At Trino Casino, we run trinoo trinoo.de.de and we accept protecting the personal data of our German players earnestly. As a licensed entertainment platform, we’ve developed our operations to meet the strict standards of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This document explains exactly how we obtain, retain, process, and protect your information when you visit our website, participate in games, or engage with our affiliate systems. We believe transparency is crucial for a trusting relationship. By presenting our data handling practices clearly, we want you to remain confident that your sensitive financial details and personal identifiers are kept in a secure digital environment, controlled by a responsible data controller that respects local laws and jurisdictional boundaries.
1. Určení správce údajů a právní důvod zpracování
We serve as the data controller for all personal data gathered via Trino Casino at trinoo.de, designed specifically for users in Germany. Our legal department is based in a registered office within the European Economic Area, so we are fully subject to GDPR enforcement. When we process your data, we rely on six defined lawful bases. Typically, we process your data to satisfy our contractual commitments—including placing bets, processing withdrawals, and keeping your account active. We also use legitimate interest for analytics and security measures, such as fraud detection algorithms and network integrity checks, as long as these don’t override your fundamental rights and freedoms. When required by law, particularly under anti-money laundering regulations and German gambling ordinances, processing occurs due to a legal obligation. For marketing communications, including our affiliate program, we depend on your explicit consent, which you can revoke at any time without affecting the core services we offer.
2. Categories of User Information Gathered at Sign-Up and Playing
To provide a smooth entertainment experience that complies with German regulations, we collect a few specific categories of personal data, solely what is required. During account creation, we request identification details: your legal first and last name, residential address with postal code, verified email address, and date of birth to ensure you fulfill the strict age minimum established by German regulators. When you start playing, we process financial transaction data—deposit amounts, withdrawal methods, partial payment card numbers encrypted with TLS, and e-wallet identifiers. Our systems record technical device data like your IP address, which we geographically filter to ensure you’re in a permitted location, along with browser fingerprint hashes and operating system specs. We also monitor usage patterns and game session logs, logging bet history and time spent playing, so we can fulfill our responsible gaming obligations. We do not collect special categories of sensitive data except if you voluntarily give that information during a responsible gaming self-assessment or a support inquiry.
3. Detailed Processing Activities Connected with the Affiliate Programme
Our affiliate network, available on our legal and affiliates hub, operates as a separate data processing area. We function as a joint controller together with our marketing partners. When a German webmaster or content creator signs up for our partner program, we gather business details like tax identification numbers, bank account information for paying commissions, and traffic source analytics. Our tracking mechanism utilizes first‑party cookies dropped via a unique affiliate link, which lets us attribute referred traffic to the correct partner account without capturing the browsing history of unregistered visitors. We manage referred player data in a pseudonymized format for commission calculation, so the affiliate views aggregated performance numbers rather than individual player identities. We check player activity logs against traffic sources to catch bonus abuse or fake incentivized traffic; this is founded on our contractual and legitimate business interests. We have a strict affiliate code bild.de of conduct that forbids partners from targeting self-excluded individuals or using unauthorized direct marketing that could undermine the privacy expectations of the German audience.
6. Exercising Your personal Prerogatives Under German legal and European Union Legislation
If you are a resident of Germany, you have a set of rights that we’ve made straightforward to use. You can submit a data access request at any time. We are then required to confirm whether we hold your personal details and supply you with a copy in a systematic, commonly used, machine‑readable layout within 30 days. The right to correction enables you to correct outdated or incorrect profile information without waiting, which is essential for smooth payment handling. In specific situations, you can demand a restriction of processing, especially if you contest the correctness of data while we confirm it. The right to erasure, frequently referred to as the “right to be forgotten,” applies when the data is no longer required for the primary objective, though mandatory storage requirements may momentarily override this demand. You additionally possess the right to data portability for information provided under agreement or contract, so you may transfer your usage history to a new service. You enjoy an unconditional right to refuse direct marketing, and you may oppose to operations based on legitimate interests, which we will assess against our own compelling grounds. Grievances can be filed straight with the data oversight body of your German federal state if you suspect a infringement has happened.
