At zur Seite gehen, we manage trinoo.de and we accept protecting the personal data of our German players seriously. As a licensed entertainment platform, we’ve developed our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document explains exactly how we collect, retain, process, and protect your information when you visit our website, play games, or communicate with our affiliate systems. We believe transparency is vital for a trusting relationship. By presenting our data handling practices clearly, we want you to remain confident that your sensitive financial details and personal identifiers stay in a secure digital environment, controlled by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Data Controller Identification and Legal Basis for Processing
We are the data controller for all personal information collected through Trino Casino at trinoo.de, which is tailored for users in Germany. Our legal division is situated at a registered office in the European Economic Area, ensuring full compliance with GDPR enforcement. For processing your data, we depend on six specified lawful bases. Most of the time, we process your data to fulfill our contractual obligations—like taking bets, processing withdrawals, and keeping your account running. We also employ legitimate interest for analytics and security actions, including fraud detection algorithms and network integrity checks, as long as these do not outweigh your fundamental rights and freedoms. Where legislation requires it, especially under anti-money laundering laws and German gambling ordinances, processing is carried out due to a legal duty. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
4. Data Storage Timelines and De-identification Methods
We never hold your personal data forever. We adhere to a strict storage limitation principle. Active customer accounts hold data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period kicks in, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window concludes, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
7. Cookie Handling and Tracking Technologies for Legal Compliance
Our website utilizes multiple tracking markers, and our permission management tool ensures that no non-essential tracking tools fire until a user in Germany gives affirmative consent through our detailed settings panel. Required session cookies, which don’t store private data but preserve your game session and security keys operational, are excluded from consent requirements under the Electronic Privacy Directive as implemented in German law. For continuous analytics and partner attribution cookies, we implement server‑side tagging where possible to minimize browser-side exposure. Our affiliate tracking code functions on a direct context model to work around modern browser blocking, permitting accurate commissioning without intrusive fingerprinting scripts that are prohibited under German internet law. We’ve grouped all scripts with thorough explanations of their intent, duration, and the outside providers engaged, so you can modify your choices at any time. Rejecting promotional cookies does not impair the performance of the casino lobby or payment systems. That shows our data-protection approach: basic services remain completely available irrespective of permission decisions you choose.
5. Cross-border Transmissions and System Protection Measures
Our primary data processing systems sit in secure data centers inside the European Union, but at times we must utilize sub-processors in various countries. In those limited cases, we assure the equivalent standard of security by employing Standard Contractual Clauses approved by the European Commission, combined with a detailed Transfer Impact Assessment. To protect your financial data from unapproved access during transmission, we enforce Transport Layer Security (TLS 1.3) encryption across all endpoints, refusing outdated cipher suites. At rest, personal data stored in our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is confined to a segregated privileged access management system. We run regular vulnerability scans, required penetration tests, and stringent logical access controls so exclusively the personnel who need it can see your data. We employ a dedicated Data Protection Officer you can access through our platform, and we have an incident response plan that obligates us to notify the pertinent German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
2. Categories of Personal Data Collected at Sign-Up and Gaming
To deliver a smooth entertainment experience that meets German regulations, we gather a few specific kinds of personal data, just what is necessary. During account creation, we ask for identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you meet the strict age minimum imposed by German regulators. When you commence playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems automatically log technical device data like your IP address, which we geo-filter to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, documenting bet history and time spent playing, so we can meet our responsible gaming obligations. We do not collect special categories of sensitive data unless you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
3. Detailed Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, reachable via our legal and affiliates hub, functions as a separate data processing area. We act as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism uses first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We handle referred player data in a pseudonymized format for commission calculation, so the affiliate de.wikipedia.org sees aggregated performance numbers rather than individual player identities. We examine player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is based on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prohibits partners from targeting self-excluded individuals or using unauthorized direct marketing that could jeopardize the privacy expectations of the German audience.
6. Applying Your personal Entitlements Under German legal and EU Legislation
If you live in Germany, you have a range of entitlements that we keep simple to exercise. You can submit a data access request at your convenience. We are then required to confirm whether we hold your personal details and give you a duplicate in a organized, standard, machine‑readable format within 30 days. The right to amendment lets you update obsolete or incorrect profile details without hesitation, which is vital for smooth payment handling. Under certain circumstances, you can demand a restriction of data handling, especially if you contest the accuracy of data while we check it. The right to deletion, commonly known as the “right to be forgotten,” takes effect when the data has become unnecessary for the original objective, though legal retention obligations may temporarily overrule this petition. You additionally possess the right to data portability for data furnished under authorization or agreement, so you are able to shift your usage history to a alternative provider. You possess an unconditional prerogative to oppose direct marketing, and you may oppose to operations based on legitimate interests, which we shall weigh against our compelling grounds. Appeals can be filed directly with the privacy regulator of your German state if you believe a breach has taken place.
Frequently Asked Questions
In what way does Trino Casino check my age under German regulations?
We utilize a comprehensive system: automatic checks against national databases and hands-on document review. When you register, you must provide your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to confirm legal age. If something is inconsistent, we provisionally restrict the account until a video identification call with a certified agent can clarify the situation, https://www.focus.de/finanzen/mit-500-000-verschenkten-flugtickets-kurbelt-hongkong-den-tourismus-neu-an_id_184812553.html all in line with the German Interstate Treaty on Gambling.
Can my personal data be disclosed with the affiliate who referred me?
No. Our affiliate programme uses a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only sees a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements clearly prohibit them from trying to identify individual players. This keeps your gameplay completely separate from the marketing channel that directed you to Trino Casino.
How can permanently withdraw my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Send an email from the address tied to your account to our Data Protection Officer, put “SAR” in the subject line. We’ll confirm your identity with a two‑factor verification. After that, we gather your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, which will be sent to you within one calendar month.