At Trino Casino, we operate trinoo https://trinoo.de/legal-and-affiliates/.de and we accept protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve developed our operations to satisfy the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we obtain, store, process, and safeguard your information when you use our website, play games, or interact with our affiliate systems. We hold transparency is crucial for a trusting relationship. By presenting our data handling practices clearly, we aim you to remain confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, controlled by a responsible data controller that adheres to local laws and jurisdictional boundaries.
3. Specific Processing Activities Related to the Affiliate Programme
Our affiliate network, accessible through our legal and affiliates hub, operates as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we obtain business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism utilizes first‑party cookies dropped via a unique affiliate link, which allows us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate sees aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prevents partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.
4. Data Retention Schedules and De-identification Methods
We don’t keep your personal data permanently. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
2. Groups of Personal Data Collected During Registration and Playing
To provide a flawless entertainment experience that meets German regulations, we collect a few certain categories of personal data, just what is necessary. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you fulfill the strict age minimum established by German regulators. When you begin gaming, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geo-filter to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, documenting bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not obtain special categories of sensitive data except when you willingly give that information during a responsible gaming self-assessment or a support inquiry.
Frequently Asked Questions
How can Trino Casino check my age under German regulations?
We employ a comprehensive system: automated checks against national databases and hands-on document review. When you create an account, you must submit your national ID card or passport through an encrypted portal. Our compliance team verifies this with the Schufa identity service to establish legal age. If something doesn’t match, we provisionally restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Is it possible that my personal data be passed on with the affiliate who recommended me?
No. Our affiliate programme uses a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from attempting to identify individual players. This keeps your gameplay completely separate from the marketing channel that brought you to Trino Casino.
How can permanently revoke my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What transpires to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Will Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, place “SAR” in the subject line. We’ll authenticate your identity with a two‑factor step. Subsequently, we compile your data from all systems—chat logs, game history, identity documents—and generate a digitally signed PDF and a machine‑readable JSON file, which will be sent to you within one calendar month.
6. Applying Your Entitlements Pursuant to German legal and European Regulations
For residents of Germany, you possess a range of entitlements that we’ve made simple to enforce. You may file a personal data inquiry at any time. We then have to verify whether we hold your information and give you a version in a systematic, commonly used, machine‑readable layout within 30 days. The right to amendment enables you to update outdated or incorrect profile details without waiting, which is essential for efficient payment processing. In some cases, you may request a restriction of processing, notably if you challenge the accuracy of data while we verify it. The right to deletion, commonly known as the “right to be forgotten,” applies when the data has become unnecessary for the primary objective, though mandatory storage requirements may temporarily override this demand. You are also granted the right to data portability for details supplied under authorization or agreement, so you are able to shift your activity log to a different provider. You have an absolute right to object to direct marketing, and you may oppose to processing based on legitimate interests, which we shall weigh against our compelling grounds. Grievances can be filed immediately with the data protection authority of your German state if you suspect a breach has taken place.
7. Cookie Administration and Tracking Tools for Compliance with Laws
Our website utilizes different digital markers, and our permission management tool guarantees that no non-essential trackers activate until a German visitor gives explicit consent through our detailed settings panel. Essential session cookies, which don’t store personal information but keep your play session and security credentials working, are excluded from permission requirements under the ePrivacy Directive as applied in German law. For ongoing analytics and affiliate tracking cookies, we implement server-side tracking where practicable to minimize browser-side exposure. Our affiliate tracking code operates on a first-party data model to circumvent current browser restrictions, enabling precise attribution without invasive fingerprinting scripts that are forbidden under German digital law. We’ve classified all scripts with detailed descriptions of their function, length, and the external vendors included, so you can modify your preferences at any time. Rejecting advertising cookies does not impair the functionality of the gaming lobby or payment portals. That demonstrates our privacy‑by‑design approach: core services are entirely usable irrespective of consent choices you choose.
5. International Transfers and System Security Safeguards
Our principal data processing systems sit in secure data centers in the European Union, but occasionally we require sub-processors in various countries. In those specific cases, we assure the same degree of safeguarding by employing Standard Contractual Clauses endorsed by the European Commission, combined with a detailed Transfer Impact Assessment. To protect your financial data from unapproved access during transmission, we implement Transport Layer Security (TLS 1.3) encryption across all connection points, refusing old cipher suites. At rest, personal data within our managed database clusters is secured by AES‑256 encryption, and access to decryption keys is restricted to a segregated privileged access management system. We run regular vulnerability scans, compulsory penetration tests, and strict logical access controls so only the people who need it can see your data. We maintain a appointed Data Protection Officer you can contact through our platform, and we maintain an incident response plan that obligates us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could put your rights at risk.
1. Data Controller Identification and Legal Basis for Processing
We act as the data controller for all personal details collected through Trino Casino at trinoo.de, which is customized for German users. Our legal department is based in a registered office within the European Economic Area, so we are fully subject to GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
