Privacy Policy

This Privacy Policy explains the processing of personal data by Merkur Bets Malta Ltd., Level 3, St Julians Business Centre, Triq Elija Zammit, STJ 3155 St Julians, MALTA (hereinafter referred to as: Merkur Bets).

1. Processing of personal data

All personal data is processed in accordance with statutory provisions and in compliance with the General Data Protection Regulation (GDPR). Personal data is only seen by people who are authorised by Merkur Bets and are entitled to have to know this data to do their job.

1.1. Registration

In the course of personal registration and setting up a betting account for the first time, the customer provides the following personal data in accordance with the relevant laws:

master data (first and last name(s), place of residence, birth data, citizenship, etc.)
contact details (valid email address, optional: valid telephone number)
password or PIN (freely selected by the customer)
account settings (language, currency, bonus, various confirmations, …)

The provision of this data by the customer (with the exception of account settings) is prescribed by law and/or required to comply with the Merkur Bets contract. Without this data, Merkur Bets cannot comply with its statutory and contractual obligations and cannot therefore enter into the contractual relationship. (The account settings are used to be able to customise the management of the betting account and the standard gambling settings for bets.).

Furthermore, on registration and thereafter partly on an ongoing basis, data is processed or obtained as follows:

First at the time of registration and at periodic intervals thereafter, a check is required by law to establish whether the customer is a politically exposed person or a person listed under UN/EU or national sanctions and for the purpose of adverse media screening. This is done by comparing the data provided by the customer with a suitable database.
Furthermore, firstly on registration and thereafter whenever the customer logs in or places a bet, there is a legal requirement for the data provided by the customer to be compared with the relevant blacklists or sanctions lists.
As part of the registration process, deposit, gambling and bet limits selected by Merkur Bets and/or by the customer are set.

1.2. Identity verification and/or legitimation

The identity is verified during or after registration. This requires:

Details or copy of a valid, official identification document with photograph, which meets national passport and identification requirements
Proof of address verification of the player

Furthermore, on identity verification and thereafter partly on an ongoing basis, data is processed or obtained as follows:

On registration, a comparison of the data provided by the customer may be made with the database of a service provider specialised in carrying out identity checks or a state or regional database to assist Merkur Bets in checking the customer"s identity, the minimum age and home address.
As part of the registration process and thereafter if required, an electronic identity procedure may be carried out by a service provider specialized in identity verification in order to support Merkur Bets in confirming the accuracy and authenticity of the information provided. In this case, the customer may be photographed.
In order to prevent money laundering and to comply with player protection, additional risk-appropriate proof may be required on registration and at periodic intervals thereafter in accordance with the relevant statutory provisions. Personal data may also be checked by specialist providers if necessary. Such evidence may include, for example, the customer"s profession, notarized copy of passport, proof of address registration, origin of assets for betting stakes (e.g. general information on assets, details of monthly income and deposit amounts, proof of income), creditworthiness information, verification of payment account, etc.
As part of identity verification and anti-money laundering measures, verification and risk data may be processed (e.g. verification status, verification results, risk ratings, processing notes, etc.).

Identity verification is required by law, among other things, due to the Gambling Act, the protection of minors and the prevention of money laundering.

1.3. Payments into and out of the account

Every customer is provided with a betting account during the registration process and this is used to make and receive payments. At the latest before the first payout of winnings (or when the deposit threshold of two thousand Euros is reached), Merkur Bets must verify the identity of the customer due to legal requirements in order to ensure that the person requesting the payout is also the registered customer. Information on identity verification is described under point 1.2.

In the course of payments, the following data can be collected:

transaction data for the payment (ID, date and time, IP address, etc.)
billing and payment details (amount, payment confirmation or refusal, etc.)
data of the holder of the payment account (name of the account holder, e-mail address, …)
bank details (name of the account holder, name of the bank, IBAN, BIC)
specific details about the payment (account ID, mobile phone number, bonus code, credit card type, etc.)
compliance with bonus terms and conditions
compliance with the limits
betting account and balance details (account balance, real-money and bonus balances, pending or failed payment transactions, adjustments to the account balance, …)

The provision of this data by the customer is required to comply with the contract and statutory obligations. Without this data, Merkur Bets cannot make a payment or pay out any winnings.

1.4. Gambling process

If the customer places a bet, the following personal data is collected from the customer:

transaction data for the bet (ID, date and time, IP address, etc.)
details about the bet (number, subject of the bet, event and odds, stake, winnings, etc.)
compliance with the limits
compliance with bonus terms and conditions

The collection of this data is required for Merkur Bets to comply with statutory obligations and the contract. Without this data, Merkur Bets cannot accept any bets.

