Privacy Policy — meritbet

meritbet collects personal data from players through multiple touchpoints during registration, gameplay, financial transactions, and customer support interactions. We collect only the data that is necessary for the legitimate purposes described in this Policy. The categories of personal data we collect include the following:

Identity and contact data: When you create a meritbet account, we collect your full legal name, date of birth, email address, and a valid Bangladeshi mobile phone number. This information is required to verify your identity, confirm your eligibility to use the platform, and communicate with you about your account.

Financial data: To process deposits and withdrawals in Bangladeshi Taka (BDT), meritbet collects information about the payment methods you use — including your bKash wallet number, Nagad account number, Rocket account, Upay account, or bank account details for Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other supported Bangladeshi financial institutions. We do not store full payment credentials on our servers; payment data is processed via secured third-party payment gateways.

Identity verification (KYC) documents: As part of our Know Your Customer (KYC) obligations, we may request copies of government-issued identity documents such as your National ID card, passport, or driving licence. We may also request proof of address and proof of ownership of your registered payment method. These documents are stored securely and used only for identity verification and fraud prevention purposes.

Technical and device data: When you access meritbet, we automatically collect technical information including your IP address, browser type and version, operating system, device identifier, screen resolution, timezone setting, and referring URL. This data is used to optimise platform performance, detect fraudulent access, and maintain platform security.

Gameplay and transaction data: We maintain detailed records of all betting and gaming activity on your meritbet account, including game sessions, wager amounts in BDT, outcomes, bonus activations, deposit history, and withdrawal requests. This data supports account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Communications data: When you contact meritbet via live chat, email (support@meritbet), or any other supported channel, we retain records of those communications including timestamps, content, and any documents you share with our team. This data is used to resolve your enquiry and improve our support services.

meritbet processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose beyond those described in this Policy without first obtaining your explicit consent. The primary purposes for which we use your personal data are as follows:

Marketing communications: meritbet may send promotional emails, SMS notifications, and in-platform messages to players who have opted in to receive marketing communications. These may include details of new games, seasonal promotions (such as Eid or Pohela Boishakh offers), BPL and IPL cricket betting specials, and exclusive reload bonus offers. You can withdraw your consent to receive marketing communications at any time by updating your account notification preferences or by contacting our support team.

meritbet operates on a minimal-disclosure principle — we share your personal data with third parties only where strictly necessary and only with parties who are contractually obligated to protect your data to the same standard we apply internally. The categories of third parties with whom your data may be shared are as follows:

• Payment processors and financial institutions: To process BDT transactions via bKash, Nagad, Rocket, Upay, DBBL, and other supported Bangladeshi banking channels, we share the minimum necessary financial data with our approved payment processing partners. These partners are bound by strict data protection agreements and applicable financial regulation.
• Identity verification providers: meritbet uses trusted third-party KYC and age verification service providers to validate identity documents and confirm player eligibility. These providers process identity data on our behalf under data processing agreements and are not permitted to use your data for any purpose beyond identity verification.
• Game content providers: Game studios and platform providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi receive anonymised session tokens and game-state data necessary to run game sessions. These providers do not receive your full identity or financial data.
• Fraud prevention and AML services: We share relevant transactional and device data with fraud detection and anti-money laundering screening services to protect the integrity of the meritbet platform and our player community.
• Regulatory and law enforcement authorities: meritbet will disclose personal data to relevant government authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or lawful regulatory request. We will notify affected players of such disclosure where we are legally permitted to do so.
• Professional advisers: Our legal counsel, auditors, and financial advisers may access limited personal data where necessary in the course of providing professional services to meritbet, and are bound by professional confidentiality obligations.

meritbet uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the platform. A cookie is a small text file placed on your device by your web browser when you visit meritbet. Cookies do not contain your full personal data, but may reference a unique session or account identifier that allows the platform to recognise your device across visits.

The types of cookies used on meritbet are as follows:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies from specific sites. Note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the meritbet platform. For mobile browser users accessing meritbet from Dhaka, Chittagong, Sylhet, or any other location in Bangladesh, cookie controls are available through your mobile browser's privacy settings.

meritbet applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and meritbet servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This ensures that your login credentials, financial transaction data, and personal details cannot be intercepted in transit.
• Two-factor authentication (2FA): meritbet offers optional 2FA for player accounts, requiring a one-time SMS code in addition to your standard password when signing in from a new device. We strongly recommend all players enable 2FA to protect their accounts.
• Secure data storage: Personal data and KYC documents are stored on encrypted servers with access restricted to authorised meritbet personnel on a strict need-to-know basis. All access to stored personal data is logged and audited.
• Payment data isolation: Full payment credentials (such as bKash or bank account details) are processed via our PCI-DSS compliant payment gateway partners and are not stored in plaintext on meritbet servers.
• Fraud and intrusion detection: meritbet operates 24/7 automated monitoring systems to detect anomalous login patterns, suspicious transactions, and potential account takeover attempts. Our security team responds to flagged events in real time.
• Staff training: All meritbet personnel who handle personal data receive regular training on data protection obligations and security best practices.

As a meritbet player, you have a number of rights in relation to your personal data. meritbet is committed to respecting and facilitating the exercise of these rights. Your rights include:

• Right of access: You have the right to request a copy of the personal data that meritbet holds about you. We will respond to verified access requests within a reasonable timeframe. Requests can be submitted to support@meritbet.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain account details directly through your meritbet account settings panel.
• Right to erasure: In certain circumstances, you have the right to request that meritbet delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn your consent and there is no overriding legal basis for retention. Note that some data must be retained for a minimum period to comply with financial and legal obligations, as described in Section 7.
• Right to restrict processing: You have the right to request that meritbet restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
• Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where meritbet processes your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data where meritbet relies on legitimate interests as the legal basis, and where you believe your interests, rights, or freedoms override those legitimate interests.

To exercise any of the above rights, please contact meritbet's support team via live chat or by writing to support@meritbet. We will acknowledge your request promptly and respond within a reasonable period. We may need to verify your identity before processing certain requests to prevent unauthorised access to another player's data.

meritbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements. The following retention periods apply:

When personal data is no longer required and there is no legal obligation to retain it, meritbet will securely delete or anonymise it so that it can no longer be attributed to any individual player. Anonymised and aggregated data (from which individual identity has been irreversibly removed) may be retained indefinitely for statistical analysis and platform improvement purposes.

Contacting meritbet about privacy: If you have any questions, concerns, or requests relating to this Privacy Policy or the way meritbet handles your personal data, please contact our support team via:

• Live chat: Available 24/7 directly on the meritbet platform.
• Email: support@meritbet (plain text — not a clickable link).
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

Policy updates: meritbet reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered email address or through an in-platform notification. The "Effective" date at the top of this Policy reflects the date of the most recent update. We encourage you to review this Policy periodically to stay informed about how your data is being protected.

Continued use: Your continued use of the meritbet platform following notification of a Policy update constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should discontinue use of the platform and contact our support team to request account closure in accordance with the Terms and Conditions.