At Trino Casino, we run trinoo.de and we assume protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve built our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we collect, retain, process, and protect your information when you access our website, engage in games, or interact with our affiliate systems. We believe transparency is essential for a trusting relationship. By outlining our data handling practices clearly, we intend you to remain confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, handled by a responsible data controller that adheres to local laws and jurisdictional boundaries.
6. Applying Your Entitlements Pursuant to Germany’s and EU Law
If you are a resident of Germany, you are entitled to a range of entitlements that we keep easy to exercise https://trinoo.de/legal-and-affiliates/. You may file a data access request at your convenience. We must to verify whether we hold your personal details and provide you with a copy in a organized, standard, machine‑readable form within 30 days. The right to correction allows you fix stale or inaccurate profile details without hesitation, which is vital for smooth payment processing. Under certain circumstances, you are entitled to a limitation of operations, notably if you contest the correctness of data while we check it. The right to removal, often called the “right to be forgotten,” takes effect when the data has become unnecessary for the primary purpose, though legal retention obligations may provisionally supersede this petition. You additionally possess the right to information portability for information supplied under consent or contractual terms, so you are able to shift your transaction record to a new service. You possess an total right to refuse direct marketing, and you can object to operations based on legitimate interests, which we shall weigh against our compelling grounds. Complaints can be filed directly with the privacy regulator of your German region if you believe a violation has occurred.
7. Cookie Management and Tracking Technologies for Compliance with Laws
Our website employs various digital markers, and our consent management system guarantees that no non-essential trackers trigger until a German visitor gives explicit consent through our detailed preference center. Necessary session cookies, which do not store personal information but keep your game session and security tokens working, are exempt from approval requirements under the ePrivacy Regulation as applied in German legislation. For ongoing analytics and affiliate rp-online.de attribution cookies, we employ server‑side tagging where practicable to limit browser-side exposure. Our partner tracking pixel operates on a direct context model to work around contemporary browser limitations, enabling precise attribution without aggressive tracking scripts that are banned under German digital law. We’ve categorized all programs with thorough explanations of their function, timeframe, and the third‑party vendors involved, so you can change your choices at any time. Declining marketing cookies does not impair the functionality of the gaming lobby or payment gateways. That shows our privacy-first approach: core services are fully accessible irrespective of permission decisions you make.
1. Data Controller Identification and Legal Basis for Processing
We serve as the data controller for all personal data gathered via Trino Casino at trinoo.de, designed specifically for users in Germany. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. When we process your data, we rely on six defined lawful bases. Most of the time, we process your data to fulfill our contractual obligations—like taking bets, processing withdrawals, and keeping your account running. We also employ legitimate interest for analytics and security actions, including fraud detection algorithms and network integrity checks, as long as these do not outweigh your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
4. Data Preservation Plans and De-identification Methods
We never hold your personal data forever. We adhere to a strict storage limitation principle. Active customer accounts hold data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window concludes, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
2. Groups of Personal Data Gathered When Creating an Account and Gameplay
To offer a smooth entertainment experience that complies with German regulations, we obtain a few specific types of personal data, solely what is required. During account creation, we ask for identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you satisfy the strict age minimum established by German regulators. When you start playing, we manage financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geographically filter to ensure you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also track usage patterns and game session logs, logging bet history and time spent playing, so we can fulfill our responsible gaming obligations. We do not obtain special categories of sensitive data except when you willingly give that information during a responsible gaming self-assessment or a support inquiry.
5. International Movements and Technical Security Measures
Our principal data processing systems sit in secure data centers within the European Union, but at times we must utilize sub-processors in various countries. In those rare cases, we ensure the equivalent degree of security by implementing Standard Contractual Clauses authorized by the European Commission, together with a comprehensive Transfer Impact Assessment. To secure your financial data from illegitimate access during transfer, we enforce Transport Layer Security (TLS 1.3) encryption across all connection points, refusing old cipher suites. At rest, personal data inside our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is confined to a segregated privileged access management system. We perform regular vulnerability scans, mandatory penetration tests, and strict logical access controls so only the individuals who must have it can access your data. We employ a appointed Data Protection Officer you can access through our platform, and we have an incident response plan that requires us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
3. Detailed Processing Activities Related to the Affiliate Programme
Our affiliate network, accessible through our legal and affiliates hub, operates as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we obtain business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism employs first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is grounded in our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
Frequently Asked Questions
How does Trino Casino confirm my age in line with German regulations?
We employ a multi-layered system: automated checks against national databases and human document review. When you register, you must submit your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to confirm legal age. If something doesn’t match, we briefly restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Can my personal data be shared with the affiliate who recommended me?
No. Our affiliate programme uses a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from attempting to identify individual players. This keeps your gameplay completely separate from the marketing channel that led you to Trino Casino.
In what way can I permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What happens to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Will Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Email us from the address linked to your account to our Data Protection Officer, place “SAR” in the subject line. We’ll confirm your identity with a two‑factor step. Following that, we collect your data from all systems—chat logs, game history, identity documents—and create a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.
Leave a Reply