At Trino Casino, we manage trinoo.de and we accept protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve built our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we collect, store, manage, and secure your information when you visit our website, engage in games, or interact with our affiliate systems. We hold transparency is essential for a trusting relationship. By laying out our data handling practices clearly, we aim you to feel confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, controlled by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We are the data controller for all personal information collected through Trino Casino at trinoo.de, which is tailored for users in Germany. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. For processing your data, we depend on six specified lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also rely on legitimate interest for analytics and security purposes, like fraud detection algorithms and network integrity checks, provided these do not override your fundamental rights and freedoms. When required by law, particularly under anti-money laundering regulations and German gambling ordinances, processing occurs due to a legal obligation. Regarding marketing communications, such as our affiliate program, we rely on your explicit consent, which you can withdraw anytime without any effect on the essential services we deliver.
2. Categories of User Information Collected When Creating an Account and Playing
To offer a smooth entertainment experience that satisfies German regulations, we obtain a few particular categories of personal data, only what’s really needed. During account creation, we require identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you satisfy the strict age minimum established by German regulators. When you begin gaming, we handle financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems capture technical device data like your IP address, which we geo-filter to verify you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also track usage patterns and game session logs, documenting bet history and time spent playing, so we can fulfill our responsible gaming obligations. We do not obtain special categories of sensitive data unless you freely give that information during a responsible gaming self-assessment or a support inquiry.
6. Exercising Your Rights Pursuant to German and European Union Law
If you live in Germany, you have a set of rights that we have made simple to use. You can submit a data access request at any moment. We must to ascertain whether we process your personal details and give you a duplicate in a structured, widely adopted, machine‑readable form within 30 days. The right to correction enables you to correct obsolete or incorrect profile details without delay, which is vital for seamless payment operations. Under certain circumstances, you can demand a limitation of processing, particularly if you dispute the precision of data while we check it. The right to removal, often called the “right to be forgotten,” applies when the data is no longer required for the primary objective, though mandatory storage requirements may temporarily override this demand. You also have the right to data portability for data furnished under agreement or agreement, so you are able to shift your usage history to a new service. You enjoy an total prerogative to oppose direct marketing, and you can object to processing based on justified grounds, which we will assess against our legitimate justifiable bases. Complaints can be lodged directly with the data oversight body of your German federal state if you suspect a violation has happened.
3. Particular Processing Activities Related to the Affiliate Programme
Our affiliate network, reachable via our legal and affiliates hub, serves as a separate data processing area. We serve as a joint controller together with our marketing partners. When a German webmaster or content creator enrolls in our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which enables us to attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We manage referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We review player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is grounded in our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could undermine the privacy expectations of the German audience.
Common Questions
In what way does Trino Casino confirm my age in line with German regulations?
We use a multi-layered system: automatic checks against national databases and manual document review. When you sign up, you must submit your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to establish legal age. If something does not align, we temporarily restrict the account until a video identification call with a certified agent can resolve the issue, all in line with the German Interstate Treaty on Gambling.
Is it possible that my personal data be disclosed with the affiliate who brought me?
No. Our affiliate programme operates with a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from attempting to identify individual players. This maintains your gameplay completely separate from the marketing channel that directed you to Trino Casino.
How do I permanently cancel my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What transpires to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
What is the process to receive a complete record of my stored data?
Email us from the address linked to your account to our Data Protection Officer, place “SAR” in the subject line. We’ll verify your identity with a two‑factor verification. Following that, we gather your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, that you will get within one calendar month.
7. Cookie Administration and Monitoring Technologies for Legal Compliance
Our website utilizes multiple tracking markers, and our consent management platform ensures that no non-essential trackers activate until a user in Germany gives active consent through our comprehensive preference center https://trinoo.de/legal-and-affiliates/. Required session cookies, which do not store personal data but keep your play session and security keys operational, are excluded from approval requirements under the Electronic Privacy Directive as enforced in German regulations. For persistent analytics and affiliate attribution cookies, we use server‑side tagging where practicable to limit frontend exposure. Our affiliate tracking code functions on a first-party data model to work around contemporary browser limitations, permitting accurate commissioning without aggressive tracking scripts that are forbidden under German digital law. We’ve categorized all tracking codes with detailed descriptions of their intent, length, and the outside providers included, so you can modify your settings whenever you like. Rejecting promotional cookies does not affect the performance of the gaming lobby or payment gateways. That shows our data-protection approach: basic services stay entirely usable irrespective of consent choices you zeitreisen.zeit.de make.
5. International Movements and System Security Measures
Our principal data processing systems are located in protected data centers inside the European Union, but sometimes we reddit.com need to use sub-processors in various countries. In such specific cases, we ensure the equivalent degree of safeguarding by using Standard Contractual Clauses approved by the European Commission, together with a comprehensive Transfer Impact Assessment. To safeguard your financial data from unauthorized access during transmission, we enforce Transport Layer Security (TLS 1.3) encryption across all connection points, blocking obsolete cipher suites. At rest, personal data within our managed database clusters is protected by AES‑256 encryption, and access to decryption keys is confined to a separate privileged access management system. We perform regular vulnerability scans, required penetration tests, and stringent logical access controls so solely the individuals who must have it can view your data. We employ a dedicated Data Protection Officer you can reach through our platform, and we keep an incident response plan that requires us to inform the appropriate German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
4. Data Preservation Plans and De-identification Methods
We never hold your personal data indefinitely. We observe a strict storage limitation principle. Active customer accounts hold data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.