At Trino Casino, we manage trinoo trinoo.de.de and we take protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve established our operations to fulfill the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document clarifies exactly how we obtain, retain, manage, and safeguard your information when you visit our website, play games, or communicate with our affiliate systems. We hold transparency is crucial for a trusting relationship. By laying out our data handling practices clearly, we intend you to remain confident that your sensitive financial details and personal identifiers stay in a secure digital environment, managed by a responsible data controller that respects local laws and jurisdictional boundaries.
3. Particular Processing Activities Pertaining to the Affiliate Programme
Our affiliate network, available on our legal and affiliates hub, serves as a separate data processing area. We serve as a joint controller together with our marketing partners. When a German webmaster or content creator registers for our partner program, we obtain business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism employs first‑party cookies dropped via a unique affiliate link, which allows us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We manage referred player data in a pseudonymized format for commission calculation, so the affiliate sees aggregated performance numbers rather than individual player identities. We review player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code of conduct that prevents partners from targeting self-excluded individuals or using unauthorized direct marketing that could compromise the privacy expectations of the German audience.
5. International Transfers and System Protection Safeguards
Our principal data processing systems are located in protected data centers within the European Union, but sometimes we must utilize sub-processors in other countries. In such limited cases, we ensure the identical standard of safeguarding by using Standard Contractual Clauses authorized by the European Commission, combined with a thorough Transfer Impact Assessment. To secure your financial data from illegitimate access during communication, we enforce Transport Layer Security (TLS 1.3) encryption across all terminals, rejecting outdated cipher suites. At rest, personal data inside our managed database clusters is shielded by AES‑256 encryption, and access to decryption keys is limited to a segregated privileged access management system. We perform continuous vulnerability scans, compulsory penetration tests, and stringent logical access controls so solely the people who require it can view your data. We employ a appointed Data Protection Officer you can access through our platform, and we maintain an incident response plan that requires us to notify the appropriate German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
Frequently Asked Questions
In what way does Trino Casino verify my age in line with German regulations?
We utilize a multi-layered system: automated checks against national databases and hands-on document review. When you register, you must provide your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to verify legal age. If something doesn’t match, we provisionally restrict the account until a video identification call with a certified agent can clarify the situation, all in line with the German Interstate Treaty on Gambling.
Will my personal data be passed on with the affiliate who referred me?
No. Our affiliate programme operates with a strict aggregation firewall. We never share your name, contact details, or payment records with the referring affiliate. The partner only views a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements clearly prohibit them from trying to identify individual players. This maintains your gameplay completely separate from the marketing channel that led you to Trino Casino.
How can permanently withdraw my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Does Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Contact us from the address associated with your account to our Data Protection Officer, put “SAR” in the subject line. We’ll verify your identity with a two‑factor process. Subsequently, we compile your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, which you’ll receive within one calendar month.
1. Určení správce údajů a právní důvod zpracování
We serve as the data controller for all personal data gathered via Trino Casino at trinoo.de, designed specifically for users in Germany. Our legal department is based in a registered office within the European Economic Area, so we are fully subject to GDPR enforcement. For processing your data, we depend on six specified lawful bases. In most cases, we process your data to meet our contractual duties—such as accepting bets, handling withdrawals, and maintaining your account. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. Where the law demands it, especially under anti-money laundering rules and German gambling ordinances, processing happens because of a legal obligation. For marketing communications, including our affiliate programme, we rely on your explicit consent, which you can withdraw at any time without any impact on the core services we provide.
4. Data Retention Schedules and De-identification Methods
We don’t keep your personal data forever. We observe a strict storage limitation principle. Active customer accounts contain data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period starts, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
2. Categories of Player Details Gathered When Creating an Account and Playing
To provide a smooth entertainment experience that meets German regulations, we collect a few specific categories of personal data, just what is necessary. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you satisfy the strict age minimum set by German regulators. When you begin gaming, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems record technical device data like your IP address, which we restrict by location to confirm you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also record usage patterns and game session logs, logging bet history and time spent playing, so we can satisfy our responsible gaming obligations. We do not gather special categories of sensitive data except when you freely give that information during a responsible gaming self-assessment or a support inquiry.
6. Exercising Your Prerogatives Under German legal and European Law
If you are a resident of Germany, you possess a collection of prerogatives that we have made easy to exercise. You may file a subject access request at any moment. We are then required to verify whether we store your personal details and supply you with a duplicate in a organized, standard, machine‑readable format within 30 days. The right to rectification allows you fix stale or inaccurate profile data without waiting, which is vital for efficient payment handling. Under certain circumstances, you are entitled to a limitation of data handling, especially if you challenge the accuracy of data while we check it. The right to deletion, frequently referred to as the “right to be forgotten,” is applicable when the data is no longer needed for the initial purpose, though mandatory storage requirements may provisionally overrule this demand. You also have the right to information portability for information provided under consent or contractual terms, so you can move your usage history to a alternative provider. You enjoy an unconditional prerogative to refuse direct marketing, and you can object to operations based on justified grounds, which we’ll evaluate against our own justifiable bases. Complaints can be lodged straight with the data oversight body of your German region if you believe a breach has taken place.
7. Cookie Administration and Tracking Tools for Legal Compliance
Our website utilizes various digital markers, and our consent management system makes sure that no unnecessary trackers fire until a German user gives active consent through our detailed preference center. Necessary session cookies, which don’t store private data but maintain your play session and security tokens functioning, are excluded from consent requirements under the ePrivacy Regulation as applied in German regulations. For persistent analytics and affiliate attribution cookies, we use backend tagging where practicable to reduce browser-side exposure. Our affiliate tracking code functions on a first‑party context model to circumvent current browser restrictions, enabling accurate commissioning without aggressive tracking scripts that are forbidden under German internet law. We’ve categorized all tracking codes with detailed descriptions of their intent, duration, and the external vendors involved, so you can modify your preferences whenever you like. Rejecting marketing cookies does not affect the performance of the casino lobby or payment gateways. That shows our privacy-first approach: core services stay fully accessible no matter what consent choices you choose.