At LalaBet Casino, personal privacy is a basic right, and we are dedicated to securing the personal data of every user who comes to lalabet https://lalabet.at/legal-and-affiliates/.at from Austria. This Privacy Policy describes how we obtain, handle, keep, and disclose your information when you visit the site, sign up, use our gaming services, or enroll in the affiliate program. We follow the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our strategy is built on openness, fairness, and liability. We want you to know what data we gather, why we need it, what we do with it, and how you can retain oversight of it at every step. This document also serves as a clear reference for affiliate partners, outlining how their data is treated within the LalaBet Casino affiliate programme. By using our services, you acknowledge that you have read and understood this policy.
Exploring Our Data Protection Dedication
Privacy at LalaBet Casino is not an afterthought. It shapes every system, process, and agreement we sustain. Our confidentiality framework meets the standards set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer manages all processing activities and can respond to any questions you have about your rights at any time. We review our guidelines on a routine schedule, run data protection impact evaluations, and train our staff so personal data is managed with care. The same stringent controls apply to our affiliate programme. We are open about the data we collect and the reasons for which we use it, and we never sell your personal information to third parties. Our aim is to create a protected, trustworthy atmosphere where you can enjoy our entertainment options without jeopardizing your privacy.
Global Transfers and Safeguards
As an online casino operating in a global environment, some of our service providers and group companies may be situated outside the European Economic Area. When we transfer personal data to countries without an adequacy decision from the European Commission, we put in place appropriate safeguards to guarantee an equivalent level of protection. These safeguards include standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to check that the law and practices of the destination country do not undermine the safeguards we apply. For Austrian users, this signifies your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Record Keeping and Security Measures
We store your personal data only for as long as necessary to meet the purposes for which it was obtained, or as stipulated by Austrian law. Account data is typically kept for the length of your relationship with us and for up to ten years after account closure to satisfy anti-money laundering and tax retention requirements. Once the retention period expires, we permanently erase or anonymize your data. To secure your information, we have established technical and organizational security controls. These comprise encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous monitoring of our systems for suspicious behavior. Our staff receive ongoing privacy and security education, and we keep a tested incident response plan. If a personal data breach poses a threat to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue delay and, where required, advise you directly.
Enforcing Your Privacy Rights
Under the GDPR, you possess a set of powerful rights that allow you control your personal data. You have the right to access the data we hold about you and to get a duplicate in a systematic, commonly used format. You can require us to rectify inaccurate or incomplete information without undue delay. In specific circumstances, you may seek that we erase your data, restrict its processing, or challenge to processing based on legitimate interests. You also have the right to data transferability for information you have given us, and you can revoke your permission for advertising or other permission-based processing at any time. To apply any of these rights, reach our Data Protection Officer at the email address provided in the contact section of our website. We will answer to your demand within one month. We will not levy a charge unless the request is obviously groundless or unreasonable. You also have the right to lodge a grievance with the Austrian Data Protection Authority if you think our processing infringes data protection law.
Purposes for Processing Your Details
We manage your personal data for a well-outlined set of objectives, each linked to a specific legal basis. The main reason is to create and oversee your player account, process deposits and withdrawals, and deliver the gaming services you have requested under our terms and conditions. Without this handling, we cannot meet our contractual obligations to you. We also employ data to enhance our platform, customize your experience, and dispatch relevant promotional offers if you have given clear consent. Complying with legal obligations is another key purpose; we authenticate your identity, supervise transactions for suspicious activity, and retain records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to identify and stop fraud, ensure game integrity, and shield our systems. For the affiliate programme, we utilize affiliate data to track referrals, compute commissions, and enhance our marketing partnerships.
Groups of Personal Data We Collect
To offer our services and meet our legal duties, we gather several groups of personal data. We collect this information directly from you, through your use as you visit our website, and in some cases from vetted third parties. We collect only the data required for the objectives described in this policy. These categories include:
- Identity and contact data: full name, date of birth, home address, email address, and phone number.
- Account-related and financial data: username, password, transaction history, deposit and withdrawal particulars, and payment method details.
- System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Verification and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming logs.
- Referral data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We keep sensitive data to a minimum and never demand political opinions, religious beliefs, or biometric data beyond what is essential for identity verification under Austrian anti-money laundering rules. Our approach ensures the collection restricted and focused. All data is processed according to the rule of data minimization.
Sharing Information with Third Parties
We disclose your personal data only with vetted third parties that help us deliver our services, and we do so under strict contractual safeguards. These entities include payment service providers that manage deposits and withdrawals, identity verification and know-your-customer (KYC) providers that help us meet regulatory requirements, and IT infrastructure and hosting companies that ensure our platform secure. We may also share data with our affiliate software platform to monitor referrals and determine commissions for affiliate partners. In every case, we confine the data shared to what is essential for the third party to perform its function. We under no circumstances sell your personal data to advertisers, data brokers, or any other commercial entity. We may also have to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to lawful legal requests. We examine each request thoroughly to ensure it is lawful and proportionate before we respond.
Legal Basis for Data Processing
Any processing activity we undertake is based on a valid legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you create an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are carried out to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to improve our services based on legitimate interest, after a balancing test to make sure your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can revoke at any time. When we process affiliate data for programme management, we usually depend on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.
Information Handling for the Affiliate Programme
This affiliate programme forms a crucial part of the LalaBet Casino ecosystem, and we maintain the same privacy standards to affiliates as we do to players. When you join the affiliate programme, we obtain the personal data you provide during registration, such as your name, contact details, payment information, and tax identification number. We likewise automatically gather data on traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. These details is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with fellow affiliates or outside parties for purposes unrelated to the programme. You retain the same data subject rights as any other participant, encompassing the right to access, correct, and delete your information, depending on our legal retention obligations. We have executed data processing agreements with our affiliate platform providers to ensure your data is processed lawfully and safely at all times.