At LalaBet Casino, privacy is a basic right, and we are dedicated to securing the personal data of every user who accesses lalabet.at from Austria. This Privacy Policy outlines how we collect, process, store, and disclose your details when you visit the site, register, engage with our games, or participate in the affiliate programme. We adhere to the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all applicable national legislation. Our strategy is based on openness, fairness, and liability. We want you to know what data we collect, why we request it, what we process it for, and how you can maintain control of it at every step. This document also functions as a clear reference for affiliate partners, specifying how their data is handled within the LalaBet Casino affiliate programme. By accessing our platform, you acknowledge that you have perused and accepted this policy.
Recognizing Our Data Protection Promise
Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and partnership we sustain. Our data protection framework meets the requirements set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can address any questions you have about your rights at any time. We review our policies on a consistent schedule, run data protection impact reviews, and train our staff so personal data is handled with care. The same strict controls apply to our affiliate programme. We are open about the data we collect and the purposes for which we use it, and we never sell your personal information to third parties. Our objective is to create a safe, trustworthy atmosphere where you can enjoy our entertainment options without jeopardizing your privacy.
Personal Data Management in the Affiliate Programme
This affiliate programme is an essential component of the LalaBet Casino ecosystem, and we apply the same privacy standards towards affiliates as we extend to players. Upon joining the affiliate programme, we collect the personal data you supply when registering, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data about traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. These details is utilised solely to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with fellow affiliates or third parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, encompassing the right to access, correct, and delete your information, depending on our legal retention obligations. We have executed data processing agreements with the providers of our affiliate platform to guarantee your data is handled lawfully and safely at all times.
Global Transfers and Protections
As an online casino operating in a global environment, some of our service providers and group companies may be situated outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we establish appropriate safeguards to ensure an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We carry out transfer impact assessments to confirm that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Objectives for Processing Your Data
We manage your personal data for a clearly defined set of purposes, each tied to a specific legal basis. The primary reason is to create and oversee your player account, carry out deposits and withdrawals, and offer the gaming services you have requested under our terms and conditions. Without this processing, we would not be able to fulfill our contractual obligations to you. We also use data to upgrade our platform, customize your experience, and dispatch relevant promotional offers if you have given clear consent. Fulfilling legal obligations is another key reason; we confirm your identity, supervise transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to detect and thwart fraud, ensure game integrity, and fortify our systems. For the affiliate programme, we utilize affiliate data to follow referrals, determine commissions, and enhance our marketing partnerships.
Information Retention and Security Measures
We store your personal data only for as long as needed to meet the purposes for which it was obtained, or as required by Austrian law. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention requirements. Once the retention period concludes, we securely delete or anonymize your data. To secure your information, we have established technical and organizational security protocols. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious activity. Our staff undergo ongoing privacy and security instruction, and we uphold a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue hesitation and, where required, advise you directly.
Legal Basis for Data Processing
Any processing activity we perform rests on a valid legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are conducted to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to better our services based on legitimate interest, after a balancing test to make sure your rights are not overridden. For marketing communications and certain cookies, we rely on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.
Enforcing Your Data Subject Rights
Under the GDPR, you possess a set of powerful rights that enable you govern your personal information. You are authorized to access the data we keep about you and to get a version in a structured, commonly used format. You can request us to correct inaccurate or partial information without undue delay. In certain circumstances, you may seek that we delete your data, limit its use, or object to processing based on lawful interests. You also have the right to data transferability for information you have given us, and you can withdraw your permission for promotional or other consent-based processing at any time. To apply any of these rights, contact our Data Protection Officer at the email address given in the contact section of our website. We will answer to your demand within one month. We will not levy a fee unless the request is obviously unfounded or unreasonable. You also have the right to lodge a grievance with the Austrian Data Protection Authority if you believe our processing breaches data protection law.
Categories of Personal Data We Gather
To offer our services and meet our legal duties, we collect several categories of personal data. We gather this information straight from you, automatically as you browse our website, and in some cases from trusted third parties. We gather only the data necessary for the purposes described in this policy. These groups include:
- Identity and contact data: full name, date of birth, home address, email address, and phone number.
- Account-related and financial data: username, password, transaction history, deposit and withdrawal details, and payment method details.
- System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Verification and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
- Partner data: affiliate ID, referral links, traffic sources, commission particulars, and marketing performance metrics.
We hold sensitive data to a minimum and never request political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method maintains the collection restricted and focused. All data is handled according to the principle of data minimization.
Providing Information to Outside Entities
We disclose your personal data only with trusted third parties that enable us deliver our services, and we do so under rigorous contractual safeguards. These parties include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that keep our platform secure. We may also share data with our affiliate software platform to track referrals and calculate commissions for affiliate partners. In every case, we limit the data shared to what is essential for the third party to execute its function. We under no circumstances sell your personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We examine each request diligently to ensure it is valid and proportionate before we accede.
