updates to our terms, policies, and Services.
• Improvement and analytics: Operating, maintaining, and improving our websites and platforms; conducting data analytics and internal reporting; enhancing user experience; and developing new products and services.
• Security and fraud prevention: Protecting the integrity and security of our systems, preventing, detecting, and investigating fraud, unauthorized transactions, and other illicit or harmful activity.
• Other legitimate business purposes: As permitted by law, including recordkeeping, internal controls, audit, governance, and exercising or defending legal claims.

We will not use your personal information for purposes that are materially different from those described in this Privacy Policy without providing you with any required notice or obtaining your consent where required by law.

5. How We Share Your Information

Subject to applicable law and contractual restrictions, we may disclose your information as follows:

• Affiliates: To our parent entities, subsidiaries, and other affiliates for the purposes described in this Privacy Policy, including risk management, compliance, servicing, and product development.
• Financial counterparties and funding partners: To banks, financial institutions, investors, syndicate participants, securitization vehicles, and other funding partners that provide financing to, or otherwise participate in, our athlete lending transactions.
• Service providers: To third-party service providers who perform services on our behalf, such as cloud hosting, data storage, payment processing, identity verification, credit reporting, analytics, document management, communications, and professional services. These parties are required to use the information only as instructed by us and to protect it in accordance with applicable law and contractual obligations.
• Professional advisors: To our attorneys, auditors, consultants, and other professional advisors where necessary to obtain advice, manage risk, or establish, exercise, or defend legal claims.
• Regulators and authorities: To governmental, regulatory, supervisory, tax, or law enforcement authorities, courts, or other third parties when we believe disclosure is required or appropriate under applicable law, regulation, legal process, or governmental request.
• Business transfers: In connection with any proposed or actual merger, acquisition, restructuring, financing, sale of assets, or other corporate transaction involving Skybox Finance, where information may be transferred as part of the transaction, subject to appropriate confidentiality protections.
• With your consent or at your direction: To any other third party as expressly authorized by you.

We do not disclose your personal information to non-affiliated third parties for their independent marketing purposes.

6. Cookies and Online Tracking

We may use cookies, web beacons, and similar technologies to collect technical and usage information when you visit our websites or use our online Services. These technologies help us:

• Recognize you and your device.
• Maintain security and session integrity.
• Understand how our websites are used and improve performance.
• Customize and enhance your experience.

You may be able to configure your browser to refuse cookies or to alert you when cookies are being sent. However, some portions of the Services may not function properly if you disable cookies.

7. Data Security

We employ administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction. These measures may include access controls, encryption, network security technologies, secure storage, and employee training.

Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, while we strive to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations (including applicable record-retention requirements), to resolve disputes, and to enforce our agreements. In many cases, this will require that we retain information for a period of years after a transaction or relationship has ended, consistent with our internal policies and applicable law.

9. Your Rights and Choices

Depending on your jurisdiction and subject to applicable law, you may have certain rights regarding your personal information, which may include:

• The right to access and obtain information about the personal information we hold about you.
• The right to request correction of inaccurate or incomplete personal information.
• The right to request deletion of personal information, subject to legal and contractual retention obligations.
• The right to object to or restrict certain processing, including for direct marketing (if applicable).
• The right to withdraw consent where processing is based on your consent (without affecting the lawfulness of processing prior to withdrawal).
• The right to data portability, where applicable.

To exercise these rights, you may contact us using the details in Section 13. We may need to verify your identity and jurisdiction before processing your request, and in some circumstances we may be unable to fully comply due to legal, regulatory, or contractual requirements.

If you are a resident of a jurisdiction with specific privacy legislation (for example, the European Union/European Economic Area, the United Kingdom, California, or other U.S. states with privacy laws), additional disclosures and rights may apply. We will provide such disclosures as required under applicable law, which may be set out in a supplemental notice.

10. Children's Privacy

Our Services are directed to adults in connection with professional and commercial lending activities and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take appropriate steps to delete such information, unless retention is required by law.

11. International Transfers

If you access the Services from outside the jurisdiction in which our primary operations are located, your information may be transferred to, stored, and processed in a country that may have data protection laws that differ from those in your jurisdiction. Where required by law, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) to protect personal information transferred across borders.

12. Updates to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory developments, or for other operational reasons. When we make material changes, we will update the “Effective Date” at the top of this Privacy Policy and, where required by law, provide additional notice or obtain consent. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your rights with respect to your personal information, please contact us at: