Privacy Policy

Version: 1.0  |  Last Updated: 29 October 2026

1. Introduction

Welcome to Mero8, accessible at mero88.casino (the "Platform", "we", "us" or "our"). We are committed to handling your personal information with transparency, integrity and respect. This Privacy Policy ("Policy") explains what data we collect when you visit or use our Platform, why we collect it, how we process and protect it, and the rights available to you as a data subject.

By creating an account, making a deposit, accessing our games or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must stop using the Platform immediately. This Policy should be read alongside our Terms and Conditions and our Responsible Gaming page, both of which form part of the overall framework governing your relationship with Mero8.

2. Data We Collect

We collect personal data through several distinct channels, depending on how you engage with the Platform. The categories below outline each type of data we may hold about you.

2.1 Registration and Account Data

When you open an account with Mero8, we collect the information you provide directly, including:

• Full name, date of birth and gender;
• Residential address, city, country and postal code;
• Email address and phone number;
• Username and encrypted password;
• Preferred currency (NPR – Nepalese Rupee or any accepted alternative).

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage access, we may request:

• Government-issued photo ID (passport, national identity card or driving licence);
• Proof of residential address (utility bill, bank statement dated within the last three months);
• Proof of payment method ownership (screenshot or statement for eSewa, Khalti, IME Pay, Prabhu Pay, Skrill, Neteller, Visa/Mastercard or any other accepted method);
• Source-of-funds documentation when required by our compliance team.

KYC documents are handled with the highest level of confidentiality and stored in encrypted form.

2.3 Financial Transaction Data

Every deposit and withdrawal generates a transaction record that may include payment method identifiers, transaction amounts, timestamps, currency conversion details and reference numbers. We do not store full card numbers; only masked identifiers are retained.

2.4 Gaming Activity Data

We record all gaming sessions, including game titles played, bet amounts, wins, losses, session duration, self-exclusion status and any responsible gaming limits you apply. This data is used both to deliver our services and to monitor for signs of problem gambling behaviour, as described in our Responsible Gaming page.

2.5 Technical and Device Data

When you access the Platform, our servers and third-party analytics tools automatically collect technical information, including:

• IP address and approximate geolocation;
• Device type, operating system and browser version;
• Screen resolution and time-zone settings;
• Pages visited, clicks, scroll depth and session duration;
• Referring URLs and exit pages.

2.6 Communications Data

If you contact our support team by email, live chat or any other channel, we retain records of those communications, including your messages, our responses and any attachments you submit. These records help us resolve disputes and improve service quality.

2.7 Marketing Preferences

We record your consent status for promotional emails, SMS and push notifications, as well as any opt-out requests you submit. You may manage these preferences at any time through your account settings.

3. How We Use Your Data

Mero8 processes your personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. Our primary purposes are:

3.1 Account Management and Service Delivery

We use your registration, identity and financial data to create and maintain your account, authenticate your identity at login, process deposits and withdrawals, apply bonuses and promotions, and provide access to games and Platform features.

3.2 Compliance and Fraud Prevention

We process KYC and transaction data to verify your identity, confirm your age is at least 18 years, conduct anti-money laundering (AML) checks, detect duplicate accounts, investigate suspicious behaviour and fulfil our obligations under applicable compliance frameworks. Failure to provide required documentation may result in account suspension or closure.

3.3 Responsible Gaming

Gaming activity data and account behaviour are analysed to support responsible gaming measures, including deposit limits, session time alerts, cooling-off periods and self-exclusion. We may proactively contact you if our systems identify behaviour patterns associated with problem gambling.

3.4 Customer Support

Communications data is used to respond to your enquiries, resolve complaints, process disputes and improve the quality and efficiency of our support team.

3.5 Marketing and Personalisation

Where you have given explicit consent, we may send you promotional offers, newsletters and personalised recommendations. We may also personalise your on-site experience based on your gaming preferences. You can withdraw your marketing consent at any time without affecting the lawfulness of prior processing.

3.6 Platform Improvement and Analytics

Technical and device data is used in aggregate to identify errors, improve site performance, optimise the user interface and conduct internal business analytics. Wherever feasible, this analysis is performed on anonymised or pseudonymised data sets.

