At LalaBet Casino, personal privacy is a core principle, and we are dedicated to securing the personal data of every user who comes to lalabet.at from Austria. This Privacy Policy explains how we gather, process, retain, and share your details when you browse the website, sign up, engage with our games, or enroll in the lalabetcasino affiliate partnerschaft program. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our strategy is built on clarity, integrity, and liability. We aim to inform you what data we collect, why we need it, what we use it for, and how you can stay in control of it at every stage. This document also serves as a comprehensive guide for affiliate partners, outlining how their data is handled within the LalaBet Casino affiliate programme. By accessing our platform, you agree that you have read and understood this policy.
Recognizing Our Privacy Promise
Privacy at LalaBet Casino is not an oversight. It shapes every system, process, and agreement we maintain. Our privacy framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can address any questions you have about your rights at any time. We review our procedures on a routine schedule, run data protection impact reviews, and train our staff so personal data is handled with care. The same stringent controls apply to our affiliate programme. We are clear about the data we collect and the objectives for which we use it, and we never sell your personal information to third parties. Our aim is to create a secure, trustworthy setting where you can enjoy our entertainment options without endangering your privacy.
Information Retention and Safeguards
We retain your personal data only for as long as needed to fulfil the purposes for which it was collected, or as stipulated by Austrian law. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention obligations. Once the retention period expires, we safely remove or anonymize your data. To protect your information, we have established technical and organizational security protocols. These include encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous observation of our systems for suspicious behavior. Our staff receive ongoing privacy and security instruction, and we uphold a tested incident response plan. If a personal data breach poses a risk to your rights and freedoms, we will alert the Austrian Data Protection Authority without undue postponement and, where required, notify you directly.
Exercising Your Personal Data Rights
Under the GDPR, you enjoy a set of strong rights that enable you govern your personal information. You have the right to access the data we store about you and to obtain a duplicate in a organized, commonly used format. You can ask us to rectify wrong or missing information without undue delay. In specific circumstances, you may request that we remove your data, limit its use, or object to processing based on lawful interests. You also have the right to data transferability for information you have given us, and you can revoke your permission for marketing or other permission-based processing at any time. To exercise any of these rights, notify our Data Protection Officer at the email address provided in the contact section of our website. We will answer to your request within one month. We will not charge a fee unless the request is clearly baseless or unreasonable. You also have the right to lodge a complaint with the Austrian Data Protection Authority if you consider our processing infringes data protection law.
Purposes for Managing Your Data
We handle your personal data for a well-outlined set of purposes, each connected to a specific legal basis. The primary reason is to set up and administer your player account, handle deposits and withdrawals, and offer the gaming services you have sought under our terms and conditions. Without this handling, we would not be able to meet our contractual obligations to you. We also employ data to improve our platform, personalize your experience, and transmit relevant promotional offers if you have given clear consent. Fulfilling legal obligations is another key purpose; we verify your identity, supervise transactions for suspicious activity, and keep records as required by Austrian gambling regulations and anti-money laundering directives. We also handle data to identify and prevent fraud, protect game integrity, and fortify our systems. For the affiliate programme, we use affiliate data to follow referrals, compute commissions, and enhance our marketing partnerships.
Legal Grounds for Data Management
Any processing activity we undertake is based on a lawful legal basis under Article 6 of the GDPR. The bases we rely on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are conducted to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to improve our services based on legitimate interest, after a balancing test to ensure your rights are not overridden. For marketing communications and certain cookies, we rely on your freely given consent, which you can cancel at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.
Groups of Personal Data We Obtain
To deliver our services and meet our legal obligations, we obtain several groups of personal data. We obtain this information directly from you, as you interact as you browse our website, and in some cases from trusted third parties. We collect only the data needed for the purposes described in this policy. These types include:
- Identity and contact data: full name, date of birth, home address, email address, and phone number.
- Account and financial data: username, password, transaction history, deposit and withdrawal information, and payment method data.
- Technical and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Authentication and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
- Affiliate data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We hold sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method ensures the collection restricted and focused. All data is processed according to the principle of data minimization.
Cross-Border Transfers and Safeguards
As an online casino operating in a global environment, some of our service providers and group companies may be based outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to guarantee an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to confirm that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are transparent about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Disclosing Data to External Partners
We share your personal data only with vetted third parties that enable us provide our services, and we do so under stringent contractual safeguards. These recipients include payment service providers that process deposits and withdrawals, identity verification and know-your-customer (KYC) providers that support us meet regulatory requirements, and IT infrastructure and hosting companies that maintain our platform secure. We may also share data with our affiliate software platform to track referrals and compute commissions for affiliate partners. In every case, we confine the data shared to what is essential for the third party to execute its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We review each request diligently to ensure it is valid and proportionate before we respond.
Data Processing in the Affiliate Programme
Our affiliate programme is a key part of the LalaBet Casino ecosystem, and we maintain the same privacy standards for affiliates as we do to players. When you sign up for the affiliate programme, we collect the personal data you submit during sign-up, such as your name, contact details, payment information, and tax identification number. We additionally automatically capture data on traffic generated through your affiliate links, like click-through rates, registrations, and player activity metrics. These details is used only to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We never share your individual affiliate data with third-party affiliates or outside parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, such as the right to access, correct, and delete your information, subject to our legal retention obligations. We have signed data processing agreements with our affiliate platform providers to make sure your data is processed lawfully and safely at all times.