At Trino Casino, we run trinoo.de and we assume protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve developed our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document explains exactly how we collect, hold, manage, and safeguard your information when you use our website, engage in games, or communicate with our affiliate systems. We consider transparency is crucial for a trusting relationship. By outlining our data handling practices clearly, we intend you to remain confident that your sensitive financial details and personal identifiers remain in a secure digital environment, managed by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Identifikace správce údajů a právní základ zpracování
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. For processing your data, we depend on six specified lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also employ legitimate interest for analytics and security actions, including fraud detection algorithms and network integrity checks, as long as these do not outweigh your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
4. Data Retention Schedules and Anonymization Techniques
We never hold your personal data permanently. We adhere to a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window concludes, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
2. Types of Personal Data Collected at Sign-Up and Playing
To deliver a flawless entertainment experience that meets German regulations, we obtain a few certain categories of personal data, only what’s really needed. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you meet the strict age minimum set by German regulators. When you start playing, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we geographically filter to ensure you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, logging bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not obtain special categories of sensitive data except when you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
5. International Movements and Technical Safety Measures
Our primary data processing systems sit in secure data centers in the European Union, but sometimes we require sub-processors in other countries. In such specific cases, we ensure the equivalent level of security by employing Standard Contractual Clauses authorized by the European Commission, together with a thorough Transfer Impact Assessment. To protect your financial data from unauthorized access during transmission, we apply Transport Layer Security (TLS 1.3) encryption across all endpoints, blocking outdated cipher suites. At rest, personal data stored in our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is limited to a isolated privileged access management system. We conduct regular vulnerability scans, required penetration tests, and stringent logical access controls so solely the personnel who require it can view your data. We maintain a appointed Data Protection Officer you can contact through our platform, and we have an incident response plan that requires us to alert the appropriate German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
3. Specific Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, accessible through our legal and affiliates hub, functions as a separate data processing area. We serve as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism utilizes first‑party cookies dropped via a unique affiliate link, which allows us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We check player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code of conduct that forbids partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
6. Using Your Entitlements According to German and European Union Law
If you are a resident of Germany, you have a range of entitlements that we have made straightforward to enforce. You can submit a subject access request at your convenience. We are then required to verify whether we hold your personal details and provide you with a copy in a structured, standard, machine‑readable format within 30 days. The right to correction allows you fix stale or erroneous profile details without delay, which is vital for seamless payment handling. Under certain circumstances, you are entitled to a suspension of operations, particularly if you dispute the precision of data while we check it. The right to deletion, often called the “right to be forgotten,” applies when the data is no longer needed for the original goal, though mandatory storage requirements may provisionally overrule this petition. You are also granted the right to data transfer for information furnished under authorization or agreement, so you can move your activity log to a different provider. You enjoy an unconditional entitlement to oppose direct marketing, and you can object to operations based on justified grounds, which we will assess against our justifiable bases. Complaints can be lodged straight with the privacy regulator of your German state if you suspect a violation has happened.
7. Cookie Management and Tracking Technologies for Compliance with Laws
Our website uses different digital markers, and our permission management tool guarantees that no unnecessary trackers activate until a user in Germany gives explicit consent through our detailed settings panel. Required session cookies, which do not save personal data but keep your gaming session and security keys working, are excluded from consent requirements under the Electronic Privacy Directive as applied in German regulations. For continuous analytics and affiliate attribution cookies, we employ server‑side tagging where feasible to reduce browser-side exposure. Our affiliate tracking code runs on a first-party data model to circumvent current browser restrictions, enabling accurate commissioning without intrusive fingerprinting scripts that are forbidden under German internet law. We’ve grouped all scripts with comprehensive descriptions of their function, duration, and the outside providers involved, so you can change your choices whenever you like. Rejecting advertising cookies does not affect the functionality of the casino lobby or payment systems. That reflects our privacy-first approach: essential services stay entirely usable no matter what approval selections you make.
Frequently Asked Questions
How can Trino Casino verify my age according to German regulations?
We utilize a comprehensive system: automated checks against national databases and human document review. When you create an account, you must submit your national ID card or passport through an encrypted portal. Our compliance team verifies this with the Schufa identity service to establish legal age. If something is inconsistent, we briefly restrict the account until a video identification call with a certified agent can resolve the issue, all in line with the German Interstate Treaty on Gambling.
Can my personal data be passed on with the affiliate who brought me?
No. Our affiliate programme uses a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements clearly prohibit them from seeking to identify individual players. This maintains your gameplay completely separate from the marketing channel that brought you to Trino Casino.
How do I permanently withdraw my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, casino trino datenschutzrichtlinie, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Will Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How can I get a complete record of my stored data?
Send an email from the address tied to your account to our Data Protection Officer, place “SAR” in the subject line. We’ll verify your identity with a two‑factor step. Subsequently, we compile your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, which you’ll receive within one calendar month.