5. Global Movements and Technical Safety Controls
Our main data processing systems sit in safe data centers inside the European Union, but occasionally we need to use sub-processors in different countries. In such rare cases, we ensure the equivalent standard of security by employing Standard Contractual Clauses approved by the European Commission, along with a detailed Transfer Impact Assessment. To secure your financial data from illegitimate access during transfer, we implement Transport Layer Security (TLS 1.3) encryption across all endpoints, refusing outdated cipher suites. At rest, personal data within our managed database clusters is protected by AES‑256 encryption, and access to decryption keys is limited to a isolated privileged access management system. We perform continuous vulnerability scans, required penetration tests, and strict logical access controls so only the people who must have it can view your data. We maintain a specialized Data Protection Officer you can contact through our platform, and we maintain an incident response plan that requires us to alert the pertinent German supervisory authority within 72 hours if a personal data breach could place your rights at risk.
4. Data Retention Schedules and Anonymization Techniques
We do not retain your personal data permanently. We follow a strict storage limitation principle. Active customer accounts hold data for the duration of the business relationship, from the moment you register until you formally close the account. After account closure, a holding period begins, driven mostly by German tax legislation and anti-money laundering rules. Transactional logs, identification documents collected under Know Your Customer protocols, and wagering history are securely archived for ten years from the end of the calendar year of the last transaction. Once that statutory retention window ends, we permanently destroy or irreversibly anonymize the records so re-identification becomes technically impossible. Web server log data that contains IP addresses gets truncated after a strict thirty‑day cycle to reduce security risks. For accounts that go dormant—no activity but not closed—we send a proactive reminder before the dormancy threshold, so we can ask for renewed consent or start the deletion process, always in line with the storage limitation principle.
7. Cookie Management and Monitoring Technologies for Legal Compliance
Our website employs different digital markers, and our consent management system guarantees that no unnecessary trackers trigger until a German visitor gives active consent through our detailed settings panel. Essential session cookies, which do not store private data but preserve your play session and security tokens operational, are excluded from permission requirements under the ePrivacy Regulation as enforced in German regulations. For continuous analytics and affiliate tracking cookies, we use server‑side tagging where practicable to minimize client‑side exposure. Our affiliate tracking code runs on a direct context model to bypass contemporary browser limitations, permitting precise attribution without aggressive tracking scripts that are banned under German digital regulations. We’ve classified all programs with detailed descriptions of their purpose, duration, and the outside providers involved, so you can change your choices whenever you wish. Declining marketing cookies doesn’t harm the functionality of the game lobby or payment portals. That shows our data-protection approach: basic services stay completely available regardless of approval selections you select.
Frequently Asked Questions
In what way does Trino Casino confirm my age in line with German regulations?
We utilize a multi-tiered system: computerized checks against national databases and manual document review. When you register, you must submit your national ID card or passport through an encrypted portal. Our compliance team checks this with the Schufa identity service to confirm legal age. If something does not align, we briefly restrict the account until a video identification call with a certified agent can clear things up, all in line with the German Interstate Treaty on Gambling.
Will my personal data be disclosed with the affiliate who brought me?
No. Our affiliate programme employs a strict aggregation firewall. We never disclose your name, contact details, or payment records with the referring affiliate. The partner only accesses a pseudonymized dashboard with confirmed registration counts and a statistical summary of net gaming revenue. Our affiliate agreements explicitly prohibit them from seeking to identify individual players. This ensures your gameplay completely separate from the marketing channel that brought you to Trino Casino.
In what way can I permanently revoke my marketing consent?
Go to “Communication Settings” in your account dashboard and turn off promotional channels. Every marketing email we send has a one‑click unsubscribe link at the bottom that works right away. To withdraw consent for postal mail or SMS, contact our Data Protection Officer through the support ticket system. We’ll stop direct marketing within at most 48 hours after receiving your request.
What occurs to my data if Trino Casino ceases operations?
If business ever stops, we are legally required to notify the competent German data protection authority and all active users in advance. Mandatory transactional logs and identification records will be securely transferred to a certified archival service or handed over to the responsible regulatory body for as long as the law demands. Any data that isn’t mandatory gets securely destroyed using cryptographic wiping techniques before the closure of our servers is finalized.
Is Trino Casino use automated decision-making for payments?
We use a limited automated profiling system to flag possible fraud or bonus abuse. If the system blocks a withdrawal, we’re required by law to involve a human. Our financial risk team manually checks every flagged transaction before we tell you the final decision. You can challenge that decision, give your side, and ask for a full manual review by our risk management specialists.
How do I obtain a complete record of my stored data?
Send an email from the address tied to your account to our Data Protection Officer, include “SAR” in the subject line. We’ll verify your identity with a two‑factor verification. After that, we compile your data from all systems—chat logs, game history, identity documents—and prepare a digitally signed PDF and a machine‑readable JSON file, which you’ll receive within one calendar month.