4. Legal Bases for Processing

We rely on one or more of the following legal bases when processing your personal data. The applicable basis depends on the specific processing activity involved:

We periodically review the legal bases applied to our processing activities to ensure they remain appropriate and up to date.

5. Data Sharing & Third Parties

Mero8 does not sell your personal data to any third party. We may, however, share data with carefully selected partners and service providers where necessary to operate the Platform or fulfil a legal obligation.

5.1 Payment Processors

We share transaction data with payment service providers that facilitate deposits and withdrawals on our Platform. These include local digital wallet operators (e.g., eSewa, Khalti, IME Pay, Prabhu Pay), international e-wallets (Skrill, Neteller, Payz), card networks (Visa, Mastercard), cryptocurrency processors and bank transfer intermediaries. Each provider operates under its own privacy policy and is bound by contractual data-protection obligations.

5.2 Identity Verification and Compliance Providers

To execute KYC and AML screening, we may share identity documents and personal details with third-party verification services. These providers are contractually required to process your data only on our instructions and to maintain appropriate security measures.

5.3 Game and Software Providers

Game providers integrated into our Platform may receive your account identifier, currency setting and session data to deliver their games. They do not receive unnecessary personal data, and all integrations are governed by data-processing agreements.

5.4 Analytics and Marketing Partners

We use analytics services to understand Platform usage. Where consent has been given, we may also work with advertising partners to deliver personalised offers. All such transfers are governed by appropriate data-protection safeguards.

5.5 Legal and Regulatory Authorities

We may disclose personal data to competent authorities, courts or law-enforcement agencies when required to do so by applicable law, court order or regulatory direction. In such cases, we disclose only the minimum data necessary to satisfy the legal obligation.

6. Cookies & Tracking Technologies

Mero8 uses cookies and similar tracking technologies (collectively, "Cookies") to ensure the Platform functions correctly and to provide you with a better experience. Cookies are small data files stored on your device when you visit a website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for core Platform functionality such as session management, login authentication and security. These cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies: Collect aggregated information about how visitors use the Platform, enabling us to identify bottlenecks and improve page performance.
• Functional Cookies: Remember your preferences, such as language and currency settings, to personalise your experience across sessions.
• Marketing and Targeting Cookies: Used (with your consent) to deliver relevant promotional content and to measure the effectiveness of our advertising campaigns.

6.2 Managing Cookies

You can control non-essential Cookies through our Cookie Consent banner, which appears on your first visit, or through your browser settings. Please note that disabling certain categories of Cookies may reduce the functionality of the Platform. Your consent preferences are stored and can be updated at any time.

6.3 Third-Party Tracking

Some Cookies are placed by third-party services embedded in our Platform, such as analytics providers. These parties are governed by their own privacy and cookie policies, which we encourage you to review independently.

7. Data Security

We take the security of your personal data seriously and implement a combination of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration or disclosure.

7.1 Technical Measures

• TLS/SSL encryption across all data transmitted between your device and our servers;
• AES-256 encryption for data stored at rest, particularly for KYC documents and financial records;
• Multi-factor authentication (MFA) available for all user accounts;
• Regular automated vulnerability scanning and penetration testing of our infrastructure;
• Firewall protection and intrusion-detection systems monitoring all inbound and outbound traffic.

7.2 Organisational Measures

Access to personal data is restricted to authorised personnel who require it to perform their job functions. All team members with access to sensitive data are bound by strict confidentiality obligations and receive regular privacy and security training. In the event of a data breach that poses a risk to your rights, we will notify affected users without undue delay and take immediate remedial action.

While we employ robust safeguards, no digital system can guarantee absolute security. We encourage you to choose a strong, unique password and to notify us immediately at [email protected] if you suspect any unauthorised access to your account.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable compliance standards.

• Account and identity data: Retained for the duration of your account, plus a minimum of five (5) years after account closure to satisfy AML and fraud-prevention obligations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Gaming session data: Retained for two (2) years from the date of each session, or longer if required for dispute resolution or responsible gaming reviews.
• Marketing preference records: Retained for the life of your account and for one (1) year after any opt-out, to demonstrate compliance with your preference.
• Support communications: Retained for two (2) years from the date of last contact, or longer if related to an open or ongoing dispute.

When data is no longer required, we securely delete or anonymise it so that it can no longer be attributed to you as an individual. Data retained solely in anonymised form falls outside the scope of this Policy.

