At LalaBet Casino lizenz, data protection is a fundamental right, and we strive to protecting the personal information of every user who visits lalabet.at from Austria. This Privacy Policy describes how we collect, manage, retain, and share your details when you browse the website, sign up, use our gaming services, or join the affiliate programme. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all relevant national legislation. Our approach is founded on transparency, integrity, and accountability. We aim to inform you what data we collect, why we need it, what we process it for, and how you can maintain control of it at every stage. This document also functions as a comprehensive guide for affiliate partners, outlining how their data is treated within the LalaBet Casino affiliate programme. By using our services, you acknowledge that you have perused and accepted this policy.
Understanding Our Confidentiality Promise
Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and collaboration we maintain. Our privacy framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can respond to any questions you have about your rights at any time. We review our procedures on a routine schedule, run data protection impact reviews, and train our staff so personal data is handled with care. The same strict controls apply to our affiliate programme. We are open about the data we collect and the reasons for which we use it, and we never sell your personal information to third parties. Our goal is to create a safe, trustworthy setting where you can enjoy our entertainment options without endangering your privacy.
Legal Basis for Data Processing
Any processing activity we carry out rests on a sound legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are conducted to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to make sure your rights are not overridden. For marketing communications and certain cookies, we rely on your freely given consent, which you can cancel at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we make sure the processing is proportionate and does not infringe the rights of the data subjects involved.
Reasons for Managing Your Data
We manage your personal data for a specific set of purposes, each connected to a specific legal basis. The primary reason is to set up and administer your player account, handle deposits and withdrawals, and deliver the gaming services you have sought under our terms and conditions. Without this handling, we could not satisfy our contractual obligations to you. We also utilize data to enhance our platform, tailor your experience, and send relevant promotional offers if you have given clear consent. Fulfilling legal obligations is another key reason; we confirm your identity, monitor transactions for suspicious activity, and maintain records as required by Austrian gambling regulations and anti-money laundering directives. We also manage data to identify and stop fraud, safeguard game integrity, and fortify our systems. For the affiliate programme, we use affiliate data to follow referrals, calculate commissions, and enhance our marketing partnerships.
Global Transfers and Measures
As an online casino functioning in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we send personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to guarantee an equivalent level of protection. These safeguards comprise standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to check that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Providing Information to Outside Entities
We disclose your personal data only with trusted third parties that help us offer our services, and we do so under strict contractual safeguards. These entities include payment service providers that handle deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that maintain our platform secure. We may also share data with our affiliate software platform to monitor referrals and compute commissions for affiliate partners. In every case, we restrict the data shared to what is strictly necessary for the third party to perform its function. We never sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We examine each request diligently to ensure it is legal and proportionate before we respond.
Categories of Personal Data We Gather
To offer our services and meet our legal obligations, we obtain several categories of personal data. We obtain this information straight from you, as you interact as you interact with our website, and in some cases from trusted third parties. We collect only the data required for the objectives described in this policy. These categories include:
- Identification and contact data: full name, date of birth, home address, email address, and phone number.
- Account-related and financial data: username, password, transaction history, deposit and withdrawal details, and payment method information.
- System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
- Referral data: affiliate ID, referral links, traffic sources, commission particulars, and marketing performance metrics.
We keep sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is essential for identity verification under Austrian anti-money laundering rules. Our strategy maintains the collection constrained and focused. All data is handled according to the principle of data minimization.
Data Storage and Protection Protocols
We retain your personal data only for as long as required to fulfil the purposes for which it was gathered, or as mandated by Austrian law. Account data is typically kept for the duration of your relationship with us and for up to ten years after account closure to comply with anti-money laundering and tax retention duties. Once the retention period expires, we safely remove or anonymize your data. To safeguard your information, we have put in place technical and organizational security controls. These include encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious behavior. Our staff get ongoing privacy and security instruction, and we keep a tested incident response plan. If a personal data breach poses a risk to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue hesitation and, where required, inform you directly.
Exercising Your Data Subject Rights
Under the GDPR, you possess a set of powerful rights that let you manage your private data. You are entitled to access the data we store about you and to get a version in a systematic, commonly used format. You can require us to rectify incorrect or incomplete information without undue delay. In particular circumstances, you may seek that we erase your data, limit its processing, or oppose to processing based on lawful interests. You also have the right to data transferability for information you have given us, and you can revoke your agreement for marketing or other permission-based processing at any time. To apply any of these rights, reach our Data Protection Officer at the email address given in the contact section of our website. We will answer to your inquiry within one month. We will not impose a charge unless the request is clearly baseless or disproportionate. You also have the right to file a grievance with the Austrian Data Protection Authority if you believe our processing infringes data protection law.
Data Processing within the Affiliate Programme
This affiliate programme forms a crucial part of the LalaBet Casino ecosystem, and we apply the same privacy standards to affiliates as we apply to players. When you sign up for the affiliate programme, we collect the personal data you provide during registration, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data about traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. These details is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with third-party affiliates or outside parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, encompassing the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have executed data processing agreements with the providers of our affiliate platform to ensure your data is handled lawfully and securely at all times.
