At LalaBet Casino, personal privacy is a basic right, and we strive to safeguarding the private data of every user who accesses lalabet.at from Austria. This Privacy Policy outlines how we gather, process, store, and disclose your information when you browse the website, register, use our gaming services, or enroll in the affiliate program. We comply with the General Data Protection Regulation (EU) 2016/679, the Austrian Data Protection Act (DSG), and all pertinent national legislation. Our method is founded on clarity, equity, and responsibility. We aim to inform you what data we obtain, why we request it, what we do with it, and how you can retain oversight of it at every stage. This document also functions as a comprehensive guide for affiliate partners, detailing how their data is handled within the LalaBet Casino affiliate programme. By engaging with our offerings, you acknowledge that you have read and understood this policy.
Objectives for Processing Your Data
We process your personal data for a specific set of objectives, each connected to a specific legal basis. The principal reason is to set up and administer your player account, process deposits and withdrawals, and provide the gaming services you have asked for under our terms and conditions. Without this operation, we could not fulfill our contractual obligations to you. We also employ data to enhance our platform, tailor your experience, and transmit relevant promotional offers if you have given clear consent. Meeting legal obligations is another key purpose; we authenticate your identity, monitor transactions for suspicious activity, and keep records as required by Austrian gambling regulations and anti-money laundering directives. We also process data to spot and prevent fraud, safeguard game integrity, and secure our systems. For the affiliate programme, we use affiliate data to monitor referrals, calculate commissions, and optimize our marketing partnerships.
Understanding Our Privacy Promise
Privacy at LalaBet Casino is not an oversight. It shapes every system, process, and partnership we maintain. Our confidentiality framework meets the benchmarks set by Austrian regulators and the European Data Protection Board. Our Data Protection Officer supervises all processing activities and can answer any questions you have about your rights at any time. We review our procedures on a consistent schedule, run data protection impact evaluations, and train our staff so personal data is managed with care. The same strict controls apply to our affiliate programme. We are clear about the data we collect and the purposes for which we use it, and we never sell your personal information to third parties. Our aim is to create a safe, trustworthy environment where you can appreciate our entertainment options without endangering your privacy.
Legal Basis for Data Handling
Every processing activity we carry out is based on a sound legal basis under Article 6 of the GDPR. The bases we depend on most often are the performance of a contract, compliance with a legal obligation, our legitimate interests, and your consent. When you register an account, processing your identity and financial data is necessary to perform the contract between you and LalaBet Casino. Identity verification and transaction monitoring are performed to comply with Austrian anti-money laundering laws and the conditions of our gambling licence. We may process usage data to better our services based on legitimate interest, after a balancing test to confirm your rights are not overridden. For marketing communications and certain cookies, we depend on your freely given consent, which you can withdraw at any time. When we process affiliate data for programme management, we usually rely on contractual necessity and legitimate interest, and we guarantee the processing is proportionate and does not infringe the rights of the data subjects involved.
Cross-Border Transfers and Safeguards
As an online casino operating in a global environment, some of our service providers and group companies may be based outside the European Economic Area. When we move personal data to countries without an adequacy decision from the European Commission, we implement appropriate safeguards to guarantee an equivalent level of protection. These safeguards cover standard contractual clauses approved by the European Commission, binding corporate rules, and, where applicable, additional technical and organizational measures. We perform transfer impact assessments to confirm that the law and practices of the destination country do not reduce the safeguards we apply. For Austrian users, this means your data remains protected by the same rigorous standards required by the GDPR, no matter where it is processed. We are open about the locations of our key processors and will give you more details about the specific safeguards applied to any particular transfer upon request.
Information Retention and Security Measures
We keep your personal data only for as long as necessary to satisfy the purposes for which it was gathered, or as required by Austrian law lalabet.at. Account data is typically held for the period of your relationship with us and for up to ten years after account closure to meet anti-money laundering and tax retention obligations. Once the retention period expires, we safely remove or anonymize your data. To secure your information, we have put in place technical and organizational security measures. These encompass encryption of data in transit and at rest, strict access controls based on the principle of least privilege, regular penetration testing, and continuous monitoring of our systems for suspicious behavior. Our staff get ongoing privacy and security education, and we maintain a tested incident response plan. If a personal data breach poses a threat to your rights and freedoms, we will notify the Austrian Data Protection Authority without undue delay and, where required, inform you directly.
Using Your Data Subject Rights
Under the GDPR, you enjoy a set of powerful rights that allow you manage your personal data. You are authorized to access the data we store about you and to get a version in a structured, commonly used format. You can ask us to correct wrong or partial information without undue delay. In certain circumstances, you may demand that we delete your data, restrict its handling, or oppose to processing based on valid interests. You also have the right to data portability for information you have given us, and you can revoke your agreement for advertising or other consent-based processing at any time. To apply any of these rights, notify our Data Protection Officer at the email address supplied in the contact section of our website. We will answer to your request within one month. We will not charge a fee unless the request is obviously baseless or excessive. You also have the right to file a appeal with the Austrian Data Protection Authority if you think our processing violates data protection law.
Disclosing Data to External Partners
We disclose your personal data only with reliable third parties that assist us deliver our services, and we do so under stringent contractual safeguards. These recipients include payment service providers that handle deposits and withdrawals, identity verification and know-your-customer (KYC) providers that assist us meet regulatory requirements, and IT infrastructure and hosting companies that maintain our platform secure. We may also share data with our affiliate software platform to monitor referrals and compute commissions for affiliate partners. In every case, we confine the data shared to what is required for the third party to execute its function. We do not sell your personal data to advertisers, data brokers, or any other commercial entity. We may also need to disclose information to Austrian regulatory bodies, law enforcement agencies, or courts in response to valid legal requests. We review each request thoroughly to ensure it is legal and proportionate before we accede.
Categories of Personal Data We Collect
To deliver our services and meet our legal requirements, we obtain several types of personal data. We collect this information directly from you, through your use as you browse our website, and in some cases from vetted third parties. We gather only the data needed for the goals described in this policy. These types include:
- Identification and contact data: full name, date of birth, home address, email address, and phone number.
- Profile and financial data: username, password, transaction history, deposit and withdrawal particulars, and payment method details.
- System and usage data: IP address, browser type, device identifiers, operating system, login times, pages visited, and game session logs.
- Verification and compliance data: copies of identification documents, proof of address, and self-exclusion or responsible gaming documentation.
- Partner data: affiliate ID, referral links, traffic sources, commission details, and marketing performance metrics.
We maintain sensitive data to a minimum and never ask for political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification under Austrian anti-money laundering rules. Our method ensures the collection restricted and focused. All data is managed according to the principle of data minimization.
Data Processing in the Affiliate Programme
This affiliate programme is an essential component of the LalaBet Casino ecosystem, and we enforce the same privacy standards towards affiliates as we apply to players. When you join the affiliate programme, we collect the personal data you supply when registering, such as your name, contact details, payment information, and tax identification number. We also automatically collect data on traffic generated through your affiliate links, including click-through rates, registrations, and player activity metrics. This information is employed exclusively to manage the affiliate relationship, calculate and pay commissions, and improve our marketing efforts. We do not share your individual affiliate data with other affiliates or external parties for purposes unrelated to the programme. You maintain the same data subject rights as any other participant, including the right to access, correct, and delete your information, subject to our legal retention obligations. We have executed data processing agreements with the providers of our affiliate platform to make sure your data is managed lawfully and protectively at all times.