The provision of this data by the customer is required.

To fight fraud, when bets are placed, information will be obtained from specialist service providers about any existing cases of suspected fraud

The collection of this data is a legal requirement to fight fraud. Without this information, Merkur Bets cannot accept any bets.

1.5. Support and complaint management

In the course of support queries and complaints from customers, the following personal data is collected:

master and contact data collected from the customer during registration or provided by the customer in the request
content of the requestor complaint including the attachment
data of the request (ID, date and time, IP address, …)

This data must be provided to comply with the contract. Without this data, Merkur Bets cannot provider user-specific support or process complaints.

In addition, the following data may be collected from the customer:

If customers contact the support hotline, they can help to improve the service quality by voluntarily agreeing to the conversation being recorded. In this case, the audio recording will be used for internal evaluation and to improve the service.
If the customer contacts the support hotline via chat, further data protection provisions apply, which are linked in the chat widget.

1.6. Player protection

If the customer applies for a player protection measure or sets limits, the following personal data will be collected from the customer:

transaction data, master data
payment and betting limits
lock data (master data, duration, reason, etc.)
Data and analyses relating to betting behaviour (e.g. frequency and duration of use, deposits, stakes, winnings and losses, …)
Data relating to player protection measures (e.g. warning messages, risk assessments, cooling-off periods, self-assessments, contact initiatives and other interventions, …)

The provision of this data by the customer is required to comply with the contract and statutory obligations for player protection.

1.7. Technical information

If the customer is active on the Merkur Bets website or if the app is used, the following data can be collected:

usage, login and session data (ID, date and time, IP address, browser and device information, …)
technical data enabling identification of a end device
login data
geo data depending on user settings

The collection of this data is necessary to protect the facilities of Merkur Bets from attacks and any subsequent criminal prosecution of attackers, as well as to prevent cases of fraud.

When interacting with the system, the technical data collected from the customer can be compared with the database of a service provider specialized in cyber security and fraud prevention to support Merkur Bets protect its betting systems and processes and prevent fraud.

Due to existing legally prescribed regional restrictions on betting offers, the collection of this data is also necessary to determine the region in which the customer is located at the time of his interactions ("Geo-IP restrictions").

The processing of this data is in the legitimate interest of Merkur Bets to ensure integrity, combat fraud and protect its systems.

1.8. Marketing

The following data is processed to send information about Merkur Bets, newsletters, offers relating to particular services, vouchers and other advertising materials if the customer agrees to this processing:

contact details (name, address, email address, mobile phone number)
details about the newsletter or news and sending data

We send you current offers and news about our products and services on various channels: by email, SMS, push message, post or by phone.

This data is processed only subject to the customer"s consent, which can be withdrawn at any time without stating a reason via user account or by contacting support.

1.9. Further purposes

Merkur Bets will inform the customer if the provided personal data is processed for any purpose other than the purpose stated above.

2. Recipients

Possible recipients of the above-mentioned data are the following:

authorities, public institutions and courts due to statutory obligations to provide information
authorities and public institutions carrying out the database comparison required by law to check:
1. any existing national blocking of the customer
2. identity (master data, address data) and/or
3. whether the customer has agreed or refused to receive advertising materials
IT, platform, hosting and security service providers
tax consultants
providers who carry out identity checks, credit checks or who keep registers of politically exposed persons or sanction checks
service providers that support the prevention of money laundering and player protection
service providers/organisations specialised in fighting fraud
banks and payment providers
support providers
marketing service providers

The transfer of data to authorities, public institutions and tax consultants is necessary for legal reasons.

In order to preserve the legitimate interests of Merkur Bets, the transmission of transaction data, together with the necessary master data, to specialised service providers for fraud prevention is required. Furthermore, in order to safeguard our legitimate interests, master data and/or blocking data are transmitted to the Group of Companies for prevention purposes.

The disclosure of data to (criminal prosecution) authorities is necessary to investigate possible attacks on Merkur Bets.

The transfer of data to IT service providers is necessary to process the bets.

Support data must be transferred to IT and support providers for support management and to process customer queries and complaints.

Merkur Bets concludes corresponding contracts with all external service providers and, in cases of joint processing, the external processors / responsible parties.

Some data can also be transferred to various recipients in a third country (outside the European Economic Area). The level of data protection in third countries is not necessarily of the same level as that of member states of the European Economic Area. However, Merkur Bets only transfers customers" personal data to countries, for which the EU Commission has decided that they have an appropriate level of data protection or implements measures to guarantee that all recipients have an appropriate level of data protection. To this end, Merkur Bets additionally concludes, amongst others, standard contract clauses. These are available on request using the contact email address.

