At LalaBet Casino, data protection is a basic right, and we are dedicated to safeguarding the personal information of every user who visits lalabet https://lalabet.at/legal-and-affiliates/.at from Austria. This Privacy Policy outlines how we gather, manage, retain, and transfer your details when you browse the website, register, use our gaming services, or join the affiliate programme. We adhere to the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our method is built on clarity, integrity, and responsibility. We wish to clarify what data we obtain, why we request it, what we do with it, and how you can maintain control of it at every phase. This document also acts as a comprehensive guide for affiliate partners, outlining how their data is treated within the LalaBet Casino affiliate programme. By accessing our platform, you acknowledge that you have read and understood this policy.
Exploring Our Confidentiality Promise
Privacy at LalaBet Casino is not an afterthought. It shapes every framework, process, and collaboration we sustain. Our confidentiality framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer oversees all processing activities and can answer any questions you have about your rights at any time. We review our policies on a consistent schedule, run data protection impact evaluations, and train our staff so personal data is handled with care. The same rigorous controls apply to our affiliate programme. We are open about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our objective is to create a safe, trustworthy setting where you can enjoy our entertainment options without jeopardizing your privacy.
Legal Grounds for Data Handling
Each processing activity we undertake is based on a lawful legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you open an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are carried out to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to enhance our services based on legitimate interest, after a balancing test to confirm your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually base on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.
Information Retention and Safeguards
We retain your personal data only for as long as needed to fulfil the purposes for which it was obtained, or as mandated by Austrian law. Account data is typically maintained for the period of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention obligations. Once the retention period expires, we permanently erase or anonymize your data. To safeguard your information, we have established technical and organizational security protocols. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous monitoring of our systems for suspicious behavior. Our staff receive ongoing privacy and security education, and we keep a tested incident response plan. If a personal data breach poses a risk to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue hesitation and, where required, advise you directly.
Enforcing Your Data Subject Rights
Under the GDPR, you possess a set of robust rights that allow you manage your private data. You have the right to access the data we hold about you and to receive a duplicate in a systematic, commonly used format. You can require us to fix inaccurate or missing information without undue delay. In specific circumstances, you may seek that we erase your data, constrain its use, or challenge to processing based on valid interests. You also have the right to data transferability for information you have given us, and you can retract your permission for marketing or other consent-based processing at any time. To exercise any of these rights, reach our Data Protection Officer at the email address given in the contact section of our website. We will respond to your request within one month. We will not impose a cost unless the request is manifestly baseless or unreasonable. You also have the right to lodge a appeal with the Austrian Data Protection Authority if you believe our processing violates data protection law.
Types of Personal Data We Collect
To offer our services and meet our legal obligations, we collect several types of personal data. We obtain this information straight from you, through your use as you browse our website, and in some cases from trusted third parties. We gather only the data needed for the objectives described in this policy. These groups include:
- Personal and contact data: full name, date of birth, home address, email address, and phone number.
- Profile and financial data: username, password, transaction history, deposit and withdrawal details, and payment method information.
- Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Validation and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming records.
- Referral data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We hold sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method ensures the collection constrained and focused. All data is handled according to the rule of data minimization.
Purposes for Managing Your Details
We process your personal data for a specific set of goals, each tied to a specific legal basis. The principal reason is to set up and manage your player account, carry out deposits and withdrawals, and offer the gaming services you have sought under our terms and conditions. Without this operation, we cannot fulfill our contractual obligations to you. We also employ data to upgrade our platform, personalize your experience, and send relevant promotional offers if you have given clear consent. Fulfilling legal obligations is another key reason; we authenticate your identity, supervise transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also manage data to spot and thwart fraud, ensure game integrity, and secure our systems. For the affiliate programme, we use affiliate data to follow referrals, determine commissions, and optimize our marketing partnerships.
Providing Information to Outside Entities
We share your personal data only with trusted third parties that enable us provide our services, and we do so under strict contractual safeguards. These entities include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to track referrals and calculate commissions for affiliate partners. In every case, we confine the data shared to what is required for the third party to fulfill its function. We under no circumstances sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We assess each request carefully to ensure it is legal and proportionate before we comply.
Cross-Border Transfers and Measures
As an online casino operating in a global environment, some of our service providers and group companies may be located outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to maintain an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We carry out transfer impact assessments to confirm that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Personal Data Management within the Affiliate Programme
The affiliate programme we run is an essential component of the LalaBet Casino ecosystem, and we apply the same privacy standards for affiliates as we apply to players. When you sign up for the affiliate programme, we obtain the personal data you provide during registration, such as your name, contact details, payment information, and tax identification number. We likewise automatically gather data about traffic generated through your affiliate links, like click-through rates, registrations, and player activity metrics. These details is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with other affiliates or external parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, such as the right to access, correct, and delete your information, in accordance with our legal retention obligations. We have executed data processing agreements with the providers of our affiliate platform to ensure your data is processed lawfully and securely at all times.
