At Trino Casino, we run trinoo.de and we assume protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve established our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we collect, store, manage, and secure your information when you access our website, play games, or communicate with our affiliate systems. We hold transparency is essential for a trusting relationship. By outlining our data handling practices clearly, we want you to be confident that your sensitive financial details and personal identifiers remain in a secure digital environment, handled by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Identifikace správce údajů a právní základ zpracování
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal team operates from a registered office inside the European Economic Area, making us fully bound by GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate program, we depend on your explicit consent, which you can revoke at any time without affecting the core services we offer.
2. Groups of User Information Gathered During Registration and Gaming
To offer a seamless entertainment experience that satisfies German regulations, we obtain a few specific kinds of personal data, just what is necessary. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you fulfill the strict age minimum imposed by German regulators. When you commence playing, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geographically filter to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, recording bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not obtain special categories of sensitive data unless you freely give that information during a responsible gaming self-assessment or a support inquiry.
7. Cookie Handling and Monitoring Technologies for Compliance with Laws
Our website uses different digital markers, and our permission management tool guarantees that no unnecessary trackers trigger until a user in Germany gives explicit consent through our detailed preference center. Necessary session cookies, which do not store personal data but preserve your gaming session and security tokens operational, are exempt from consent requirements under the ePrivacy Directive as implemented in German law. For continuous analytics and affiliate tracking cookies, we use server‑side tagging where practicable to reduce client‑side exposure. Our affiliate tracking code runs on a first-party data model to circumvent contemporary browser limitations, enabling precise attribution without aggressive tracking scripts that are prohibited under German digital regulations. We’ve grouped all scripts with thorough explanations of their purpose, duration, and the outside providers included, so you can change your settings whenever you like. Declining promotional cookies does not affect the functionality of the casino lobby or payment portals. That shows our privacy‑by‑design approach: core services stay fully accessible regardless of consent choices you make.
4. Data Preservation Plans and Anonymization Techniques
We do not retain your personal data forever. We adhere to a strict storage limitation principle. Active customer accounts store data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
5. International Transmissions and Technological Protection Measures
Our primary data processing systems sit in protected data centers inside the European Union, but at times we require sub-processors in various countries. In such specific cases, we ensure the equivalent degree of security by using Standard Contractual Clauses endorsed by the European Commission, along with a comprehensive Transfer Impact Assessment. To safeguard your financial data from unapproved access during communication, we enforce Transport Layer Security (TLS 1.3) encryption across all endpoints, blocking obsolete cipher suites. At rest, personal data within our managed database clusters is secured by AES‑256 encryption, and access to decryption keys is confined to a separate privileged access management system. We perform ongoing vulnerability scans, required penetration tests, and strict logical access controls so solely the individuals who must have it can access your data. We maintain a dedicated Data Protection Officer you can access through our platform, and we maintain an incident response plan that mandates us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could pose your rights at risk.
3. Particular Processing Activities Connected with the Affiliate Programme
Our affiliate network, reachable via our legal and affiliates hub, operates as a separate data processing area. We act as a joint controller together with our marketing partners. When a German webmaster or content creator signs up for our partner program, we collect business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which enables us to attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate sees aggregated performance numbers rather than individual player identities. We check player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.
6. Exercising Your own Prerogatives Pursuant to Germany’s and European Regulations
If you live in Germany, you have a set of rights that we have made straightforward to exercise. You may file a data access request at any moment. We are then required to verify whether we store your data and give you a duplicate in a organized, commonly used, machine‑readable format within 30 days. The right to rectification lets you correct outdated or incorrect profile information without hesitation, which is vital for seamless payment handling. Under certain circumstances, you are entitled to a restriction of processing, particularly if you dispute the accuracy of data while we verify it. The right to removal, commonly https://www.blick.ch/brand-studio/swiss-casinos-besitzer-hans-ueli-joeggi-rihs-ueber-seine-einsaetze-yb-und-den-generationenwechsel-der-mensch-ist-eine-spielernatur-id15662928.html known as the “right to be forgotten,” is applicable when the data has become unnecessary for the initial objective, though legal retention obligations may provisionally supersede this demand. You additionally possess the right to information portability for details provided under consent or contract, so you are able to shift your usage history to a alternative provider. You have an total right to oppose direct marketing, and you are able to contest to processing based on justified grounds, which we’ll evaluate against our compelling grounds. Appeals can be submitted immediately with the data oversight body of your German state if you suspect a infringement has occurred.
Frequently Asked Questions
How does Trino Casino check my age under German regulations?
We use a multi-tiered system: automatic checks against national databases and hands-on document review. When you register, you must submit your national ID card or passport through an encrypted portal. Our compliance team verifies this with the Schufa identity service to verify legal age. If something doesn’t match, we briefly restrict the account until a video identification call with a certified agent can clear things up, all in line with the German Interstate Treaty on Gambling.
Is it possible that my personal data be shared with the affiliate who brought me?
No. Our affiliate programme employs a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from attempting to identify individual players. This ensures your gameplay completely separate from the marketing channel that brought you to Trino Casino.
In what way can I permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance https://trinoo.de/legal-and-affiliates/. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Is Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Send an email from the address tied to your account to our Data Protection Officer, include “SAR” in the subject line. We’ll verify your identity with a two‑factor step. After that, we collect your data from all systems—chat logs, game history, identity documents—and generate a digitally signed PDF and a machine‑readable JSON file, which will be sent to you within one calendar month.