Call us now:
At Trino Casino, we run trinoo.de and we take protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve developed our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document describes exactly how we collect, hold, handle, and protect your information when you access our website, play games, or communicate with our affiliate systems. We believe transparency is vital for a trusting relationship. By outlining our data handling practices clearly, we intend you to remain confident that your sensitive financial details and personal identifiers remain in a secure digital environment, handled by a responsible data controller that adheres to local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We serve as the data controller for all personal data gathered via Trino Casino at trinoo.de, designed specifically for users in Germany. Our legal team operates from a registered office inside the European Economic Area, making us fully bound by GDPR enforcement. For processing your data, we depend on six specified lawful bases. Most of the time, we process your data to fulfill our contractual obligations—like taking bets, processing withdrawals, and keeping your account running. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate program, we depend on your explicit consent, which you can revoke at any time without affecting the core services we offer.
2. Types of User Information Collected at Sign-Up and Playing
To deliver a smooth entertainment experience that complies with German regulations, we gather a few specific categories of personal data, solely what is required. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to make sure you fulfill the strict age minimum imposed by German regulators. When you start playing, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geo-filter to verify you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, recording bet history and time spent playing, so we can meet our responsible gaming obligations. We do not obtain special categories of sensitive data except if you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
6. Applying Your own Rights Under German and European Union Law
If you are a resident of Germany, you possess a collection of prerogatives that we keep easy to use. You may file a personal data inquiry at any moment. We must to verify whether we hold your personal details and give you a copy in a structured, commonly used, machine‑readable layout within 30 days. The right to rectification enables you to update outdated or erroneous profile data without delay, which is essential for smooth payment handling. Under certain circumstances, you can demand a suspension of data handling, notably if you contest the accuracy of data while we check it. The right to removal, commonly known as the “right to be forgotten,” takes effect when the data is no longer needed for the initial goal, though mandatory storage requirements may temporarily overrule this petition. You are also granted the right to data portability for details supplied under consent or contract, so you can move your usage history to a new service. You have an absolute entitlement to oppose direct marketing, and you may oppose to operations based on legitimate interests, which we’ll evaluate against our own justifiable bases. Complaints can be filed directly with the privacy regulator of your German region if you think a infringement has occurred.
5. Global Movements and System Security Safeguards
Our primary data processing systems are located in secure data centers within the European Union, but at times we must utilize sub-processors in various countries. In those specific cases, we assure the same degree of safeguarding by employing Standard Contractual Clauses authorized by the European Commission, together with a detailed Transfer Impact Assessment. To secure your financial data from unauthorized access during transfer, we enforce Transport Layer Security (TLS 1.3) encryption across all terminals, blocking obsolete cipher suites. At rest, personal data inside our managed database clusters is secured by AES‑256 encryption, and access to decryption keys is limited to a isolated privileged access management system. We conduct ongoing vulnerability scans, compulsory penetration tests, and strict logical access controls so exclusively the people who must have it can view your data. We maintain a specialized Data Protection Officer you can access through our platform, and we keep an incident response plan that obligates us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could pose your rights at risk.
4. Data Storage Timelines and Data Masking Strategies
We don’t keep your personal data forever. We observe a strict storage limitation principle. Active customer accounts store data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window expires, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. ähnlich wie dieses Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
3. Specific Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, reachable via our legal and affiliates hub, functions as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we obtain business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which enables us to attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We review player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prevents partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
7. Cookie Administration and Monitoring Technologies for Legal Compliance
Our website employs different digital markers, and our consent management system ensures that no non-essential trackers fire until a German user gives affirmative consent through our comprehensive preference center. Required session cookies, which do not store private data but maintain your play session and security credentials operational, are excluded from permission requirements under the ePrivacy Regulation as implemented in German regulations. For ongoing analytics and affiliate attribution cookies, we implement server-side tracking where possible to minimize client‑side exposure. Our partner tracking pixel operates on a first-party data model to circumvent contemporary browser limitations, allowing correct tracking without invasive fingerprinting scripts that are banned under German digital law. We’ve categorized all scripts with detailed descriptions of their intent, length, and the outside providers involved, so you can adjust your preferences whenever you wish. Declining advertising cookies does not affect the functionality of the gaming lobby or payment gateways. That reflects our privacy‑by‑design approach: essential services stay fully accessible regardless of consent choices you make.
Frequently Asked Questions
In what way does Trino Casino verify my age in line with German regulations?
We employ a multi-layered system: automatic checks against national databases and manual document review. When you sign up, you must submit your national ID card or passport through an encrypted portal. Our compliance team verifies this with the Schufa identity service to verify legal age. If something is inconsistent, we provisionally restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Can my personal data be passed on with the affiliate who brought me?
No https://trinoo.de/legal-and-affiliates/. Our affiliate programme operates with a strict aggregation firewall. We do not share your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements expressly prohibit them from trying to identify individual rp-online.de players. This maintains your gameplay completely separate from the marketing channel that brought you to Trino Casino.
In what way can I permanently revoke my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What transpires to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, put “SAR” in the subject line. We’ll verify your identity with a two‑factor process. Following that, we gather your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.