At weitere Infos hier, we operate trinoo.de and we assume protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve established our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document explains exactly how we gather, hold, process, and protect your information when you visit our website, participate in games, or interact with our affiliate systems. We consider transparency is essential for a trusting relationship. By presenting our data handling practices clearly, we aim you to feel confident that your sensitive financial details and personal identifiers stay in a secure digital environment, handled by a responsible data controller that complies with local laws and jurisdictional boundaries.
1. Identifikace správce údajů a právní základ zpracování
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. When handling your data, we rely on six established lawful bases. In most cases, we process your data to meet our contractual duties—such as accepting bets, handling withdrawals, and maintaining your account. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate program, we depend on your explicit consent, which you can revoke at any time without affecting the core services we offer.
6. Exercising Your own Rights According to German legal and European Union Law
If you live in Germany, you have a collection of prerogatives that we’ve made simple to use. You may file a data access request at your convenience. We are then required to verify whether we process your information and provide you with a version in a organized, commonly used, machine‑readable layout within 30 days. The right to correction lets you update outdated or inaccurate profile details without hesitation, which is crucial for seamless payment handling. In some cases, you are entitled to a suspension of operations, notably if you dispute the accuracy of data while we confirm it. The right to removal, frequently referred to as the “right to be forgotten,” is applicable when the data is no longer needed for the primary goal, though mandatory storage requirements may provisionally overrule this demand. You are also granted the right to data portability for data provided under agreement or contract, so you may transfer your transaction record to a new service. You possess an total right to object to direct marketing, and you are able to contest to operations based on justified grounds, which we will assess against our strong reasons. Complaints can be submitted immediately with the data protection authority of your German federal state if you believe a infringement has happened.
3. Detailed Processing Activities Related to the Affiliate Programme
Our affiliate network, accessible through our legal and affiliates hub, serves as a separate data processing area. We serve as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we collect business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We process referred player data in a pseudonymized format for commission calculation, so the affiliate sees aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is grounded in our contractual and legitimate business interests. We have a strict affiliate code of conduct that forbids partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
5. Cross-border Transmissions and Technical Protection Measures
Our principal data processing systems are located in protected data centers in the European Union, but occasionally we must utilize sub-processors in various countries. In those limited cases, we ensure the identical level of protection by using Standard Contractual Clauses authorized by the European Commission, along with a detailed Transfer Impact Assessment. To protect your financial data from unapproved access during transfer, we implement Transport Layer Security (TLS 1.3) encryption across all endpoints, blocking old cipher suites. At rest, personal data inside our managed database clusters is protected by AES‑256 encryption, and access to decryption keys is confined to a segregated privileged access management system. We conduct regular vulnerability scans, compulsory penetration tests, and strict logical access controls so only the personnel who must have it can view your data. We employ a dedicated Data Protection Officer you can access through our platform, and we maintain an incident response plan that obligates us to inform the appropriate German supervisory authority within 72 hours if a personal data breach could put your rights at risk.
2. Types of User Information Collected When Creating an Account and Gaming
To provide a seamless entertainment experience that meets German regulations, we gather a few certain types of personal data, just what is necessary. During account creation, we ask for identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you fulfill the strict age minimum set by German regulators. When you begin gaming, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we geographically filter to verify you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, logging bet history and time spent playing, so we can fulfill our responsible gaming obligations. We do not gather special categories of sensitive data unless you freely give that information during a responsible gaming self-assessment or a support inquiry.
4. Data Preservation Plans and De-identification Methods
We do not retain your personal data forever. We adhere to a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
7. Cookie Handling and Tracking Tools for Legal Compliance
Our website employs different digital markers, and our consent management platform guarantees that no unnecessary trackers activate until a German user gives affirmative consent through our comprehensive preference center. Essential session cookies, which don’t store private data but preserve your play session and security tokens working, are free from permission requirements under the ePrivacy Directive as implemented in German regulations. For ongoing analytics and affiliate tracking cookies, we implement backend tagging where practicable to limit browser-side exposure. Our partner tracking pixel functions on a first‑party context model to bypass contemporary browser https://www.srf.ch/audio/espresso/online-casinos-softwareupdate-sorgt-fuer-gigantische-schulden?partId=db5ebb7e-ff6a-43b1-afa5-04e6ed5d2c45 limitations, allowing precise attribution without invasive fingerprinting scripts that are banned under German digital law. We’ve grouped all programs with detailed descriptions of their function, timeframe, and the external vendors involved, so you can adjust your settings whenever you like. Rejecting advertising cookies does not impair the performance of the game lobby or payment systems. That shows our data-protection approach: essential services remain fully accessible no matter what approval selections you choose.
Frequently Asked Questions
How does Trino Casino check my age under German regulations?
We employ a multi-layered system: automated checks against national databases and hands-on document review. When you sign up, you must submit your national ID card or passport through an encrypted portal. Our compliance team verifies this with the Schufa identity service to verify legal age. If something is inconsistent, we provisionally restrict the account until a video identification call with a certified agent can clear things up, all in line with the German Interstate Treaty on Gambling.
Will my personal data be disclosed with the affiliate who referred me?
No. Our affiliate programme uses a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only sees a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from trying to identify individual players. This keeps your gameplay completely separate from the marketing channel that brought you to Trino Casino.
How do I permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What transpires to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How can I get a complete record of my stored data?
Send an email from the address tied to your account to our Data Protection Officer, put “SAR” in the welt.de subject line. We’ll authenticate your identity with a two‑factor step. After that, we gather your data from all systems—chat logs, game history, identity documents—and create a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.
