At LalaBet Casino, data protection is a basic right, and we are dedicated to safeguarding the private data of every user who visits lalabet https://lalabet.at/legal-and-affiliates/.at from Austria. This Privacy Policy describes how we gather, handle, keep, and transfer your data when you visit the site, register, use our gaming services, or participate in the affiliate programme. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all applicable national legislation. Our strategy is based on transparency, equity, and accountability. We aim to inform you what data we collect, why we need it, what we use it for, and how you can maintain control of it at every stage. This document also functions as a clear reference for affiliate partners, detailing how their data is managed within the LalaBet Casino affiliate programme. By engaging with our offerings, you agree that you have perused and accepted this policy.
Understanding Our Data Protection Dedication
Privacy at LalaBet Casino is not an oversight. It shapes every system, process, and collaboration we sustain. Our confidentiality framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can answer any questions you have about your rights at any time. We review our procedures on a consistent schedule, run data protection impact assessments, and train our staff so personal data is managed with care. The same stringent controls apply to our affiliate programme. We are open about the data we collect and the purposes for which we use it, and we never sell your personal information to third parties. Our goal is to create a secure, trustworthy setting where you can enjoy our entertainment options without jeopardizing your privacy.
Providing Information to Outside Entities
We share your personal data only with vetted third parties that enable us offer our services, and we do so under strict contractual safeguards. These recipients include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that maintain our platform secure. We may also share data with our affiliate software platform to monitor referrals and determine commissions for affiliate partners. In every case, we confine the data shared to what is essential for the third party to fulfill its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to legitimate legal requests. We examine each request thoroughly to ensure it is valid and proportionate before we comply.
Purposes for Managing Your Data
We handle your personal data for a well-outlined set of objectives, each connected to a specific legal basis. The main reason is to set up and oversee your player account, handle deposits and withdrawals, and offer the gaming services you have sought under our terms and conditions. Without this operation, we would not be able to satisfy our contractual obligations to you. We also use data to improve our platform, personalize your experience, and send relevant promotional offers if you have given clear consent. Meeting legal obligations is another key reason; we confirm your identity, monitor transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to spot and prevent fraud, protect game integrity, and shield our systems. For the affiliate programme, we leverage affiliate data to track referrals, determine commissions, and enhance our marketing partnerships.
Legal Grounds for Data Processing
Every processing activity we carry out rests on a lawful legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you register an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are conducted to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to better our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually base on contractual necessity and legitimate interest, and we ensure the processing is proportionate and does not infringe the rights of the data subjects involved.
International Transfers and Safeguards
As an online casino functioning in a global environment, some of our service providers and group companies may be based outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we put in place appropriate safeguards to guarantee an equivalent level of protection. These safeguards cover standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to check that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this implies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Record Keeping and Security Measures
We store your personal data only for as long as required to fulfil the purposes for which it was obtained, or as mandated by Austrian law. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention requirements. Once the retention period ends, we permanently erase or anonymize your data. To safeguard your information, we have implemented technical and organizational security measures. These encompass encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous surveillance of our systems for suspicious activity. Our staff receive ongoing privacy and security instruction, and we maintain a tested incident response plan. If a personal data breach poses a danger to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue delay and, where required, inform you directly.
Types of Personal Data We Gather
To deliver our services and meet our legal requirements, we obtain several types of personal data. We gather this information directly from you, through your use as you browse our website, and in some cases from trusted third parties. We collect only the data required for the objectives described in this policy. These types include:
- Personal and contact data: full name, date of birth, home address, email address, and phone number.
- Account and financial data: username, password, transaction history, deposit and withdrawal information, and payment method details.
- Tech and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Authentication and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
- Affiliate data: affiliate ID, referral links, traffic sources, commission particulars, and marketing performance metrics.
We keep sensitive data to a minimum and never demand political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method maintains the collection limited and focused. All data is processed according to the principle of data minimization.
Enforcing Your Privacy Rights
Under the GDPR, you possess a set of robust rights that enable you control your personal information. You have the right to access the data we hold about you and to obtain a copy in a systematic, commonly used format. You can ask us to rectify wrong or partial information without undue delay. In specific circumstances, you may seek that we erase your data, restrict its handling, or oppose to processing based on legitimate interests. You also have the right to data mobility for information you have given us, and you can retract your agreement for promotional or other approval-based processing at any time. To utilize any of these rights, notify our Data Protection Officer at the email address given in the contact section of our website. We will answer to your request within one month. We will not levy a fee unless the request is manifestly baseless or excessive. You also have the right to file a appeal with the Austrian Data Protection Authority if you consider our processing infringes data protection law.
Information Handling for the Affiliate Programme
This affiliate programme is a key part of the LalaBet Casino ecosystem, and we enforce the same privacy standards for affiliates as we extend to players. Upon joining the affiliate programme, we obtain the personal data you provide during registration, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data regarding traffic produced through your affiliate links, such as click-through rates, registrations, and player activity metrics. This data is used only to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We refrain from sharing your individual affiliate data with fellow affiliates or external parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, encompassing the right to access, correct, and delete your information, depending on our legal retention obligations. We have concluded data processing agreements with our affiliate system providers to guarantee your data is managed lawfully and safely at all times.