9. Your Rights

As a data subject, you have the following rights in relation to the personal data we hold about you. We are committed to responding to valid requests within a reasonable timeframe, and in any event within 30 days of receipt, unless the request is complex or numerous, in which case we may extend this period by a further 30 days with prior notice.

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how that data is processed, the categories of recipients with whom it is shared, and the retention periods that apply. We will provide this information in a clear, portable format upon verified request.

9.2 Right to Rectification

If any of your personal data is inaccurate, incomplete or out of date, you have the right to request that we correct or update it. For certain details — such as your registered email or phone number — you may make changes directly within your account profile. For others, including identity documents, please contact our support team.

9.3 Right to Erasure

You may request that we delete your personal data where: (i) it is no longer necessary for the purposes collected; (ii) you withdraw the consent on which processing was based and no other legal basis applies; (iii) the data was processed unlawfully; or (iv) deletion is required to comply with a legal obligation. Please note that this right is subject to overriding legal and regulatory retention obligations. We cannot erase data that we are legally required to hold.

9.4 Right to Restriction of Processing

You may request that we restrict processing of your data in specific circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed. During a restriction, we may continue to store your data but will not actively use it for other purposes.

9.5 Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.

9.6 Right to Object

You may object at any time to processing based on our legitimate interests, including profiling carried out for direct marketing or analytics purposes. Upon receipt of a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.

9.7 Right to Withdraw Consent

Where processing relies on your consent — such as for marketing communications or non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal was received.

9.8 How to Exercise Your Rights

To exercise any of the rights described in this Section, please submit a written request to [email protected]. We may need to verify your identity before processing your request to prevent unauthorised disclosure. Requests are processed free of charge, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

10. International Data Transfers

Mero8 operates on a global infrastructure, which means your personal data may be transferred to and processed in countries other than the one in which you reside. Some of these countries may not provide the same level of data-protection legislation as your home country.

Whenever we transfer personal data internationally, we take appropriate safeguards to ensure that your information remains protected in a manner consistent with this Policy. Such safeguards may include:

• Entering into Standard Contractual Clauses (SCCs) or equivalent binding agreements with the receiving party;
• Transferring data only to countries or organisations recognised as providing an adequate level of data protection by relevant authorities;
• Applying supplementary technical measures such as end-to-end encryption where appropriate.

If you would like further information about the safeguards in place for a specific international transfer, please contact our privacy team at [email protected].

11. Minors

The Platform is strictly intended for users who are 18 years of age or older. We do not knowingly collect, process or retain personal data from individuals below the age of 18. Age verification is a mandatory step in our registration and KYC process; any account found to belong to a minor will be immediately suspended and all associated funds will be handled in accordance with our Terms and Conditions.

If you believe that a minor has registered an account or provided us with personal data without authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate remedial action, including permanent account closure and secure deletion of the minor's personal data.

We strongly encourage parents and guardians to use parental-control software and to monitor their children's online activities. For additional resources on keeping minors safe, please visit our Responsible Gaming page.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing activities, applicable regulations, or Platform features. When material changes are made, we will notify you in advance by posting a prominent notice on the Platform or by sending an email to your registered address, giving you reasonable time to review the updated Policy before it takes effect.

The Version number and Last Updated date at the top of this document indicate the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with the changes, you must cease using the Platform and may request account closure by contacting [email protected]. We encourage you to review this Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have any questions, concerns or complaints about this Privacy Policy or the way in which Mero8 processes your personal data, please do not hesitate to contact us through the appropriate channel below:

We aim to respond to all privacy-related correspondence within 5 business days of receipt. For formal data-subject rights requests, the 30-day statutory response period applies as outlined in Section 9. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data-protection authority in your jurisdiction.

For information about safer gambling resources and organisations that can help with problem gambling concerns, including Gamblers Anonymous (www.gamblersanonymous.org), the National Council on Problem Gambling (ncpgambling.org), GamCare (gamcare.org.uk), GamTalk (gamtalk.org) and BeGambleAware (begambleaware.org), please refer to our Responsible Gaming page.

© 2026 Mero8 (mero88.casino). All rights reserved. This Privacy Policy is effective as of 29 October 2026 (Version 1.0).