3. Data retention

The data retention of the processed data depends on the purpose of the processing and legal obligations.

In general, the above-mentioned data is stored for as long as the business relationship exists and for as long as required to comply with statutory retention obligations. The retention obligations can still exist even if the customer account is closed or the customer relationship terminated.

Data that are only processed with the customer"s consent (e.g. marketing data) are stored as long as the customer"s consent has been given.

4. Cookies

Merkur Bets also uses cookies and other technologies to design its website and apps to be more personalised, clearer and more secure for users, to improve its website and apps, to facilitate the use of specific features or to carry out specific statistical analysis.

Cookies are small data files stored on the user"s device, allocated to the browser or specific app, and through which the setter of the cookie obtains specific information. Cookies may contain specific (personal) data (e.g. IP address, your operating system/device"s settings, website from which the data file is accessed, name of the file or date and time of access).

Visitors can prevent the use of cookies in their browser settings. Depending on the browser, there is the option to be asked for your consent before cookies are used. Instructions on how to block or delete cookies are provided at www.aboutcookies.org. If cookies are not accepted or are deleted, this may lead to the functionality of the website or app being restricted in some cases.

First-party cookies are directly set and stored by our website (or domain) or any JavaScript loaded on the website. These cookies allow us to collect analytics data, remember language settings and perform other useful functions that provide a good user experience. First-party cookies are supported by all browsers and can be blocked or deleted by the user.

Third-Party Cookie and External Content: We use cookies and active JavaScript contents from external providers on our websites, in applications and newsletters. A third-party cookie can be set and created by a third-party server. These are usually used for online-advertising purposes and placed on a website through a script or tag. When you access our site, these external providers might receive personal information relating to your visit to our websites. It is possible that this data is processed outside of the EU. Third-party cookies are supported by all browsers, but many are blocking the creation of third-party cookies by default. Users are also taking matters into their own hands and deleting third-party cookies on their own. Please also note that Merkur Bets cannot accept any liability for external content and for the settings of these cookies and the cookies policy of the respective third party is applicable.

You can find more information as well as types of cookies which can be used on our websites, in applications and in newsletters under the Cookie Settings.

5. Profiling

Merkur Bets carries out customer profiling, which involves the automated processing of personal data for the purpose of evaluating and analysing certain personal aspects of its customers, in particular aspects relating to their payment, transaction, and betting behaviour.

The rule-based and statistical analysis methods employed for this purpose help Merkur Bets to comply with its legal obligations regarding the detection of unusual transaction behaviour and to fulfil its obligations in relation to the prevention of gambling addiction ("Responsible Gaming"). In particular, transaction, payment, betting, usage and verification data may be taken into account.

Another purpose of profiling is to prevent money laundering, terrorist financing, fraud and other forms of misuse, as well as to identify suspicious transactions or behaviour. To this end, risk categories or risk indicators can be established on the basis of specific factors.

To detect and prevent potential misuse of bonus offers and, particularly in cases of suspicion, to prevent fraud AI-supported procedures may also be used. These procedures assist during registration and throughout the course of betting – including the use of bonus offers – in identifying patterns, anomalies or potential abusive behaviour, and in generating appropriate alerts.

The results, recommendations or risk ratings generated by these processes are intended to assist the relevant staff members. Decisions regarding measures to be taken in relation to the customer are not made automatically, but only after a substantive review by an appropriately authorised member of staff at Merkur Bets.

The processing of personal data for the purpose of preventing and detecting fraud and the misuse of bonus offers is carried out on the basis of Merkur Bets" legitimate interest in detecting and preventing fraudulent and other misuse of its services.

6. Rights of persons concerned

In addition to the right to information – in cases of joint processing with external partners – the customers can assert their right to information from both contractual partners – customers also have the right to correct, delete, restrict, object to and transfer their personal data. Legal retention obligations are taken into account when implementing the right to deletion. In addition, the customer is free to lodge a complaint with the data protection authority.

7. Changes to our data protection declaration

Our privacy policy may occasionally be subject to necessary changes, in particular due to current case law, the coming into force of new laws or the change or expansion of our offer, of which we inform the customer by providing the changed privacy policy on our website. It is therefore recommended that the customer read the privacy policy regularly.

8. Contact

Merkur Bets Malta Ltd.

Adresse: Level 3, St Julians Business Centre, Triq Elija Zammit, STJ 3155 St Julians, Malta

E-Mail: privacy@merkurbets.com

Version 4.1

Last updated: 12.11.2026